last executing test programs: 5.639693136s ago: executing program 1 (id=4590): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @eth={@local, @multicast, @val={@void, {0x8100, 0x5}}, {@llc={0x4, {@llc={0x71328cab12cfd404, 0xdc, "40e5", "fd1315e08bfdc271ce65ca6dd577f0b86e1b11b176b4cb95fc8837ac9e7ef51bcb45ddded672be9a8256d4495c55ba411cb620514fefe6d6bd9c05919f7eddb82b16f8354cb735d2e8b10f9f64c77a6b5a63d28673c28395f360e16225a474b078afc6157be467992a1a81427166c2a8d2d59767874f914fc78eade7b606ff920d09950c5b25e01c2ef52528bad7a3f3b51a13e01a461d6d29159f4aecc90db10a3647089dd8b646d6b8"}}}}}}, 0xfffffdb8) 5.202386458s ago: executing program 1 (id=4593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, r1, 0x1, 0x3, 0x3, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000084) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x7, 0x5, 0x0, 0xffffffffffffffe0, 0xfffffffffffffff0}], &(0x7f0000000380)='GPL\x00', 0x80000000, 0xcb, &(0x7f00000003c0)=""/203, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x4, 0xfffffffd, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x1, r0], &(0x7f0000000580)=[{0x0, 0x2, 0x5, 0x8}, {0x1, 0x3, 0x7, 0x6}, {0x0, 0x5, 0x3, 0x2}, {0x0, 0x2, 0x4, 0x7}], 0x10, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x42, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x77cf}, 0x10, 0x0, r3}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r4, 0xffffffffffffffff, 0x5, 0xe4, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES16=r0], 0x60}}, 0x0) 5.078026214s ago: executing program 1 (id=4596): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@jmp={0x5, 0x1, 0xc, 0x4, 0xa, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2a4dd, 0xffffffffffffffff, 0xa, &(0x7f0000000140)=[0x1, 0xffffffffffffffff], &(0x7f0000000180)=[{0x3, 0x4, 0x2, 0x9}, {0x5, 0x4, 0x7, 0x2}, {0x4, 0x2, 0x9, 0xc}, {0x2, 0x4, 0x6, 0xc}, {0x4, 0x5, 0x6, 0xa}, {0xfffffff5, 0x5, 0xb, 0x8}, {0x2, 0x2, 0x1, 0x2}, {0x5, 0x4, 0x0, 0x2}, {0x2, 0x3, 0x10, 0x9}, {0x2, 0x1, 0x1, 0x7}], 0x10, 0xd20}, 0x94) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000300)=0x6) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000340)=0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000003c0)={'veth0_to_hsr\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000400)={0x6f, 0xd}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f0000000440)='%-\\:\x00', 0x101000, &(0x7f0000000480)={@align=0xb6, {0x98, 0xeea8, 0x2, 0x8001}}, 0x4, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x3}, {[0x3, 0x4, 0x1000, 0x9]}, 0x0, 0x91, &(0x7f0000000540)=""/145}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x100}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005}, 0x44081) r4 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5a0, 0xf0, 0x0, 0x0, 0x2c0, 0x3d8, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, &(0x7f0000000780), {[{{@ipv6={@empty, @mcast2, [0x0, 0xffffffff, 0xffffff00], [0xffffff00, 0xff000000, 0x0, 0xffffffff], 'sit0\x00', 'rose0\x00', {0xff}, {0xff}, 0x5e, 0x17, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, 0x5, 0xfffa}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d4], 0xe4c, 0x3, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x6c}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x2e8, {0xfb7}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x7, 0x7ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000002200)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4420000}, 0xc, &(0x7f00000021c0)={&(0x7f0000000ec0)={0x1300, r6, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffffd, 0x55}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="304f5e95909a"}, @NL80211_ATTR_IE={0xd7, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xff, 0xb1, @device_b, 0x0, @value=@device_b, 0x5, 0x6, @broadcast, 0x4}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x0, 0xb4, 0x8}}, @measure_req={0x26, 0x41, {0xf, 0x9, 0x7, "350bb13edcfae340a58eb5692204e0cfa30622db1a361c04de5e625da89d9d6c5da6dd203bebee757d8405a17263e127756b3fe424d416b71f3fc89a78d1"}}, @cf={0x4, 0x6, {0x9, 0x3, 0x4}}, @tim={0x5, 0x52, {0x6b, 0x13, 0x9, "777617b22a7036de8b293cee54be324f58e1c299deedfe1f2d9e21405c78470334a32bbd7ae7378807be96a9de3d51e4f030bfbfe5b9970b06b3d0308b0cb85e8dd3e9e15df13a067bc69f959fd9e1"}}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x114c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xdb, 0x0, "f2d01c9b935004505169877067303ba4c5a53e2daaf317e5efa781de20f44d207eba82839cea392bd0fdc334b6ecdfe08a1033817ca199c21645151846bb114429039f153cfb31e77fbd96423db7526933b45770a053d38efc63f3ba609de70b0087c13781ac8349bb82ef969720386908e6035afecd967c8263052e68a542c66656c0e9bfa3ca268b2a0e53d00a2770d47613e0d095c7d1d36b42616926e67a6d55c24a2d668c3c63559eb79b841d34b34a432f660cc0d94dd75ba65b6be4fc2b39fb4eb4a83311daa01a2111027a0476e02edc8c8b51"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_60GHZ={0x65, 0x2, "222633b44f4a539164995aaff45b6f7fad2a680fa0c1767855ba10dd41e69f062fdf699cb5ce8e485368de8e41e4504d78bb8d0ef85ddc05773f25ce32b6e33af05972b93328209400fd514b61a37ff2646422327310c54365561d523ee4794703"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_SSIDS={0x94, 0x2d, 0x0, 0x1, [{0x16, 0x0, @random="9a030ae4fec7ebe1c6f53f98a8dcedb4c9f2"}, {0xa, 0x0, @default_ibss_ssid}, {0x10, 0x0, @random="9ada9ba43556d6feeac8e57c"}, {0xa, 0x0, @random="12908ff497e2"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1b, 0x0, @random="c80ba597d1631cd3679ef77d1986017aa951da467f992a"}, {0xa, 0x0, @default_ibss_ssid}, {0xd, 0x0, @random="442a49da23c3bcce64"}]}]}, 0x1300}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x48, 0x140f, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x9040) connect$bt_l2cap(r2, &(0x7f0000002380)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x1}, 0xe) bind$x25(r2, &(0x7f00000023c0), 0x12) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000002400)=[@in6={0xa, 0x4e23, 0xb, @mcast1, 0x8}, @in6={0xa, 0x4e21, 0x101, @rand_addr=' \x01\x00', 0x3f}], 0x38) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000002440), &(0x7f0000002480)=0x4) connect$bt_l2cap(r2, &(0x7f00000024c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x100}, 0xe) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000002500)) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002580), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x64, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x20000040) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) r10 = gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003d00)={0x0, 0x0}, &(0x7f0000003d40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000005140)={{{@in6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000005240)=0xe8) sendmsg$netlink(r2, &(0x7f0000005440)={&(0x7f00000026c0)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000050c0)=[{&(0x7f0000002700)={0x84, 0x23, 0x200, 0x70bd25, 0x25dfdbfc, "", [@typed={0x4, 0xaa}, @generic="3c5b1837a7cee20abe8609946499fe986c7cd046141cda60920445ab751393ca9facee8a068dd7dd9ef7495aa86cea7a4bb1670e332199e7befaa181de8b8da5bd72eebf7816880716836e5f1012bf36fb1ef49652223cc3b46a1853904aaaf5c1e1", @typed={0xa, 0x161, 0x0, 0x0, @str='%(^%:\x00'}]}, 0x84}, {&(0x7f00000027c0)={0x11d4, 0x13, 0x100, 0x70bd26, 0x25dfdbfe, "", [@typed={0x4, 0x97}, @nested={0x11bd, 0xf5, 0x0, 0x1, [@nested={0x4, 0xb5}, @nested={0x4, 0x4}, @typed={0x4, 0x7}, @typed={0x8, 0xca, 0x0, 0x0, @fd=r9}, @generic="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", @generic="76aec724a79256cf39b027b97b8e1f9d47a77485668efe125db0f96b8a4383412923c67b17173b31674b68c9e43ce83a72d9ba3943dacdc2a6223e1da4172981a86161c5c3e8b089dbf4dda4221544a8385cb99e53b0d64b02887de346c5ae62da6b9b80a2d3f8caa94743b314913415bf4ec370e68eee8e50c4a3d59db30147d327d7529bd3b6fa613f292cb960eb12464726e12189efd76b3da3f562823fb08d154ebac7240e9e6095f6e0a92ad129a163a4ab11d82844a7cfb69a10", @typed={0xdf, 0x145, 0x0, 0x0, @binary="393084fa9f5028208f687cb4387b75286e83d3f0da08e14c44bcc0986a36a239b7dd50a4996418e72e59afc6f1a7cc037a2f0bdfdf2ad165d657366c759c8a13424bad84a6501eb66b5b0fe821f1a737a4bdea2ee44c6f58ef52d3ba01950781e8554dccb52f5fa16c17f4fde3f92ee9b593d534cbd31bae3311650a4bacd5f61f8d962871c3b889e42a05366b5659d436abee6e3b6a072dab3f0c43ae349de34d84863775d2c7bf6a432134f7a105d5306802a81eebe1fc9a0def4958de799d36498edf222ed15e181958eefadf45081867ea3a6b2a08bfd3c6bd"}, @nested={0x4, 0x11c}, @nested={0x4, 0x46}]}]}, 0x11d4}, {&(0x7f00000039c0)={0x308, 0x3c, 0x7f348114dc7f92e, 0x70bd28, 0x25dfdbfe, "", [@typed={0xa6, 0x87, 0x0, 0x0, @binary="48c465bca6e1551b260d054becda1c9289654a9ed2332cf61550da56bff72fca711490be886b826fce285bf416bbdecb10943b331b43c349802b3d874379f9afbc1bb02ee6f464bc91c7e1bc13ac821e2a84d28701407a7eeda0ab8a951f7b653117858d3ceba3d4f36f30565cc9d3bfaf19529a722f39675108d1988d3b8f0afcf0277c8ed8b2afa231a69b41c1914ddcb80fc9bab7fbeb85e55a38702809513dfa"}, @nested={0x9a, 0x36, 0x0, 0x1, [@typed={0xd, 0x13d, 0x0, 0x0, @str='mptcp_pm\x00'}, @typed={0x14, 0x46, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @typed={0x8, 0x144, 0x0, 0x0, @pid=r10}, @nested={0x4, 0x78}, @nested={0x4, 0xe3}, @nested={0x4, 0x75}, @generic="6e6b6ae1d42a598a3bb2896a0e7570fcd5909bc162b37f049ffe800b25052901cbc66455c8be37ca9718fc948fdb84446353b1fce07602b8a268338f0c8a36c741a87951604bf2b6e53afb7b296cec1928a8d79c669d"]}, @nested={0x1ad, 0xc, 0x0, 0x1, [@typed={0x9, 0x74, 0x0, 0x0, @str='sit0\x00'}, @nested={0x4, 0x159}, @nested={0x4, 0x25}, @nested={0x4, 0xc4}, @generic="3e329f12bfe4132e1712ac0792cc1cdf9c76ec11a429717c5e68c12dba5dc5144897f858f1e5d42bc56b86410ea485b5c8a2d113ef386905fd1d21e85b712c22f9e6d33799b0aca6576eaf2716ca8dba21b70b4bfc72428600b77d9c5ac53fc779fa7c019bba0bbe9295096b70c44c0d37ceee160993cae8edfdc0c5dbcbdbb66ce85af087d67a032430ded7d673e4658128e415713f56b61b73ad1151aaadd6c7e04ac0ee8606a929323bad328656d1ba29185aea2d984cb26b8ce368b57f9c4d260f486f9f4619fba0180f3df9b2f32695622c940a25fa7fd03a7d1fa3881df261d1", @generic="4690ba3daed966d1ffe8346d83e32e4f791505002dbac26ae332ff54b3676dfe76b0860473984608af05785dad0443d66aa06b03b581fa01fd723b6649acc0bd7c0bef8da2287ec32f5ea184270255e10c51ba9d1d36e43f4a21f789341ef0a84733c0b4190c6e41cc659322f0257493fceb38b1cc6adeeb1b56d13c3ba7265060e88ea58eb05c38a38066fdb5b5e657430c3da6f86ee4e3deba416770a2f9d81b164216eeefd0c9cd1f", @nested={0x4, 0x79}]}, @typed={0x4, 0x4d}]}, 0x308}, {&(0x7f0000003d80)={0x5c, 0x22, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x135, 0x0, 0x0, @uid}, @typed={0x8, 0x6c, 0x0, 0x0, @uid=r11}, @typed={0x8, 0xf8, 0x0, 0x0, @u32=0xc7}, @nested={0x34, 0x168, 0x0, 0x1, [@nested={0x4, 0xc7}, @typed={0xe, 0xd9, 0x0, 0x0, @str='syzkaller\x00'}, @generic="1ab8cfbf38592bf25140ccaec11a2d0b2cda0d8110e9240a", @nested={0x4, 0x66}]}]}, 0x5c}, {&(0x7f0000003e00)={0x1284, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@generic="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", @generic, @nested={0x18c, 0x3b, 0x0, 0x1, [@generic="257ae32e437cc4dd099fad6362936b74e6c437d3c980a99c1fbb6928b490a35dcf18d70bf7d5648e9e2e27679bb7321435a287e52a372ffabc7218885f58877dbef1844a6d47d12bb321d187f78c7075627818268077b1ccfd20df2cff2eeb37b4f8caa06740b011bc9db4b37ebd", @generic="3e3bd05645c8e8dd368aa9df08acf0868e06fd08a34e2d6a5038db193e967d3141baeb6104476d41ab68859d15125c6dd2f8ce4f2ce91d5058b9d1f0091c60d179c44436ffccba", @generic="7eea703c61625e1a0869722b658f5f3d69c6edb83f6810a854d2c7f1ac36b111d0be9067d92359b99139fb78454895565d0d3c962efe02c6e990f643d2be1ff5b53cfbbe4ad2f7e159ee232068b5a788525e839f76db2f3b3513781b34b528bd8e0936832e30a028fe9c4bbfeca70256d10e6f2c44c6675ca95652edafa162e608a0e9659236efcde8bbea1d2c43dbbc46ef12ba9d3b1ec335b10ad3dcf6ce42d31025ac801fa835469367235e62e9b1bd242d93b8e9bb8a13b94453a41b9e41ed74fecf52606ce64d7196d036c1e8efac7a47"]}, @nested={0xe6, 0x163, 0x0, 0x1, [@nested={0x4, 0x132}, @generic="a0f520d759b4489fc2d640dd3d0135a88e09a0036db970f7080e553d5e0c8f004f5cb14ee47f5f11010c78db012c9ca7358db68882835647b518d6ec0254041f2e901b90e8f9ec39c475b61465c9b46a692e4d29987fb343c6193978fe37cc796204e037688972431fa237189a6f2e9dbce08687f7f04bad9d053ebb58596cdf366b555016da24f054404d4aba14396a2c4ec4c525bffd35b483cc2aca43d5b319eb59d43e12c29ce30185f56b54669095cde27bef80df181f4d07b275e8dc7ca331a4677c9a9344577cffc63c04421acc11664ec88b", @nested={0x4, 0xb6}, @nested={0x4, 0x2d}]}]}, 0x1284}], 0x5, &(0x7f00000053c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r12}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r5, r5, 0xffffffffffffffff, r1, r2]}}, @cred={{0x1c}}], 0x80, 0x4008080}, 0x40004) 4.909245731s ago: executing program 1 (id=4598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a00000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00050000a8c102001c0012800b00010067726574617000000c00028005000a000100000008000a00", @ANYRES32, @ANYBLOB="060024003c002b8008000800", @ANYRES32, @ANYBLOB="0800030000000000080001"], 0xa0}, 0x1, 0x0, 0x0, 0x20040804}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 4.786529512s ago: executing program 4 (id=4599): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000010c0), 0x44080, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0xa) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/171, 0xab}, {&(0x7f0000004400)=""/65, 0x41}, {&(0x7f0000001c00)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000000)=""/120, 0x78}], 0x7}}], 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x11, &(0x7f0000000040)="020c0000098011e8", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$FIONCLEX(r3, 0x5450) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000780), 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x40010003) write$cgroup_int(r7, &(0x7f0000000440)=0x2, 0xe4270493) socket$nl_netfilter(0x10, 0x3, 0xc) write$nci(r8, 0x0, 0xffffffd1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000458c0)={0x1f, 0x2}, 0xffffffffffffff17) write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="0103080ac900800009000900b38f5c6e46aaa1240600"], 0xe) setsockopt$inet_int(r6, 0x0, 0x5, &(0x7f0000000000)=0x13, 0x4) 4.671847599s ago: executing program 1 (id=4602): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x8}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000100)="e6", 0x1}, {&(0x7f0000000380)="393bf7b291e58e83a42633f06a3dcfd83bee4ff2f10784acf5e37308e33b78280fb447bf25175e14751ad2254a2834fe471364a5cf91476f128b123af725ff817266fdc907044be1b069b599ad149ccc4c171eb6c671418ce397681b53e28232ccd719fc73035155c1163db75359c8107a6cfbff752f71940aa3a6ce162a2a96279f4fb928594372f63bff63adeab4d280f377b2709918be20bd02a647683a2af3bb23ba5d1097048858e09f32d333e45a86f6ae51f1985e521a4fc606b200", 0xbf}, {&(0x7f0000000240)="d565e3f968396bfb6108d93ec74006757af5eba6cfc98c768e1cf8716a9ef7a453aedc42561eda1175275980f4bb582d14bc735f3bd7b3037428ea46ec276504aa00e2cfeea869e2821962055cc5f0b568c44f313125b550bd4215bfb2bf49fd3ff6790ca76e47efcf1b85b23a3d89207185b881ceea6f2ebe8c8f4b52b155c3ceaba64eb89d45b3dc41187698ba5f2f2d3b2250e5577e7a93fe3e8bb391", 0xfffffffffffffe21}, {&(0x7f0000000300)="4727566e0f737205d7c1225f46606d90854abff3648de9c9d4330fb05ad1f973e728948d11a760eeececa3446cba7d1a24b0ee364887e3", 0x37}], 0x4, 0x0, 0x0, 0x4855}, 0x24000042) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x381000, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x3) close(0x3) 4.46033087s ago: executing program 1 (id=4605): r0 = socket(0x1a, 0x4, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x84}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000810) unshare(0x2a060400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e0000c82c8e939ac6e0ae40a1e9000400000001000000000000000023e500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f0000000100)="fa5451db"}, 0x20) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@generic={0x0, 0x4, 0x6}) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) unshare(0x40000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}], 0x18, 0xcc040}, 0x64004084) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x80000) bind$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 2.602091505s ago: executing program 0 (id=4618): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400"], 0x84}}, 0x20008040) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x28, r3, 0x50dc85624ea6cf59, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x6, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0xffffffffffffff81, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}}, 0x8, 0x5, 0x8, 0x9, 0x40, 0x3, 0x1}, 0x9c) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0xac, r3, 0x804, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfe6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xaf2add883065a977}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff0}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x40000810) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000000180)) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c0000001200000400000400040000000000004a", @ANYRES32=0x0, @ANYBLOB="0500000000200200140012800900010069706970000000000400028000000300ac1414aa0000100004000000000003000000000000000100", @ANYRES32=r6, @ANYBLOB="000010000900000000000a0000000000000010000001000000000f000100000000001000010000006800348014003500776730000000000000000000000000001400350069703667726530000000000000000000140035007661476e3100000000000000000000001400350076657468305f746f5f7465616d00000014003500766c616e3100"/144], 0xffffffffffffffbd}}, 0x0) 2.50672263s ago: executing program 4 (id=4619): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (rerun: 64) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf679000) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)=@newtaction={0x2a1c, 0x76, 0x72b, 0x70bd2b, 0x25d7dbfc, {}, [{0x1ac, 0x1, [@m_sample={0x9c, 0x11, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x68, 0x6, "db4cd9ff3f59e87311888c297c0c921cf91dc21980a46dfb302aac9f5082d916c0a76377f523d3e4cf14bdcabbc43297505efe9e7bb15ba89f01f36b778c0bcd53a4d342dbab96cd0e398a133d692a484ae9abd9f9946e2ec35e88730bc30ca33e83080c"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x10c, 0xb, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}]}, {0xc7, 0x6, "969123643482867486e4c33350f67fe54db2d57e77841c306b975b1e6085437d8e76d4d75d239bd3b272b0724c1d20e316a6e818d818ce5376750b4fd722281846ed485b3fee61bce7ca8723376122762ee3e8904fbdbbd773d231545c6db2c1762fe86f4292ae0a70fd2db08bec6c587d28decee89ce813080ea6f14f05eb7261cd72885994cff596e09fe0a182c5801a9d649c8eeeab2213d9837e911174503904c1cf69773a9662884aac9c6974c5376ee5459698dce6d7af14c40838a95269ee97"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x1334, 0x1, [@m_ct={0x144, 0xf, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}, @TCA_CT_ZONE={0x6, 0x4, 0x3fde}]}, {0xf7, 0x6, "699435716858641131ad95660b44305e92b9a7bffe5bec629ed892c21fb6391769e7eec0890bb12db4bcb656e3cfe2ae80ac509af033e07da5e6344a15dc46f57589202d9d8ad083b278cbae5eae485a95845bf4118ddd5e9304d5d129c9a8af94a99c7d6f64527f9e91d1ff0312e2f592720a50ac50f0016a3a842253336cf2a2990079b61053ec6294fcafe22cb7a7cc94206587f0be5b563f405dccd2e8a8d84c671c24b2ca098f62fc74b5122841e8e627a8ab324c12968bf17041a58de55efd8bb81a0944230cd2b6c19dfd26e4cef60aa56e59141787440efa323d702f0576cf5bfadb5a26eed30768926a1d703ec366"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x140, 0x6, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffff7, 0x32d66ca2, 0x0, 0x5, 0x7}}, @TCA_CT_LABELS={0x14, 0x7, "ccf890aab1d4806c77b079698bb40701"}]}, {0xeb, 0x6, "f41e862a3d5fd1fb667b799b01dd2966f62ce67a4add79a0cad8adef89c6caa341e05b799b872649441809a1ee383d9fadbc41ae5754a78fd9a564102f622553e69b6d04fadd93b7a4142411494455d95b436a474f04be22ed944bae348fad0c5ed884f9dc1396b4aa076801c50d48c13bbdb99ecaf3c0379f59af368f79ea72bb5da3353f0b49999058942d788ab3efadf36d1bbd0ff646a9d857dfbdf36c195e23c40d68352bb302a57cf70d1ec7d7c9b9f05998d1faca238f56bf3f52a2531f072a1daaf374c7787c964b58b713f1128555a83f824938adb776fd9dab9e72e67c873a06aaee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_vlan={0xd8, 0x1a, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa2f}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x9b, 0x6, "b15c6b6ad5c9f068a3922119bb4593f08cc4349a9d0462c691adb933a9065e661b63a826ed4d296f1822d622b36c5f183c7118ad6db79630c91e98e12caaf0aa83fceef68b461d11b8ad16fd4a2b7642dcf1fd60b2d9385a28eda0cdd7d5505953186cc3f1662479f9b569490e46ec33cbe890f79f1ef53f740370be76a8c12039c37b5d6d9ce9cc24a3406ada6e54aa609a3e5fe02920"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xc4, 0x8, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x8, 0x6, 0x5, 0xfffff7c4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x4, 0x1, 0xfffffffb, 0x218c590b}}, @TCA_DEF_DATA={0x7, 0x3, '&+\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'ctinfo\x00'}]}, {0x52, 0x6, "eed688e1c1717d34289810427d9119aa914b11856cdc906fcff6503187d0b69ac4111a4de86a99bcbf1babb904652f62c8e26fdd5eb667560d4c01f608983d42bc6b4e53a6e006d2d693f3e3c228"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x120, 0x10, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0xf0, 0x6, "25f824ca039d7247bc31d225a083e742f667360ced88d2090096aed81b38b72e9568dfd8bf21da7cd5181a556a41a9d7b3afd8c354baed2d621e937477a303247298b3b016211e96bf9c376fb8f60b32bc9cf4bc6e795bb4ee2cccedc0bd51413c791e17c6445bfc4df9a7bbc87b78be260a6431ab8bff5dcebfd742e79efc7564307bc32a0cd1004f08e19320a5b8c6b175f9012a0cf450220aa7fb3ef8f9e8ceca37929c1ecef643bebcfa12d85db8fc5799729275a3589a60beae046aeca69b7d136a7c6432c20ce5dd280df9b0b6ea43e5762586bd98a82f362d1cda03e473b40d4f369401444a559c90"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0xd2c, 0x1f, 0x0, 0x0, {{0xb}, {0xca0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x100, 0xfffffff9, 0x5, 0x9, 0x15, 0x1a8, 0x8, 0x3, 0x0, 0x2, 0xff, 0xde, 0x9, 0x3, 0x8, 0x2, 0xf, 0x1, 0x8001, 0xfffffff8, 0x3b9, 0x4000000, 0x3, 0x5e, 0x9, 0x4, 0x80000000, 0x7, 0xe6b, 0xfff, 0x200, 0x7ff, 0x4, 0x3, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x5, 0x0, 0x800, 0xbe25, 0x0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x8, 0x10000, 0x1c, 0x6, 0xff, 0x9, 0x3a5, 0x8, 0x1, 0x4, 0x4, 0x7e08f4b3, 0x8, 0xe, 0x5, 0x8, 0x9, 0x8000, 0x401, 0x7, 0x2, 0x5, 0x1426000, 0x3, 0x4, 0x3, 0x7, 0x4, 0xfffffffb, 0x4, 0x4, 0x9, 0x7, 0xe7, 0x81, 0x2, 0x10000, 0x4, 0x800, 0x4, 0x7, 0x9, 0x0, 0xfffff96c, 0x5ca702c7, 0x3, 0xd, 0x1000, 0x0, 0x2, 0x6, 0x9, 0x6, 0x7, 0x0, 0x101, 0x3ff, 0x3, 0x3, 0x0, 0x80000000, 0x6, 0x7, 0x4, 0x8, 0x48a, 0x9, 0x2, 0x1, 0x9, 0x1fffe0, 0x4, 0x4, 0x5c0000, 0x7, 0x8, 0x472, 0x3, 0x9, 0x9, 0xdf, 0x7fffffff, 0x1, 0x7, 0x8, 0x6, 0x7ff, 0x101, 0x8, 0x1, 0x8, 0x7, 0x0, 0x2, 0x43bb, 0xb9, 0x101, 0x8, 0x2, 0x1, 0x7fff, 0x6, 0x400, 0x6, 0xfffffff3, 0xeaba, 0x63, 0x3968, 0xb2, 0x6, 0x7, 0x100, 0x3, 0x7, 0x1, 0x9, 0x8, 0xda2, 0x400, 0x0, 0x2, 0x2, 0x5b02, 0x200, 0x98, 0x1000, 0x8, 0xffffffff, 0xfffffff9, 0x5, 0xfff, 0x1ff, 0x80000001, 0x8af, 0xfffff7bd, 0x6, 0x1, 0x3, 0x3ff, 0x6, 0x0, 0x7, 0x1, 0x9, 0x4, 0x3, 0xb44, 0x1, 0x2, 0xf27, 0x6, 0x0, 0xffff, 0x1, 0x7fffffff, 0x7, 0x9, 0x88b, 0x6, 0x1, 0x7f, 0x10, 0x3ff, 0xfffffffb, 0x7, 0x6, 0xfffff0e8, 0xd4, 0x3, 0x9, 0x8, 0x8, 0x7fff, 0xac, 0x8c, 0x1, 0x8001, 0x5, 0x1b, 0x2, 0xa, 0x8, 0x339b, 0x6, 0xcf, 0x81, 0x80000000, 0x6, 0x2, 0xddf, 0x8, 0x32, 0x0, 0x800, 0xfffffffa, 0xfffffffe, 0x7, 0x184, 0x2ec1, 0x8, 0x9, 0x17e1, 0x6ec483e, 0x0, 0x0, 0x6, 0x3e]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x260000, 0x5, 0x6, 0xff, 0x3, 0xe2dd, 0x1, 0xf, 0x2, 0x4, 0xffffffff, 0x4, 0x401, 0xfffffffb, 0x0, 0xfffffdd4, 0x4, 0x4, 0x4, 0x9, 0x1, 0x2, 0x1, 0x6, 0xd, 0x7f, 0x7, 0xe0000, 0xfffffffa, 0x9, 0x9, 0x5, 0xfffff001, 0x8, 0x7f, 0x8b, 0x80, 0x7, 0x9, 0x6, 0x4, 0x3, 0xbda, 0x1, 0x3cd, 0x3, 0x6, 0xffff0039, 0x7fff, 0x9, 0x7, 0x568, 0xe8, 0x2, 0x6, 0x0, 0x4, 0x3, 0xe, 0x8001, 0xe, 0xe6, 0x2, 0x8, 0x4, 0xa, 0x7, 0x200, 0x6, 0x6173, 0x2, 0x2, 0x5, 0x6, 0xff, 0x7, 0x520, 0x100, 0xce6b, 0x3, 0xffffffff, 0x28000000, 0x6, 0x6, 0x0, 0xf, 0x8, 0x4, 0x8, 0x7, 0x6, 0x6, 0x5, 0x4, 0x1, 0x8, 0x4, 0x5, 0x7, 0xfffffffb, 0x1, 0x200, 0x40, 0x8, 0x3e1, 0x5, 0x8cf8, 0xf, 0xf0, 0x9, 0xc7a, 0x4, 0xa, 0x3, 0xffff, 0x9, 0x1, 0xffff8000, 0xb584, 0x2, 0x1, 0x9, 0xffffffaf, 0x8e, 0x5, 0x6, 0x4, 0x80000000, 0x0, 0xd, 0xf, 0x3, 0x5, 0x5, 0x7, 0x7, 0x42de, 0x800, 0x8, 0x795d0, 0x0, 0x1, 0xa, 0xfffff65e, 0x1000, 0xffff, 0x1ff, 0x1ff, 0x4, 0x4, 0x30, 0x7fff, 0x8, 0xdd63, 0xfffffff9, 0x80000000, 0xe, 0x200, 0xb, 0x4ad, 0x9, 0x4, 0xffffff9d, 0x1, 0x8, 0xffffb8a4, 0x2fa, 0x2, 0xa, 0x9, 0x5, 0x9, 0x5, 0x7, 0x3, 0x5, 0xe7, 0x5, 0x40, 0x4, 0xffffffff, 0x7f, 0x7ff, 0x72, 0x8, 0x6, 0x7, 0xfffffff8, 0xe, 0x1, 0x6, 0x101, 0x6, 0x7, 0x4, 0xfffffff8, 0x9, 0x7, 0x5, 0x0, 0x7fff, 0x3, 0x7ff, 0xfffffff7, 0x40, 0x7, 0x5, 0x9, 0x2, 0x2, 0x7, 0x0, 0xe, 0xfffffffb, 0xd4, 0x8, 0x3ff, 0x2, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x6, 0x7, 0x6, 0xe40, 0x80000000, 0xfffffff9, 0x70000000, 0xfffffff3, 0x8, 0x278, 0x800, 0x80000000, 0x7e92, 0x7fff, 0x4, 0x6, 0x4, 0xfffff000, 0x2, 0x2, 0x2f7e, 0x81, 0xbb, 0x1ff, 0x2, 0x4b1, 0x1, 0x100, 0x0, 0x2, 0x8, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0xff, 0x0, 0xd1, 0x8, 0xff, 0x366a, 0xffffffff, 0x6, 0x50, 0x9, 0x6, 0x401, 0x4, 0x9, 0x1, 0x9, 0x8, 0x7, 0x7, 0x7f, 0x80000001, 0x3, 0x1, 0x7f, 0x8000, 0x77, 0x7, 0x7ff, 0x4, 0x1, 0x4, 0x9, 0x3e, 0x9, 0xb, 0x1, 0x10, 0x9, 0x9, 0x7, 0x7, 0x1, 0x9, 0x400, 0x51d3, 0x1, 0x8c, 0x1, 0x4, 0xfffffffb, 0x1, 0x6, 0x2, 0x1ff, 0x3, 0x2, 0x3, 0x1, 0x6, 0x800, 0x0, 0x5, 0x3, 0xfff, 0x4, 0x8, 0x5, 0x3, 0x5, 0x4, 0x8001, 0x0, 0x1, 0x80000000, 0x8, 0x7f, 0x4, 0x4, 0x92a, 0x7f, 0x4, 0x8, 0x10001, 0x4, 0x2, 0x8324, 0xa, 0x8, 0x3, 0x5, 0x5, 0x2, 0x7f, 0x9, 0x4, 0x7, 0x10000, 0x1, 0x0, 0x7ff, 0x2, 0x9, 0x2, 0xb4e7, 0xfffffffa, 0x8, 0x2, 0x1, 0x7, 0xbd, 0x7fffffff, 0x6, 0xfffffff7, 0x8, 0x438a, 0x7fffffff, 0x1, 0x3, 0x30, 0x9, 0x2538, 0x1, 0xffffffff, 0x3, 0x8, 0x0, 0x4, 0x5, 0x10001, 0x7, 0xfd46721, 0x5, 0x6, 0x4, 0x456, 0x5, 0xd18, 0x5, 0x200, 0xa8b, 0x1, 0x0, 0x1, 0x5, 0x100, 0x400, 0x6, 0x4, 0x4, 0xfffffffd, 0x80000000, 0x3, 0x6, 0xda0, 0x8, 0x2, 0x0, 0x1, 0xfc, 0xfffffff7, 0xce, 0x5, 0x101, 0x10000, 0xffffffff, 0x7fff, 0xffffffff, 0x5, 0x200, 0xffff, 0x6, 0x81, 0xea7, 0x2b51, 0x5c, 0x3, 0x1, 0x49b, 0x4, 0xffffffff, 0x7fffffff, 0x5, 0x10000, 0x0, 0x10000, 0xe19, 0x1, 0x10001, 0x7fff, 0xc8, 0x244e, 0x7, 0x7, 0x8000, 0x2c4000, 0x8, 0x5, 0x4, 0x7, 0x0, 0x0, 0x2, 0x4bd3471f, 0xffff, 0x3, 0x4, 0x8001, 0x8, 0x5, 0x2, 0xf28, 0xc837, 0x2, 0x6, 0x80000001, 0x5, 0xfffffff6, 0x2, 0x9, 0xe, 0xfffeffff, 0x4, 0x7, 0x4, 0x80, 0x6, 0x4, 0x0, 0x8, 0x9, 0x2, 0xffffff09, 0x4, 0x9, 0x6, 0xffff, 0xff, 0x184, 0xffff, 0xfffffffa, 0x7fff, 0x9, 0x7, 0xad3c, 0x5, 0x2, 0x81, 0x2, 0x9, 0xfffffff9, 0x0, 0x397f, 0xa7, 0xb69f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000001, 0xc, 0x2, 0x6, {0x6, 0x2, 0xc, 0x80, 0x1, 0xbaf}, {0x0, 0x0, 0x4, 0x9, 0xfff, 0x3}, 0x4, 0x6, 0x3}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x0, 0x3, 0x101, 0x2, {0x7, 0x1, 0x4, 0x0, 0x7a57}, {0x7f, 0x1, 0x401, 0x4, 0xc, 0xcf}, 0x2100, 0x1, 0x80000000}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}]]}, {0x64, 0x6, "a9291c8de82481942f474337aba760867a9dded3db999590e9bfd8472f0af2612ceec6e44d82dc20854ef932dfde2907a65083af95d3df15d506eef8d7480e87b88464ce32e8fe5c87fbb540e27ab5b614e0206b7555ff6db9127d3d3f51c29f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xc4, 0x5, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '-]\\:\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nfc\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'red\x00'}]}, {0x7a, 0x6, "4795c7f6c09a4bc27b5471bbc4877940752062dd93d175a5d066059fe0509392ee97cb8ccfee802c171506f0cf42ed5afd6a619c85e314f070a38efa7037a7128b051f624d76bdff2b08469f84293475f3906c04aa98f9a75a1b074db5000b11b67ab43c520a22792f7e7bc1417fb55274a025445037"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x1b0, 0x1, [@m_ife={0x90, 0x1b, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xffff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x80000001, 0x6, 0x6, 0x3}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x101}]}, {0x39, 0x6, "2041c1a3487970e354796045d988f2f82ed4e9df2a8ff4b25435b925a523bd6619a1c03e1af09b9ef303ede40add9eb71d9afa9984"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x11c, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x6, 0x401, 0x1b34}, 0x34}}]}, {0xd4, 0x6, "bbaf298643737ca51e674aa743c989fc4ac0511e2e7a834133027c138109f89d7cb9bb5e3354ffd19c7343e0e7196d42e5636ce4497000e9291c81e2d5fbfb555e3e522aeed47c87aa21710f1e609d9481e9e83f9bb1003145cf0930fef05d2c0c04273a7ccdd6b3fdd8914ab0e1eb1e1ead84bb8156069d5933b930a285c811840e3f1a26558cb616a2b533836092b9b20879ce368d865e4f0e46c1965d729874ecffc9b902aea7aeca7ae307aaea087c8b76a61470c87f1239a54aa5091f47e69f331618b45a42959afbe148d6a48b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x1378, 0x1, [@m_xt={0x168, 0x13, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x50, 0x6, {0x0, 'filter\x00', 0x90, 0x67, "e56cd5470b3c874234748f9a6377f6ffebb4267b26a35c057976179fbd087d6374a2ccfb58d9"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xd6, 0x6, "41e067e574f9d6f7f4ccdf264619a111831e4b9a2a59cdd82e825ba1890dc171f54c3ca6dd346035c4d26617973c023d89e8d78940c4b564ea1a507847fabe3cece38a4db8081749f0d72ba72323746cd74f8088047e8768de7ee1fddbbce076d2d41478cfece568365a76fd8b0f0ade35c137ea6414e54b89517587a36190a7d1e72c5a54aa7297f0d69ff3bb9dea2b3dbf725f95f83e21b17c47b19793a855e6c5515db4de8bdee3047a51af64c1f5fc0cdaea49ef783f3c753f82f1b8f68bcfaa41db964e7a90180a700e96a37982602b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x1078, 0x13, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffff7f, 0x6, 0x3, 0x7, 0x9}}]}, {0x1004, 0x6, "95ed83fb9ae599860e070bbdc3108ca040438d3fc77be9f3dee31cd80fafc495ea232705447fa14653732b9a9f7e4dbd3581f1d628c7eeea0b9f529279fc5aeb3ddd4e5f050c37fce7f5a3933d4710ebaa4509cca19766dc9b4af4cbe4ef121ee635a7ff0459c88fc726ae6fccab1d5c23ee3506dbb6298e8ce98507fe98e236963fb37dde44d31e6822bef16daa5eb127957694356e97c01957074158d84a36547439500f9af8e92e0499a708cbf48c798a6b56ee79b9e581202d30316173c3a5c582cc5f66f0cb620d341635e39200e4ae4c9ce567ba3aa238dcb27ee3260c91e24425819c37a33236a961ede81fdb6f226c9d942e859027d73760f6edd24221c6f043985d97f70461688b1b86a547f206e2cf3840c3cde643cbde24daa8c9a27ecc761751bbada842ce362988f6bf54270f0b8f9137a95e9c6402c647a17131a2584056b1cb6c72737dd17376d716cbb4b022737edc24e1502cfd093bd21ff6897bcb038cfc7bc1e7d445406c9374af8e078e2c5fad73015f17850fc067bb474f2bf4783b4b22ccad9a024eaf3075deec2679ce3bf9b1a94705c36cbe59c3731c92826e1fb7863859947d81dbc9022cdf44e391ea304763be1ca31817619806fbea9764dd9b0f883b07b2c5f57ac3ed829f6507192cff2e95b49fff1cd92f6336902d721a8efb60a3b3d6bb11ec3cae2d85c627b0d3420c1fc0d1b2f9e8703418fea61b78cdb5e931232cfd72875b3cabf1e2a4c85b2e361aaa96f7a044b0378972d372d225f32c354d0c383513b115c31df3f36fc3e3b2fa58b982bfd146ea1054581b26e317ebf2b32b8eefc757de56ef1baef5e754a77c3362edaea76c034eb04a080c04eb2bed0def0e96db136284c84346ec80da5eddbfe3f505027d97d6934b0dcda601e72dfab7035d7d9d3c382554bc662656c11e3f14fea99a6e532c4b2c860638e1a64dda430a7caa04097ce9341ad5fc53d12d24786c93fab038d3df493c5a7af86e122ee94f357484863c02c64d8d6b27f90d42054aa82b1002a1ff7daada389422ed8722495dce00c5dacbc59c0adaa85368e50cae064840b1e87e94601f990147a5c7c89ca78661fa9f6eed20d45d4ed61661548d71352d21bf7751489593be3b6a31e07a89a0285e8326583a2c0dc72b09e8ccef5e41a5945ae89f902a13f51a5b5b46a1a19a406856aee887a1b70bee2353aa196032e81dcf9a877846edebb60f074ee893f59973e51ee88bcbdaeb2ff6cc31cab75f7d922ffadf94029a291d2c14e96cebc456a5a6e223dc4476049d4b30c0fea5ceae3f94797c0588d398ca3fefb38ad6bf6622034fbfaa622a1a31d24be47edd9ca08d8448edc01750be3aa57365e50008aa3e3f610ba8eacd7c5885973da9b6f0bbd4b2317a0198af38d5941091b57b1e0afc291acdb9a38be2dc27b0f4e0a221411d575d39e553901301e7e566e878097520f5cb107f9166fdbf6349dfdffd3f8d5de537d2cabce4e58addc9274a073423afc1247e6b7495c253f00930fc53b9045feeb19972c9276d6bdfe0a4dedb9aefd31a200f4f636d1f15da2c0d408a12ce5967fdc9615556a13c124f511ca1bc6f930fb13f50d474230661a6ffee2d432d23e5b991bbb1bf07217d020466dd687540b023ed4f58e54d2375e596a83d32ae67f9fffd4abf5c62f75177beb0c5fcac052eaf2871ecdd7a15fea1dd613143c3b5d24e57cbaf4e56083ec1597a5af1ff2456c88ed941f2ae9bfa89686ae77e9f80d28a6fd84eebb4a9533c9b9a26532cf4fa06ede027ef715715a80e3a50e971364755a0d4f284322fb66bbb708aa72abd068b770fe2a76140255f52fae2284148ff3f086afa8ad50fee4d98155382c5c95fac846036e3ddf3cde314cf751837c4ae3fce58a309b7b0db13538eca547ede2ab44da34d717bd650eb8eaa261c4bd851ae802fe965b4c5dda3c8b4c6ec0c6dc7541d9ebfa32cb79d67ddc251cfdd2e0b61fad5e492b08d374120898f55a2b04a3ef3bdc878ea110949f262a883fccf2950b417634e00a87fbc8737427e9b0515e2879e01ca4b854afb911fe2ae1a7ca0b6286e5ed893891c4d8a7056cbb6a8d4bbda23a69a7d4cd4708b11dad7832f1e365c91746a0fdbafe3f6542f3d234662f567b44f538900d9143b4068d592c16d760b75b4c0b9b046c832e5fab70b758606ff03ff0db5047b9be9990d2a34ae06f34c8f60a0e107b38b4453028c6680aa0ae7f23876e25aa72bf64f060f5677fad9ad1d106eb972035f998fed7f1460df7cf872e485e5df61cff3f5af0c72d53b649aa134607262bbb6d306b49b3c41a3612e1196e625180fbd83c6f45349f1a59a1ed983a42e0a81c5b1e5f6757e9e5289cc6f6aa7e6a197683e734294b59162e3b1bde536e3caf1ae28cdfd985616ef399f18848363dad58dfc114910d70202df43dcf5a3075dd59b1832db5141292ee006fde381def42f1c3bb7b484ee9c6165768be2aebbfa4fd8d76979501834520b86b476c18d85c0468b3387dda41c45603f2710b14bda7898c4003c15dbc17196e7f8522ed5b75224296428bd6cdec4ded2ae515515f4c6d515438a0d4f8b7694cd8d810e3bdb901bf52cd1a10d390b1ae336deed20369743c51da23303507de8bad50c81c5cf1a129ae9785fb65cb57f51ebf616b59c4a1c407e9dd9c97861b3737c4896a198c20eb1b62ff5e43b80abcc289b6bf61365a8d2d748b91da99e29fb55bd6198fbed959427fd2e392ddd21e270792157c2b4eaf708c8c172df46b087fe2e600c34b57f584fea4970a7c57069897d3949417d9d42c3fd567e9f561f7d0280225ba5c5b35d6a02b97f4d8b28b5eb90940f16354fa5cb0d563538da55233f04cdbfc544413b7fec761f42840623e902776a0d41477dcdb222e3bafeccff41f25b3795d609b8a7ae56917c77990546d0e6b7f204dd94802fdf6641999e017949cea2ea6551e6f01b0e3c6dc1d32642f791e9ebbf86702469f5e7702e72ce338a67edfa4ad2832ef335f471c7885d6e96c6310c974cf894a083d43c62b58251f8ac1b303733b64da9d188cf6cad42d41c2a9d54230761b34396768f46689e049f7ec69e3e5cf7d9e69e3017834b460bc377d39c5a862481a7128e18aad693c7f65e00b891a8e0a6143a97ae44e051bb5fa0c3c8ea89860deb268a1309f482ff70a25158fe006336164748233a75f900a7ae2cdc6a779954df8058d2d7589820927735a67f73c3e85fc3e7971c8b120875e797b0736c0f3817428d0f7c231ea76c66513f9a3e59c7de8a25e59a42a9f5e4f9b80d31ee3c94f8f080c05c7e97e8c7afdae70e409548051e7bc8a61029e42705c9f2c23cbb5f4034428e7947889d048516aa314abaf7020e112dd16e99dee4d54266920ed3c043cef66507ae80b09d6c7e8430c1b120520d61991b3564d4a70da1e1054d77405bf85dff643a3ac4e358062e701933335550cf82a92a9f7cf1bfb45de104799a0ce9efad003e21538c8946edaff4709ce05e6e4498fbc18addabfb4bd5d1267d80deb3f862b85d9a51003985d69b40b503cf620bbfd61c1d6b66b6b701d1d8acef34f0e64d35cab76140a91a71fe9e978318ae35f4b9c91141e939ea91767c8ba9d2a22d48a3894169821c4d30ccbcf98187ea5380e5ad9ce0b5a8cfdddd01571e5d2a7c05174529173f9e7ec08f583e4d783d0ce91269277cd7c51037b40ca29f3a56551ec94f2db2e7cb0d33febba8d66076c6959c318a146e9258f2af186d1ae5c910fad0b08b391c6b19704bb58116d54a6dff0cf45196555f8361c542e0ffb84efb371cafada249f80733eb3d934e97661ed38b7d3255cc44c5b4e03e9d283dc1fef4775d29e4dfb9fe2f65326ccf005ab6365dacb819be95de39a7891120b59bd1fa1b4cba37f9dc337f8b1fcf4f09ae20a6a58c7ac4ef545c8d384f834b7a5fa9745ddabb9c3105f413f9aabe4b204b743294418e2e35dc04a1958046a91131580c8881bf6f42a1ca92721d91c64180e70e995ee9e22c4a06d7b7daa7200c9af34702e41d3e320ea7d04113189f668065f2ff18ecd7441c08f559e338bfa54b15648132fb9eb27e4484fa9c6c6587d172e031d2c51549983e7a4337d3ea6370f3eab4449ef165ae2d964b77f7f840cb6353a3c69585f2299c08addfae729795a7eb96f5bc00713c6ec4f70d47fe7a80f50b6101d6b26b3bbb43ef4b7ec79026e0665b2881b76c7776106fd840ac3a6a926c8e5542ff27464c0d0225763bc6666265b70e4a249843c6a0ebc8db1e824fb6075eeff4c8d9dae280f7cb7bc8ac09135be0696fd2ca1dc576c06ba4d41bfc08d413dacc7b508ee7f98c94b7a83ace4cb253e7ce1775228bf8113261a41856c954ce135f6b6b8e769cb8ef9e70793ae39f6b34b0ea1bb220a2176ddd7783185aca641f4f84f4e90f78a8ee034c8f4dce9bbdb67a2d815f8d0793f066516ddb3fcf2d9273e5d79c0fbb0186463e08b519166a723c473197c80b363db95ad5b6f0d8975025539a358c0a97a3955422bdd07b98ccded42370e92b61ec2c27b0a37fb955bd7194c6817422d099ad8155d09fbe5a8fb3be7d796fb9ff9721de3e57bc7c98e63cf04ac4692529ddf326754b65631d1a8f5e6a41b697c3843c4b8534656f5a08a59f831ba58be2cbc7936d7d87d3b60b923dc0e00ecebe8a1a122fcbdc9ed812bf3c178fd2a6b45e93e19519f080313dbfac344fbe4c2cf964b803f104aa5f0c018dad535c32812352173fe950e4a1884a58479e0d02bc883fa71f99e0882be5f8a03f783f59f19bb857d62c8db8a41fbc8189e9fc092366392398047f62dc4be4af0985002388da9a7882c6e7c850ed02b686a22e81d8924d88bfefc3b37453546991386f80e5dd5dc5f5c9fef2bdb48f57624105ce1eb042fcd588afcf9485a422f12c65430f99abd272c50800eb515c24120b056fbf3cff3453c8b0d09120a5fd56bcf4b3f0d282854e314170c036d7a19e775ab59c20d533f2d99e0829b29f82880749647772f6d4e12d1ffb64170916dbf2df9c992aca42146289e8d48dbefe797b24fd193d52ab390f3137c659ca2bb38da0427ef50acd4c27857fd6743de7f3815dc072a2342a1e6556bcb8a9309ad074f347fa5c42d566f5f1aed4955024322a1f04cd3750ebb132f4c1f29ab8c3bd04ee00c49670d453df01a193719b0c0f70e2899ddb0e74f1e4b6d34aaa6359d1947e1255e97eb2cf4c1ab6dbaf586d44fd3ee6717603c6c2a28e2fe7253d701bb2da87edc355e1de4f9362120d38844172baadbc21fcd249a3236c860fb225827e34f93475ea19aeb29435925f3634c022c606f5067b08e96dde1a42cd67d7951fc82af0a92d573c3f0ad8c1e58a72d62a82f2583275f8f0c35536d50787c3f27232ab50a499a77761e675b9d6abcf975014af3646ac1f12b321e478884b3c77e93423943b1c9002f58bc91e034914ef1db2c91f711b8018b28aa29965d3a828aa182045afeeba5e84d4b1c55e48b4b575ffd613c2f0af52edc9a7ba66d3110441f8de8ee84a7fb68dd1cdd4b1d6cf5390aaa35f577806ed445f33de521ecf5ccdbd0f8201931165f68e15df4b3711ad2ec70035a800be9c1f31bb3e2607a00c51fffb6fb01e2260a22aba15e0c57ce95b0bcc22a61a2b0e6b083882ce8ec26d3d7bde14f54494d6c805ffb86abebbab83a2bcd4ceee6de0957ae4239516bdd6eea49f99438e3af8ad21536d9736f810049fae084e6f23203b31c78d503decb3dcf9a0a29b2e4a80a0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x194, 0x11, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x21, 0xf0, 0x3, 0x5}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0x5b, 0x7, 0x4, 0xff}, {0x9, 0x5, 0xb, 0xda3}, {0xa0, 0xdf, 0x2, 0x8}, {0x3ff, 0x1, 0x6, 0xe1fd}, {0x0, 0xb, 0x9, 0x7f}, {0x2, 0x2, 0xb, 0x2}, {0x4, 0x5, 0x4, 0x3}, {0x7, 0x9, 0x1, 0xc82}, {0x5, 0x7, 0x1, 0xfffffffe}, {0x7, 0x5, 0xff, 0x1000}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x5, 0x1, 0x1}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xbf, 0x6, "4448dfadfd18b833bf4e2680b5db36c14cd24e377195791ab2e39b70b3cca70fbcf19ab3ea3e77b8155d9b7ac462bb6adad4df9f7189364c6e78a407c59b7d847788854d27d0547d35886b24a14e7bc30ae4b57c3f525e272238ce2b9df6142b7bbb27da9967b36a42ebeec8ed376bf05f491a4d35cf2d06a27b9be12c71be182acba1a6111ddceab68b7b9c1b0facba1045c634bf69f30841f2e93e28f1adb6b7ae328c893db87bec2013638842bcda4b9eaa06334440f3a3c483"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x2a1c}, 0x1, 0x0, 0x0, 0x44891}, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1000"/12, @ANYRES32, @ANYBLOB="3de6c46dac21ae47d2e743e80fa234d9e066b2d940583f167a5ea6e640c244f5316c6b9683d674d4c9fa6d1062705908b7843646192b6c308f1d78668a5239ac2a1b6a01d0712d77bad626c54900ce3b24bf48d7abb5f9eae6541325", @ANYRES64=0x0], 0x20) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x500}, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e00000020800074000000000100005800a"], 0x74}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r8, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r8, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r3) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) 2.137949113s ago: executing program 2 (id=4621): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) socket$packet(0x11, 0x3, 0x300) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="4cadb0fe33825d09ddfb7f52b87f0cc0d7ccf9e9ff718059fa4cac3f915fc504859bf943acec547ff142d9acd13548b7ff92488f6eecc6041de86176093ea46d0f235089cb9e040280765b", @ANYBLOB="0100"], 0x30}}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="0c05000001003b1bee74f81d38cb43cb910011cf6eed3c3d79c5a74d37717ca6d944f5675ffe163080458682efdbd3a04811c8c2213840478847f1f8ec188941f8efa38aa705167edeb77f00"/86, @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="f000028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000040004003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ffffffff08000600", @ANYRES32=r7, @ANYBLOB], 0x10c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed384dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket(0x10, 0x803, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x17}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0xfffffffc}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000013880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8008) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9) recvmmsg(r9, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC=r3, @ANYBLOB="000125bd7000fedbdf2509000000080001000100000005000800000000000500070000000800010002"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) 2.006386459s ago: executing program 0 (id=4622): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0xffd3}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x9d32f4b2e0c65377}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x7c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x9, 0x73, 0x2751, 0xd, 0x3ff, 0xd14, 0x7, 0x3, 0x4, 0x4, 0x9, 0x5, 0x5, 0xb, 0x0, 0x10001}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x6}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x4, 0x0, 0x1, 0x5, 0x6, 0x80, 0x20, 0x2, 0x5, 0x1a, 0xd, 0x3, 0x51, 0x7, 0x80000000}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000894}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="1b0000060a000000ceb64ff2be8cf83b01adcf815ce39bc274a907893c7fbe62f25ea09accd95fb11b9adaa6a0c0efb50d767252400b166702b702040572fcc507fd58305b035052d83e84a45dfe15cd304883d94337d783ff03000000000000b314742271bcb90978fa506758878c986362394cb8440000841692def2ba990dbc71228883fddc50d990e234b0b2f55c67f152057a4a41", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r8, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xfff5, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r11) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="0000ff00", @ANYRES16=r15, @ANYRESHEX=r11], 0x38}}, 0x0) 1.867147928s ago: executing program 4 (id=4623): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000166000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x1f, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x114, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) socket$packet(0x11, 0x3, 0x300) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x9, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x1}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x3, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r7], &(0x7f00000006c0), 0x10, 0x2}, 0x94) socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@ipv6_getroute={0x0, 0x1a, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x80, 0x2, 0xfd, 0x0, 0xfd, 0x0, 0x1300}, [@RTA_GATEWAY={0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}}, @RTA_ENCAP_TYPE={0x0, 0x15, 0x5}, @RTA_METRICS={0x0, 0x8, 0x0, 0x1, "e77ad36429e545e769654e71c6422bb2f6750883f31099b698adb0ccc49245765a6ef5225c75953497549356b8bdbee64b530661c959f98223f26727d6"}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x20040885) 1.859926912s ago: executing program 3 (id=4624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'gre0\x00', 0x0}) r5 = getuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)=@polexpire={0x2a0, 0x1b, 0x20, 0x70bd27, 0x25dfdbfe, {{{@in=@remote, @in6=@private2, 0x4e22, 0x6, 0x4e22, 0x6, 0x0, 0x0, 0x20, 0x32, r4, r5}, {0x7, 0x3a, 0xdc, 0xc, 0x180000, 0x9, 0x8000000000000001, 0x200}, {0x8, 0xa43, 0x5, 0x7}, 0x7, 0x6e6bbb, 0x1, 0x0, 0x0, 0x1}, 0x2}, [@user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x0, 0x2}}, @policy={0xac, 0x7, {{@in=@private=0xa010100, @in=@remote, 0x4e23, 0x3, 0x4e20, 0x338, 0xa, 0x80, 0x20, 0x88, 0x0, r6}, {0xe1, 0x1, 0xfff, 0x2, 0x8000, 0x2ade, 0x7ed187e2, 0x7}, {0xe, 0x2, 0x2, 0x9}, 0xf33, 0x0, 0x1, 0x0, 0x1}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e23, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @address_filter={0x28, 0x1a, {@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, 0x8, 0x4}}, @algo_comp={0xb9, 0x3, {{'deflate\x00'}, 0x388, "509d1b7447b61ea04908f3d2b046b833b69c88f66e36918d3d48c43ced0d7e5af44886e549c423c51475514b5887a415695e886a002b37400c66e589b3f2ed3aec6c0342079ec4bf9f10c202066748339f703ef6b3fc61a4e997f2d488d264e998ea7ae3a61d83d58eb4d3f67eb0ef01c2"}}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x40498c0}, 0x40000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000580)='cgroup.procs\x00', 0x2, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f00000005c0)='batadv_slave_0\x00') ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000700)={r3, &(0x7f0000000600)='deflate\x00', 0x210500, &(0x7f0000000640)={@align=0x9, {0x81, 0x9, 0x3, 0x3}}, 0xa, &(0x7f0000000680), &(0x7f00000006c0)=0x8f}) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000740)={0x0, @rand_addr, @multicast1}, &(0x7f0000000780)=0xc) setsockopt$inet_tcp_int(r9, 0x6, 0xc, &(0x7f00000007c0)=0x6, 0x4) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f0000000800)=[{{0x0, 0x0, 0x1}, {0x4}}, {{0x3}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x2}, {0x0, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}}, {{0x3}, {0x0, 0x1, 0x1}}], 0x30) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, r11, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x6, @l2={'ib', 0x3a, 'dvmrp0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000041) socket$inet6_sctp(0xa, 0x1, 0x84) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r13, 0x0, 0xd2, &(0x7f0000000b40)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, "b2a4d818df4bccb7d63c885c44c2e938b3a801154ac76395e4e9b425d7194b3b", 0x7fffffff, 0x0, 0x0, 0x8}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r9) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xd0, r14, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0xfffffffc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x800000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x1}}]}, 0xd0}}, 0x51) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000000d80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001180)={r15, 0xb1, 0x0, [0xc38, 0x9, 0x0, 0x8, 0x100000000], [0x5, 0x6767, 0x0, 0x80000001, 0x4, 0xff, 0x6, 0x10ec84ea, 0x5, 0x0, 0x7, 0x7, 0x3, 0x2, 0x0, 0x7fffffffffffffff, 0xff, 0x3, 0x1, 0x7ff, 0x6, 0x9, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffd, 0x7, 0xf84, 0x3ff, 0x3, 0x0, 0xe, 0x8, 0x7, 0xa4, 0x6, 0x3ff, 0xb, 0x1, 0xf, 0x5, 0x100000000, 0x8e, 0x553f, 0x5, 0x7, 0x4, 0x6, 0x2, 0x1, 0x2, 0xfa8a, 0xe, 0xa, 0x400000000, 0x6, 0x9, 0x4, 0x6, 0x9, 0xaf75, 0x7, 0x6, 0xa, 0x315bc084, 0x6182c0f1, 0x83b, 0x0, 0x1c6, 0x5, 0x9, 0x7d, 0x1, 0x3fc5, 0x2, 0x3, 0xe070, 0x5, 0x1, 0xb7e, 0x9, 0x6, 0xd8, 0x17, 0x1, 0x7, 0x9, 0x5, 0x1, 0x4, 0xfff, 0x7fffffff, 0x6, 0x3, 0x1, 0x2, 0x6, 0x8, 0x6, 0x0, 0xfffffffffffffff8, 0x0, 0x4, 0x4, 0x8000000000000001, 0x1116, 0x10, 0x5, 0x4, 0x8, 0xde, 0x3, 0x5, 0xfffffffffffffffd, 0xf, 0x4, 0xed54, 0xaa42, 0x2, 0x1, 0x3, 0x2000000000000000]}) 1.639267318s ago: executing program 2 (id=4625): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00010029bd7000fbdbdf270a808005000000000000000008001e000600000006001d00"], 0x2c}}, 0x40020) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac6eb8947e4e4080045000070000000000001907864010100ac1414aa0bba9078030000004500000000000000008900000000000000000000862a00000003020d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f000001e0000701e0000002000000"], 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 1.507805161s ago: executing program 2 (id=4626): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0x9, 0x5}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) r3 = socket$inet6(0xa, 0x3, 0x8a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@mcast2, @in6=@remote, 0x4e22, 0x1, 0x4, 0x3, 0x2, 0x0, 0x0, 0x3b}, {0x10000, 0xffff, 0x60000000004, 0x6811221d, 0x100000000, 0x4, 0x7, 0x9}, {0x5, 0xfffffffffffffffd, 0x15, 0xfffffffffffffffd}, 0x80, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in=@empty, 0x4d6, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xff}, 0x3502, 0x1, 0x1, 0x0, 0x9, 0x3}}, 0xe8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) getpeername$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', r1, 0x29, 0x4, 0x7, 0x892f, 0x10, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8010, 0xd4f2}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000e40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a80)={0x358, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x20004008}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f80010001"], 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet(0x2, 0x2, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r11, 0x5, 0x1, 0x8000, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0]}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$inet(r11, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @empty=0xe0000000}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @dev={0xac, 0x14, 0x14, 0x25}}}}], 0x20}, 0x40089c4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000daa6cd0c80b4", @ANYRES32=r8, @ANYBLOB="0400"/20, @ANYRES32=r12, @ANYRES32, @ANYBLOB="03000000020000000100"/28], 0x50) 1.50042247s ago: executing program 3 (id=4627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="8000000059234c0e90960d68bcd61cd4d600000000180012800e00010069703665727370616e000000040002"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bf2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r3, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x4, 0x9, 0x40, 0x3, 0x14, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7800, 0xa31a, 0xeb53}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r5, &(0x7f0000000140)=@name, &(0x7f0000000100)=0x10, 0xc0800) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) r6 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00003e6c48e47bde655d0e2e47b79d5c0b7deac89ecde596b51e101f47bad085df48c5f25476111f3e64d7ad4cc62eb7e9f538f9b1449cc97bf48e18960b7fac00146cc747db78521f850000000000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf250f0000000500380001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x41) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r7], 0xc4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4004010) 1.267929764s ago: executing program 4 (id=4628): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x1, 0x2, 0x10001, 0x7f, 0x28, 0x45, 0x2}, 0x9c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x15, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000002000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000362e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x100}, @call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x9, 0x9, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00', 0x5) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) 1.022613074s ago: executing program 0 (id=4629): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xc) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg$alg(r3, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008014) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/73, 0x49}], 0x1}, 0x10000) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x70}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x20}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x13, r6, 0x80c3e000) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.019354252s ago: executing program 4 (id=4630): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x30, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000880), 0xf504, r4}, 0x38) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16, 0x3}]}, 0x10) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c864) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000f00)={{r0}, "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"}) sendto$inet(r6, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r2, 0xe, 0x0, 0x9, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@netkit={@void, @value, @void, @void, r7}}, 0x1c) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x30, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 1.017818251s ago: executing program 3 (id=4631): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000594000/0x3000)=nil, 0x3000, 0xb, 0xc3072, 0xffffffffffffffff, 0xb2588000) 779.033779ms ago: executing program 3 (id=4632): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x2) recvmmsg(r1, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0xf0}], 0x1, 0x40000000, 0x0) (async) recvmmsg(r1, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0xf0}], 0x1, 0x40000000, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000280)='cgsoup@\xc8`>\x82E\b-\xc81\xbcO\x93YT\xb4\x87\xfd\xec\xf6\xf8m\x03\x14\x1d\xfb\xb6\x9f\xc5\xb2um\xf5\xd6r\x85\x8eB\xb6\xd4\xe1k\x92\x03x\xf8\xc2\x14\xee\x9c\xbc\xa1i\x87\x93\"\x1bF\'VkH\xf2N@\xff\x12\r\xedr\xaf\x92,!\x9c\x98\xf5\xdc-\xc3\t>\xbb\xfa\xb6\xbe\xc0\xbc\xadv\x8e0\xae\xa3\xd2\xa6\xd3\x12\x97\xe9\xe7\xe8\xa8\xecB}\x1a\xd7\xb5&\xa7\xe2Y\xc5\xee\xf0I\x8e\xc4\xb9\x92s\xec6\x92\x9e\x9c\x8cp6\xbc\x88RIF\xfcW\xaa\xd1I\xff\xdf\xb5\r\x0e\x1e\f]\xb8y\xf2\x92CO;4<\xc2\xdd%s\xb7>\xeb}SG\x17\x85QT#\xfa\xc1\xf1\x85\xdd\x82[\x86\xc6\x95\tT\xe4\xffN\rg\xc0E\xfax\xc9\x06j\x98\xc3}\xe7\x1f\xeaGY\xe0\x98\x9b\xe7E\x93\x0eE\x96\x8c\xc6\xf0\xb2\x82\xfdB*\x85\xa2\xe0V}\xfc\xbb\xf6\x89?\x9c\xaa\t\xf7a\x9c\xebk\xb8\xd8\xdaq\xc9\xf7q\xda', 0x101, 0x0, 0xf, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(0x0, r4) (async) r5 = syz_genetlink_get_family_id$tipc2(0x0, r4) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd0, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000000000}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000090}, 0x8000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r7, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xd07, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40345, 0x6c101}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xf}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xd07, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40345, 0x6c101}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xf}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 706.249909ms ago: executing program 0 (id=4633): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0x4c) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0x9) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000100)=[{&(0x7f0000000380)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 488.898592ms ago: executing program 2 (id=4634): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRES32=r1, @ANYBLOB="c4b3e867fd317a17d2ecf45d5c86fd8b6156de23f8cb411f9890182c29cd89127a7ba51bdc6021925eb50c9abea0ded631a49a1ff6ac33bce73633b2d9b86334ca4386036f1b615fb13fa2848f9cd1d8cbb56b2b80687afe59e0d8036e8c5f06f4229cac13ffb79b62b1066a9d3624b3b99a6349887ff427d2ef439ebb261c7dcb0e0f9230f9ba059eaaa9b5d302", @ANYBLOB="3885056d16098db3477f2fcd2c1dda0105349dda2286567c291c4590645ac8227d841dc40d3b643ff920c2dc5d7ec888cacd54853265c722a90aa95c3719f6fe6ab6f9ed00ef73ce2af17b61f84badc818cdd5bbb17ea96dcc235e4dfd2352d04bb0126cc11c3bed4e94879ac902aff66394f7419206cb47b08911cf53193f6cf71908"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, &(0x7f0000000040)="03827307167f209b8157f08e2d9fc91800", 0x0, 0x0, 0x0, 0xfffffffe}, 0x4) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c000000040000000400000009000000000000009e3889a1b7350685c77ba9d6127f08ff62e5d13336", @ANYRES32], 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) close(r6) (async) unshare(0x400) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2f, &(0x7f0000000400), 0xa5e) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r8, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) (async) recvfrom$unix(r9, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) getsockname$unix(r6, &(0x7f0000000740)=@abs, &(0x7f0000000800)=0x6e) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x1, 0x3, 0x7, 0x5, 0x1}, 0x4) (async) writev(r8, &(0x7f0000000580)=[{&(0x7f0000000280)="e7d6ef796f03154cb3c61adbcb55bb92920d9ba60733839f13875f5e2ad644dddc0688241c57400b131775abbfce8a2a481e46973ac8fbf56b4fa14cdd368b45e1ade3422f0d99292599e4412259dca2374d506454eaf254fbf107abe637eec4dbcdf5a1504b3fb4ec6bc83cd60c572dc52c189a9531c4e08a9a101e2cfa05b9c9afc8ad5f133d31865a5621a51cac5d321379ce2dadd9445c251939590cde3366203b419a4f9fe2761ae743b76b0298b4bdeb7efa5495d80b7ebb6afcba3895a38b34e0a9ff5ad2c0f7deb283de40bf15d9ee579972256e958505fb3cbf5989ac161bcf", 0xe4}, {&(0x7f0000000380)="678d6e3eda19cd75890a2c0f3196e1aaba997fd162b687d47c6cdbf2c80077b37880f46abec2182a2dda9ec013ed2e6a10e55d6e431e882143c7f26eb2d073414c13d66314b18126f7b1c713055a663442325316233fb5556b43b80d106d5a56cd46d34b0f95b67c7399058524bda290d7a14a50", 0x74}, {&(0x7f0000000500)="7d859553b3d11a0b952e74a49d853e5ba8ffe5f1ed36733b6b1858805e0b76dbec7e948b4c8d8134b0f6ef177d929638a36fe1ca0c56a5cffb28f71b5b6fab27960635ce11dc30540eb7548c33bf0fa5da2bf75f9e288f75050f99bc74a071eb07a9a316e978a9ec98c43ddff757ca91e762a313bd28af1d0d2c44a7", 0x7c}], 0x3) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r10 = socket(0x1e, 0x4, 0x0) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, &(0x7f0000000080)={0xe}, 0x1) (async) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r10], 0x14) 431.065906ms ago: executing program 3 (id=4635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet6(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r3], 0x7c}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000040)=']\x00', 0x802, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x3]}, {0x9, 0xc0, 0x2, 0x3}}, 0x81, &(0x7f0000000100), &(0x7f0000000140)=0x8001}) setsockopt$inet_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x304}, "2dbce8d1e6e4fae9", "b7550b6a2c91ce5f69fb011e9ae9f0da", "7045aa88", "073d0d476f4ba201"}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a30000000004c000000090a01000000000100000008000a40000000000900020073797a3000000000080005400000000d08000640ffffff000800034000000038440000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000180003801400008008000340000000020800028004000100140000001000010000000000000000000084000a0000000000"], 0xd8}}, 0x0) 427.93116ms ago: executing program 0 (id=4636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x7c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xb}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xff}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x80}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x8800) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc) (async) syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbbc1464500002800000000002f907864011702ac1414aa4001880b023e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x1c, r8, 0x601, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040844) (async, rerun: 64) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000006c0)={r2, 0x353}, &(0x7f0000000700)=0xc) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(0x0, r11) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140002", @ANYRES16=r12, @ANYBLOB="010700000000fcdbdf2541000000"], 0x14}}, 0x24000040) (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r7) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r13, @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000854}, 0xc0448c4) (async, rerun: 64) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x60, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc}, {0xfffffffffffffffd}, 0x0, 0x6e6bb0}}, 0xb8}}, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000"], 0xb8}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='/&\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf250700000008000c000200000014000500ff0200000000000000000000000000010800020007000000"], 0x38}, 0x1, 0x0, 0x0, 0x40080c5}, 0xa9aeb87e44f7e6f1) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000100)) 168.319552ms ago: executing program 0 (id=4637): socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) epoll_create(0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8007}, 0x1c) r3 = socket(0xa, 0x1, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="000001e97a3ac50d8925b6cac71c83d963d21ced504f31161e5f136b479b1e1b7d954e99cf826eefdfed01131515704a99afb8003aa6b29fdb82fa", 0x3b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="c29beb3ab9d09a71ec68121f23e08c9d5b295829ab80915e05d05f85202ce12b618bfc4c50f856b82c2a26cc8be4220edacd2b9b0e75dd6213b4778691a1cc36d36cb050c90f9e01232727b1b543efca7469f900f49fa05236e8f20a12ce0f10fa4a4aa3c43533b4eb94b0c7afaf15727b38d64d2f6cef15d2e5db", 0x7b}, {&(0x7f00000003c0)="7319fadb0b886124798abf96842144a7adb512c121787567018522e1c3ee45be144e4587e106b6759a472eac3b9129f838f6f97ea54e990796f7a4aa39d915fa93e433d4ff982e752fce4ac87ab7a0b3c4b16b58a9483a375a7560f767462610a2576f96ab0c95504d47bfca37645a07efe46a47e5", 0x75}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x3c8}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000940)="1c3b1352b979aa7365d4062bfca9e6a3716f48fb77c6d5857345e5cb85326943c4bfad0ac4f37ae7adfaac0ec9807c025b59218e07119589b9c2d07520c1f1ab35d017138394eb7370c0f6c52c98f61d6c8dbda5553ecdb154e40651502550e786c609c02b75f30d4d1a9ee9d932da5dbff423157f50fdb8564df0681883fa0c10f55b09635e8636", 0x88}, {&(0x7f0000000a00)="8003485b3222e30dd684fc29348fd737630eac2e2401e2b28f1b2149988f4b3c424ce21b1ffc994a35e7f86d5b4f6624e3953033236b9e0b91a710e525f3c91d23f5dfef21128a67dd684f7009379c8128b420281e04995c2a6a365654cf5e888833b228d6b924484886ea822aa259f3cf76a01ac8af99db34", 0x79}, {&(0x7f0000000a80)="2afab8469d187320562380269fe3ea52cb8a4736542c3c4158aa53f0e25af058c13c1a6cc04be2b082ed9040629c174d9352a6470b24d8b8ff6ad0e7439c0d8dbbf3ef136b945fd27990726d", 0x4c}, {&(0x7f0000000f00)="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", 0x13e}, {&(0x7f0000000b80)="fa64dfc24c9bd74fc2de3e79edfa377cf10f5412d7078b50177796d923e3e5b921bcb9bb7483cf3bdbc8a54e0e8a665ac09f9ce5da72a90fea60c71197eccdc4620838c8693a167dfdd829e76382f89456534066dda594cd917cb1011db30b030d085b0dd7a11a389df9203781e09745c6a831e698c8a69c094a5613b2541b033f93acf88146f31a5fbd718a5a32f845b0b3342459414601eb85d3ebf342fbe12407b77ceb90fdce54539bcdb415b4bb52235b1122e7eeb5a3c5264305c4368409a4dfadbaf4811aad58a710349d5250", 0xd0}, {&(0x7f0000001040)="ea862fbd2f4aad71d565ada8a1ff88b327122800b5f5fa1173e30878b87ef6eab7767f1f67af77557571bbd806236245b2450be14b6c08bb38c195e3e0d74cb5041334219d58820ab36dfb47521bdae986ec34c780742df7e7d6dc3932aa8ad53db58094c597e42b03d544c8f7d341a2e4410d958c1dc0e4c33bcc7ba5fbc517e5f78e3bf82f8df34b31fb1143d199a02381fca12e17c664a96e79037228f19e8b41fa0cb9432ea0311da6d46163ea9d10d6b9da3103e7b3a584bb8cb8856848cc", 0xc1}], 0x6, &(0x7f0000000e00)}}], 0x3, 0x4000041) sendmsg$can_j1939(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r7, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x20048015) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 128.768038ms ago: executing program 2 (id=4638): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x4003, 0x0, 0x3, 0x3, 0x0, 0x0, 0x20}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0xa, 0x1}, [@algo_aead={0x4c, 0x12, {{'aegis256-aesni\x00'}, 0x0, 0x100}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x184}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4090, 0xffa}], 0x3}}], 0x1, 0x0, 0x0) 2.637758ms ago: executing program 3 (id=4639): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x1}, 0xfffffffffffffdbe) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0x10, 0x2, 0x0) write(r9, &(0x7f00000007c0)="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", 0xfc) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffdffff, {0x0, 0x0, 0x0, r11, {0xffff, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000030c0)=@newqdisc={0x434, 0x28, 0x200, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x101, 0x0, 0x1, 0x2, 0x9, 0x80, 0x9, 0x7, 0x7, 0x68, 0xfffeffff, 0x1, 0x7, 0x6, 0x7, 0xf8, 0x1, 0x0, 0xffff, 0xff, 0x8, 0x6, 0x7fffffff, 0x9, 0x4, 0x5, 0x2, 0x2, 0x2, 0x1, 0x7, 0x10001, 0x6, 0x6ed9, 0xc85, 0x4dd, 0xfff, 0x2, 0x4, 0x9, 0x80000000, 0x8, 0x9, 0xfffffff7, 0x4, 0x6, 0x7fffffff, 0x7, 0xc, 0x7, 0x50f, 0xd6d, 0x10000, 0x8001, 0x4, 0x101, 0xffff, 0x4, 0xfffffffe, 0x7, 0x0, 0x7ff, 0x9, 0x9, 0x2, 0x5, 0x2000000, 0x5, 0x80000001, 0x7f, 0x2, 0x6, 0x6, 0x7ff, 0xc, 0x4, 0x5, 0x5ccc, 0x9, 0x2, 0x4, 0xfffffff8, 0x4, 0x5, 0xc, 0x4, 0x7fff, 0x80000001, 0x4, 0x6, 0x2, 0x9, 0x1, 0x2, 0x4, 0x7fffffff, 0x3, 0x4, 0x9, 0x0, 0x4, 0x200, 0x9, 0x1, 0x200, 0x7, 0xe92, 0xde68, 0xb, 0xcb, 0x7, 0x7, 0xfffffff9, 0x8f26, 0x7, 0x6, 0x3, 0x5, 0xc9, 0x9, 0xa2d3, 0x6, 0x7, 0x5, 0x1, 0x6, 0x8000, 0x5, 0x5, 0x0, 0x257, 0x714, 0x6, 0x0, 0x800, 0x8, 0x10001, 0x8, 0x2, 0x4, 0x0, 0xfffffffe, 0xc05c, 0x5, 0x0, 0x7, 0x1, 0x8, 0x4, 0x8000, 0x1, 0x6, 0x11c, 0x6, 0x5, 0x69d, 0xcb4, 0x3, 0x4, 0x5, 0x0, 0x8, 0x5, 0x10000, 0x2, 0x9, 0x0, 0x5, 0x3, 0x3, 0x3, 0x6, 0x8, 0x8c4c, 0x7, 0x4, 0x7, 0x1, 0xda, 0x6, 0x3, 0xc0000000, 0x1, 0xfffffff7, 0x7, 0x44d, 0x7fff, 0xf, 0x7fff, 0x207e, 0xffff2a7c, 0x1, 0x0, 0x7, 0x9, 0x0, 0x3, 0x10001, 0x6, 0x800, 0x7, 0x2, 0x8, 0x200, 0x4, 0x7, 0x7, 0xba95, 0x9e, 0x10, 0xe93, 0x5b33, 0x1, 0x8c2d, 0x18b, 0xfffff001, 0x4, 0x39400000, 0x0, 0x5, 0x401, 0x5, 0x2, 0x5, 0x14000000, 0x5, 0xfffffff8, 0x5, 0x4, 0x33, 0x9, 0xffffffff, 0x185, 0x4, 0x5, 0x34000000, 0x4, 0x7, 0x7f, 0x8, 0x5, 0x64, 0x0, 0x8c, 0x3, 0x5bd7, 0x57, 0xffffa3e2, 0x0, 0x9, 0x8, 0x99d, 0x54, 0xffff8001, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'bond_slave_1\x00', @multicast}) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7050000000000008500000071"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.167987ms ago: executing program 2 (id=4640): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) (async) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff000000000100060000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x178, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffffc, {0x0, 0x0, 0x0, r10, {0x9}, {0x0, 0xffff}, {0x2, 0x3}}, [@TCA_STAB={0xffffffffffffff5f, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xdb, 0x8, 0xffff7fff, 0x0, 0xfffff801, 0x1, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x96, 0x7, 0x5803, 0x1000, 0x0, 0x1, 0x10001, 0x1}}, {0x6, 0x2, [0xd]}}, {{0x1c, 0x1, {0x0, 0x7, 0xf671, 0x8, 0x2, 0xfffffbff, 0xf, 0x5}}, {0xe, 0x2, [0x2, 0x1, 0x7, 0x7ff, 0xeeaf]}}, {{0x1c, 0x1, {0x1, 0x1, 0xfff, 0x3, 0x2, 0x6, 0x0, 0x4}}, {0xc, 0x2, [0x7, 0x9, 0x6, 0xae]}}, {{0x1c, 0x1, {0x81, 0x5, 0x8001, 0x10001, 0x1, 0xe2, 0x11, 0x5}}, {0xe, 0x2, [0x4bc, 0x400, 0xf, 0x7, 0x5]}}, {{0x1c, 0x1, {0xfe, 0x8, 0x4, 0xb3e7, 0x1, 0x79, 0x4, 0x6}}, {0x10, 0x2, [0x7, 0x5, 0xfff, 0x4, 0x7, 0x7]}}, {{0x1c, 0x1, {0x8, 0x8, 0xff01, 0xce9, 0x0, 0x2, 0x1, 0x6}}, {0x10, 0x2, [0x4, 0x0, 0x40, 0xbb6e, 0x2, 0x2]}}, {{0x1c, 0x1, {0x7, 0x54, 0x2, 0x7, 0x2, 0xfff, 0x1, 0x8}}, {0x14, 0x2, [0x0, 0x6, 0x0, 0xdd77, 0x5817, 0xa, 0x0, 0x9]}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 0s ago: executing program 4 (id=4641): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff0000000095007400000000009e42e328416f0a5e7e1119e1c9d54196a4c47c72dd90f86487c86ad7f2858261e44be8e1a9e969da914f0d78dd1583b08c133438729d979a71f10f9e012fb4903c0adef5ca88226869771e67c11673807a42f5470b6a7cab175c87eb48b1383a86f49418"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f00000006c0)="3b000000010006", 0x7) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000054080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000200)=0x2, 0x4) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3e, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0x0, 0x0}, 0x10) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000040)={r9, 0x8008}, 0xc) (async) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={{r3}, 0x7, 0x1, 0x2}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x8001, 0x0, 0x5, 0x3ff}]}, 0x10) kernel console output (not intermixed with test programs): : command tx timeout [ 561.464924][T18967] netlink: 684 bytes leftover after parsing attributes in process `syz.1.3194'. [ 561.498265][ T7240] hsr_slave_0: left promiscuous mode [ 561.533610][ T7240] hsr_slave_1: left promiscuous mode [ 561.549294][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.574418][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.603402][ T7240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.622776][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.643372][T19019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3201'. [ 561.772536][T19028] netlink: 'syz.2.3201': attribute type 10 has an invalid length. [ 561.859435][ T7240] veth1_macvtap: left promiscuous mode [ 561.866965][T19033] netlink: 'syz.2.3201': attribute type 1 has an invalid length. [ 561.867357][T19033] netlink: 'syz.2.3201': attribute type 2 has an invalid length. [ 561.881562][ T7240] veth0_macvtap: left promiscuous mode [ 561.889315][ T7240] veth1_vlan: left promiscuous mode [ 561.894766][ T7240] veth0_vlan: left promiscuous mode [ 562.540773][ T7240] team0 (unregistering): Port device team_slave_1 removed [ 562.557413][ T7240] team0 (unregistering): Port device team_slave_0 removed [ 562.897502][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 563.119402][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3205'. [ 566.630724][T19047] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 566.993408][T19056] gre1: entered promiscuous mode [ 567.016317][T19056] gre1: entered allmulticast mode [ 567.032595][T18830] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.067891][T19074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3210'. [ 567.078457][T18830] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.092219][T18830] bridge_slave_0: entered allmulticast mode [ 567.100664][T18830] bridge_slave_0: entered promiscuous mode [ 567.127881][T18830] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.173516][T18830] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.206064][T18830] bridge_slave_1: entered allmulticast mode [ 567.241377][T18830] bridge_slave_1: entered promiscuous mode [ 567.272403][T19080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3213'. [ 567.369249][T19083] batadv0: entered promiscuous mode [ 567.394089][T19083] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 567.412941][T19083] bridge0: port 3(macvlan2) entered blocking state [ 567.430946][T19083] bridge0: port 3(macvlan2) entered disabled state [ 567.446371][T19083] macvlan2: entered allmulticast mode [ 567.452197][T19083] batadv0: entered allmulticast mode [ 567.460264][T19083] macvlan2: entered promiscuous mode [ 567.466848][T19083] bridge0: port 3(macvlan2) entered blocking state [ 567.473806][T19083] bridge0: port 3(macvlan2) entered forwarding state [ 567.545407][T18830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.635709][T19091] netlink: 'syz.3.3215': attribute type 1 has an invalid length. [ 567.666087][T18830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.861343][T18830] team0: Port device team_slave_0 added [ 567.886327][T18830] team0: Port device team_slave_1 added [ 568.012076][T18830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.040034][T18830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.099463][T18830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.146478][T18830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.167862][T18830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.230374][T18830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.374494][T19122] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 568.444156][T19122] bond3: entered promiscuous mode [ 568.460410][T19122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 568.497693][T19126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3222'. [ 568.529985][T19126] bond3: entered allmulticast mode [ 568.539736][T19128] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3224'. [ 568.577382][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 568.589267][T19128] 0ªX¹¦À: renamed from batadv0 (while UP) [ 568.606379][T19128] 0ªX¹¦À: entered allmulticast mode [ 568.613177][T19128] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 568.684781][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3222'. [ 568.734788][T19122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3222'. [ 568.759362][T19126] bond3: (slave bridge3): making interface the new active one [ 568.784497][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'. [ 568.797467][T19126] bridge3: entered promiscuous mode [ 568.805071][T19126] bridge3: entered allmulticast mode [ 568.812984][T19126] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 568.848386][T18830] hsr_slave_0: entered promiscuous mode [ 568.854310][T19136] netlink: 'syz.2.3227': attribute type 13 has an invalid length. [ 568.867068][T18830] hsr_slave_1: entered promiscuous mode [ 568.993168][T19144] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 570.147846][T19169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3236'. [ 570.298931][T19172] team0: entered promiscuous mode [ 570.321911][T19172] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 570.427487][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3238'. [ 570.467232][T19177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3238'. [ 570.984875][T19196] tipc: Invalid UDP bearer configuration [ 570.984944][T19196] tipc: Enabling of bearer rejected, failed to enable media [ 571.273864][T19207] netlink: 'syz.1.3244': attribute type 11 has an invalid length. [ 571.731157][T19163] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 572.143194][T19226] geneve1: Caught tx_queue_len zero misconfig [ 572.181836][T19222] __nla_validate_parse: 4 callbacks suppressed [ 572.181854][T19222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3247'. [ 572.554537][T19243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3251'. [ 573.056507][T19265] Bluetooth: MGMT ver 1.23 [ 573.712625][T19276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3257'. [ 573.777252][T19288] bond16: option ad_select: invalid value (34) [ 573.866796][T19288] bond16 (unregistering): Released all slaves [ 574.040393][T18830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 574.097847][T18830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.122996][T18830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 574.147988][T19308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3263'. [ 574.182758][T18830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.254796][T19297] udevd[19297]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 574.275408][T18830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 574.315353][T18830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.340832][T18830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 574.395807][T18830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 574.450855][T19313] bond0: entered promiscuous mode [ 574.456787][T19313] bond_slave_1: entered promiscuous mode [ 574.471905][T19313] batadv0: entered promiscuous mode [ 574.483487][T19313] debugfs: 'hsr1' already exists in 'hsr' [ 574.500953][T19313] Cannot create hsr debugfs directory [ 574.517715][T19323] netlink: 'syz.3.3267': attribute type 1 has an invalid length. [ 574.527623][T19313] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 574.548921][T19313] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 574.570803][T19313] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 574.596920][T19313] bond0: left promiscuous mode [ 574.603757][T19313] bond_slave_1: left promiscuous mode [ 574.622502][T19313] batadv0: left promiscuous mode [ 574.685162][T19323] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 575.133678][T19351] veth0: entered promiscuous mode [ 575.180567][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3271'. [ 575.193555][T18830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.437095][T18830] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.483720][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.491097][ T3323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.500157][T19365] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3276'. [ 575.604846][T14802] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.612308][T14802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.812673][T19375] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 576.148939][T19395] macvlan0: entered promiscuous mode [ 576.167154][T19395] netlink: 'syz.1.3281': attribute type 1 has an invalid length. [ 576.208375][T19395] netlink: 'syz.1.3281': attribute type 2 has an invalid length. [ 576.599188][T19413] xt_hashlimit: size too large, truncated to 1048576 [ 577.289868][T18830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.387072][T19439] nbd: must specify a size in bytes for the device [ 577.425693][T18830] veth0_vlan: entered promiscuous mode [ 577.470588][T18830] veth1_vlan: entered promiscuous mode [ 577.550472][T18830] veth0_macvtap: entered promiscuous mode [ 577.571625][T18830] veth1_macvtap: entered promiscuous mode [ 577.610368][T18830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.642352][T18830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.672365][ T138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.715698][ T138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.730046][ T138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.157867][ T138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.769121][T19470] tipc: Enabled bearer , priority 0 [ 579.212211][T19473] syzkaller0: entered promiscuous mode [ 579.217956][T19473] syzkaller0: entered allmulticast mode [ 579.225160][T19473] tipc: Resetting bearer [ 579.268894][T19463] tipc: Resetting bearer [ 579.748154][T19511] SET target dimension over the limit! [ 583.280815][T19463] tipc: Disabling bearer [ 583.303131][ T809] tipc: Node number set to 871802058 [ 583.425399][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.465497][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.604268][T19532] Bluetooth: MGMT ver 1.23 [ 583.619745][T19528] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 583.821850][T14803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.855376][T14803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.068770][T19554] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 584.366051][T19570] netlink: 'syz.3.3312': attribute type 2 has an invalid length. [ 584.423171][T19570] : entered promiscuous mode [ 584.707146][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3315'. [ 584.769218][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3315'. [ 584.800804][T19587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3315'. [ 584.854298][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3315'. [ 584.867770][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 584.885262][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 584.901184][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 584.914392][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 584.932508][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 585.356762][T19599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3317'. [ 585.949840][ T29] audit: type=1804 audit(1784258135.901:77): pid=19630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3323" name="/newroot/673/memory.events" dev="tmpfs" ino=3460 res=1 errno=0 [ 586.785143][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'. [ 586.970814][T19665] netlink: 'syz.0.3332': attribute type 1 has an invalid length. [ 587.036465][T19669] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3333'. [ 587.038850][ T5632] Bluetooth: hci1: command tx timeout [ 587.057786][T19665] vlan2: entered promiscuous mode [ 587.072087][T19665] dummy0: entered promiscuous mode [ 587.083944][T19665] vlan2: entered allmulticast mode [ 587.090476][T19665] dummy0: entered allmulticast mode [ 587.603911][T19700] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3337'. [ 587.993050][T19586] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.001402][T19586] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.009492][T19586] bridge_slave_0: entered allmulticast mode [ 588.026997][T19586] bridge_slave_0: entered promiscuous mode [ 588.049636][T19586] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.066567][T19586] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.086770][T19586] bridge_slave_1: entered allmulticast mode [ 588.112779][T19586] bridge_slave_1: entered promiscuous mode [ 588.233596][T19586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.291482][T19586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.446248][T19734] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3342'. [ 588.604733][T19586] team0: Port device team_slave_0 added [ 588.723431][T19586] team0: Port device team_slave_1 added [ 588.743803][T19734] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3342'. [ 588.924112][T19586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.938118][T19586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.991160][T19586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.118483][ T5632] Bluetooth: hci1: command tx timeout [ 589.205574][T19586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.237714][T19586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.290019][T19586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.458885][T19770] syzkaller0: entered promiscuous mode [ 589.476897][T19770] syzkaller0: entered allmulticast mode [ 589.671989][T19782] syzkaller0: entered promiscuous mode [ 589.685932][T19782] syzkaller0: entered allmulticast mode [ 589.728689][T19586] hsr_slave_0: entered promiscuous mode [ 589.739866][T19586] hsr_slave_1: entered promiscuous mode [ 589.756963][T19586] debugfs: 'hsr0' already exists in 'hsr' [ 589.767063][T19586] Cannot create hsr debugfs directory [ 590.176454][T19808] __nla_validate_parse: 5 callbacks suppressed [ 590.176483][T19808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3354'. [ 590.234073][T19808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3354'. [ 590.463876][T19586] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.474472][T19586] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.604524][T19586] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.618381][T19586] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.704313][T19586] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.717146][T19586] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.811309][T19586] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.838237][T19586] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.198381][ T5632] Bluetooth: hci1: command tx timeout [ 592.919133][T19795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.997472][T19586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 593.230431][T19586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.275116][T19586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 593.292981][ T5632] Bluetooth: hci1: command tx timeout [ 593.600774][T19586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.726417][T19835] bridge1: entered allmulticast mode [ 593.765876][T19586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 593.811558][T19586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.837876][T19586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 593.863401][T19586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 594.085576][T19858] openvswitch: netlink: Message has 12 unknown bytes. [ 594.113501][T19858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.201070][T19586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.263992][T19586] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.349228][T14806] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.357949][T14806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.416786][T19884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3367'. [ 594.433204][T14806] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.442150][T14806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.462293][T19883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3367'. [ 595.134458][T19906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3372'. [ 595.226555][T19906] netlink: 'syz.3.3372': attribute type 30 has an invalid length. [ 595.279519][T19911] netlink: 'syz.3.3372': attribute type 30 has an invalid length. [ 595.584379][T19913] syzkaller1: entered promiscuous mode [ 595.593494][T19913] syzkaller1: entered allmulticast mode [ 595.821106][T19928] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 596.043619][T19936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3378'. [ 596.095135][T19936] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 596.117893][T19943] netlink: 'syz.0.3379': attribute type 1 has an invalid length. [ 596.137537][T19936] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3378'. [ 596.153200][T19943] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3379'. [ 596.254860][T19936] geneve2: entered promiscuous mode [ 596.272662][T19936] geneve2: entered allmulticast mode [ 596.462314][T19955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3381'. [ 596.505510][T19955] netlink: 'syz.0.3381': attribute type 1 has an invalid length. [ 596.537263][T19955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3381'. [ 596.742093][T19586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.487267][T19586] veth0_vlan: entered promiscuous mode [ 597.535474][T19586] veth1_vlan: entered promiscuous mode [ 597.661962][T19586] veth0_macvtap: entered promiscuous mode [ 597.686869][T19586] veth1_macvtap: entered promiscuous mode [ 597.746410][T19586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.823420][T19586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.861626][ T3323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.889950][ T3323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.912226][T20002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3391'. [ 597.922896][ T3323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.964141][T20004] netlink: 'syz.0.3391': attribute type 8 has an invalid length. [ 597.987848][ T3323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.028315][T20004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3391'. [ 598.061467][T20007] netlink: 'syz.0.3391': attribute type 8 has an invalid length. [ 598.092288][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3391'. [ 598.147196][T20004] bond0: entered promiscuous mode [ 598.181573][T20004] bond_slave_0: entered promiscuous mode [ 598.191810][T20004] bond_slave_1: entered promiscuous mode [ 598.212736][T20004] gretap0: entered promiscuous mode [ 598.265536][T20004] bond0: left promiscuous mode [ 598.277180][T20004] bond_slave_0: left promiscuous mode [ 598.286417][T20004] bond_slave_1: left promiscuous mode [ 598.304313][T20004] gretap0: left promiscuous mode [ 598.364174][T20007] bond0: entered promiscuous mode [ 598.373078][T20007] bond_slave_0: entered promiscuous mode [ 598.382545][T20007] bond_slave_1: entered promiscuous mode [ 598.396096][T20007] gretap0: entered promiscuous mode [ 598.422013][T20007] bond0: left promiscuous mode [ 598.433647][T20007] bond_slave_0: left promiscuous mode [ 598.443408][T20007] bond_slave_1: left promiscuous mode [ 598.469920][T20007] gretap0: left promiscuous mode [ 598.791059][T20015] bridge2: entered promiscuous mode [ 598.849971][T20015] bridge2: entered allmulticast mode [ 599.041150][T20018] bridge0: port 3(erspan0) entered blocking state [ 599.069987][T20018] bridge0: port 3(erspan0) entered disabled state [ 599.092933][T20018] erspan0: entered allmulticast mode [ 599.130260][T20018] erspan0: entered promiscuous mode [ 599.149913][T20018] bridge0: port 3(erspan0) entered blocking state [ 599.158420][T20018] bridge0: port 3(erspan0) entered forwarding state [ 599.233189][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.268254][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.400879][T20027] syzkaller0: entered promiscuous mode [ 599.416859][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3397'. [ 599.435379][T20027] syzkaller0: entered allmulticast mode [ 599.475696][T20027] tipc: Enabled bearer , priority 0 [ 599.502242][T14806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.528001][T14806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.552407][T20025] tipc: Resetting bearer [ 599.618668][T20025] tipc: Disabling bearer [ 599.657796][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3399'. [ 599.672260][T20037] netlink: 'syz.0.3400': attribute type 5 has an invalid length. [ 599.917470][T20039] 8021q: adding VLAN 0 to HW filter on device bond12 [ 600.285600][T20053] netlink: 'syz.3.3403': attribute type 4 has an invalid length. [ 600.388882][T20053] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 600.765677][T20060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.803015][T20061] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 601.127927][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 601.160312][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 601.181246][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 601.192208][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 601.217726][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 601.745155][T20092] syzkaller0: entered promiscuous mode [ 601.760222][T20092] syzkaller0: entered allmulticast mode [ 601.798875][ T138] syzkaller0: tun_net_xmit 70 [ 602.204805][T20109] __nla_validate_parse: 5 callbacks suppressed [ 602.204831][T20109] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3417'. [ 602.284716][T20117] bond1: entered promiscuous mode [ 602.295203][T20117] bond1: entered allmulticast mode [ 602.306617][T20117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 602.342846][T20118] bond2: entered promiscuous mode [ 602.348723][T20118] bond2: entered allmulticast mode [ 602.354497][T20118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 602.980860][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3426'. [ 603.289682][ T5632] Bluetooth: hci3: command tx timeout [ 603.503363][T20160] SET target dimension over the limit! [ 603.602094][T20165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3431'. [ 603.925502][T20178] openvswitch: netlink: IP tunnel dst address not specified [ 604.058410][T20078] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.066832][T20078] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.078397][T20078] bridge_slave_0: entered allmulticast mode [ 604.093456][T20078] bridge_slave_0: entered promiscuous mode [ 604.103380][T20078] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.114766][T20078] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.125050][T20078] bridge_slave_1: entered allmulticast mode [ 604.133895][T20078] bridge_slave_1: entered promiscuous mode [ 604.183029][T20078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.198883][T20078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.379998][T20078] team0: Port device team_slave_0 added [ 604.416687][T20078] team0: Port device team_slave_1 added [ 604.489373][T20078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.511630][T20078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.600313][T20078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.658879][T20078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.674221][T20078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.702919][T20078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.770395][T20201] netlink: 'syz.4.3442': attribute type 1 has an invalid length. [ 604.901593][T20192] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.910165][T20192] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.029390][T20192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.047541][T20192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.358233][ T5632] Bluetooth: hci3: command tx timeout [ 605.707661][T20192] vlan2: left promiscuous mode [ 605.712734][T20192] dummy0: left promiscuous mode [ 605.717876][T20192] vlan2: left allmulticast mode [ 605.724542][T20192] dummy0: left allmulticast mode [ 605.731963][T20192] bridge1: left allmulticast mode [ 605.744758][T20192] bond1: left promiscuous mode [ 605.749970][T20192] bond1: left allmulticast mode [ 605.756266][T20192] bond2: left promiscuous mode [ 605.761866][T20192] bond2: left allmulticast mode [ 605.836846][ T138] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.857575][ T138] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.879691][ T138] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.957499][ T138] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.017522][T20078] hsr_slave_0: entered promiscuous mode [ 606.036372][T20078] hsr_slave_1: entered promiscuous mode [ 606.061365][T20078] debugfs: 'hsr0' already exists in 'hsr' [ 606.094702][T20078] Cannot create hsr debugfs directory [ 606.411453][T20241] netlink: 'syz.0.3452': attribute type 1 has an invalid length. [ 606.461408][T20241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3452'. [ 606.514628][T20239] syzkaller0: entered promiscuous mode [ 606.527336][T20239] syzkaller0: entered allmulticast mode [ 606.556845][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 606.582265][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 606.600891][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 606.619750][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 606.634494][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 606.649296][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 607.393721][T20267] __nla_validate_parse: 68 callbacks suppressed [ 607.393745][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 607.427195][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 607.448348][ T5632] Bluetooth: hci3: command tx timeout [ 607.533317][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 607.558282][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 607.784192][T20270] bridge_slave_1: left allmulticast mode [ 607.797024][T20270] bridge_slave_1: left promiscuous mode [ 607.811964][T20270] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.831839][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 607.844755][T20270] bridge_slave_0: left allmulticast mode [ 607.853150][T20270] bridge_slave_0: left promiscuous mode [ 607.865329][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 607.876809][T20270] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.015263][T20078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.052907][T20078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.484566][T20078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.516007][T20078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.752373][T20078] netdevsim netdevsim2 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.764530][T20078] netdevsim netdevsim2 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.797743][T20311] syzkaller0: entered promiscuous mode [ 608.824364][T20311] syzkaller0: entered allmulticast mode [ 608.859708][T20311] tc action pedit offset must be on 32 bit boundaries [ 608.869161][T20311] tc action pedit offset must be on 32 bit boundaries [ 608.876737][T20311] tc action pedit offset must be on 32 bit boundaries [ 608.884534][T20311] tc action pedit offset must be on 32 bit boundaries [ 608.891414][T20311] tc action pedit offset must be on 32 bit boundaries [ 608.898289][T20311] tc action pedit offset must be on 32 bit boundaries [ 608.905127][T20311] tc action pedit offset must be on 32 bit boundaries [ 608.912396][T20311] tc action pedit offset must be on 32 bit boundaries [ 608.919653][T20311] tc action pedit offset must be on 32 bit boundaries [ 608.927711][T20311] tc action pedit offset must be on 32 bit boundaries [ 608.934713][T20311] 0: reclassify loop, rule prio 0, protocol 800 [ 609.518295][ T5632] Bluetooth: hci3: command tx timeout [ 610.020913][T20330] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3470'. [ 610.890566][T20332] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 611.093509][T20340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3474'. [ 611.131055][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 611.448283][T20303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.469291][T20078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 611.535527][T20078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 611.560887][T20078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 611.589729][T20078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 611.638274][T20078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 611.711438][T20078] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 611.719798][T20351] netlink: 'syz.1.3477': attribute type 96 has an invalid length. [ 611.751150][T20078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 611.790958][T20078] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 611.867751][T20355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.938686][T20351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.986896][T20374] FAULT_INJECTION: forcing a failure. [ 611.986896][T20374] name failslab, interval 1, probability 0, space 0, times 0 [ 612.027558][T20374] CPU: 1 UID: 0 PID: 20374 Comm: syz.3.3482 Not tainted syzkaller #0 PREEMPT(full) [ 612.027598][T20374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 612.027612][T20374] Call Trace: [ 612.027621][T20374] [ 612.027631][T20374] dump_stack_lvl+0xe8/0x150 [ 612.027671][T20374] should_fail_ex+0x40c/0x560 [ 612.027719][T20374] should_failslab+0xa8/0x100 [ 612.027758][T20374] __kmalloc_cache_noprof+0xa8/0x660 [ 612.027789][T20374] ? nfnetlink_rcv+0x1021/0x28c0 [ 612.027819][T20374] ? nfnetlink_rcv+0x1021/0x28c0 [ 612.027863][T20374] nfnetlink_rcv+0x1021/0x28c0 [ 612.027943][T20374] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 612.027993][T20374] ? ref_tracker_free+0x689/0x830 [ 612.028048][T20374] ? skb_clone+0x246/0x3a0 [ 612.028074][T20374] ? __netlink_deliver_tap+0x811/0x860 [ 612.028109][T20374] ? netlink_deliver_tap+0x2e/0x1b0 [ 612.028128][T20374] ? netlink_deliver_tap+0x2e/0x1b0 [ 612.028154][T20374] netlink_unicast+0x7bb/0x940 [ 612.028197][T20374] netlink_sendmsg+0x813/0xb40 [ 612.028228][T20374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.028255][T20374] ? aa_sock_msg_perm+0xf1/0x1b0 [ 612.028283][T20374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.028303][T20374] sock_sendmsg_nosec+0x13a/0x180 [ 612.028331][T20374] ____sys_sendmsg+0x54e/0x850 [ 612.028371][T20374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 612.028415][T20374] ? import_iovec+0x73/0xa0 [ 612.028451][T20374] ___sys_sendmsg+0x2a5/0x360 [ 612.028483][T20374] ? __lock_acquire+0x683/0x2cf0 [ 612.028519][T20374] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.028600][T20374] ? __fget_files+0x2a/0x420 [ 612.028627][T20374] ? __fget_files+0x3a2/0x420 [ 612.028668][T20374] __x64_sys_sendmsg+0x1b1/0x290 [ 612.028706][T20374] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 612.028760][T20374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.028785][T20374] do_syscall_64+0x174/0x580 [ 612.028817][T20374] ? trace_irq_disable+0x3b/0x140 [ 612.028845][T20374] ? clear_bhb_loop+0x40/0x90 [ 612.028873][T20374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.028895][T20374] RIP: 0033:0x7f79f9d9de59 [ 612.028916][T20374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.028933][T20374] RSP: 002b:00007f79f7ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.028957][T20374] RAX: ffffffffffffffda RBX: 00007f79fa025fa0 RCX: 00007f79f9d9de59 [ 612.028972][T20374] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 612.028983][T20374] RBP: 00007f79f7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 612.028996][T20374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.029008][T20374] R13: 00007f79fa026038 R14: 00007f79fa025fa0 R15: 00007ffe06aaa6f8 [ 612.029044][T20374] [ 612.393988][T20078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.416151][T20078] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.452899][T11854] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.460175][T11854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.548487][T11854] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.555913][T11854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.679690][T20384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3485'. [ 612.782078][T20389] erspan0: left allmulticast mode [ 612.802052][T20389] erspan0: left promiscuous mode [ 612.823362][T20389] bridge0: port 3(erspan0) entered disabled state [ 612.916860][T20389] bridge_slave_0: left allmulticast mode [ 612.935322][T20389] bridge_slave_0: left promiscuous mode [ 612.955553][T20389] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.992561][T20389] bridge_slave_1: left allmulticast mode [ 613.008289][T20389] bridge_slave_1: left promiscuous mode [ 613.017174][T20389] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.044887][T20389] bond0: (slave bond_slave_0): Releasing backup interface [ 613.081257][T20389] team0: Port device team_slave_0 removed [ 613.119483][T20389] team0: Port device team_slave_1 removed [ 613.131589][T20389] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 613.140647][T20389] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 613.152822][T20389] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 613.163759][T20389] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 613.177359][T20389] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 613.201689][T20405] ±ÿ: renamed from lo (while UP) [ 613.476802][T20419] FAULT_INJECTION: forcing a failure. [ 613.476802][T20419] name failslab, interval 1, probability 0, space 0, times 0 [ 613.505526][T20419] CPU: 0 UID: 0 PID: 20419 Comm: syz.3.3494 Not tainted syzkaller #0 PREEMPT(full) [ 613.505555][T20419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 613.505568][T20419] Call Trace: [ 613.505577][T20419] [ 613.505586][T20419] dump_stack_lvl+0xe8/0x150 [ 613.505624][T20419] should_fail_ex+0x40c/0x560 [ 613.505654][T20419] should_failslab+0xa8/0x100 [ 613.505689][T20419] __kmalloc_cache_noprof+0xa8/0x660 [ 613.505718][T20419] ? nfnetlink_rcv+0x1021/0x28c0 [ 613.505749][T20419] ? nfnetlink_rcv+0x1021/0x28c0 [ 613.505787][T20419] nfnetlink_rcv+0x1021/0x28c0 [ 613.505850][T20419] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 613.505899][T20419] ? ref_tracker_free+0x689/0x830 [ 613.505952][T20419] ? skb_clone+0x246/0x3a0 [ 613.505979][T20419] ? __netlink_deliver_tap+0x811/0x860 [ 613.506016][T20419] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.506041][T20419] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.506067][T20419] netlink_unicast+0x7bb/0x940 [ 613.506111][T20419] netlink_sendmsg+0x813/0xb40 [ 613.506144][T20419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.506171][T20419] ? aa_sock_msg_perm+0xf1/0x1b0 [ 613.506201][T20419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.506220][T20419] sock_sendmsg_nosec+0x13a/0x180 [ 613.506250][T20419] ____sys_sendmsg+0x54e/0x850 [ 613.506290][T20419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 613.506336][T20419] ? import_iovec+0x73/0xa0 [ 613.506372][T20419] ___sys_sendmsg+0x2a5/0x360 [ 613.506404][T20419] ? __lock_acquire+0x683/0x2cf0 [ 613.506437][T20419] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.506518][T20419] ? __fget_files+0x2a/0x420 [ 613.506546][T20419] ? __fget_files+0x3a2/0x420 [ 613.506586][T20419] __x64_sys_sendmsg+0x1b1/0x290 [ 613.506640][T20419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 613.506693][T20419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.506717][T20419] do_syscall_64+0x174/0x580 [ 613.506752][T20419] ? clear_bhb_loop+0x40/0x90 [ 613.506779][T20419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.506801][T20419] RIP: 0033:0x7f79f9d9de59 [ 613.506823][T20419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.506842][T20419] RSP: 002b:00007f79f7ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.506865][T20419] RAX: ffffffffffffffda RBX: 00007f79fa025fa0 RCX: 00007f79f9d9de59 [ 613.506881][T20419] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 613.506895][T20419] RBP: 00007f79f7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 613.506908][T20419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.506921][T20419] R13: 00007f79fa026038 R14: 00007f79fa025fa0 R15: 00007ffe06aaa6f8 [ 613.506955][T20419] [ 614.219373][T20078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.380389][T20078] veth0_vlan: entered promiscuous mode [ 614.452470][T20078] veth1_vlan: entered promiscuous mode [ 614.586776][T20078] veth0_macvtap: entered promiscuous mode [ 614.635243][T20078] veth1_macvtap: entered promiscuous mode [ 614.686608][T20458] FAULT_INJECTION: forcing a failure. [ 614.686608][T20458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.733666][T20458] CPU: 0 UID: 0 PID: 20458 Comm: syz.4.3507 Not tainted syzkaller #0 PREEMPT(full) [ 614.733699][T20458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 614.733714][T20458] Call Trace: [ 614.733722][T20458] [ 614.733732][T20458] dump_stack_lvl+0xe8/0x150 [ 614.733776][T20458] should_fail_ex+0x40c/0x560 [ 614.733811][T20458] _copy_to_user+0x31/0xb0 [ 614.733951][T20458] simple_read_from_buffer+0xe1/0x170 [ 614.733990][T20458] proc_fail_nth_read+0x1bb/0x230 [ 614.734039][T20458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 614.734077][T20458] ? rw_verify_area+0x24a/0x4c0 [ 614.734120][T20458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 614.734152][T20458] vfs_read+0x213/0xa80 [ 614.734193][T20458] ? __pfx___mutex_lock+0x10/0x10 [ 614.734288][T20458] ? __pfx_vfs_read+0x10/0x10 [ 614.734325][T20458] ? __fget_files+0x2a/0x420 [ 614.734360][T20458] ? __fget_files+0x3a2/0x420 [ 614.734389][T20458] ? __fget_files+0x2a/0x420 [ 614.734432][T20458] ksys_read+0x150/0x270 [ 614.734471][T20458] ? __pfx_ksys_read+0x10/0x10 [ 614.734517][T20458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.734545][T20458] do_syscall_64+0x174/0x580 [ 614.734580][T20458] ? trace_irq_disable+0x3b/0x140 [ 614.734612][T20458] ? clear_bhb_loop+0x40/0x90 [ 614.734643][T20458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.734668][T20458] RIP: 0033:0x7f0e3275e68e [ 614.734691][T20458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 614.734712][T20458] RSP: 002b:00007f0e335e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 614.734737][T20458] RAX: ffffffffffffffda RBX: 00007f0e335e26c0 RCX: 00007f0e3275e68e [ 614.734760][T20458] RDX: 000000000000000f RSI: 00007f0e335e20a0 RDI: 0000000000000004 [ 614.734775][T20458] RBP: 00007f0e335e2090 R08: 0000000000000000 R09: 0000000000000000 [ 614.734790][T20458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.734805][T20458] R13: 00007f0e32a26038 R14: 00007f0e32a25fa0 R15: 00007ffea1339448 [ 614.734844][T20458] [ 614.792248][T20078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.837788][T20460] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3508'. [ 615.039444][T20078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.066509][T20465] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3510'. [ 615.101978][T14806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.123136][T14806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.206257][T14806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.226142][T14806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.451647][T20476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3513'. [ 615.494889][T20476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.572364][T20476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.736943][T14806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.766496][T14806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.855988][T14803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.889626][T14803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.906493][T20491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3517'. [ 615.936480][T20495] netlink: 'syz.4.3518': attribute type 178 has an invalid length. [ 616.226110][T20507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3520'. [ 616.257965][T20507] netlink: 'syz.1.3520': attribute type 9 has an invalid length. [ 616.279382][T20507] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3520'. [ 616.982333][T20539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3529'. [ 617.206998][T20528] bond2: left promiscuous mode [ 617.222213][T20528] bond3: left promiscuous mode [ 617.229188][T20528] bridge3: left promiscuous mode [ 617.235586][T20551] netlink: 'syz.4.3533': attribute type 1 has an invalid length. [ 617.256047][T20528] 8021q: adding VLAN 0 to HW filter on device bond4 [ 617.355390][T20556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3533'. [ 617.371123][T20539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.410129][ T99] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.426209][ T99] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.688543][ T3323] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 617.705678][ T3323] bond1: (slave veth3): making interface the new active one [ 617.721715][T20565] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3536'. [ 617.753290][ T3323] bond1: active interface up! [ 617.777905][T20556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.800891][ T99] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.866831][ T3323] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.877704][T20572] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3538'. [ 618.061748][T20570] syzkaller0: entered promiscuous mode [ 618.067405][T20570] syzkaller0: entered allmulticast mode [ 618.437736][T20600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3543'. [ 622.532380][T20596] syzkaller0: entered promiscuous mode [ 622.541496][T20596] syzkaller0: entered allmulticast mode [ 626.565745][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 626.803034][T20623] netlink: 'syz.3.3546': attribute type 1 has an invalid length. [ 627.071230][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3553'. [ 627.196300][T20653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3552'. [ 627.206792][T20647] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 627.223882][T20655] netlink: 'syz.4.3555': attribute type 39 has an invalid length. [ 627.263275][T20647] bond2 (unregistering): Released all slaves [ 627.405386][T20654] syzkaller0: entered promiscuous mode [ 627.412918][T20654] syzkaller0: entered allmulticast mode [ 628.780550][T20711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3567'. [ 628.857772][T20714] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3568'. [ 628.876117][T20714] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3568'. [ 628.914017][T20714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3568'. [ 629.214127][T20713] bridge0: port 3(macvlan2) entered disabled state [ 629.221355][T20713] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.229378][T20713] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.524437][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 630.232838][T20713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.167984][T20713] batadv0: left allmulticast mode [ 631.201436][T20713] bond3: left allmulticast mode [ 631.218270][T20713] bridge3: left allmulticast mode [ 631.519479][T20719] erspan0: mtu less than device minimum [ 631.752840][ T3323] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.803177][ T3323] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.835860][ T3323] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.866538][ T3323] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.891110][ T3323] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.912735][ T3323] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.929284][T20736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3576'. [ 631.941739][T11854] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.951563][T20743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3576'. [ 631.964853][T11854] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.987870][T20736] netlink: 'syz.3.3576': attribute type 1 has an invalid length. [ 632.001043][T20744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3578'. [ 632.020145][T20744] netlink: 'syz.0.3578': attribute type 26 has an invalid length. [ 632.143004][T20743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3576'. [ 632.217119][T20736] bond5: entered promiscuous mode [ 632.234745][T20736] 8021q: adding VLAN 0 to HW filter on device bond5 [ 632.245289][T20750] netlink: 'syz.2.3579': attribute type 30 has an invalid length. [ 632.547631][T20763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3584'. [ 632.652614][T20767] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3585'. [ 632.681946][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3585'. [ 633.103724][T20782] Bluetooth: MGMT ver 1.23 [ 633.652178][T20816] netlink: 'syz.4.3597': attribute type 7 has an invalid length. [ 633.669691][T20816] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3597'. [ 633.932979][T20820] netlink: 'syz.2.3598': attribute type 11 has an invalid length. [ 634.249430][T20837] syzkaller1: entered promiscuous mode [ 634.265995][T20837] syzkaller1: entered allmulticast mode [ 634.289948][T20837] Bluetooth: MGMT ver 1.23 [ 634.299826][T20837] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 634.462776][T20846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3604'. [ 634.506914][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3606'. [ 634.682816][T20855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3609'. [ 634.790217][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3611'. [ 634.872265][T20866] syzkaller0: entered promiscuous mode [ 634.890005][T20866] syzkaller0: entered allmulticast mode [ 634.921054][T20866] tcf_pedit_act: 7 callbacks suppressed [ 634.921078][T20866] tc action pedit offset must be on 32 bit boundaries [ 634.936248][T20866] tc action pedit offset must be on 32 bit boundaries [ 634.943158][T20866] tc action pedit offset must be on 32 bit boundaries [ 634.949153][T20868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3612'. [ 634.955540][T20866] tc action pedit offset must be on 32 bit boundaries [ 634.965802][T20866] tc action pedit offset must be on 32 bit boundaries [ 634.972769][T20866] tc action pedit offset must be on 32 bit boundaries [ 634.979690][T20866] tc action pedit offset must be on 32 bit boundaries [ 634.986572][T20866] tc action pedit offset must be on 32 bit boundaries [ 634.993613][T20866] tc action pedit offset must be on 32 bit boundaries [ 635.000600][T20866] tc action pedit offset must be on 32 bit boundaries [ 635.007444][T20866] 0: reclassify loop, rule prio 0, protocol 800 [ 635.198849][ T5632] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 635.207476][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 635.326768][T20881] openvswitch: netlink: Flow actions attr not present in new flow. [ 635.462506][T20884] netlink: 'syz.4.3615': attribute type 5 has an invalid length. [ 635.696268][T20893] netlink: 'syz.0.3620': attribute type 12 has an invalid length. [ 636.175306][T20910] syzkaller0: entered promiscuous mode [ 636.201237][T20910] syzkaller0: entered allmulticast mode [ 636.681509][T20924] syzkaller0: entered promiscuous mode [ 636.697620][T20924] syzkaller0: entered allmulticast mode [ 637.334212][T20951] mac80211_hwsim hwsim42 »»»»»»: renamed from wlan0 (while UP) [ 637.424136][T20959] __nla_validate_parse: 3 callbacks suppressed [ 637.424158][T20959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3634'. [ 637.712596][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3637'. [ 637.807032][T20963] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3638'. [ 638.030814][T20973] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 638.095087][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3641'. [ 638.552828][T20987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3646'. [ 639.031869][T20999] netlink: 'syz.0.3643': attribute type 5 has an invalid length. [ 640.042202][T21017] netlink: 'syz.2.3653': attribute type 4 has an invalid length. [ 640.401409][T21029] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3659'. [ 640.422387][T21031] xt_hashlimit: size too large, truncated to 1048576 [ 641.105030][T21052] "syz.2.3666" (21052) uses obsolete ecb(arc4) skcipher [ 641.367616][T21058] veth5: entered allmulticast mode [ 641.604025][T21068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3670'. [ 641.633283][T21068] netlink: 'syz.3.3670': attribute type 10 has an invalid length. [ 641.644819][T21068] syz_tun: entered promiscuous mode [ 641.668702][T21068] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 642.602147][T21101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3679'. [ 643.269652][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3689'. [ 643.310718][T21134] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 643.515722][T21135] vlan2: entered promiscuous mode [ 643.522430][T21135] bridge0: entered promiscuous mode [ 643.646142][T21139] syz_tun: left promiscuous mode [ 643.737879][ T29] audit: type=1804 audit(1784258193.681:78): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3692" name="/newroot/83/cgroup.controllers" dev="tmpfs" ino=447 res=1 errno=0 [ 643.777393][ T29] audit: type=1800 audit(1784258193.721:79): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3692" name="cgroup.controllers" dev="tmpfs" ino=447 res=0 errno=0 [ 643.802088][ T29] audit: type=1800 audit(1784258193.721:80): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3692" name="cgroup.controllers" dev="tmpfs" ino=447 res=0 errno=0 [ 643.852179][T21139] bond5: left promiscuous mode [ 643.865604][T21139] veth5: left allmulticast mode [ 644.192753][T14802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.206199][T14802] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.255158][T14802] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.279613][T14802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.392276][T21160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3697'. [ 644.416008][T21160] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3697'. [ 645.378257][T21208] bond0: (slave bond_slave_0): Releasing backup interface [ 645.407203][T21208] bond0: (slave bond_slave_1): Releasing backup interface [ 645.428946][T21208] team0: Port device team_slave_0 removed [ 645.455085][T21208] team0: Port device team_slave_1 removed [ 645.470846][T21208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.497118][T21208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.523149][T21208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 645.902730][T21229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3715'. [ 645.969976][T21232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3714'. [ 646.169538][T21232] bond3: entered promiscuous mode [ 646.372341][T21253] netlink: 'syz.1.3721': attribute type 7 has an invalid length. [ 646.463117][T21260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3725'. [ 646.671666][T21265] syzkaller0: entered promiscuous mode [ 646.689338][T21265] syzkaller0: entered allmulticast mode [ 646.714280][T21270] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 646.737314][T21270] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 646.777259][T21265] tipc: Started in network mode [ 646.794167][T21265] tipc: Node identity 0216ac498c8, cluster identity 4711 [ 646.821083][T21265] tipc: Enabled bearer , priority 0 [ 646.854281][T21265] tipc: Resetting bearer [ 646.891376][T21264] tipc: Resetting bearer [ 646.929557][T21277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3731'. [ 646.940539][T21278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3731'. [ 647.002098][T21264] tipc: Disabling bearer [ 647.449052][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3736'. [ 647.813743][T21320] __nla_validate_parse: 2 callbacks suppressed [ 647.813767][T21320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3742'. [ 648.370516][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3750'. [ 648.380120][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3750'. [ 648.390347][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3750'. [ 648.634502][T21356] Cannot find add_set index 0 as target [ 648.653954][T21355] Cannot find add_set index 0 as target [ 648.715607][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3752'. [ 648.745861][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 648.755910][T21363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3756'. [ 648.880792][T21366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3751'. [ 648.916655][T21373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3757'. [ 649.034426][T21374] vlan2: entered allmulticast mode [ 649.052607][T21374] bridge1: entered allmulticast mode [ 649.066927][T21373] bridge1: port 1(erspan0) entered blocking state [ 649.087151][T21373] bridge1: port 1(erspan0) entered disabled state [ 649.109924][T21373] erspan0: entered allmulticast mode [ 649.130540][T21373] erspan0: entered promiscuous mode [ 649.152065][T21373] bridge1: port 1(erspan0) entered blocking state [ 649.158725][T21373] bridge1: port 1(erspan0) entered forwarding state [ 649.242814][T21374] bridge1: port 1(erspan0) entered disabled state [ 649.281720][T21384] openvswitch: netlink: IP tunnel dst address not specified [ 649.285345][T21374] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.297307][T21374] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.543078][T21374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.560594][T21374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.936764][T21374] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 650.009628][T21374] vlan2: left allmulticast mode [ 650.014932][T21374] bridge1: left allmulticast mode [ 650.022116][T21379] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 650.047290][ T5821] IPVS: starting estimator thread 0... [ 650.158288][T21410] IPVS: using max 25 ests per chain, 60000 per kthread [ 650.183921][ T99] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.217644][ T99] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.248386][ T99] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.272273][ T99] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.337871][T21424] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3769'. [ 650.472591][T21431] netlink: 'syz.2.3766': attribute type 4 has an invalid length. [ 650.948700][T21444] sch_tbf: burst 0 is lower than device batadv_slave_0 mtu (1514) ! [ 651.099231][T21449] ip6gre1: entered promiscuous mode [ 651.137053][T21449] ip6gre1: entered allmulticast mode [ 651.915975][T21475] netlink: 'syz.1.3782': attribute type 7 has an invalid length. [ 651.924813][T14806] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.925241][T14806] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.974884][ T9827] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.980240][T21475] netlink: 'syz.1.3782': attribute type 8 has an invalid length. [ 652.368502][ T9822] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.641777][ T9822] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 653.019625][T21510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 653.236674][T21520] __nla_validate_parse: 4 callbacks suppressed [ 653.236699][T21520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3798'. [ 653.314224][T21522] netlink: 'syz.4.3794': attribute type 1 has an invalid length. [ 653.323934][T21520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3798'. [ 653.376876][T21525] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3796'. [ 653.398640][T21525] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3796'. [ 653.453992][T21532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3794'. [ 653.484789][T21534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3798'. [ 653.604821][T21527] bond2: (slave bridge2): making interface the new active one [ 653.636974][T21540] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3800'. [ 653.647701][T21527] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 653.806715][T21532] bond2: entered promiscuous mode [ 653.828864][T21532] bridge2: entered promiscuous mode [ 653.834555][T21532] bond2: entered allmulticast mode [ 653.853211][T21532] bridge2: entered allmulticast mode [ 653.873877][T21532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 653.892693][T21538] bridge0: entered allmulticast mode [ 653.912687][T21540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.953021][ T99] bond2: (slave bridge2): link status definitely down, disabling slave [ 653.973467][ T99] bridge2: left promiscuous mode [ 653.988622][ T99] bridge2: left allmulticast mode [ 654.000813][ T99] bond2: now running without any active interface! [ 654.462170][T21559] pimreg: entered allmulticast mode [ 654.482972][T21555] pimreg: left allmulticast mode [ 654.920521][T21583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3810'. [ 654.936577][T21523] infiniband syz2: set down [ 654.957817][T21583] nbd: couldn't find a device at index 0 [ 654.965290][T21523] infiniband syz2: added ipvlan0 [ 655.000092][T21523] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 655.014504][T21523] infiniband syz2: Couldn't open port 1 [ 655.064609][T21523] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 655.110579][T21523] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 655.202544][T21523] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 655.247868][T14806] macvlan2: left allmulticast mode [ 655.258126][T14806] bridge0: port 4(macvlan2) entered disabled state [ 655.313044][T14806] bond1: left allmulticast mode [ 655.335700][T14806] bridge0: port 3(bond1) entered disabled state [ 655.388988][T14806] erspan0: left allmulticast mode [ 655.403106][T21523] RDS/IB: syz2: added [ 655.409812][T14806] erspan0: left promiscuous mode [ 655.422651][T21523] smc: adding ib device syz2 with port count 1 [ 655.433983][T14806] bridge2: port 1(erspan0) entered disabled state [ 655.444276][T21523] smc: ib device syz2 port 1 has no pnetid [ 655.524718][T14806] pim6reg: left allmulticast mode [ 655.543775][T14806] dvmrp0: left allmulticast mode [ 655.761610][ T9827] hid-generic 0005:0007:0007.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 655.827722][T14806] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 655.961829][T21609] fido_id[21609]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 656.079060][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.267954][T14806] bond6 (unregistering): (slave bridge1): Releasing active interface [ 656.363356][T14806] bond0 (unregistering): Released all slaves [ 656.375442][T14806] bond1 (unregistering): Released all slaves [ 656.400915][T14806] bond2 (unregistering): Released all slaves [ 656.418874][T14806] bond3 (unregistering): Released all slaves [ 656.443142][T14806] bond4 (unregistering): Released all slaves [ 656.461360][T14806] bond5 (unregistering): Released all slaves [ 656.483215][T14806] bond6 (unregistering): Released all slaves [ 656.503061][T14806] bond7 (unregistering): Released all slaves [ 656.526299][T14806] bond8 (unregistering): Released all slaves [ 656.547484][T14806] bond9 (unregistering): (slave veth5): Releasing active interface [ 656.563705][T14806] bond9 (unregistering): Released all slaves [ 656.581271][T14806] bond10 (unregistering): Released all slaves [ 656.601449][T14806] bond11 (unregistering): Released all slaves [ 656.620998][T14806] bond12 (unregistering): Released all slaves [ 656.651643][T21598] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3813'. [ 656.662575][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3812'. [ 656.690125][T21593] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.730754][T21608] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 656.984649][T21615] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 657.078329][T14806] : left promiscuous mode [ 657.224556][T14806] tipc: Left network mode [ 657.626134][T21636] netlink: 'syz.2.3822': attribute type 1 has an invalid length. [ 657.767088][T21636] 8021q: adding VLAN 0 to HW filter on device bond2 [ 657.825222][T21632] bond2: (slave geneve2): making interface the new active one [ 657.850065][T21632] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 657.897610][T21634] vlan3: entered allmulticast mode [ 657.903286][T21634] bond2: entered allmulticast mode [ 657.909212][T21634] geneve2: entered allmulticast mode [ 658.056990][ T3323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.117815][ T3323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.150634][ T3323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.180383][ T3323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.703055][T21663] __nla_validate_parse: 2 callbacks suppressed [ 658.703078][T21663] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3830'. [ 658.761428][T21665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3830'. [ 658.875297][T21665] bond_slave_0: entered promiscuous mode [ 658.884327][T21665] bond_slave_0: entered allmulticast mode [ 659.196563][T21677] netlink: 'syz.0.3834': attribute type 1 has an invalid length. [ 659.391017][T21691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3834'. [ 659.507608][T21693] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3834'. [ 659.625960][T21686] 8021q: adding VLAN 0 to HW filter on device bond5 [ 659.636073][T21686] bond4: (slave bond5): making interface the new active one [ 659.646031][T21686] bond4: (slave bond5): Enslaving as an active interface with an up link [ 659.996628][T21706] xt_hashlimit: size too large, truncated to 1048576 [ 660.203750][T21711] netlink: 'syz.0.3838': attribute type 11 has an invalid length. [ 660.252602][T21711] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3838'. [ 660.394866][T21719] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3841'. [ 661.178230][T21740] syzkaller0: entered promiscuous mode [ 661.195957][T21740] syzkaller0: entered allmulticast mode [ 661.563140][T21750] syzkaller0: entered promiscuous mode [ 661.568921][T21750] syzkaller0: entered allmulticast mode [ 661.699955][T21754] syzkaller0: entered promiscuous mode [ 661.710428][T21754] syzkaller0: entered allmulticast mode [ 662.067159][T21759] syzkaller1: entered promiscuous mode [ 662.073227][T21759] syzkaller1: entered allmulticast mode [ 662.100523][T21758] netlink: 'syz.1.3849': attribute type 1 has an invalid length. [ 662.245109][T21758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 662.351766][T21764] bond3: (slave gretap1): making interface the new active one [ 662.378230][T21764] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 662.571735][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3851'. [ 662.766684][T21775] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3854'. [ 662.776928][T21775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3854'. [ 662.796264][T21775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3854'. [ 663.055952][T21783] Bluetooth: MGMT ver 1.23 [ 663.252697][ T50] Bluetooth: hci3: link tx timeout [ 663.270389][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 663.781457][T21795] __nla_validate_parse: 2 callbacks suppressed [ 663.781477][T21795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3858'. [ 663.917581][T21800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3859'. [ 664.608260][T21809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3861'. [ 664.639900][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3861'. [ 664.690822][ T138] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.693630][T21809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3861'. [ 664.718219][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.738791][ T138] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.747798][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3861'. [ 664.785635][ T138] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.851253][T14806] hsr_slave_0: left promiscuous mode [ 664.876064][T14806] hsr_slave_1: left promiscuous mode [ 664.930796][T14806] dummy0: left allmulticast mode [ 665.359790][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 665.400605][T21832] IPVS: set_ctl: invalid protocol: 30052 121.48.0.0:0 [ 665.524452][T21834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3869'. [ 665.902854][ T138] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.122119][T21840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3870'. [ 666.145164][T21835] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3869'. [ 666.178441][T21849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3870'. [ 666.622087][T21865] syzkaller1: entered promiscuous mode [ 666.812001][T14806] IPVS: stop unused estimator thread 0... [ 667.123325][T21881] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 667.957142][T21926] xt_TPROXY: Can be used only with -p tcp or -p udp [ 668.031926][T21926] syzkaller1: entered promiscuous mode [ 668.051659][T21926] syzkaller1: entered allmulticast mode [ 668.886587][T21970] __nla_validate_parse: 83 callbacks suppressed [ 668.886608][T21970] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3907'. [ 669.157914][T21976] syzkaller0: entered promiscuous mode [ 669.170026][T21976] syzkaller0: entered allmulticast mode [ 669.192326][T21976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3909'. [ 669.372429][T21981] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 669.674589][T21992] xt_hashlimit: max too large, truncated to 1048576 [ 669.687074][T21992] xt_hashlimit: overflow, try lower: 2/0 [ 669.695963][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3914'. [ 670.144886][T22018] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3921'. [ 670.554990][T22025] bond0: entered promiscuous mode [ 670.570258][T22025] bond_slave_0: entered promiscuous mode [ 670.588893][T22025] bond_slave_1: entered promiscuous mode [ 670.606147][T22025] batadv0: entered promiscuous mode [ 670.620712][T22025] debugfs: 'hsr1' already exists in 'hsr' [ 670.634697][T22025] Cannot create hsr debugfs directory [ 670.656405][T22025] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 670.685606][T22025] bond0: left promiscuous mode [ 670.691642][T22025] bond_slave_0: left promiscuous mode [ 670.702102][T22025] bond_slave_1: left promiscuous mode [ 670.740671][T22025] batadv0: left promiscuous mode [ 671.099002][T22039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3926'. [ 671.127980][T22039] netlink: 'syz.0.3926': attribute type 30 has an invalid length. [ 671.277181][T22045] netlink: 'syz.2.3929': attribute type 10 has an invalid length. [ 671.366807][T22047] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3930'. [ 671.737157][T22068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3934'. [ 671.768566][T22068] openvswitch: netlink: Missing key (keys=40, expected=80) [ 672.248415][T22092] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3941'. [ 672.293585][T22078] nbd: couldn't find a device at index 0 [ 673.074796][T22057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3934'. [ 673.135215][T22057] nbd: must specify at least one socket [ 673.363349][T22121] tipc: Enabling of bearer rejected, failed to enable media [ 673.672407][T22135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3949'. [ 673.983255][T22150] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 673.991072][T22150] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 673.996614][T22148] __nla_validate_parse: 2 callbacks suppressed [ 673.996677][T22148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3953'. [ 674.132756][T22157] xt_connbytes: Forcing CT accounting to be enabled [ 674.575367][T22176] netlink: 'syz.4.3961': attribute type 1 has an invalid length. [ 674.590640][T22178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3962'. [ 674.600467][T22178] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3962'. [ 674.610134][T22178] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3962'. [ 674.644414][T22179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3962'. [ 674.681944][T22176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 674.715781][T22152] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 674.728473][T22152] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 674.757258][T22178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3962'. [ 674.854277][T22180] bond3: (slave dummy0): making interface the new active one [ 674.880656][T22180] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 675.118445][T22188] bridge0: entered allmulticast mode [ 675.350810][T22206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3969'. [ 675.603261][T22221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3972'. [ 675.647950][T22221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3972'. [ 676.042103][T22242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3975'. [ 676.932602][T22287] syzkaller0: entered promiscuous mode [ 676.973770][T22287] syzkaller0: entered allmulticast mode [ 677.442096][T22300] netlink: 'syz.0.3994': attribute type 1 has an invalid length. [ 678.005063][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 678.317182][T22317] tipc: Enabled bearer , priority 0 [ 678.324563][T22316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.350222][T22316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.509342][T22320] hsr0: entered promiscuous mode [ 678.533677][T22320] hsr0: left promiscuous mode [ 678.567368][T22326] hsr_slave_0: left promiscuous mode [ 678.584986][T22326] hsr_slave_1: left promiscuous mode [ 678.709371][T22351] veth3: entered allmulticast mode [ 678.771936][T22351] veth5: entered promiscuous mode [ 678.777403][T22351] veth5: entered allmulticast mode [ 678.785140][T22351] team0: Device veth5 is up. Set it down before adding it as a team port [ 679.044509][T22361] vlan3: entered promiscuous mode [ 679.066875][T22361] batadv0: entered promiscuous mode [ 679.282154][T22374] __nla_validate_parse: 8 callbacks suppressed [ 679.282177][T22374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4015'. [ 679.400121][ T50] block nbd5: Receive control failed (result -1) [ 679.501171][T22380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4017'. [ 679.529175][T22380] netlink: 'syz.2.4017': attribute type 10 has an invalid length. [ 679.539680][T22380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4017'. [ 679.553929][T22380] dummy0: entered promiscuous mode [ 679.926525][T22399] Cannot find del_set index 1 as target [ 679.969952][T22402] xt_hashlimit: size too large, truncated to 1048576 [ 680.051802][T22399] xt_hashlimit: size too large, truncated to 1048576 [ 680.069482][T22399] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 680.317042][T22408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4023'. [ 680.441788][T22416] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4026'. [ 680.462615][T22416] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4026'. [ 680.996362][T22441] block nbd6: Unsupported socket: should be TCP or UNIX. [ 681.444585][T22469] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 681.464090][T22469] syzkaller1: linktype set to 1 [ 681.654775][T22477] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 681.911456][T22495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4047'. [ 681.998631][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 682.071835][T22500] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4049'. [ 682.197077][T22502] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 682.255369][T22507] erspan0: entered promiscuous mode [ 682.261931][T22507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4053'. [ 682.501858][T22517] netlink: 'syz.2.4054': attribute type 2 has an invalid length. [ 682.939975][T22532] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4060'. [ 684.689726][T22592] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 684.758957][T22602] syzkaller0: entered promiscuous mode [ 684.768192][T22602] syzkaller0: entered allmulticast mode [ 685.737711][T22641] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4086'. [ 685.901281][T22629] batman_adv: batadv0: Adding interface: gretap1 [ 685.908449][T22629] batman_adv: batadv0: The MTU of interface gretap1 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.938187][T22629] batman_adv: batadv0: Interface activated: gretap1 [ 685.999288][T22653] smc: net device vlan1 applied user defined pnetid SYZ2 [ 686.414369][T22673] netlink: 'syz.2.4095': attribute type 1 has an invalid length. [ 686.471856][T22673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 686.863610][T22697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4101'. [ 686.915438][T22698] syzkaller0: entered promiscuous mode [ 686.944527][T22698] syzkaller0: entered allmulticast mode [ 687.024666][T22698] tipc: Started in network mode [ 687.035805][T22698] tipc: Node identity , cluster identity 4711 [ 687.067394][T22698] tipc: Failed to obtain node identity [ 687.085219][T22698] tipc: Enabling of bearer rejected, failed to enable media [ 687.224634][T22718] "syz.3.4105" (22718) uses obsolete ecb(arc4) skcipher [ 687.335903][T22722] gre2: entered allmulticast mode [ 687.517580][T22732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4107'. [ 687.551221][T22732] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4107'. [ 687.577559][T22735] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 687.623692][T22735] ipt_ECN: cannot use operation on non-tcp rule [ 688.003476][T22748] netlink: 'syz.4.4110': attribute type 11 has an invalid length. [ 688.274192][T22763] netlink: 'syz.4.4111': attribute type 10 has an invalid length. [ 688.303718][T22763] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4111'. [ 688.353908][T22763] dummy0: entered promiscuous mode [ 688.371092][T22763] bond3: (slave dummy0): Releasing active interface [ 688.425237][T22762] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4113'. [ 688.489432][T22770] netlink: 'syz.3.4113': attribute type 1 has an invalid length. [ 688.563029][T22776] netlink: 'syz.2.4116': attribute type 1 has an invalid length. [ 688.661101][T22776] bond4: entered promiscuous mode [ 688.683567][T22776] bond4: entered allmulticast mode [ 688.709877][T22776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 688.938242][T22795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4120'. [ 688.961613][T22757] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 688.974444][T22795] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 689.130182][T22802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4122'. [ 689.203995][T22802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4122'. [ 689.244038][T22802] ip6erspan0: entered promiscuous mode [ 689.464976][T22819] netlink: 'syz.0.4126': attribute type 1 has an invalid length. [ 689.539650][T22819] 8021q: adding VLAN 0 to HW filter on device bond7 [ 690.164909][T22839] xt_CT: No such helper "snmp_trap" [ 690.482037][T22859] netlink: 'syz.3.4133': attribute type 1 has an invalid length. [ 690.495461][T22856] netlink: 'syz.0.4130': attribute type 1 has an invalid length. [ 690.545438][T22865] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4133'. [ 690.675450][T22856] bond8: entered promiscuous mode [ 690.690243][T22856] 8021q: adding VLAN 0 to HW filter on device bond8 [ 690.707531][T22832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 691.151288][T22871] 8021q: adding VLAN 0 to HW filter on device bond8 [ 691.213175][T22871] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 691.247618][T22871] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 691.275849][T22871] bond8: (slave vti0): making interface the new active one [ 691.306324][T22871] vti0: entered promiscuous mode [ 691.318672][T22871] bond8: (slave vti0): Enslaving as an active interface with an up link [ 691.576076][T22890] Cannot find del_set index 2 as target [ 692.203777][T22900] netlink: 'syz.4.4142': attribute type 1 has an invalid length. [ 692.245879][T22903] netlink: 'syz.0.4140': attribute type 1 has an invalid length. [ 692.281635][T22909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4141'. [ 692.293486][T22903] netlink: 'syz.0.4140': attribute type 6 has an invalid length. [ 692.310542][T22900] bond4: entered promiscuous mode [ 692.316239][T22900] 8021q: adding VLAN 0 to HW filter on device bond4 [ 692.385236][T22900] bond4: (slave veth3): making interface the new active one [ 692.392832][T22900] veth3: entered promiscuous mode [ 692.407580][T22900] bond4: (slave veth3): Enslaving as an active interface with an up link [ 692.689915][T22924] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4146'. [ 692.720480][T22923] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4146'. [ 692.795562][T22930] ip6gretap1: entered allmulticast mode [ 692.832092][T22930] batman_adv: batadv0: Adding interface: ip6gretap1 [ 692.857565][T22930] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.904861][T22930] batman_adv: batadv0: Interface activated: ip6gretap1 [ 692.936379][T22932] þ: entered promiscuous mode [ 693.038854][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 693.557796][T22964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4155'. [ 693.625403][T22965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4155'. [ 693.920924][T22969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4157'. [ 694.054122][T22951] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.185834][T22951] dummy0: left promiscuous mode [ 694.272523][T22971] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4157'. [ 694.323365][T22973] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4157'. [ 694.574835][T22951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.627852][T22951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.959220][ T12] wlan1: Trigger new scan to find an IBSS to join [ 695.039023][T22951] bond2: left promiscuous mode [ 695.043914][T22951] bond2: left allmulticast mode [ 695.057093][T22951] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode [ 695.064529][T22951] mac80211_hwsim hwsim45 syzkaller0: left allmulticast mode [ 695.143356][T22951] batman_adv: batadv0: Interface deactivated: gretap1 [ 695.165685][T22951] bond4: left promiscuous mode [ 695.170755][T22951] veth3: left promiscuous mode [ 695.217470][T22964] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 695.295609][ T99] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.345379][ T99] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.412482][ T99] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.442593][ T99] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.453423][T22980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4160'. [ 695.477737][T22976] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 695.512023][T22976] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 695.568619][T22976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4158'. [ 695.598970][T22976] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 695.633677][T22984] tipc: Enabled bearer , priority 0 [ 695.644744][T22984] syzkaller0: entered promiscuous mode [ 695.651511][T22984] syzkaller0: entered allmulticast mode [ 695.855316][T22983] tipc: Resetting bearer [ 695.921339][T22983] tipc: Disabling bearer [ 696.251859][T23010] pim6reg: entered allmulticast mode [ 696.260010][T23010] pim6reg: left allmulticast mode [ 696.767498][T23026] validate_nla: 6 callbacks suppressed [ 696.767517][T23026] netlink: 'syz.1.4174': attribute type 2 has an invalid length. [ 696.840400][T23026] : entered promiscuous mode [ 696.934245][T23032] syzkaller1: entered promiscuous mode [ 696.964038][T23032] syzkaller1: entered allmulticast mode [ 697.030781][T23038] netlink: 'syz.2.4176': attribute type 1 has an invalid length. [ 697.297318][T23038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 697.431313][T23047] netlink: 'syz.4.4178': attribute type 1 has an invalid length. [ 697.700965][T23047] 8021q: adding VLAN 0 to HW filter on device bond5 [ 697.823624][T23057] bond5: (slave veth5): Enslaving as an active interface with a down link [ 697.916882][T23061] bond5: (slave veth7): Enslaving as an active interface with a down link [ 697.929528][T14803] wlan1: Trigger new scan to find an IBSS to join [ 697.971459][T23062] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.205680][T23075] __nla_validate_parse: 4 callbacks suppressed [ 698.205696][T23075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4182'. [ 698.343312][T23085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4184'. [ 698.358781][T23085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4184'. [ 700.281064][T23051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.835394][T23126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4194'. [ 700.881668][T14806] wlan1: Trigger new scan to find an IBSS to join [ 701.035288][T23136] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 701.294701][T23151] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4202'. [ 701.359654][T23154] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 701.368151][T23153] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4202'. [ 701.389583][T23154] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 701.522033][T23164] ±ÿœFN&­¸_\: renamed from lo (while UP) [ 701.786268][T14806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.846844][T23171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4206'. [ 701.883279][T23171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4206'. [ 701.911266][T23171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4206'. [ 702.017767][T23183] bridge_slave_0: left allmulticast mode [ 702.066028][T23183] bridge_slave_0: left promiscuous mode [ 702.083577][T23183] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.116887][T23183] bridge_slave_1: left allmulticast mode [ 702.124411][T23183] bridge_slave_1: left promiscuous mode [ 702.130436][T23183] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.153789][T23183] bond0: (slave bond_slave_0): Releasing backup interface [ 702.173011][T23183] bond0: (slave bond_slave_1): Releasing backup interface [ 702.185833][T23183] team0: Port device team_slave_0 removed [ 702.195590][T23183] team0: Port device team_slave_1 removed [ 702.213509][T23183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.231185][T23195] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 702.244396][T23183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.264776][T23183] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 702.434972][T23207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4214'. [ 702.452402][T23209] netlink: 'syz.2.4214': attribute type 3 has an invalid length. [ 702.627195][T23217] netlink: 'syz.2.4216': attribute type 1 has an invalid length. [ 702.666051][T23217] bond6: entered promiscuous mode [ 702.672215][T23217] 8021q: adding VLAN 0 to HW filter on device bond6 [ 702.819993][T23231] xt_hashlimit: size too large, truncated to 1048576 [ 703.073585][T23235] veth1_macvtap€: renamed from vlan0 [ 703.821346][T23254] netlink: 'syz.2.4224': attribute type 2 has an invalid length. [ 703.835171][T23254] : entered promiscuous mode [ 704.867845][T23173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.477585][T23294] netlink: 'syz.4.4233': attribute type 10 has an invalid length. [ 705.699002][T23299] bond9: ARP target 9.0.0.0 is already present [ 705.725726][T23299] bond9: option arp_ip_target: invalid value (9) [ 705.756800][T23299] bond9 (unregistering): Released all slaves [ 705.833147][T23313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4237'. [ 705.853101][T23313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4237'. [ 705.916952][T23307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.964723][T23307] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.989924][T23307] dummy0: left promiscuous mode [ 706.147154][T23307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 706.161694][T23307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 706.179499][T23307] veth1_vlan: left promiscuous mode [ 706.186453][T23307] veth0_vlan: left promiscuous mode [ 706.197733][T23307] veth0_vlan: entered promiscuous mode [ 706.209502][T23307] veth1_vlan: entered promiscuous mode [ 706.225040][T23307] veth1_macvtap: left promiscuous mode [ 706.240618][T23330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4240'. [ 706.250887][T23307] veth0_macvtap: left promiscuous mode [ 706.264309][T23307] veth0_macvtap: entered promiscuous mode [ 706.276393][T23307] veth1_macvtap: entered promiscuous mode [ 706.290952][T23307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 706.301277][T23307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 706.311217][T23307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 706.323120][T23307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 706.348481][T23307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 706.369933][T23307] ip6gre1: left promiscuous mode [ 706.375053][T23307] ip6gre1: left allmulticast mode [ 706.381538][T23307] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 706.412680][ T9827] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 706.421849][T14803] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.429116][T14803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.460326][T14803] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.467561][T14803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.519140][ T9824] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 706.659645][T23337] x_tables: duplicate underflow at hook 1 [ 706.860844][ T5750] gretap1: entered promiscuous mode [ 706.884532][T23345] 8021q: VLANs not supported on ip_vti0 [ 706.924581][T23353] tipc: Started in network mode [ 706.936345][T23358] netlink: 'syz.3.4246': attribute type 1 has an invalid length. [ 706.946144][T23353] tipc: Node identity 56a76c16647, cluster identity 4711 [ 706.963970][T23353] tipc: Enabled bearer , priority 0 [ 707.065800][T23358] bond7: entered promiscuous mode [ 707.071614][T23358] bond7: entered allmulticast mode [ 707.077332][T23358] 8021q: adding VLAN 0 to HW filter on device bond7 [ 707.137901][T23353] tipc: Disabling bearer [ 707.381376][T23380] netlink: 'syz.4.4250': attribute type 1 has an invalid length. [ 707.400317][T23380] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4250'. [ 707.428970][T23383] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4252'. [ 707.486472][T23383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4252'. [ 707.514425][T23388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4253'. [ 708.134277][T23420] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 708.181299][T23418] block nbd6: Receive control failed (result -32) [ 708.204918][ T50] block nbd6: Receive control failed (result -32) [ 708.211428][ T5624] block nbd6: Receive control failed (result -32) [ 708.252889][T23420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 708.401582][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 708.457671][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4262'. [ 708.500184][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4262'. [ 708.583351][T23433] netlink: 'syz.0.4262': attribute type 11 has an invalid length. [ 708.674016][ T3323] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.815454][ T3323] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.857026][ T3323] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.920764][ T3323] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.367464][T23500] netlink: 'syz.4.4275': attribute type 1 has an invalid length. [ 710.396033][T23500] 8021q: adding VLAN 0 to HW filter on device bond6 [ 710.404999][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4275'. [ 710.414403][T23502] netlink: 'syz.4.4275': attribute type 10 has an invalid length. [ 710.422822][T23502] dummy0: entered promiscuous mode [ 710.534257][T23510] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 710.593962][T23513] netlink: 'syz.4.4278': attribute type 1 has an invalid length. [ 711.880647][T23446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 712.166022][T23521] __nla_validate_parse: 2 callbacks suppressed [ 712.166045][T23521] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4281'. [ 712.198470][T23522] sctp: [Deprecated]: syz.0.4279 (pid 23522) Use of int in maxseg socket option. [ 712.198470][T23522] Use struct sctp_assoc_value instead [ 712.221933][T23521] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4281'. [ 712.343648][T23522] 8021q: adding VLAN 0 to HW filter on device bond9 [ 712.583140][T23550] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4288'. [ 712.651656][T23553] openvswitch: netlink: IP tunnel dst address not specified [ 712.829251][T23556] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 712.864837][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 712.947746][T23570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4293'. [ 712.975798][T23569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4294'. [ 712.988869][T23569] netlink: 'syz.3.4294': attribute type 7 has an invalid length. [ 712.997101][T23570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4293'. [ 713.016554][T23569] netlink: 'syz.3.4294': attribute type 8 has an invalid length. [ 713.033191][T23569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4294'. [ 713.070306][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 713.533861][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4303'. [ 713.544302][T23607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4303'. [ 713.560346][T23607] netlink: 'syz.3.4303': attribute type 14 has an invalid length. [ 713.568865][T23607] netlink: 'syz.3.4303': attribute type 13 has an invalid length. [ 713.692186][T23565] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 713.898670][T23620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4305'. [ 714.040060][T23626] netlink: 'syz.1.4307': attribute type 8 has an invalid length. [ 714.164128][T23626] bond0: entered promiscuous mode [ 714.171480][T23626] gretap0: entered promiscuous mode [ 714.182432][T23626] bond0: left promiscuous mode [ 714.197859][T23626] gretap0: left promiscuous mode [ 714.210708][T23624] bridge0: entered promiscuous mode [ 714.217240][T23624] bridge0: entered allmulticast mode [ 715.763785][T23681] netlink: 'syz.4.4323': attribute type 10 has an invalid length. [ 715.843403][T23681] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 716.089804][T23697] netlink: 'syz.4.4327': attribute type 2 has an invalid length. [ 716.110953][T23697] xt_hashlimit: max too large, truncated to 1048576 [ 716.123953][T23697] xt_hashlimit: overflow, try lower: 137438953472/8 [ 716.849938][T23695] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 717.198443][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 717.507805][T23738] __nla_validate_parse: 4 callbacks suppressed [ 717.507827][T23738] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4339'. [ 717.700799][T23742] syzkaller0: entered promiscuous mode [ 717.720048][T23742] syzkaller0: entered allmulticast mode [ 718.296747][T23750] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4344'. [ 719.153616][T23775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4348'. [ 719.211763][T23777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4348'. [ 719.272520][T23778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4348'. [ 719.789875][T23779] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.797603][T23779] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.812937][T23779] bridge0: entered allmulticast mode [ 719.857814][T23780] bridge_slave_1: left allmulticast mode [ 719.870991][T23780] bridge_slave_1: left promiscuous mode [ 719.880625][T23780] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.902660][T23780] bridge_slave_0: left allmulticast mode [ 719.912919][T23780] bridge_slave_0: left promiscuous mode [ 719.929639][T23780] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.406162][T23794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4351'. [ 720.856598][T23811] openvswitch: netlink: Flow actions attr not present in new flow. [ 720.933067][T23811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.968860][T23815] netlink: 'syz.2.4356': attribute type 1 has an invalid length. [ 720.996259][T23815] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4356'. [ 721.628457][T23827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.654316][T23828] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4357'. [ 722.746812][T23869] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4368'. [ 722.861518][T23865] siw: device registration error -23 [ 723.003316][T23865] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 723.017472][T23865] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 723.048355][T23865] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 723.210502][T23887] netlink: 'syz.3.4373': attribute type 4 has an invalid length. [ 723.235515][T23887] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4373'. [ 723.502809][T23892] batman_adv: batadv0: Adding interface: dummy0 [ 723.512208][T23892] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.540091][T23892] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 723.659407][T23909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4377'. [ 723.930744][T23919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4380'. [ 723.960274][T23911] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 724.001960][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 724.020058][T23919] macvlan0: left promiscuous mode [ 724.044597][T23919] netlink: 'syz.1.4380': attribute type 1 has an invalid length. [ 724.072522][T23919] netlink: 'syz.1.4380': attribute type 2 has an invalid length. [ 724.135638][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 724.154100][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 724.195129][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 724.352910][T23932] netlink: 'syz.1.4382': attribute type 8 has an invalid length. [ 724.809009][T23949] syzkaller1: entered promiscuous mode [ 724.816354][T23949] syzkaller1: entered allmulticast mode [ 724.851483][T23957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4390'. [ 724.864252][T23949] syzkaller0: entered promiscuous mode [ 724.883755][T23949] syzkaller0: entered allmulticast mode [ 724.901822][T23960] syzkaller0: entered promiscuous mode [ 724.907657][T23960] syzkaller0: entered allmulticast mode [ 724.921316][T23960] tipc: Enabled bearer , priority 0 [ 724.971942][T23963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4392'. [ 725.165442][T23963] netlink: 'syz.3.4392': attribute type 1 has an invalid length. [ 725.180896][T23971] bond8: entered promiscuous mode [ 725.186119][T23971] bond8: entered allmulticast mode [ 725.194593][T23951] tipc: Resetting bearer [ 725.252401][T23951] tipc: Disabling bearer [ 725.326736][T23976] netlink: 'syz.2.4395': attribute type 29 has an invalid length. [ 725.339095][T23975] netlink: 'syz.2.4395': attribute type 29 has an invalid length. [ 725.396443][T23980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 725.582863][T23990] netlink: 'syz.4.4398': attribute type 1 has an invalid length. [ 725.624855][T23997] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4400'. [ 725.696860][T23990] bond8: entered promiscuous mode [ 725.727310][T23990] bond8: entered allmulticast mode [ 725.748495][T23990] 8021q: adding VLAN 0 to HW filter on device bond8 [ 725.959511][T24009] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4404'. [ 726.266082][T24025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4399'. [ 726.330843][T24035] netlink: 'syz.2.4409': attribute type 3 has an invalid length. [ 726.436393][T24031] bridge1: port 1(erspan0) entered disabled state [ 726.976047][T24031] vlan3: left allmulticast mode [ 726.982427][T24031] bond2: left allmulticast mode [ 726.987553][T24031] geneve2: left allmulticast mode [ 727.004298][T24031] bond4: left promiscuous mode [ 727.011166][T24031] bond4: left allmulticast mode [ 727.017972][T24031] ip6erspan0: left promiscuous mode [ 727.027351][T24031] bond6: left promiscuous mode [ 727.090117][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.128985][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.167757][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.202970][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.235849][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.264417][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.293506][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.315137][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.515052][ T5728] IPVS: starting estimator thread 0... [ 727.618428][T24067] IPVS: using max 26 ests per chain, 62400 per kthread [ 727.731737][T24079] syzkaller0: entered promiscuous mode [ 727.737508][T24079] syzkaller0: entered allmulticast mode [ 728.028904][T24089] netlink: zone id is out of range [ 728.059318][T24089] netlink: zone id is out of range [ 728.064762][T24089] netlink: zone id is out of range [ 728.070775][T24089] netlink: zone id is out of range [ 728.076189][T24089] netlink: zone id is out of range [ 728.091300][T24089] netlink: zone id is out of range [ 728.096726][T24089] netlink: zone id is out of range [ 728.102822][T24089] netlink: zone id is out of range [ 728.108684][T24089] netlink: zone id is out of range [ 728.172718][T24089] netlink: zone id is out of range [ 728.349558][T24101] xt_TPROXY: Can be used only with -p tcp or -p udp [ 728.365787][T24105] Cannot find set identified by id 65534 to match [ 728.375518][T24105] netlink: 'syz.3.4428': attribute type 1 has an invalid length. [ 728.386740][T24105] __nla_validate_parse: 1 callbacks suppressed [ 728.386758][T24105] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4428'. [ 728.404148][T24105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4428'. [ 728.446628][T24105] team_slave_1: Caught tx_queue_len zero misconfig [ 728.454632][T24107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4426'. [ 728.507763][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4426'. [ 728.531557][T24109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4429'. [ 728.586682][T24109] vlan3: entered promiscuous mode [ 728.594352][T24109] dummy0: entered promiscuous mode [ 728.955383][T24125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4435'. [ 728.989710][T24125] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4435'. [ 729.018100][T24125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4435'. [ 729.037250][T24125] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4435'. [ 729.058811][T24125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4435'. [ 729.328337][T24135] netlink: 'syz.2.4437': attribute type 1 has an invalid length. [ 729.524258][T24143] netlink: 'syz.3.4439': attribute type 87 has an invalid length. [ 729.553621][T24143] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 730.001463][T24164] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 730.279406][T24175] veth0_to_team: Caught tx_queue_len zero misconfig [ 731.145529][T24198] can: request_module (can-proto-0) failed. [ 731.385211][T24207] netlink: 'syz.1.4455': attribute type 1 has an invalid length. [ 731.442373][T24207] bond4: entered promiscuous mode [ 731.448951][T24207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 731.512460][T24207] bond4: (slave bridge2): making interface the new active one [ 731.538071][T24207] bridge2: entered promiscuous mode [ 731.544975][T24207] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 732.161905][T24237] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20002 [ 733.205941][T24263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 734.616508][T24274] __nla_validate_parse: 6 callbacks suppressed [ 734.616534][T24274] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4472'. [ 734.720894][T24275] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4472'. [ 734.812306][T24280] net_ratelimit: 1332 callbacks suppressed [ 734.812335][T24280] openvswitch: netlink: Missing valid actions attribute. [ 734.858285][T24280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.885372][T24282] x_tables: duplicate underflow at hook 2 [ 734.897257][T24284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4471'. [ 735.074426][T24290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4476'. [ 736.174068][T24316] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4486'. [ 736.208830][T24316] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4486'. [ 736.247020][T24317] netlink: 'syz.3.4485': attribute type 13 has an invalid length. [ 736.263253][T24320] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4487'. [ 736.274095][T24320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 736.291377][T24317] gretap0: refused to change device tx_queue_len [ 736.301896][T24317] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 736.325048][T24324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4485'. [ 736.341268][T24320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4487'. [ 736.414324][T24328] netlink: 'syz.0.4490': attribute type 4 has an invalid length. [ 736.442135][T24332] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4491'. [ 736.643306][T24334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.664790][T24334] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.683166][T24334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.722216][T24343] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003 [ 736.768666][T24334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 736.801373][T24334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 736.851397][T24334] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 737.053845][T24354] tipc: Enabling of bearer rejected, failed to enable media [ 737.101607][T24354] openvswitch: netlink: IP tunnel dst address not specified [ 737.145134][T24354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.358264][T24368] netlink: 'syz.4.4502': attribute type 1 has an invalid length. [ 737.784958][T24379] geneve0: entered promiscuous mode [ 737.813091][T24379] macvlan2: entered promiscuous mode [ 737.855049][T24379] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 737.883001][T24391] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 738.178780][T24402] syzkaller0: entered promiscuous mode [ 738.197117][T24402] syzkaller0: entered allmulticast mode [ 738.743764][ T9838] IPVS: starting estimator thread 0... [ 738.838206][T24434] IPVS: using max 25 ests per chain, 60000 per kthread [ 740.041651][T24463] netlink: 'syz.0.4525': attribute type 1 has an invalid length. [ 740.069533][T24464] bond11: Unable to set up delay as MII monitoring is disabled [ 740.080055][T24464] bond11 (unregistering): Released all slaves [ 740.112644][T24463] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 740.305590][T24475] __nla_validate_parse: 5 callbacks suppressed [ 740.305611][T24475] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4527'. [ 741.109315][T24401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 741.144347][T24428] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4519'. [ 741.409561][T24494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4532'. [ 741.533252][T24494] tipc: Enabled bearer , priority 0 [ 741.598594][T24494] syzkaller0: entered promiscuous mode [ 741.612312][T24494] syzkaller0: entered allmulticast mode [ 741.631556][T24494] tipc: Resetting bearer [ 741.643764][T24507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4537'. [ 741.669746][T24507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4537'. [ 741.752261][T24511] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4537'. [ 741.902443][T14802] tipc: Resetting bearer [ 741.912022][T24488] tipc: Resetting bearer [ 745.407100][T24488] tipc: Disabling bearer [ 745.511835][T24513] netlink: 'syz.0.4538': attribute type 1 has an invalid length. [ 745.612166][T24518] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4541'. [ 745.742209][T24513] bond11: entered promiscuous mode [ 745.747730][T24513] bond11: entered allmulticast mode [ 745.754017][T24513] 8021q: adding VLAN 0 to HW filter on device bond11 [ 745.770018][T24515] erspan1: entered allmulticast mode [ 745.780162][T24515] bond11: (slave erspan1): making interface the new active one [ 745.788357][T24515] erspan1: entered promiscuous mode [ 745.809988][T24515] bond11: (slave erspan1): Enslaving as an active interface with an up link [ 745.866089][T24534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4539'. [ 745.922040][T24536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.946986][T24536] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 745.966458][T24536] batman_adv: batadv0: Removing interface: ip6gretap1 [ 745.977454][T24536] batman_adv: batadv0: Removing interface: dummy0 [ 745.994439][T24536] macvlan2 (unregistering): left allmulticast mode [ 746.004842][T24536] macvlan2 (unregistering): left promiscuous mode [ 746.013792][T24536] bridge0: port 3(macvlan2) entered disabled state [ 746.057004][T24536] tipc: Disabling bearer [ 746.070545][T24530] syzkaller1: entered promiscuous mode [ 746.076219][T24530] syzkaller1: entered allmulticast mode [ 746.357440][T24554] dvmrp8: entered allmulticast mode [ 746.390218][T24556] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 746.544114][T24564] x_tables: duplicate underflow at hook 1 [ 749.051799][T24540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.063486][T24564] netlink: 'syz.3.4549': attribute type 1 has an invalid length. [ 749.093485][T24564] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4549'. [ 749.115156][T24564] netlink: 'syz.3.4549': attribute type 1 has an invalid length. [ 749.123387][T24564] netlink: 29 bytes leftover after parsing attributes in process `syz.3.4549'. [ 749.354496][T24580] žÿ: renamed from team_slave_1 [ 749.540814][T24591] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4553'. [ 749.556885][T24592] netlink: 'syz.0.4554': attribute type 8 has an invalid length. [ 749.578363][T24592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4554'. [ 749.609094][T24592] bond0: entered promiscuous mode [ 749.629921][T24592] gretap0: entered promiscuous mode [ 749.667441][T24591] netlink: 'syz.4.4553': attribute type 6 has an invalid length. [ 749.675641][T24592] bond0: left promiscuous mode [ 749.703618][T24592] gretap0: left promiscuous mode [ 749.767325][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4558'. [ 749.783549][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4558'. [ 749.903218][T24604] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4560'. [ 749.934172][T24608] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4561'. [ 750.374606][T24631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.264184][T24659] Unknown options in mask 6 [ 751.551557][T24674] SET target dimension over the limit! [ 751.567270][T24674] __nla_validate_parse: 1 callbacks suppressed [ 751.567291][T24674] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4577'. [ 751.650519][T24676] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4578'. [ 751.754178][T24686] netlink: 'syz.1.4581': attribute type 1 has an invalid length. [ 751.837332][T24692] netlink: 'syz.1.4581': attribute type 5 has an invalid length. [ 751.911901][T24686] bond6: entered promiscuous mode [ 751.916513][T24696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4582'. [ 751.930477][T24686] 8021q: adding VLAN 0 to HW filter on device bond6 [ 751.993321][T24686] macvtap1: entered allmulticast mode [ 752.033118][T24704] xt_recent: hitcount (4294967294) is larger than allowed maximum (65535) [ 752.044967][T24692] macvtap2: entered allmulticast mode [ 752.064368][T24694] ipvlan2: entered promiscuous mode [ 752.070590][T24694] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 752.084863][T24694] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 752.097662][T24694] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 752.244476][T24702] bond6: (slave bridge3): making interface the new active one [ 752.269868][T24702] bridge3: entered promiscuous mode [ 752.291620][T24702] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 752.743727][T24726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4588'. [ 752.853664][T24726] 8021q: adding VLAN 0 to HW filter on device bond9 [ 752.887958][T24733] block nbd3: NBD_DISCONNECT [ 752.902191][T24733] block nbd3: Send disconnect failed -104 [ 752.908449][T24730] bond9: option mode: unable to set because the bond device is up [ 752.923322][T24733] block nbd3: shutting down sockets [ 752.956522][T24732] syzkaller1: entered promiscuous mode [ 752.964667][T24732] syzkaller1: entered allmulticast mode [ 753.508730][T24760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4598'. [ 753.540632][T24760] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4598'. [ 753.560547][T24760] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4598'. [ 753.571153][T24762] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4600'. [ 753.580650][T24760] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4598'. [ 753.626183][T24762] ipip0: entered promiscuous mode [ 753.644441][T24762] ipip0: entered allmulticast mode [ 753.781255][T24769] dvmrp0: entered allmulticast mode [ 753.974393][T24782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4603'. [ 753.997804][T24782] openvswitch: netlink: Flow actions attr not present in new flow. [ 754.388444][T24793] syzkaller1: entered promiscuous mode [ 754.409039][T24793] syzkaller1: entered allmulticast mode [ 755.240495][T24814] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 755.591359][ T9836] IPVS: starting estimator thread 0... [ 755.728853][T24837] IPVS: using max 34 ests per chain, 81600 per kthread [ 756.366066][T24867] xt_hashlimit: max too large, truncated to 1048576 [ 756.900798][T24890] __nla_validate_parse: 1 callbacks suppressed [ 756.900820][T24890] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4627'. [ 756.927471][ T5624] Bluetooth: hci3: link tx timeout [ 756.939365][ T5624] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 758.012167][T24931] netlink: 'syz.0.4636': attribute type 1 has an invalid length. [ 758.051998][T24934] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4635'. [ 758.083663][T24931] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 758.123564][T24927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4635'. [ 758.395977][T24944] netlink: 'syz.3.4639': attribute type 12 has an invalid length. [ 758.439419][T24944] [ 758.441830][T24944] ====================================================== [ 758.448882][T24944] WARNING: possible circular locking dependency detected [ 758.455951][T24944] syzkaller #0 Not tainted [ 758.460398][T24944] ------------------------------------------------------ [ 758.467533][T24944] syz.3.4639/24944 is trying to acquire lock: [ 758.473628][T24944] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x660 [ 758.483008][T24944] [ 758.483008][T24944] but task is already holding lock: [ 758.490468][T24944] ffff888068c36530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 758.499888][T24944] [ 758.499888][T24944] which lock already depends on the new lock. [ 758.499888][T24944] [ 758.510328][T24944] [ 758.510328][T24944] the existing dependency chain (in reverse order) is: [ 758.519375][T24944] [ 758.519375][T24944] -> #8 (&idev->mc_lock){+.+.}-{4:4}: [ 758.527002][T24944] __mutex_lock+0x19d/0x1550 [ 758.532180][T24944] __ipv6_dev_mc_inc+0x4e/0xa40 [ 758.537599][T24944] __ipv6_sock_mc_join+0x4f7/0x740 [ 758.543275][T24944] do_ipv6_mcast_group_source+0x3df/0x4c0 [ 758.549660][T24944] do_ipv6_setsockopt+0x1768/0x3180 [ 758.555436][T24944] ipv6_setsockopt+0x59/0x170 [ 758.560679][T24944] do_sock_setsockopt+0x17c/0x1b0 [ 758.566264][T24944] __x64_sys_setsockopt+0x13d/0x1b0 [ 758.572012][T24944] do_syscall_64+0x174/0x580 [ 758.577157][T24944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.583596][T24944] [ 758.583596][T24944] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 758.591363][T24944] lock_sock_nested+0x41/0x100 [ 758.596680][T24944] tls_sw_sendmsg+0x161/0x2860 [ 758.602098][T24944] sock_sendmsg_nosec+0x90/0x180 [ 758.607596][T24944] sock_sendmsg+0x1ca/0x2d0 [ 758.612676][T24944] splice_to_socket+0xb5e/0x12a0 [ 758.618166][T24944] direct_splice_actor+0x101/0x160 [ 758.623828][T24944] splice_direct_to_actor+0x57b/0xcb0 [ 758.629744][T24944] do_splice_direct+0x195/0x290 [ 758.635144][T24944] do_sendfile+0x52e/0x7c0 [ 758.640100][T24944] __se_sys_sendfile64+0x144/0x1a0 [ 758.645768][T24944] do_syscall_64+0x174/0x580 [ 758.650947][T24944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.657410][T24944] [ 758.657410][T24944] -> #6 (&ctx->tx_lock){+.+.}-{4:4}: [ 758.665098][T24944] __mutex_lock+0x19d/0x1550 [ 758.670254][T24944] tls_sw_sendmsg+0x13c/0x2860 [ 758.675578][T24944] sock_sendmsg_nosec+0x90/0x180 [ 758.681104][T24944] sock_sendmsg+0x1ca/0x2d0 [ 758.686157][T24944] __sock_xmit+0x245/0x4f0 [ 758.691228][T24944] nbd_disconnect+0x3ad/0x560 [ 758.696462][T24944] nbd_disconnect_and_put+0x32/0x280 [ 758.702323][T24944] nbd_genl_disconnect+0x4af/0x590 [ 758.708039][T24944] genl_family_rcv_msg_doit+0x233/0x340 [ 758.714186][T24944] genl_rcv_msg+0x614/0x7a0 [ 758.719240][T24944] netlink_rcv_skb+0x226/0x4a0 [ 758.724563][T24944] genl_rcv+0x28/0x40 [ 758.729100][T24944] netlink_unicast+0x7bb/0x940 [ 758.734438][T24944] netlink_sendmsg+0x813/0xb40 [ 758.739769][T24944] sock_sendmsg_nosec+0x13a/0x180 [ 758.745350][T24944] ____sys_sendmsg+0x54e/0x850 [ 758.750666][T24944] ___sys_sendmsg+0x2a5/0x360 [ 758.755893][T24944] __x64_sys_sendmsg+0x1b1/0x290 [ 758.761393][T24944] do_syscall_64+0x174/0x580 [ 758.766566][T24944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.773037][T24944] [ 758.773037][T24944] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 758.780714][T24944] __mutex_lock+0x19d/0x1550 [ 758.785864][T24944] nbd_queue_rq+0x373/0x1150 [ 758.791012][T24944] blk_mq_dispatch_rq_list+0x499/0x1990 [ 758.797322][T24944] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 758.804264][T24944] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 758.810803][T24944] blk_mq_run_work_fn+0x16c/0x300 [ 758.816376][T24944] process_scheduled_works+0xa8e/0x14e0 [ 758.822474][T24944] worker_thread+0xa47/0xfb0 [ 758.827613][T24944] kthread+0x388/0x470 [ 758.832225][T24944] ret_from_fork+0x514/0xb70 [ 758.837416][T24944] ret_from_fork_asm+0x1a/0x30 [ 758.842722][T24944] [ 758.842722][T24944] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 758.849976][T24944] __mutex_lock+0x19d/0x1550 [ 758.855131][T24944] nbd_queue_rq+0xc1/0x1150 [ 758.860193][T24944] blk_mq_dispatch_rq_list+0x499/0x1990 [ 758.866293][T24944] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 758.873174][T24944] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 758.879707][T24944] blk_mq_run_work_fn+0x16c/0x300 [ 758.885280][T24944] process_scheduled_works+0xa8e/0x14e0 [ 758.891381][T24944] worker_thread+0xa47/0xfb0 [ 758.896516][T24944] kthread+0x388/0x470 [ 758.901132][T24944] ret_from_fork+0x514/0xb70 [ 758.906275][T24944] ret_from_fork_asm+0x1a/0x30 [ 758.911580][T24944] [ 758.911580][T24944] -> #3 (set->srcu){.+.+}-{0:0}: [ 758.918730][T24944] __synchronize_srcu+0xc9/0x2f0 [ 758.924220][T24944] elevator_switch+0x1e8/0x7b0 [ 758.929614][T24944] elevator_change+0x2fa/0x480 [ 758.934925][T24944] elevator_set_default+0x375/0x440 [ 758.940674][T24944] blk_register_queue+0x3f3/0x4e0 [ 758.946324][T24944] __add_disk+0x6cb/0xe30 [ 758.951238][T24944] add_disk_fwnode+0xfb/0x4b0 [ 758.956490][T24944] nbd_dev_add+0x733/0xb60 [ 758.961487][T24944] nbd_init+0x15f/0x1e0 [ 758.966297][T24944] do_one_initcall+0x250/0x870 [ 758.971621][T24944] do_initcall_level+0x10a/0x1a0 [ 758.977145][T24944] do_initcalls+0x59/0xa0 [ 758.982024][T24944] kernel_init_freeable+0x29d/0x3e0 [ 758.987775][T24944] kernel_init+0x1d/0x1d0 [ 758.992649][T24944] ret_from_fork+0x514/0xb70 [ 758.997787][T24944] ret_from_fork_asm+0x1a/0x30 [ 759.003106][T24944] [ 759.003106][T24944] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 759.010965][T24944] __mutex_lock+0x19d/0x1550 [ 759.016129][T24944] elevator_change+0x1af/0x480 [ 759.021476][T24944] elevator_set_none+0xb5/0x140 [ 759.026877][T24944] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 759.033240][T24944] nbd_start_device+0x189/0xb30 [ 759.038641][T24944] nbd_genl_connect+0x1597/0x1c10 [ 759.044219][T24944] genl_family_rcv_msg_doit+0x233/0x340 [ 759.050309][T24944] genl_rcv_msg+0x614/0x7a0 [ 759.055358][T24944] netlink_rcv_skb+0x226/0x4a0 [ 759.060673][T24944] genl_rcv+0x28/0x40 [ 759.065206][T24944] netlink_unicast+0x7bb/0x940 [ 759.070526][T24944] netlink_sendmsg+0x813/0xb40 [ 759.075843][T24944] sock_sendmsg_nosec+0x13a/0x180 [ 759.081443][T24944] ____sys_sendmsg+0x54e/0x850 [ 759.086760][T24944] ___sys_sendmsg+0x2a5/0x360 [ 759.091988][T24944] __x64_sys_sendmsg+0x1b1/0x290 [ 759.097475][T24944] do_syscall_64+0x174/0x580 [ 759.102629][T24944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.109081][T24944] [ 759.109081][T24944] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 759.117720][T24944] blk_alloc_queue+0x544/0x690 [ 759.123035][T24944] __blk_mq_alloc_disk+0x194/0x390 [ 759.128694][T24944] nbd_dev_add+0x494/0xb60 [ 759.133662][T24944] nbd_init+0x15f/0x1e0 [ 759.138362][T24944] do_one_initcall+0x250/0x870 [ 759.143678][T24944] do_initcall_level+0x10a/0x1a0 [ 759.149176][T24944] do_initcalls+0x59/0xa0 [ 759.154107][T24944] kernel_init_freeable+0x29d/0x3e0 [ 759.159861][T24944] kernel_init+0x1d/0x1d0 [ 759.164741][T24944] ret_from_fork+0x514/0xb70 [ 759.169880][T24944] ret_from_fork_asm+0x1a/0x30 [ 759.175193][T24944] [ 759.175193][T24944] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 759.182440][T24944] __lock_acquire+0x1520/0x2cf0 [ 759.187851][T24944] lock_acquire+0x106/0x350 [ 759.192905][T24944] fs_reclaim_acquire+0x71/0x100 [ 759.198437][T24944] __kmalloc_cache_noprof+0x61/0x660 [ 759.204282][T24944] __ipv6_dev_mc_inc+0x447/0xa40 [ 759.209767][T24944] pndisc_constructor+0xe0/0x150 [ 759.215258][T24944] pneigh_create+0x237/0x4a0 [ 759.220490][T24944] neigh_add+0x6ea/0xf60 [ 759.225309][T24944] rtnetlink_rcv_msg+0x7b9/0xc00 [ 759.230794][T24944] netlink_rcv_skb+0x226/0x4a0 [ 759.236110][T24944] netlink_unicast+0x7bb/0x940 [ 759.241434][T24944] netlink_sendmsg+0x813/0xb40 [ 759.246748][T24944] sock_sendmsg_nosec+0x13a/0x180 [ 759.252326][T24944] sock_write_iter+0x2de/0x3e0 [ 759.257638][T24944] vfs_write+0x612/0xba0 [ 759.262464][T24944] ksys_write+0x150/0x270 [ 759.267345][T24944] do_syscall_64+0x174/0x580 [ 759.272502][T24944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.278963][T24944] [ 759.278963][T24944] other info that might help us debug this: [ 759.278963][T24944] [ 759.289226][T24944] Chain exists of: [ 759.289226][T24944] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 759.289226][T24944] [ 759.301869][T24944] Possible unsafe locking scenario: [ 759.301869][T24944] [ 759.309343][T24944] CPU0 CPU1 [ 759.314732][T24944] ---- ---- [ 759.320113][T24944] lock(&idev->mc_lock); [ 759.324473][T24944] lock(sk_lock-AF_INET6); [ 759.331519][T24944] lock(&idev->mc_lock); [ 759.338401][T24944] lock(fs_reclaim); [ 759.342416][T24944] [ 759.342416][T24944] *** DEADLOCK *** [ 759.342416][T24944] [ 759.350601][T24944] 3 locks held by syz.3.4639/24944: [ 759.355828][T24944] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 759.365311][T24944] #1: ffffffff9015c038 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x4a/0x4a0 [ 759.374857][T24944] #2: ffff888068c36530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 759.384580][T24944] [ 759.384580][T24944] stack backtrace: [ 759.390503][T24944] CPU: 0 UID: 0 PID: 24944 Comm: syz.3.4639 Not tainted syzkaller #0 PREEMPT(full) [ 759.390530][T24944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 759.390543][T24944] Call Trace: [ 759.390554][T24944] [ 759.390563][T24944] dump_stack_lvl+0xe8/0x150 [ 759.390597][T24944] print_circular_bug+0x2e1/0x300 [ 759.390618][T24944] check_noncircular+0x12e/0x150 [ 759.390650][T24944] __lock_acquire+0x1520/0x2cf0 [ 759.390678][T24944] ? preempt_schedule_common+0x82/0xd0 [ 759.390704][T24944] ? preempt_schedule_thunk+0x16/0x40 [ 759.390732][T24944] ? __mutex_lock+0x321/0x1550 [ 759.390760][T24944] ? __kmalloc_cache_noprof+0x61/0x660 [ 759.390784][T24944] lock_acquire+0x106/0x350 [ 759.390808][T24944] ? __kmalloc_cache_noprof+0x61/0x660 [ 759.390831][T24944] ? __ipv6_dev_mc_inc+0x4e/0xa40 [ 759.390851][T24944] ? __pfx___mutex_lock+0x10/0x10 [ 759.390880][T24944] fs_reclaim_acquire+0x71/0x100 [ 759.390903][T24944] ? __kmalloc_cache_noprof+0x61/0x660 [ 759.390927][T24944] __kmalloc_cache_noprof+0x61/0x660 [ 759.390950][T24944] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 759.390967][T24944] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 759.390988][T24944] __ipv6_dev_mc_inc+0x447/0xa40 [ 759.391011][T24944] pndisc_constructor+0xe0/0x150 [ 759.391038][T24944] ? __pfx_pndisc_constructor+0x10/0x10 [ 759.391065][T24944] ? __kmalloc_noprof+0x1ad/0x720 [ 759.391086][T24944] ? pneigh_create+0x11c/0x4a0 [ 759.391109][T24944] ? pneigh_create+0x15b/0x4a0 [ 759.391133][T24944] pneigh_create+0x237/0x4a0 [ 759.391157][T24944] neigh_add+0x6ea/0xf60 [ 759.391178][T24944] ? __pfx_neigh_add+0x10/0x10 [ 759.391205][T24944] ? __pfx_neigh_add+0x10/0x10 [ 759.391221][T24944] rtnetlink_rcv_msg+0x7b9/0xc00 [ 759.391246][T24944] ? netlink_sendmsg+0x5d4/0xb40 [ 759.391265][T24944] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 759.391290][T24944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 759.391316][T24944] ? __lock_acquire+0x683/0x2cf0 [ 759.391345][T24944] netlink_rcv_skb+0x226/0x4a0 [ 759.391373][T24944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 759.391410][T24944] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 759.391443][T24944] ? netlink_deliver_tap+0x2e/0x1b0 [ 759.391459][T24944] ? netlink_deliver_tap+0x2e/0x1b0 [ 759.391485][T24944] netlink_unicast+0x7bb/0x940 [ 759.391515][T24944] netlink_sendmsg+0x813/0xb40 [ 759.391536][T24944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.391555][T24944] ? aa_sock_msg_perm+0xf1/0x1b0 [ 759.391576][T24944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.391598][T24944] sock_sendmsg_nosec+0x13a/0x180 [ 759.391625][T24944] sock_write_iter+0x2de/0x3e0 [ 759.391645][T24944] ? __pfx_sock_write_iter+0x10/0x10 [ 759.391667][T24944] ? bpf_lsm_file_permission+0x9/0x20 [ 759.391733][T24944] ? security_file_permission+0x75/0x260 [ 759.391830][T24944] vfs_write+0x612/0xba0 [ 759.391862][T24944] ? __pfx_vfs_write+0x10/0x10 [ 759.391892][T24944] ? __fget_files+0x2a/0x420 [ 759.391920][T24944] ksys_write+0x150/0x270 [ 759.391948][T24944] ? __pfx_ksys_write+0x10/0x10 [ 759.391978][T24944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.391997][T24944] do_syscall_64+0x174/0x580 [ 759.392024][T24944] ? trace_irq_disable+0x3b/0x140 [ 759.392047][T24944] ? clear_bhb_loop+0x40/0x90 [ 759.392067][T24944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.392085][T24944] RIP: 0033:0x7f79f9d9de59 [ 759.392103][T24944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.392120][T24944] RSP: 002b:00007f79f7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 759.392140][T24944] RAX: ffffffffffffffda RBX: 00007f79fa025fa0 RCX: 00007f79f9d9de59 [ 759.392154][T24944] RDX: 00000000000000fc RSI: 00002000000007c0 RDI: 000000000000000a [ 759.392166][T24944] RBP: 00007f79f9e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 759.392178][T24944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.392189][T24944] R13: 00007f79fa026038 R14: 00007f79fa025fa0 R15: 00007ffe06aaa6f8 [ 759.392210][T24944] [ 759.787095][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 759.866251][T24960] bond_slave_1: entered promiscuous mode [ 759.894285][T24960] bond_slave_1: entered allmulticast mode