last executing test programs: 1m24.168274543s ago: executing program 4 (id=3141): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x80) 1m24.104095948s ago: executing program 4 (id=3143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x37, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010}, 0x94) 1m23.944388333s ago: executing program 4 (id=3145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000104595e0000008000001e"], 0x18}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x9, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m23.688273471s ago: executing program 4 (id=3148): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r0, &(0x7f0000000180)={0x27}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x5c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x40, 0x0, 0xa, 0x7, 0x4, 0xa, 0x81, {0x0, @in={{0x2, 0x4e21, @multicast2}}, 0xffffffff, 0x0, 0x5, 0x5, 0xff}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r3, 0x4}, &(0x7f00000001c0)=0x8) 1m23.622539795s ago: executing program 4 (id=3149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000980)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x80) 1m23.022497853s ago: executing program 0 (id=3157): r0 = socket$isdn(0x22, 0x2, 0x21) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x7, 0x6361, 0x5, 0xf, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0xe, 0x3, 0x6, 0x0, 0xf, 0xe, 0xa, 0x2, 0xd, 0x10, 0x5, 0x4, 0x2, 0xe, 0xb, 0xf], 0x0, [0x7, 0xffff, 0x8, 0xdde, 0x0, 0x3, 0x3dd, 0x2, 0x1, 0x76d8, 0x8, 0x7f, 0x7, 0x3, 0x81, 0x800], [0xffff, 0x5, 0x8, 0x2, 0x4, 0x3, 0x1, 0x5, 0x1000, 0x6, 0x2, 0x2, 0x1, 0x7b2, 0x2bba, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010000104feffff81fb66cf331f4bff00", @ANYRES32=0x0, @ANYBLOB="018001000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r7, @ANYBLOB="00200000000002001400350067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close(r0) 1m22.719099582s ago: executing program 0 (id=3160): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) r2 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x11d, 0x1, 0x0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x22, 0x6, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x90) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r8, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYRESOCT=0x0, @ANYRES32=r3, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000230bd506000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000008d8300000000000000000000440008"], 0x16c}}, 0x0) r9 = socket(0x1f, 0x6, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r10 = socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xe) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r11) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000007d0b4fe01f74d392c0d1e6ffe795fd16ae158b3a6558e26334296bb03df470f493240b9c1206d1a9830082f60485de0b24604bf8fc5b8dc2a10141937394656383046dc944", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf25170000000c00060003000000030000000c00060002000000000000000c000600010000000100000008000300", @ANYRES32=r12, @ANYBLOB="0c0006000100000001000000"], 0x4c}}, 0x20000000) sendmsg$key(r10, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="02180000120000000000000000000000030005000000000002004e230a01010000000000000000000800120000000000000000000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000005000600000000000a00"/144], 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x3, 0x7}, {0x4, 0xffff}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtclass={0x24, 0x28, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x8, 0x10}, {0xd, 0xa}, {0x9, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m22.204352124s ago: executing program 0 (id=3166): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000300010000", 0x7) 1m22.0442912s ago: executing program 0 (id=3169): r0 = socket(0x27, 0x3, 0x10) sendto$inet(r0, &(0x7f0000000000)="b401fcc8070000090000008e052af9c34b7d7494", 0x14, 0x4085, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) 1m21.941927854s ago: executing program 0 (id=3171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x23c, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_VFINFO_LIST={0x204, 0x16, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9d, 0x98}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x7f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x67fc, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x6f2, 0x8}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xb1, 0x9, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x2}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xc44c, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0x100}}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x3}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf, 0x4ae, 0x7ff, 0x8100}}, {0x14, 0x1, {0x0, 0x137, 0x0, 0x8100}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7fff, 0xb1}}]}, {0xd4, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0xc41d}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x9}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0xf65, 0x6, 0x8100}}, {0x14, 0x1, {0x44cc, 0x1e1, 0x1, 0x8100}}, {0x14, 0x1, {0x1, 0x10d, 0x8, 0x118f8}}, {0x14, 0x1, {0x9, 0xc96, 0xff, 0x8100}}, {0x14, 0x1, {0x1, 0x82, 0x7, 0x88a8}}, {0x14, 0x1, {0x10, 0x2b, 0x4, 0x88a8}}, {0x14, 0x1, {0x9, 0x7bb, 0x8, 0x8100}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1000, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x527}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x17}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x7}}]}, {0x4}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m21.719947401s ago: executing program 4 (id=3153): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3, 0x9, 0x6, 0x8f3d, 0x6, 0x4}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r3, 0x100}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) 1m21.241682473s ago: executing program 32 (id=3153): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3, 0x9, 0x6, 0x8f3d, 0x6, 0x4}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r3, 0x100}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4) 1m21.199804031s ago: executing program 0 (id=3177): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2ca00000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c00098008000200030000000c000280080001"], 0x46}}, 0x4004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)}, {&(0x7f0000000440)="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", 0x23c}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000480)) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x0) 1m21.005337012s ago: executing program 33 (id=3177): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2ca00000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c00098008000200030000000c000280080001"], 0x46}}, 0x4004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)}, {&(0x7f0000000440)="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", 0x23c}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000480)) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x0) 4.199407648s ago: executing program 5 (id=4230): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) close(r2) socket$inet6(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000000000000100004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x4, 0x10, 0x8}, 0x50) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) 3.968957391s ago: executing program 5 (id=4233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="32cf1b1dde54aeaaab34416600bbd7bd30c759d193bdf96cf3f08be33078da3dcd09ad7619030328c8f1e718d715b541680e7fa7dc3951735cf7c52a6b", @ANYRES16=r5, @ANYBLOB="090829bd7000030000000100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0x8001, 0x10000, {{0x11, 0x4, 0x0, 0x20, 0x44, 0x64, 0x0, 0xf8, 0x29, 0x0, @broadcast, @loopback, {[@end, @end, @cipso={0x86, 0x1c, 0x1, [{0x2, 0x5, "a254d7"}, {0x0, 0x11, "a45dd17341723e112b162d63890dfb"}]}, @timestamp_prespec={0x44, 0xc, 0x7b, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x8}]}, @ra={0x94, 0x4}]}}}}}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000001040)=ANY=[@ANYBLOB="f5eb2abd7000fee0df250e003f004601000b3a3b5844eeb68fbac094f101a0f2442d51dc57c7a423e5d6fd1ce62d9f6a0b62c3e871b8b8a3c94f50b9c8dd1817c3d1023cb757e6511335c5c07843bed067051a2da2fa47c03c14b8410f6e72629a98c9fa8273d311c3f2e42c4d0a5076d0c7125c6d1a15002fd264811bbd0daaf553630db321e2d3014d132feaca4d000000a28c37ce5ebc9930f470255dfdb4b676a5bceada95dd8daa2ff7576655bf4fc8572e9ad1fc", @ANYRES32=r7, @ANYBLOB="030000000800020004000000080002000200000014000100fe8000000000000000000000000000bb140001000000000000000000000000000000000114000100fe8000000000000000000000000000bb080002000b00000014000100"/108], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x24000091) r9 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x831f, 0x10, 0x2, 0x9, {{0x16, 0x4, 0x2, 0x4, 0x58, 0x68, 0x0, 0x2, 0x2f, 0x0, @loopback, @private=0xa010101, {[@generic={0x0, 0xa, "b94e36c0b508d035"}, @generic={0x82, 0x9, "455b0b53678984"}, @timestamp={0x44, 0xc, 0x20, 0x0, 0x1, [0x0, 0x7ff]}, @timestamp_prespec={0x44, 0x24, 0x41, 0x3, 0xb, [{@loopback, 0xac5}, {@private=0xa010102, 0x8}, {@private=0xa010101, 0x55}, {@rand_addr=0x64010101, 0x8}]}]}}}}}) r12 = socket(0x10, 0x3, 0x2) bind$netlink(r12, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r12, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r12, &(0x7f0000000000)='\"', 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400ffb194d423b10003ffff", @ANYRES16=r14, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x40, 0x20, 0xffff, 0x8, {{0x13, 0x4, 0x1, 0x26, 0x4c, 0x66, 0x0, 0x8b, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @local, {[@timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@empty, 0x3}, {@broadcast, 0xfffffffa}]}, @rr={0x7, 0x1b, 0x66, [@dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010101, @broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000880)=ANY=[@ANYBLOB="84040000", @ANYRES16=r5, @ANYBLOB="000329bd7000ffdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="0002028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ffff00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f6b8000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff54000100240001fddd6104f69f8690685f66756e6300000000000000000000000000000000000000050003000b0000002400040008000d4d000100000e0002080a567b0f99bbd20000000500007f00000000050000750900", @ANYRES32=r15, @ANYBLOB="fc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff7f00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r18, @ANYBLOB="5c0102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r19, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r20, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040006000000"], 0x484}, 0x1, 0x0, 0x0, 0x1}, 0x10) 3.763524575s ago: executing program 6 (id=4236): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x16}]}, 0x14}], 0x1}, 0x40080) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r6, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3.457544079s ago: executing program 5 (id=4238): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x28, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x800008251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_netdev_private(r2, 0x8943, &(0x7f0000000000)) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r10, 0x29, 0x11, 0x0, &(0x7f00000001c0)) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000440)=0x0) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r16) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r17, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r14], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)={0x27, r11, 0xffffffffffffffff, 0x2, 0x4, 0x7, "b01a9910c0f99bddd03352ff54510d71a05b65003eac6c9100ade5dbd744b09cbe4e80ff7a622e6083e95b63adb46191d089096c6654a169e471ef9b9a9b0d", 0x1b}, 0x60, &(0x7f00000002c0)=[{&(0x7f0000000280)="1b3b9d7274bb187d423c646bcb5b2458dde00af5c344daa9fb05efbdb606a61f176d32e98ea796371338916d804a9b4a", 0x30}], 0x1, &(0x7f0000000340)={0x68, 0x84, 0x4, "aee953b6ffc694295047c0370816166aaa6da65487a03edf21a71a98524ff98a446ac0a1ce651b30dfed03ab7812b0e510814f229fbf496f31b4df81a590dd24f7a6d3e7594ecde3cca6ea955eb2b5a84b682478614174"}, 0x68, 0x2004c011}, {&(0x7f0000000480)={0x27, r12, 0x0, 0x2, 0x2, 0xf, "99ba880b820442571b1eb10dbe7139a71f36b44f6c11ee1d31103f9ca4780bdac055ef41900cee418b52d77b4f370b0dcc675bffa4d92d14738c6de8216a5f", 0x1b}, 0x60, &(0x7f0000000980)=[{&(0x7f0000000640)="0527dc828d624b4564d414280b8998df32d4b9e28172d587262ed54a43348d55b43248daeddca8c41448a7c90ddc5a02213521d9bc1ed64ca82c18069d81522d01d8c9b9c3ad74f65027f752ea78551a24deca3f4947d7ad920e411d68b32ffa9b38fdca57a1ba77416538f9c2f79d8350128343c6491a51b233885a7045755ba1769ae520aa2441a4abfe94a2bb2065b2e66d2d77fcbe5778875c8ff706c4e88763fb415156d75a937641fa0c16f69b429f8fb0e6c959f8c503ff5b732c25d2d2dd1cddd3b3ca5ea6b8e0192219ece1ce1f3e6767f886dd20acb756b09c53131246fb879e1876aaf5f6f2", 0xeb}, {&(0x7f0000000740)="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", 0xfe}, {&(0x7f0000000840)="d003c54daeb03faac07e7bbba7a970226c653c3456042236fe9bcc5baa365c3f4b5075eca5f9e9f41889cc600c367b1daf0ed7d7e46cfd26c44f130794bb64892e892613c4059372fdb2256a799515eca1de96221e87c290d41adca88e387fd6aeaeeee7b932f035e8d7a0cc0644a18e7636c089", 0x74}, {&(0x7f00000008c0)="7644319821c9b8fe033c975351fb87c169fd98fa38ad64f17867b9f25f", 0x1d}, {&(0x7f0000000900)="e14a2c6f51334c5cdb2f3c4f9776f7a1b330268b61eca2feed40d868c6fae9277c167c17e4992262cf91e43f737fd7a4e4d83cca4bcf9164817f21dcf78e8455176521603323cef5421cb16aed8a512d7af128e1967a9df8f82580e3eac644eb87100c6d2f93f7c7a0bce383c5955e933cdf", 0x72}], 0x5, &(0x7f0000000a00)={0x98, 0x104, 0x33, "9a3e36c075c7bea00b640bf4ec1b1f5d1bfc019b27cfd65b2f11286c52c059c3479bd16ae58226235debce4d3e3edcf3da4771076ab8300e789c7584adb2dc7b3d68f3a4cf1177989ada562a19ad29e9e005a2badce7bc8b9fcead96bc37f3c26f7f44a17e2d0542a3a7dce18567fd5b1d1d3ad7375342a7eb84d8517e24189532fe5a234ec2472f"}, 0x98, 0x10}, {&(0x7f0000000ac0)={0x27, r14, 0xffffffffffffffff, 0x5, 0x2, 0x9, "0b55aa5752a80c1ec7ed3d3fd5fc4ed741e62e8e9c1c1709402815ee2489d891c2c1e45c7a51cd06d6f6aeeb004ef1fc5c99140585f71a7c65e8aa071ddbf9", 0x10}, 0x60, &(0x7f0000000c00)=[{&(0x7f0000000b40)="41c6b6d6e14364937dea97d5fc72ab1868bb4e9bbf6a50571981f2a74beec01ac78953c330393988cb23856eb9293dfa7f3d8b9d3d74ec283a61a88cbc383baefb2a789419e578dabeaaa23ce82e8ea0837ea83da5ce1c148735bb24f8e6fdab73b17adb25366bd2e6397aabcaaadea497936312ca63549f767a7e347094dc6bdfacb3ca0ce7233e568593d56159dbac5ddb40eb37baacaf7d2b40b179e2ac9cc307ebe2d090d62b9002ba43f55e503a", 0xb0}], 0x1, &(0x7f0000000c40)={0x78, 0x122, 0xa4, "a00b836d35b16b456c471736f43520a52dd75a3410367ab1048630df347c595e8a58ff5a0691c9c155bc8b16a6143842143ab2ecaddfeaad594ebb18ba6b6b5affab2214dd8c73d14e8fd15982045e9314e65df1fe7cfe0044084017ad6e1d8bb330"}, 0x78, 0x88c0}], 0x3, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) 3.38032607s ago: executing program 6 (id=4239): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newae={0x40, 0x1e, 0x200, 0x70bd25, 0x25dfdbfe, {{@in6=@empty, 0x4d2, 0xa, 0x3c}, @in=@empty, 0x8, 0x3504}}, 0x40}}, 0x48010) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e044", 0x2}], 0x1}}], 0x1, 0x2000c0c0) 3.123198812s ago: executing program 6 (id=4243): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r1}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x11d, 0xf, 0x0, &(0x7f0000000240)) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001740), 0x4) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f000500", 0x1b}, {&(0x7f0000000080)="2103cd7adb8cd2250b11f4accd47aece6cf4344bc2", 0x15}, {&(0x7f0000000180)="1e4b6fd627", 0x5}], 0x3}, 0x24004010) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00T', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c009985f2330500390104000000080026"], 0x40}}, 0x0) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r7 = socket(0x2, 0x3, 0xff) sendto$inet(r7, &(0x7f00000002c0)="b401fcc8311bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0xfffffffffffffdcb, &(0x7f0000000000)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x2000000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xfffffe6c, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}, {0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1404c885}, 0x2000d8d0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r14, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2.962660951s ago: executing program 6 (id=4244): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xd4, 0x0, 0x4) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000100)=0xe) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 2.204062797s ago: executing program 5 (id=4249): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) read$alg(r3, &(0x7f0000000040)=""/136, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r5, 0x409, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4028044) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) r9 = socket(0x10, 0x3, 0x0) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x5f501}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r11, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) syz_emit_ethernet(0x71, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@llc={0x4, {@snap={0xaa, 0xaa, 'p', "4bcfb5", 0x1b, "ac9145bbedacf724c819eda8d0f0b2542e75c3d68e158296ad75773365956ef4384823269f03ef427c649c2bfb94df526f585ccf29f1187d27691cbb7662ec102d95a67b4c66a3fb5762b0838d98832399a371d6fab67f71891802"}}}}}, &(0x7f0000000080)={0x1, 0x1, [0xc10, 0x56c, 0x620, 0x518]}) 2.064725156s ago: executing program 3 (id=4250): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) close(r4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket(0x40000000015, 0x5, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e22, 0x3, 'ovf\x00', 0x0, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x1, 0x12d5c, 0x12d5c}}, 0x44) (async) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x40, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x48a}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000fcdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000200000011a728dc39b6802e8792d688057f49c1d1a762f5c3602feb4dd4e4d35cc60af26606d6092d7e3b502f702e34a58ff249fbed01f3f6fedafc276f3bae366fab7448ef1f4bc3fbdd658a87080c7bfd583428046ed2ef4731eeaebf551fa0cca8a4906fd37c3f3495f274c3a884af3086a970afd2d82d05240f1494a44a2d9851a1774ba3b106e2e035ee64e563f3f673a025665c0ce75699da864450f55a49e49287739ef0dee847962045f61c77123a0224d9968382594765615525a01a5718c80f37ca"], 0x3c}}, 0x4000011) (async) tee(r8, r4, 0xfffffffefffffff7, 0x12) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r12, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYRES32=r14], 0x44}}, 0x8000002) 1.774774603s ago: executing program 5 (id=4251): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100001000000000000000000647262675f70725f686d61635f736861ac90f325d33c7a3338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004beb4bcf0418322900"/231], 0xe0}}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, &(0x7f0000000140)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x4, {0x1, 0x20, 0x6}}, 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 1.664096408s ago: executing program 1 (id=4252): r0 = socket(0x2a, 0x2, 0x0) (async) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff1, 0xfff3}, {0x6, 0xffe0}, {0x10, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r3 = socket(0x1, 0x2, 0x0) shutdown(r3, 0x0) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0xd7, &(0x7f0000000e80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty, {[@end]}}, {0x1, 0x4e20, 0xb1, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "38b8acb36b8a4b6424dbce674fd288c08d3c08050af8e408ea88f3b5b215e7a1e1e7664d540165e57bb82d0d31a73871332ce86850900bc06a71d073dac51078cf0efd6c8bd889fa63135298a85cde2617d23e9bcd7856b9b1569683ceaa5a0a0e99a474c00f37b011d1b785c694617f7e8cc50baa7b0ca19b39700d8dba3c979a24c53360dbf1d46205582920216c6cb99971be6cc46b3aacbd5f149bd6590110dd67c7c1"}}}}}}, 0x0) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c2"], 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r9 = accept4$alg(r8, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001500)="a76e3ba7f87ed94e8b20c3d2ebc535d9439d", 0x12}], 0x1}}], 0x1, 0x4040894) (async) read$alg(r9, &(0x7f0000002300)=""/4128, 0x1020) (async) sendmmsg$alg(r9, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003780)="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", 0xffc}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c28c8dc0d", 0x13}], 0x2, 0x0, 0x0, 0x20000000}], 0x3a, 0x20040894) socket$nl_generic(0x10, 0x3, 0x10) 1.663047853s ago: executing program 3 (id=4253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000440)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000000500)=@xdp, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)=""/188, 0xbc}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f0000000700)=""/146, 0x92}, {&(0x7f00000007c0)=""/67, 0x43}], 0x5, &(0x7f0000001a40)=""/4096, 0x1000}, 0x8}], 0x2, 0x10002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x40}}, 0x0) 1.643681048s ago: executing program 2 (id=4254): pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x1000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000280)=""/147, 0x93, 0x0, &(0x7f0000000340)=""/198, 0xc6}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000140)={{0x4, 0x2}, 0x100, './file0\x00'}) 1.361615243s ago: executing program 3 (id=4255): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x278, r0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff8}, {0x8, 0x15, 0xd517}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x37}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0xfffffffb}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7a}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x1bf4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x2849}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x6}}]}, 0x278}, 0x1, 0x0, 0x0, 0x20008840}, 0x40) r1 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x80, 0x0) vmsplice(r1, &(0x7f0000000b80)=[{&(0x7f0000000440)="ad172b9ed1601368262920fd25379fdc99cb7dfc35ae779b0f19b7d9b5f5cf926ad140b41cfd89283298f0f89aa3cb0d02c0f2d0915bbfbc9dca500443672b4034c0a3c171092aae3d47fd262b98f9e1537c224fe006e3b85918c6d1cabb53fb28aeb32c14b7efa8e828defd7e3f9f5d27086508d2d53fa5892a6471a1cfe08b920c92d23531b6e090e44edc827bbd26aa4d765188627615e082340f7ef8a935727398d859e1b844c0b550745f998167320cb2e20592cbf7d8adea83b66ed98277ef3ff018be6218c996e19afd4ccdf018ce48e2f22d7c223fd3265c29d8fa8a6c0c45c36ec9edb8454f", 0xea}, {&(0x7f0000000540)="8bcd4eb16d74f6dd49aa699d285ca5d7994ab20bad8fd618d3248aadc021b52b6e2edb562f0b0b08289db3173813857ecbb0cff672048ab86ae3653bf7f95e730bdd99e7b948e8c1e15431f1c01e38e4c35bdab0cc395476b00ea8d232bf36b5d1aacd486907d99f33a60fe9502959a7a498b989ef37c8bdce81d99ae79f94626b984f9d474ad9002d12f97a70db5c26ac863bd9c5d01b9ec472211bc06a1eebc0942a56da00cabc09ae", 0xaa}, {&(0x7f0000000600)="72bb21d5be1d2f8c2c85c63fdc0a6d2389a5356de8cdc6fa7a1c93bc4650bd962261c927e2b70b944e575bc94f590942b74384ab2326f529f76b696ae3055c5173354db4644f6a42a698ca9aa4f2fc7ab26c5b2bc81130590d959652234ed82c1df22f87a191e63ed93c81fed3251d70e77f53df15aafc2c7fbb67e739b9ecee262e6c7cff13f000e826c083ffd6166dc7e6d83e16c516560182a1cf4c11bf87f06fdf509c3951f1094a83fdf7c927b8b603f3ddb50c61d29dfd8244d912232d5968afd5bc57e57307", 0xc9}, {&(0x7f0000000700)="9bcd38094e4e904781318507eb6c77346990f251c1548932fe0221ddfb66d68a5545926b6975fff1b988fccb9661765e810feb6cc5ad851701c9eaf99b72d3e6b8eb282fef9d541bb6129a52db0d8ba9f8362334f453608968117c79268ed382642f789b93a1a0688509bf719d212c9b6ed9846db359136537b63288fc2c9c204b74e9ab2df5b00bda0f9de0932ffa40b085743089316404613b84c83266774e96e40329a07c8bb1eed49e9920dece4cf6ab", 0xb2}, {&(0x7f00000007c0)="9eee2c618d9a3b1c9879ca00024fce88247a3a6d17e139e2db543ca53fa93ccaf1bed2c982d25b19704b8e889161d32f9afaac9f4da7c5e7e7942e6794f1835e8d9c3e8fc0baf1a8b6d0a7ce86d244e384d6ddb01387f07f0f01d766b3054b8ecc1a411677a48991a4d75a99a488ecb0346067cce5bc69c6bd482bbb4605b0a34d395acb6a54351f0d1285065342aba37b7f2fe54a32f2d33ba57af5a13c51889742edd54001d11a99db0c83921ec2c957bff8d80658c65327bbe67cde9f54f7b94e27a45ecf908c3be59ebc8a9aee8b9f19a78f8e903353b8354b007c3d5b674fca6f280a9bca655a6ed74b1ea8fdd5bf9e4d", 0xf3}, {&(0x7f00000008c0)="fee5c522bd9f537a258a6aa36d68fa68ecf07ca71ea5ffed8a4b784a125257b791a786025dcf5d54c203d6d8df89d75988d1ac75f8", 0x35}, {&(0x7f0000000900)="5ba9251d86e4f9dcdff0b0c36fdd60be7ec65f219b3e868c800168e667548404d903b16db2e98bec39ac0f9e0960bb75f9734f01d5f1a1136f173f9201ad7c20cd32670b31062ccea50c3374236c592c785b9085fca11dd6c5b44aba3ff4e3ffbbb3972aee672d3cf132a251eb9729809b1352503b87cbbe3acb0dee41472daa8aa019dfc31e5a47ed3e91cd459d76e3df16528abdfbf9e3542d29b1112b0f4a08caf6aa07afa02a66f2039a67aea8f65f9c11b61b707a882c", 0xb9}, {&(0x7f00000009c0)="ed3728ab2df9bb6a8182c35c77d7f004670d6e529d513548075f4ea25c8db84886ec18ef0ec62ad32877286b060e1d1716f82a6da0e45fdd82c885e0b3be44a64ed1b80881b8b4e1b2ee27b8edb8cced257da3d1438d0e297ec269c20e4568ff5954e0895ffa51101070dd1fad5fd0b5dc12288cf877f2ddcf4084c709d126d99e0cb089fd1dee8a6fedd2dbf54a6b7c384056b9ebbff03ad4b3d888e816", 0x9e}, {&(0x7f0000000a80)="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", 0xfc}], 0x9, 0x8) (async) vmsplice(r1, &(0x7f0000000b80)=[{&(0x7f0000000440)="ad172b9ed1601368262920fd25379fdc99cb7dfc35ae779b0f19b7d9b5f5cf926ad140b41cfd89283298f0f89aa3cb0d02c0f2d0915bbfbc9dca500443672b4034c0a3c171092aae3d47fd262b98f9e1537c224fe006e3b85918c6d1cabb53fb28aeb32c14b7efa8e828defd7e3f9f5d27086508d2d53fa5892a6471a1cfe08b920c92d23531b6e090e44edc827bbd26aa4d765188627615e082340f7ef8a935727398d859e1b844c0b550745f998167320cb2e20592cbf7d8adea83b66ed98277ef3ff018be6218c996e19afd4ccdf018ce48e2f22d7c223fd3265c29d8fa8a6c0c45c36ec9edb8454f", 0xea}, {&(0x7f0000000540)="8bcd4eb16d74f6dd49aa699d285ca5d7994ab20bad8fd618d3248aadc021b52b6e2edb562f0b0b08289db3173813857ecbb0cff672048ab86ae3653bf7f95e730bdd99e7b948e8c1e15431f1c01e38e4c35bdab0cc395476b00ea8d232bf36b5d1aacd486907d99f33a60fe9502959a7a498b989ef37c8bdce81d99ae79f94626b984f9d474ad9002d12f97a70db5c26ac863bd9c5d01b9ec472211bc06a1eebc0942a56da00cabc09ae", 0xaa}, {&(0x7f0000000600)="72bb21d5be1d2f8c2c85c63fdc0a6d2389a5356de8cdc6fa7a1c93bc4650bd962261c927e2b70b944e575bc94f590942b74384ab2326f529f76b696ae3055c5173354db4644f6a42a698ca9aa4f2fc7ab26c5b2bc81130590d959652234ed82c1df22f87a191e63ed93c81fed3251d70e77f53df15aafc2c7fbb67e739b9ecee262e6c7cff13f000e826c083ffd6166dc7e6d83e16c516560182a1cf4c11bf87f06fdf509c3951f1094a83fdf7c927b8b603f3ddb50c61d29dfd8244d912232d5968afd5bc57e57307", 0xc9}, {&(0x7f0000000700)="9bcd38094e4e904781318507eb6c77346990f251c1548932fe0221ddfb66d68a5545926b6975fff1b988fccb9661765e810feb6cc5ad851701c9eaf99b72d3e6b8eb282fef9d541bb6129a52db0d8ba9f8362334f453608968117c79268ed382642f789b93a1a0688509bf719d212c9b6ed9846db359136537b63288fc2c9c204b74e9ab2df5b00bda0f9de0932ffa40b085743089316404613b84c83266774e96e40329a07c8bb1eed49e9920dece4cf6ab", 0xb2}, {&(0x7f00000007c0)="9eee2c618d9a3b1c9879ca00024fce88247a3a6d17e139e2db543ca53fa93ccaf1bed2c982d25b19704b8e889161d32f9afaac9f4da7c5e7e7942e6794f1835e8d9c3e8fc0baf1a8b6d0a7ce86d244e384d6ddb01387f07f0f01d766b3054b8ecc1a411677a48991a4d75a99a488ecb0346067cce5bc69c6bd482bbb4605b0a34d395acb6a54351f0d1285065342aba37b7f2fe54a32f2d33ba57af5a13c51889742edd54001d11a99db0c83921ec2c957bff8d80658c65327bbe67cde9f54f7b94e27a45ecf908c3be59ebc8a9aee8b9f19a78f8e903353b8354b007c3d5b674fca6f280a9bca655a6ed74b1ea8fdd5bf9e4d", 0xf3}, {&(0x7f00000008c0)="fee5c522bd9f537a258a6aa36d68fa68ecf07ca71ea5ffed8a4b784a125257b791a786025dcf5d54c203d6d8df89d75988d1ac75f8", 0x35}, {&(0x7f0000000900)="5ba9251d86e4f9dcdff0b0c36fdd60be7ec65f219b3e868c800168e667548404d903b16db2e98bec39ac0f9e0960bb75f9734f01d5f1a1136f173f9201ad7c20cd32670b31062ccea50c3374236c592c785b9085fca11dd6c5b44aba3ff4e3ffbbb3972aee672d3cf132a251eb9729809b1352503b87cbbe3acb0dee41472daa8aa019dfc31e5a47ed3e91cd459d76e3df16528abdfbf9e3542d29b1112b0f4a08caf6aa07afa02a66f2039a67aea8f65f9c11b61b707a882c", 0xb9}, {&(0x7f00000009c0)="ed3728ab2df9bb6a8182c35c77d7f004670d6e529d513548075f4ea25c8db84886ec18ef0ec62ad32877286b060e1d1716f82a6da0e45fdd82c885e0b3be44a64ed1b80881b8b4e1b2ee27b8edb8cced257da3d1438d0e297ec269c20e4568ff5954e0895ffa51101070dd1fad5fd0b5dc12288cf877f2ddcf4084c709d126d99e0cb089fd1dee8a6fedd2dbf54a6b7c384056b9ebbff03ad4b3d888e816", 0x9e}, {&(0x7f0000000a80)="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", 0xfc}], 0x9, 0x8) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000c40)={'sit0\x00', {0x2, 0x0, @initdev}}) (async) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000c40)={'sit0\x00', {0x2, 0x0, @initdev}}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000d00)={0x8, 'veth1_to_batadv\x00', {'veth1_to_batadv\x00'}}) getpeername$unix(r1, &(0x7f0000000d40)=@abs, &(0x7f0000000dc0)=0x6e) (async) getpeername$unix(r1, &(0x7f0000000d40)=@abs, &(0x7f0000000dc0)=0x6e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r1) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000001140)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e80)={0x244, r3, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "8481f2b8a3aef608ecc4f01fca3b8c66ec2c56c96723dd3868568ce9c139fd1b4da4fec7"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "fddd0b486e7fce2a19f10b421f365acad4af9537dd721c0117b2adabfadb5b"}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe6e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3b9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26daa05f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x18f49adc}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x60000000) (async) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000001140)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e80)={0x244, r3, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "8481f2b8a3aef608ecc4f01fca3b8c66ec2c56c96723dd3868568ce9c139fd1b4da4fec7"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "fddd0b486e7fce2a19f10b421f365acad4af9537dd721c0117b2adabfadb5b"}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe6e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3b9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26daa05f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x18f49adc}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x60000000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000014c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001480)={&(0x7f00000011c0)={0x288, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x50b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0xb6, 0x3, "0d8f7e47f62cc7c8ce72c0cce22f8c9f88804b86e5998d541aef7cc6523939ad3ae6c419fa08ef4b8bbd94633f44903e30d1b5e72d2e6923cad8e65df7357020598dd72963a48a7084f39946d95e4b124e8197cdef04238b2bed4734bc25f92a6835331993f23b2ed130c834267fb1730c5b8fe1617f53ca3239262f6fec915ebe33505d2136d819e1c607972d83efee6342673470b9bf0f1074f36b0e33f778f026a3238af2ffd7f5eeabc11dcd7baacec0"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7e92}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x53}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000001500)={0x7, 'sit0\x00', {0x9}, 0x9f}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000001500)={0x7, 'sit0\x00', {0x9}, 0x9f}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44004) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000001680)={0x0, 0x80, 0x5}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f00000016c0)=0x9, 0x4) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f00000016c0)=0x9, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x94, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001940), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x8c, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x446}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x40000d1) recvmsg(r2, &(0x7f0000001e00)={&(0x7f0000001ac0)=@xdp, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b40)=""/154, 0x9a}, {&(0x7f0000001c00)=""/215, 0xd7}, {&(0x7f0000001d00)=""/58, 0x3a}], 0x3, &(0x7f0000001d80)=""/96, 0x60}, 0x10140) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg(r10, &(0x7f0000003640)={&(0x7f0000001e40)=@rc={0x1f, @any, 0x9}, 0x80, &(0x7f0000003300)=[{&(0x7f0000001ec0)="8175b258447f9ca480abe46fdc00e8e55e453326acb393c25c03009f636eda5056c2218881139af87743341f6366a05010fca51246e6734ad0c0b599ab3f3879003fe95ad2e003dfe258f24eda6e609d639d2c7bffa09cf75acf1a829edd4fdc5c9ce725b8b6f257a9d0b33ebeb2564027046a54be968a529535b8", 0x7b}, {&(0x7f0000001f40)="363e52b402162f28e90f4e7f0ffc72cd3f6d5b4c0db53e3d91f34a8dcb4de4d1374aec976c4b2da58fe033484c4f4705c4d61ee335d5126e702d32dda28f2a655a82ca7affa2ab0280f6a6af0fdf22c4fcd828e25757d0afc9a874a5e38f2f4dbddfe9a45747fbcf43da0ab5eae79747c45f76af873c4b5ba846d3ff087520de054806795a0a669ecc9de271fd731a683df487e6510ff9bd1cda648b3adfe82623b87ea4a8578d941ec3b4c3470ca2899fe1ee4265e78a38660eed7282fd84d5795c481a2c6e98570eac8f036f20262fdb439ff860d815236b930ba98ff9a5a12a", 0xe1}, {&(0x7f0000002040)="230c504a2a36c26e2e3b2471912243f8c79f1566e1fcdb4da891074d6ca6990ae4030ccc1dfc914941f47b817d8ac3b20022b652b6f4d0df88faf7d42ee998834a25f3d8dde0bbb1628a5e869b9c57772011338bf7a352efd9decd291a2dbe9fb8ad77939e0b2cb312e91de11edb6de433dd59370fba6a14828f42c025c264fe0bbb2ca3eb2e077377afd6f87960b536a301512ad7932d7a5022f0ebb69ba7e921748f99d2cbfedebacc5f39d89c9496e3372f558c3f9af3b5161be5cc716af35184d566dfe0600c728e566dc0abac55a75e92ab89ab24b620a232ad0de289625feae60a7677257477be17", 0xeb}, {&(0x7f0000002140)="894e00445700849455756658dfa7aa5cb95251a558b2c8eb3ff0186cf98e8689e1ee12d0c0e30c873ac20d91aafec2e8e4658148b3af5e59400f6d0bf7a79d7da23f1c2bea7f17edbc46e2ed33b4fa7dcaac0dd202b931994cc32e636958719287c5fe4ac690d038b0d5340067ae63", 0x6f}, {&(0x7f00000021c0)="9cd8c826e2a073052e9891236a423128f3774402e53440e5194bca531f71906ffa620642465d397910f45d822d800e71b349f9be9735bcd2c05b810e4366f7", 0x3f}, {&(0x7f0000002200)="a7e00b0adb7ac99827b5c2d57fdcbf33e2ffc704a9a06ee532babca31694388f3aaf4b32eea9d3d8db18bdf453c24b22339e0e5385449ba1db144caa4f049ca22ed58693600f9db8e9f60c8492109faa458f5049772eea979d1c8b55e9e35866e2239d660553e980c01d9b32420a614a62748c2c7679cf01921d47052d8946a064dea7c14a81ceb01a49e0b12b494c0b8119be4cccc30df1e07103e697cfadb583f82ba6f12b67091c0ef89a752a8423f66d4c3d42dcbcd40493f32c7dabd14f94f1c692a6de115872f9d0a7f000deb2", 0xd0}, {&(0x7f0000002300)="bdee1b9636e5fdc9044c162b004362fe767d82d995cc48dde2249091b1b5bd36163dc27408c88b6cc6045997a721d69f52e71f5d1fe21daa9add1733b65c9e845dfab55896c242e38074378a36c7810bf4b8bb898bc751962987497192c6496ab6477138159800da21f25e7d78c51fcd15c7fdf4729a557402e1f206eecd0669b40db1318ea3a092b46db3842f44175b4f2832fa49d175b820ebcd1b88bc6e633759bb6a04658c8e0525948f37b04154ed39e907266e53c8f35ad5e8d94bee89cc776b23015e282c69148a333316f790e4c0448224342fe18d34971304b5078c811c578446b0c76ab1edc7d0ddd5be588c2d5b48b5628b1dd51b907b9233a0780055b46fbb5734e1b40c724891629e0463cc5b268edd837b6c436941167f5a50babd606f0d49c7c6a88f3163946ae75683d96c25dd603a1df38b03a35d37f20f4f281b1fc5cd4515e3da7af0fbdc3e3ff762294de9b92c8415a868aecf38acb64cdad10754dfe6c2269982ac78d50da7a32f58659598c581e893a6a776375d548ae887597680ddbb6b2364c3aeced810442ed74a5844667511902de7672e0b1c04ef96172d048d18cfb4245c553808a151e12c93451c2280e1c871b6c2d5be94da31d48be33bbbfd17f8f67817afd181eadb14230df76bacbe79b43479c366410812aadc1f40bf85ca718dfef628526e92d506d844644cfaadbc4f11325161ebcf05fd5cdad2a9904b5e6230e071da62c38124648a0437e60cfe597ecaab21ead026da4d07ffe169123bf01ec50eab0141e6246a8c1c41623bd313545901b724985f96402a7154679b9f5d52374efe85b52d397391be9ded06e4b92d30a6fffc2d13f85f33e78331d12bd468f232372333cfb366d39cbdc9e6b62b3362350b24e566a4602e21048b86412a4dc94dd6af3ca945a73b932b789983561a1f4c52360bfa866e0d9a27e6e9481b63aee93a00d4c07922de7e9ab6a01926b6239fa2bee9c219422c46f644734046e97ce1a2d45bd726462638afbedf0afee4451d18858f9c0ca3c7ad891f1a72fee378901eb6693a0df4ad95f9df70988c16ba658b8ac74d3f0a3dd0f2521f424b86c274a54e24b90c23cb2d9b9dea20473b7ccefba6d92ea525c3b230a0fa96328c94c23b05ab15a8fe8137e06f9eaa4ff5d3cc9b2c1e996a6b1a5487f34f03a3f02a185a4351f4a74ca2b58e29822c1aef85d8c7ffda6a9df4cac69f52f9792c4b8fceaa62c9893a863cb762f0743a6deae74c82f1e0943fc1b09b6265581819bf9e498c8ffe518b81c1693ef81789e48885bb5d26d857c80b7481a80e53147452f75e8c4a99344870283a1f3c8f51f7eb9c5b9f86daa6c7cd02c541c04f23c69e8b304646ed4128aedbf1c8dfd71ae7bd20da362cbce3309cc703f31be143cdacb31e2e5db467e664e72d239baf4759661284ad23a5ff523bf83aaec99394f5e24ec206dd6bf4e185276051d41a91f90e5b80087f80f944ef5e872bb295e1985fea4e50e681ed52b31c2e5eee1aaecaab50fb03441856f1c83f40bcabe02ca9451e263a2d022471afcf674e34b09e14d5428b0329494f50821f4c46d988e45dfb61603a8a81fecf27f802acac5052f7f7f6b0b97b89a3d741861e21752b655932f9924ec3d805fecbddf1fd9e386c6d73c1566d25ee9492b5f216d0da9774db1cd78440135311cb5ac9126eaff20c41a4f9f65aba5d91937b57ac6bf06864baea1dd47ed3568e0d9b6abf8f28777b5628d497542bac92a257cfe07d4f210168b10af78972d5028b6c2ff27b8d9e385eedf906553a573ad5f3ff0e140de4cbaa08504c8482e41f2231ba93f14ee3ba4b1881f081efa085370dcc1ea4c514607b75effe556457a6406a280e450abc93c6de7c03d4df828e901961a64d78611891433c6eb16c7e254a9f5d38202d436c4264aaaab1027b412faf7fc2b96e76fb25d649e7da28e255731bb0bae931fad020dac95c0713b9262392da29a2a74283df8bb932b6649132a15879668dc0207b5a2dff94bf6c5d4370192064e54ca2dc5d978b1b99bf1996e0356b81405307b26461f59e831b7df1069620696567281f57d073a45923439718d033ba9cdf2ad64fa1369fc55f68954fbd36cd25e840903af5716027537d371364c00ed895d8068aed6c681d62ca9e0d00edd801cea1138b554b8551ee6e9fabfe2d1e4ba45fdbb64763efd35f28abec24f6fb544172a959d749c7366f31c93412ff94fd7be0fc1d9b50252b11488742076e1c29274e8a407afcab60884769f377478441fdc0ba7fa4c7e992576cd06143da0c02b4c2394e9127b0881df75dc7560fd196d4006f09815752675a212745d2a2dc6c7e12932f0b29194289010bda40c03917bc560d2e2f87bc76ceba82fae09936116decc9c079543ac2c290cef240806f9995ebb6b19f238e45e20e69180081b15bc93864adc5c1302904194c19fe98cd15b5ba1f164e812c1fe2c61ad99fee552fc8448409483485639e6466602caf346c5e54ae04fb4bdf8515e70fed067b90e97009b4226172ad7b717396f8d6125c87f4dbe2b7844ca640ae80011b02aa980eb40819c5d31be1c329ee354757e38623cbbcc8d12d6e9ef3e201d42003f27de31e7d48ad2893d9980113d4f372f9eaa9c860ac77398151e5b8c31d5cf2865b9125c86ac3cff04c6b76768e011bd6cb5be56e0e52cf81a8a029a22e6a9374b497ab347be5f97facb7be0062926ee0e8e62912d971ac0efdf9c51792253be70db279d5e8506b9d3928f5f404215819b96455da2f2d6a24053c3d03bf7d72023ade1091108dfb87fdb728388185c9ba6ae25699583e7722c844e22b3ddef3283b75583999abd0803890b014677353057c154f439fb108ddf4f1c0e1d580819194800e3ab2458f17e59f9facc8445988bbe4f0236d1518fff5c8f862792c193f77c4af1333b32b29a5c9834698d24fbc4678398a58bbfc73e1412bbe3df27e25096e645cf7bd438e95f1701a1438e012cb12bc2407361a90b03b62a021d4e14afab94adbeb01c3bfd24053576f1b8a11d1fff1017fb226bfc4ac942263b3f8162a0dcd8ec7e59b97b817d2f2d7416a28713077a85217351fabbe00454369008a090f35b352546e576e86402e0a0a6cc0280a7234558c1855309095c65548fc641b6d268f29c0541bac23339acb168d43990ede809b91e44eee57d94f7e5428a527e9f5e9c8636790655145ee057e9e2d3ff7cb6667c8338cf6064b330f480d8917e90219031805439fb6828fd31501f12a296bc5ec52681e5cc8ae08c5c8c60ae3841c54d033d74828fae2457c78c5e7552d7ecf2a8135574888909e1f37c0a4ec0fbdbe93a0ef82d77fa5921f6aa2b29267c31260f2092314abd97f081bb371fb3c1b714768a8c80c22aff898f7e73dd2ef942d93704e69ff80c0557371c6232085070ac752ce0882ed9aca69bb967f3af6c99660f5543a8a9b18a613da34e80c90adc0557baa0fb7acd2d439b563ea33d16fe12a8bd5c03d264a5e8afd91c7524ed3ddf7247c65c1a60724c8701fc7c001dc34e1f942fdbbd5c662055e8a41db44435a6694119106ac583be1ec34108c50fbcf5b7572658a2a68d8134165acdfb9cdb4b7d3666cb5ecfb50556762c6ed6dc432466d3c0b80ddba420c45173bcf3aba7c52e8d965d58501308e8e8331ed3a1e759347569f8c0b2520236fa0005dad66177bfa016de8f99df812723d3cb93b525c709c7ee47398617b12a1fb3632a0a17557ef0aeec2b358a1c461a36f56eb5f89875f689e9004852925b2375f028202c7e1be99f43383c75828c22e0d9b5a105fc5c4c6b049aeabd7bde7e0a0ed9e52c054a484ea2bfab62ddff3ed00fac8b4b5f6700c5b4b1a4df3a81b005da37ead5be3ee4ba800917eb979150e63c7434f52901de3411155c86bd7c0874ad48d8fa31a7d90fb148ec79da37087fc7253ed95719cb4bc4f06f29ba4e2773e20c1034d24c9cde0eccb5873e380028eb651ed2240cf2896fd4ab2509851cc7d3414fcedf39b89e92fb37885599989b149aeba550d3736c8bcaed47f84b633aa1ae323e7d9fbd8bbf1d2f92b9fc29ce0f82814cee0ae87f874332dac401ffc5526bc54557576e01d9bf62734901392265f9e668dc7c00e67b670bc1d6a8a6c87f372402fbd5ea79198734901a1ea9a8c8c80522d481615e27cc322e690e8661a1c5818a400b5469d30ef41cb425f997207b1b0b2b35dc79996047abe489365e83c1639fc1e9e38187dfb13e5ea8f59d34d37ac40cc31584a29c0e7f12b3f382fe8cf4d17a45e26662eab1f32266d3fc1409e23f0996eb71b962c34da78d858938c1f1342111cab6b6921db2c5107ccab0f8fa22ed9f98a0a073729e370744854dd8a2ee446bd34e93d056e7ac1b7198c7e1048dee7359845bef6167ee4e3db64f68d0821ea1ec93d7415e9b66cb8c7bffb15b27e5c4b6063e659aa0d6d056e7c99c5dccba1461a3ce46f838314a2e6eac2ebee9bc3b28160fb5539347aa84f62611a1ab875a125e3ecb7a14aabeebb59c111e8d37713fd349cbd946d7042ebf73af398cd284a84fddc1abb3459ce2520566eb588417f99ba36916a546c3e95cc13a92608a2bd4b894deea63f1fec02bbd49ba0c05b863cc91d0224399822ee5b554fff8dfe66258bcef0190fb45a4cd489f92f12db6b0f6f15da83dc19070e2d60925f77941e58e3164c5a14ce65d8535b41d509b31d77f786b615834752656f2abdeb851c24a18a9b85f1a3f97ed70f972cdcbe022afe463e0570453b4902ee1a0eb4635b7830add38693baef6be04db7e3237abd9edb194367b18e98e3f6e780fe63d648292b4d2e3fcc8d8d6f9325cd86e81d9bcadc188796c01cd4e1201afebfd8e1374d9bb11473db92ce035999111c7028f0ac69e292c0372501de99d63ce5f8c1cf4fcfee0696e9332f0d23e3204ec2787baf42f8310ac6fc5456234cddabc42bfe219c35b05dc6fb68ff64f56a7937eec8b12502fa090b11ca8c74f62e14cb5d1f0317d53c6703c62432af7bdba77d48a31448a24ff0d7aaf81b74692da29d2fc821093f5f56a5c53bb37916de104512d55bb7efe8910ba3a7344e1469953ef3a8eb35f5f29a9cff13a125b2a7d6fdb7b7756fcb4b83771ce232adc0dee544811d28902cf15e3897b37a0b428c3dfe4ed11393c7da08610c9247fe6c6dcb263496680a443b1e940296648f0677232d3cd0d334338458233d02d5c370affc6b2fdad0b31a1df51182d4ee6e9f2b479dc017d0925aa72af2c076a9684f26193d5a47b9e9def87c77a4ddc89e94ebef64550c2fb2b648b1a357389e89bda9fd1a64be96ec2767b58ddb9f3a40e637cb4788dd8081988aea9140a3b761c50f8532ad8fee9511ba9b54b6ff86e5360716e843711d37b493d0d474090f29ea6f7474a692271225bc0b2530791e3ccbd7e32adeae62dc3fd0c9aa1203d17f8dc00519e8d021e504dd8ed02a90a9f022b009569a79e5b452f817d4342202fc7b02a663fb1ddd003ebb65922c762f0737b90df81fec2c98a507743b519ec1a86bd5ecb5936c2af6a913341c30726a9a5aae42d4d9510e6091fb50a2dc55fbd4b9c362a94961725dd0b975fb1cbbd9e45b9d8bbb6d59d816f2208d3b4ccbd6dc88ade0aaf938487d65e13be5e12b56f71f324994faf822d22d45a90b0f88d4b01e934fc6ad7e387de1f5153e31c6cbc45743911ab52f9baf73be28d161bcbf553ea510ad7ed57932950c667c5f43fd5072e27fae225af9d127d2f2c0", 0x1000}], 0x7, &(0x7f0000003380)=[{0x90, 0x109, 0x1000, "0404822cf34a3932ecf056d520432f83087a869c6a19769c0e29004b978d9d96c4121167c6ea06f7f4e299f523df0de8a09ab6049f1f377c67759d91baf1bafcddf867d17ed82280ee0710667f502e920f8b47eb9934d9573dc041f56bf7fcad39760518d8877c1bfe8aee2319de3a1fd7c365c07f04efec367dc487"}, {0x90, 0x117, 0x9, "8fc11a60bed13da9533092de4e699ac341e10cd895ea0507515825eec7d61869c6ac2e7c0dcb0f576e434877292ac364eb597d2b6303670d4cdaaba17417db2842c08b9780b36b023a185241078a3c7353aec0f485e2b5cc68cfaaa5502b5f818643d0c54f68d4dac0fe26f309ab4d768c1fdaf5dc44d7c9a449969e"}, {0x58, 0x10f, 0x1, "f654efeed33ca30be99d475397aa8742fd88f8bd5fa7b5c783a2e5bd25ecaa81e422772fd668ca732dd57039a584d02e06de7b629fa0209c3ba7361fbfd892d5454dc28e70"}, {0x40, 0x117, 0x0, "228c3c5c54c388a983b670180336ec221e353cc0a6bf3d4884a5988c9504cfabd427f66d0b49676c55e22f0d4687b0"}, {0x90, 0x10f, 0x5, "f5b022f3bd373dbf0ff90ee55d090e55a053d03901f9052d900c7c8caac3b06f41ee557b3f9aa60375238c8a73bae2c38472a7bf32cf39c394625defb6019d49d09f8aeb0aed0add83257735350e1bece6daff0e1b1acd9bd5d55aa31c757b2cb30c61303d080dcdceb515a5e0524900cb80bf211ad218ae71"}, {0x40, 0x102, 0x5, "d51d6427ec6a2e209a0867622d2e6108c64636b5bbb0ca1e1c670b0528b3933cfa65dc17f088f48f1a651ae60f"}], 0x288}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006a40)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006a00)={&(0x7f00000036c0)=@newtaction={0x331c, 0x30, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{0x1464, 0x1, [@m_ctinfo={0x1098, 0x1b, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x9, 0x4, 0x34131f0f, 0x3}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x800}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0xa, 0x7, 0x7, 0x7}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xa}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfff3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x31d}]}, {0x1004, 0x6, "957ab98fac4ad41d253cf95e1d097d0c65b6d93d4c7dd57fbcbdf71e51ce364ef794822270ad8888666104bd6f272545dab6dcef568ea9fc031e8b5a706f47c68c8b6c83588c6239b6d8efafe798c5b291722f2f133743546cfb2267dad76767c5d1d8fef2be980ff3027f9e0236fefc982248b7e30fbf54d85f791f0c8411a8b682eb3212d7b81cdc2301a9ee8444d2e3dee5350448ccccad2f987eaec69da7b3aa396b4d4efa876c2c23692f01c5ff259faf58932bef2af96c924ea61a27ab18a37de0f91c6124ade53379f34b33812183530d23b202e5b64fbb8ccaba2e5d91d5bbe68ea06f303a81c0c7205ead71fce8541ddc8888cd4095bcb31322d919098060be05edde95e01fb3d84343538d82ebf6f92a524d4941b1c76c1800cd027e0d760b0c85416ae219adad20ee1706ed827f8c0f7a8b0badde9739cb8a130b1fdac5f80a23297ed25dc2a7cfeb9bfbd3eebca98c665931efcc7ecf0230999132519349022be6b572dfab7c854ea6b9295cab06d30f23c0fb5d309f380b9d612ac783517e2a46750f8829983b738f17d16915282d78b3cf0c651790c4539f2be239fd413581eb23a57e6b50b2e8435cff5bb910be66ed0e1836f2b65c42fda0f545d837d5ea7b55e6b9d16198cc2ec4d925c9ab1731d60df6816bed4b9859a22eb104cbabe981b61b965d618d36c7a3773d4b770ad0bfdac432c9b9fb6495ff892dfa4feb7b45990bccb42d5708ca6493b38d5a02f45e03229ad5b6871fcc4a4b8c3ffc27e81330f98414154593619576ddecb30263c3582addc752e19b39dd674e27ca55cec213e203e9abbd4440c332dbe6aca90ff7cda500dd558a1b8031758c7e68f360837e6de92a9bd97f3dff470c8fdfc7d8aba27369fefc4bbb9c9e4dab7f1bb35c988a21001ba0c75d50781806b7dadf272649939be2990783391ca23ded6db490b26aa8fc14ff298906309d1168107978d6571ec8e546271a4f092ed85aaccf5676e01097d5f5ed5b3f96c33dfdbb47943e53b45fd9dde5aa75e546c558dc82cf4db230f72a5971906a3d8114e6081478b52fe5b3140c282bde7a4eb1a898c505572b06e89cf8bac164ba9e39858d7adba63e059d1b5a487fb4e2071094877763180ce85514c802bba0edcd9e9963ae2acec97fb511dfd074f0f36b32c37a547293fddaeba5e7b08e0d36c5bb6c0452de9b03a89eb7fdce975d4943939aeb9a87a4d7ec59d82098dea9031c6b85a8bb41a9c5303455439ba681bc0dbd179b6508428dbc20171eea63c28a20cc378f963f674669b93ae72adb697052ddfec1fd09a6f8a75642b285a27e0d0a5fe779d30dc1a23626cc1630c21a3982315b6a3c602e4837c9446b94ced37966d9de2ebcf316723e41360e008abd695d478e7ce68d0a4edbdef7155075c1464f5bed8554359f5a174788eead11bb4c767e561b8aff9b5aad5103c7f46c88ded607c266feb2136f62f99ef93bb761590076715a77f5318cf8d6ffb42776448e08d1bbabb94d710e8d54435f605b5ecf9ed169454c30e0e960dd169e1697176830b6a9ce4a144c5830a4a4a04c468e9763bf0a577f9877a6cf5ccc0e0598fcf0fcd1ed9ce0f88bc671c21060406428f48f5c67ad90ce71a34945499bd6fd3bf899f97119fe28616c6b8373f8ba24402ad947978d5d58524a4a5264f82b6b9e9b4b388aa8d0f5d64cf885abcdce06d4f39988c7dbda578c2e8b60c1a5966dc2624511112242e702a1b235c68f27316c2124e5f5928a547d387259e1fd6c5103d57015216ea30dd69de9be77fe988a9163843dc9a116069f47562c46b178b442595edf8fcf946157ba2293972be14475b6b630b391bd7593240637ee8b557a4d2596fe32b8efb648e6ecd1b4e55e9c5c8a5360ad3e7b0600a106b8adb5efcb99e0e385da7dbd025fc69d74e93ecaf5116619d94e6ed3a13f5240cd9d5f62b0012dd1e94d853325d77d44eab7148eba7a040191586400f805731c858b121ce052f59329c016d85f98f1585b241910c7f0a72a5d73c68b92263b57106b2486c75a06e5454bea6bf85cfbe9014f329088b4e12fe624242f75ccc3a5d1a644ab7809f05e1f31831c841cbd63e1a45d4b1729cf205dad772a8575bfc2c953b0f2eabc8ced5c758cd1f29be7f1ad400cd9d5c156b36fd71f784a057ef42c71fda117979bc36cb79cafd7a9d66d2243777393eec48ab949cc2fc3aa8e8467fe2cfab4bddb90945e6f85d4e7d1653d46ef1613e4ab6c257a1946f90424c4e4e7045a1fe3abe640e602741a6118e98ea75bc6ab180f5f39a0647d595c0d17a13bdeaa52d3e86ddb404d21e711a24cdfc6d816c40902a34244c57a64b2d053439edf8bd24883d6bd3d12b2710792c860e5ec6e7bb0f0c7fd6e0d47b848f8cf6ff93bb0272f205dd32cbddad7ea56dffcb1b76a155ebec5f09dcb82e29f2b58b51055cb8d79b0b31d82041dbb3b3e86b532e6a9d46d984dc6cdc2528e276602ac7c7a5a870fc3c89176aba08cf1e14235c10dd5331495d485e9d3e5243ce63a56a56c7777710c8e3d17a7144f96fe03a0f93f03750a31248a4791f33c0634372fc8d9e436f533d69cdb8cb432655cc34af7265e66d6e2c18627e9c4020c592a473bb2401ae955c18d941e261d97eee23ce37f8fec8368e9afe2fc091461b84430401f0f080476eeef0935c6d4147ea0afcc1d2220098a18216dfdc2b40b18da3a6b1c5364e9a001d6fb337bc34a9fa20728fc7ce75c9be484fbb819b2130e4b7515d5b7075b9375a17b2c0fa67fe56db9aec430c28e48faac42005f1a2a2b237c5b13686c4230a71375d0f15a60e31610ca9e0f45917a420b8282fd222e58c411c74ec7fbc900c20edda521ea8080c127c68c414b2e3a213c58023ec6c749f1ae5948d43039fadb206f55cc411f25e8898936f42b59a0f3b362461de0123bd0a9e4a5b70d666951550e641510f96915db8c13f10e0515908313061129f1272517fbea101af3c33e3612f8db60eafe076b54148701709cc498ac0d682c9b8c1a533a8497278746d4a04c91d4b2eaceda87a7b4b3fdcd8f3038bb38f8706398e69fdbc6d1e0fb9a1f7791f2d2a985715620298230381055c67bef412d80e80e83890c831c5f9343dbca866fd27acafc9df2d1dc80d017bacd1606f8856cb39786a997591604aafb243afa63e771bc770bea5572d7716ee572ecd8f034a32ab326b5ef557057c96738801d34f304b5f7b8a9fd35c977eb91fe311c245e69e350f0bb6276b4716c8c0d4dfa32da291da745a366c45d33eeffea79ebf1386b6d78dbf9df54c36edc0cbd75b77f01591f98f102908d7925a6b4301f1860f33d77fb159156e79b01d2cea7072fb393030b345ce724d11d24b0c8482709f81d17472455add7cc8cf80effdadb40c05cff2b9f2c14933dfaa159acd11c313fcddae621fea2618ceaa831a32b0cc56f6b5dcc26e3ddc53a2da8c2bd20466056f5de03b0b992d2699c198dd1e25b9a165ec56fcb4b66099c6f9fc87cf2bdc7908334320f2ddd12e1e5854606aad64ccccd99ea544653c6ba791f8ec31d9238bc18f38996b17607a8d7c0126fbc6d2054b37f43ccbb4fb26b3dcdf3adeb333836e70612016cce7fb53d250b6132795d2ccbde4f51099e7f923942ba66394f4e5a4d04544024a1b6ce309f6396125f4add4b984e8488a597ef9a55e91f183ff7b4a230b1e3aab9515788432568c20dc5394b74bd3822db1e9832ca3bf40aff096d795a4cfce2b62ff901561e8ce8b87cd6393d3d2faddfe3ccf8e59901b23c225da16f3bfb4911b94b4a600baa02df804650c743fcfd8ab6529aefbec2263f13d6995c85f23edec7d554216b00f3333f3cb6dfdd0b1c0da65a6b0cb5516a8e680342fa51891f85eba0c3f7e59c1d3e4f9b436e030d97d491c5dfb214773e650f443c3032d1f3221a989a75b9ad3bae840a669e64e0b6dbf837e1e815d9ebacaf4dd49c8dc655c8d2cecbd110ce7872a30bb1b203aff33eaa008554dfd9783972e3987f75d6fba1f89697e33edfa133b335cb097b5f2b7a138e409e85d683ea4f7e81754b753977fb084664bd219f3574ebb958276a8da7ef1ace74d42499df3223a32ec4aef48452d3099e5748420532e3969602929f497a8d2df0550905d4a9b441a6b518298d34a63ad5f156766abc24b6c0082cfed99e3370f1153bc91a3f7484c7c2588e537152536dbd65ca55f2a6d9a490e2d962afe4fa05e9b428fd2b5c54fe0332b8f3da3353790b8f2caa4ec4026d997d9db2c2e5421ca3b6b84e7e1d76299001b0f8607b6e10553f8304d47ba2095715aeb95c47405c32daf49c057ae96a4f1d72894594506eb9f73485c20d124367d92d5e65426e934e038c3f022740e3c1308d061f8f85cc5b8ab0c405407d83d3bc29c15c72b525a75c71daf0cb2955a02dd63322ea4f530e4144a33e03fec44207c5ece339d63911a855d86c5bf2cc5994380c5d2c3fdad5079df70bfd02f280cd4d73178b15c4049098905f7fe8ead727345617ab2c918667694fb2f54d902a3dbec07ccffc24f509966e1f5f5567a4b2e54f3027769659d8498e538ae84100e534aceca31d8f61c865d3c36c0126a17398095cb13b1991d26ca5d36599912db1129bc0d218ec7abdcc4f07f0333d69e28e57fe0d464dc7a5963995cfe4b9258e8b674bfb6b2cd37c7f96da6ed727fb95f4758eb169ac5c260e33d8bc59c7756b2b18e4b0a006c024869c89050764cd865e19ff283954306b42dbdb459643f158051ecbfe41994399efc0094271af54c7de435af6e76fd3e30af6e457698d355609ce6b03d2642cf9edf3f113a08c8b97d098bbaf0ae708891bf9e31e0df67b4dd3e20de2811fb34d4010daa37c77c97b6f4509ae6f54a3a6c34cc62b89644a03a147e5584ab1670952b9ce336b980564b5bac9c333b945943f0a59d8b87cd1315ad469ff9b4bbaf3b77bb2f7b9aceff46a867ff54274d8a3cd98b7590303b941bc139689a1912296a7165a150b4eaa563e4642faa80a43f1288873bdb03b6a68bb2d8b6fff5b8891c0d5ad1997a712b4e1fdb99f6929929ed2713cb412680ad4f8a45a89b6526185243a902dba5dfa2e5f054c3729ac96edced5608b73a1e16b3921ff4145dd0be9bac0f9516f2644a151669a390f97d9c79ec43bab4bc9c502803b8b9b531a4ac87f1070cec1b8aba7e04e63bc728c5c607fb00104570765b8f635da294259ea95c91e202301cf260853f27192afdca96312465058265033f23dcbb7bfd417b01480b317ef8029922137c43234ab58f3acad90bcccf7ada0ca5198f3a0fd44629b6dac664ca41211093eb701a9d9715358eac278b4ea397a3c68821295b9470571342d17a044db2bed97d4bec21a28f98be5590ca7a5368c6917bb153e1f9d14da5f47e7c82554ee4fb7ec5402065833d1201360965b978c4660cda1d72ecaf2f77295de3ddbb3dba2dd545596a34725ce2af89f2abfe80e0cc91fd86424a46a623cd5c594c9dc8370c2382e458e0d83a123508fdd0b95b4d0089d610566e314585d783212d3465eba780fecf548b04058fb58ccca963724d7c0c4ff04c232b1e2fc08b50968248ec3d1f55e147d73c52c70a464b667f3282c271ff1b32cf27699231b88c1087a17123697c29f2fa8fabb0a650a817db5809bf0a2c80599d751e19f9ea45d58834571620c47fe8705cd7d9450ca7342205fe5ec4b9a82c88cbf9468c566f52cb3b4ea82723181ea5cedc8bdfa58a1048edfcc357d2c087482324c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_vlan={0xe4, 0x8, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbfc}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa0}]}, {0x97, 0x6, "76d033443f9d4ea72da1179e4377d16a27851d4996cec23ccb2ff881e7ca9a2d457add1b575ed399a248aa3565938c858627906583dd0cfc29b0591f7fb75d9428aa4a8fc8e4d037a4f1895c7fed6af6d4ddac947992c159004b05b9145d5ec6d48acd7d984dc23315b9797079cb7a34cc3a295d60e9535e3a92f537d191a1a2fb64be3b3ca63d368a57729a969bb574cc4369"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x16c, 0x1a, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "5a009f004b05c4b15701c4ff26cac462"}, @TCA_CT_ACTION={0x6, 0x3, 0x1d}, @TCA_CT_MARK={0x8, 0x5, 0xfffffff0}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x6, 0xffffffffffffffff, 0x1000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010102}]}, {0xfd, 0x6, "5680f9acb4693ce96d785f5d32b7446e369c2fa2b57120cd1abb5b557df25d052eba52001316c5b1742a7fd07d47016a917d9c16f4c7c0e4605e178d90719a1be987f5a73ab77bc5fad26cd19745ca045e001d25e958216d43d834da47aa0a20f3810d310551b4fd1c9f0b3b006bdcbf6b9550d3c912093cd50b14ec637b25075d72dc8978d960ae93557bd38757678e4b32a0b8586d4aafb349ce7d815ed9076a52d8f8221409815ad795f0cbbf47e5113ced109aa99351223582fc14bbb4a808a60a66aa6260da1819359d4548cec19b38b80a997dab7b516d9676b2686c5d7d47f63887b0439e50d726adf972bdb05106a71d17e39d6ed2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0xf0, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffb}]}, {0xbc, 0x6, "dc50b8a1503aa4cc1fb4284b5f53bff6b8654728b1bad6ec783741e6c840dcff26fb6065f8571e6c5a69e2dd2a2112087a8cc290926e6f5554b0bb65de69a9423d5a9c8d7532d4498854e427122dc95d0ff5ea6973b33806f384f5c09ebd8e93da1e0c21f607539190ecac1cf31793ff40e784da6f1f7cc39743a6f9152eac6c7c1bf1734a649702b10fc5134beee3080642f3103b19a001154efa5c4497b0fbfa4b85960b871e136571b2c91fbc70de13aa304a98f7368e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x88, 0xc, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x9}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000000, 0x5, 0x7, 0x3, 0x281}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1ff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x12, 0x6, "85cc74840f02bb79f52e5bb767d9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x1524, 0x1, [@m_skbmod={0x124, 0x1b, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x40, 0xc43c, 0x0, 0x3f9, 0x4}, 0x4fca}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0xae, 0x6, "624321c484977534e0a231faa436509e26a1767c2d68740a0582b8d0ff4d0da3a52d746280954f2044136fb560e2bed886f42950ff1c21ea0111b77d793e7d773d1407ca94a63af10580ed40511088bb64b12f8ec49a4dfca2726b6111ade8b6eab40ddd3159f82876305aa261be312f9f7846c47f8da7fc402776e04a3a26e6d541ca7cca43d0ddf40101485dbff267a363baad0bab6f092aa7af8a53f203514f4fdad0a5140595be32"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x10c, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0xfffffff9, 0x6, 0x7fffffff, 0x5}, 0x2}}]}, {0xc2, 0x6, "6071f47f990ab30582b68c47071637e8ce48bb67809f99c091f08d40a088e87e453a33abb3fb64ea14857f82705c85461f23bae54e486ae83dde6f5dcc1be62ccb32831bd29488f842650864aa4d6c83f84845ca4ca99f84f717446833971263b83e115502278f894d8d75ce4ca4bcf8bec9b1c8abec6bc8eb5a8b131c00c64f5dcea127823a8cdb44fc1178d218064b50443716cb3fb23e5c3720df959a575777a3c0ca71058cb394b9823ad1bb7f82e2a81268d8518f0c480d2fe74e6d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x10a4, 0x6, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xf, 0xffffffffffffffff, 0x81, 0x7f}, @multicast2, @rand_addr=0x64010101, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xe9ba, 0x1, 0x5, 0x5}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x5, 0xffffffffffffffff, 0x9, 0x5b}, @private=0xa010101, @broadcast, 0xff000000, 0x1}}]}, {0x1004, 0x6, "84e65ac0800494fc2d9abd191803cdbe7694427cc74527cbc71986a0d744b8f5d1522d6a3ee2237e1d88cd5ef1ee44bac0518e3b441a253f88e076e3fac1e9565e44ef5b97413ada2b6afaead320141c9e710a3098cc4c003a49c66a1eba7cf8c5e6f6f391b2d27cafd190083b62e4e779dd21ec9c641c5869800ae171447fa98cdf0ee8d01b76da062e908db001a25e8bb87ed8d0d0a56d44d40bd143ea727833e4fe01b940d094a03d046414a434503ef260855ae80413ba260f91d0a7ba91f86db6420da2b808ba991e52d576823978ed66e9816112918cb0f80cc981363006dd03b79dd333fb3b64c5e6bcf0c75f95430a8b62b57f4c2b3ac89dca636b7317464037ce77adaba73c4a690f0c422d01196e5303e50df8a67b0641116049980a1f33c673de898fff5e2ce95815560df8f8e1b6b7cb58f1cbc145c61cbb9f0c65adbc57279fa5395c89a7c540c96211d899d1cb9f9452b2ad4470463b18582be7dd24488dd0ec2b95d5a01ee1c27b4669cb73a9884b340d4d6b5013ebe3754dbfca6d2d34aa9404a6d64a712867e4936948fe0a5e2bb939d8b1da3ac18265ed81e70f7fa806c81e56baf2c405ddf166068311f5262a43321c7ed1b7bea82a0f1fda40e9d10c3e7e88dd66843fb3a8683f9e5ff9638859f886c313484c074067491bca1f3a3c17e1f2af255110c267a8afd8559ade126f4a570319211b42826851a8d74cd46f5adde0f277c39a292f84e19012803e04b4ab583bb04ef8c9ec25e0e41819d94c6ba7b9ca763ebcdae68802012b166c2f79656d67d6e17d0cf89eb3994612b681863634226c8477aa859ee2b43f5595757ac69d99cd818453f8e7f8335951d03490804c6a5d894a09d6cfbf2a59eb8eb59cb4451b76776399b74c999636b18cacca51951bca42022f9d359e4e06b2485aea1de41db9443212be43d859a4964b9805e5a3d39bad5ad69e035e8b17a84cf50603671d25117e82d6b74cfd77a3a8f8a6f303ad870c1aa38fa3ec41c7dd4eee65a7ff93bed8c9bf5c35484e872f14d9625f261750c44aef65cc1fc7f49af0e0aa5cb6fe81693c823a9a8caeda0fdbafa70f885c672ec55092c05bb12e3135d8831503f083486a55bb27f297d32022f60c6f44778e86c47b02641247ce9a7aebddf757b1d740c0f20aed6605b8c9ea9f2bb4c9334e92d1456b8ee2be25a9c836ceb171fdc036e8e31e9ce523ec0ecc42202102e703dc8ec681f90066875d37dd2c37fb53ab6fe993a1e1eef3f0cdc917449c137205cf8dbaa7af457a4dee7de59e9513dbe1e7fda13c03e35aa62d51ed9446a68be2fa0e952497dca924432a9e4bb2291419d7c5b30186e182d4a57839219cd9073c07d3f9c93f82bfa7ffeedc05f45e53c072f08ff04f6e5a6efc88e2f20c7d4904e73fae53c67e4758e55ace133a1000511246afdce7b32f479ca0b8fe0117a8c287462de8411d9ea400391fe1c38d591326d6f05fb29b9c9b003e73570bf36974c2fb13befac5529136a87cee933358c0db8d04e34c80dc6608d792cdd0a77d03e702279bbac5bba097dc59ea83b7e3546ad553adbd36ba0af9182213aea3e8c05a5f1767ff2df8a32a1280ed795db335fba67bec62de188061a9a384e60172926749cf1ca3e31a095dfd427db203e95383db86595a488b8d036f031bd3b87f60599183401fb822af3ba2cbb431e0730d664d067c1cca36faf478bb1f981c869d63e09c82c1b03b6d625a15ed66b84f7f9fa18a4662d6b87134acb82e9b0f2996c3a28ec58e9d740cb75773ffd729378e36f9fdf12b1f22dda47d60b3b70dacaeace8e5b33b73cbd89391a7bb651e3cb940091ce4353e94424cf8e012e47015662ec966944cf36379eaeea41a579eb1413e82584806494c81a60f0bdc15aa831c0acaf2d10313747756e981ef83ce28e6406a3dc128689fcb7b46836973df1f111abb6714096f65eb40d29b38179f26302bb01b3e5a970018c6211ff032f0eb39fa77a9dffea9acb3fa4c879adb98d9b3525a54bc82a99be4f4fc28f746e5527b24c847143b186e34553a3db58cd078b5483cb01f2542a4307c7dc3edb718e3509c2dcfff7c83529332d2a4f21bebc8f587f7827d71b4a109367a9fb100d8bd1e0c5a483a8bdd23a7ee194a4e4176f1109464de91a9e943a25da4ebb9a6630b329ccb1e94ced444660843c812dccb2783745fe96b94bd477051ccb243946d5b448d3ad25c67f5e5943028fed47138318856beb9b502a6625f02cce1b098a0a29981ecd51fc64da132dc742246ed16fb9562b9a7da84325b11170ee882062c90af2d6e537edfc70ca0049a2747f6ccf346e80b1a1ab0a50b652ab32aa72b8114e92c3e6e1504ac2936c1420fb2238ab0c6c7ff5af560db0fb58b8d1a5742599bc1b679f50e823d4a33c04ee7abaf293abd507876044bf523684d784eec597591d3155fa4b04d1de6cf43fd6a3c4a6b4ddff6171931de9503b33cd5568bf48d7d303f561326608cbefe0679f751b5ea2c41f992b3a382166a2717f2341d07c1d64aa217a5fe49cb997e4529591c9919707280a3483a5f04cf39dec462602f62698a6410e2ab1bd02baacb66ba19fce4ecfae51780353320661940e95799e49acef42ae484485377b319b675ccb8dad02fd9937fde003fe82b46af3d27d95399c4a87e486de24d500befa3bfca4ea143e5d1b94a5388bc74095898e5ad0cb80c33210f4f9f670d131ff553cece8146ddc3526c8486745e512ecf46cc1e255ca7a6ba91bad05d09d552669f0c7c9e256a3fdc2bf33b1e772209c57943b75a8acf3b5478b88d7f73b0e1643ae9b0668c7fa6bc83309dfe474d36acf062ed9c2d35a44757a0f718da8a49fe00c4703223cd41cf8b931395cffc70b3fb2e703e360765510a41a7eebbf14bc06254a7c1ed80771e865237ca40eefc15fc081610347d6a0da04fa3c5beb297020b83b67d4cf858f182e68e535fbdd961246a17bbf2ba02f8552d510b1257c755338a38990fd5aa635909762d31961911bea12f721be502cca5b114acd5834f3489784f04a57b1d390767b302a094c15cbb56025fbbfc87720b8ca6ba7da2083a8196b91e44ea9489dfc904a20e6f7321c2347f6722e976443f41a34cc200830a4469120b3b583d09743894549064e76a75878f83cab61a6c4a7e711ae583c20d60a18bae277d15236093d23d257e150c176591dce7a069d2faf246a2aa7184f8ef00151027ddfc6c46b19558f3ea40d48c1a1bb28bbf8ff74980a296d319303001e2da206770c4b6c98045f2e4df599838b04100377f548d7e2a0284e827bd3f126645617b825d6125b980815ac265d4d7610eaa0ac9289848950cefdf1ebbdfdb1cbccda51ffbfc8b08d0d4217d7fde4767a8405ae61f4c7afe07c0f8ca155e3a17bec98c8c58826fedec74b0a4bc2df8ebd97f660f05814aea12cfd2cb3f8cc27670ff43a7f76c8a8bc1dadbe4bc4924d92f9eb813dfbe6e64125819c1892a978eed593751c309c41d42e235ed4632476c4266a5ff00bb52e11be1a59b548a293fd531c6b087d4b79d072e8eeedc5af30dad43ba5a9f2572fffae051447369dbe6e7d7b9abf3d5568166a5f3d841cac40d2571b7ce988d26170e9f2e4650dfe008b9401dcb9bbaea849e19b8dcdfa974b83d65efa2c53d6e5700b9a2c5439482e916ce80dd3bd8bd1c294ad11fd4ada2ff03729720c9b4011dd25b0ca3c16698489432784c99b42c5b2bdcec4fd1b70e4b5af2d40a70053d32f78cc56d3de133ef2996c0d105a69eb2c948aff5e011675128f247f799f8d212b2aa2648a6c8b1ae682577bf008868d93d728cac2d63f7da3162b946a04c9adc96d431a33aefd45c723f73627738c8e59143ee33d247cbc601083f3a1e68bad8c917668521cfab9770e8e1c239082305e3bb7666f710e02c9f902e4d2392605d5885d097295ef1ac2bf12d4ee47fef77a20950c466359d5a4d09c12fef3217face29a576e38533d71860caf4d70cc5ba6c9f0415b0c566708b83f63838e5395c9f849d7aea3f4aff6665e304c625d041942537b8d15bf913c5fe6eeaaf36ca04bed3bb5617c3adb7102a50938c10669775c5454c774d81b4fb20f10743e334cef1fef51c80d39ae96cc26399c139858325db6c1f06759275f06015145e83d1a136b16f6c35f278acb2a474a458bfb253940d6d8c1d7e2ac05873efa057481d74c81d91488c0880b3a7d681b4432c556ab1b851b08181577c9dcc2692aff137cfa68a0e04920d5f898f8e9498bd8d56a74c7abc23b319bb8416d7f7e74483f235d4b587b5f3ba86502be23825baad1e2238336a8de04d37214ae4050c0d53e301cfbccad9eefdc48ab4855b8439b44f59dd0416eca92bf2763ebe60cbb02aede19b113a58a0d9043ca152337e0cef83418a2d727ad5dd4df74221c0822a3925cb21e66aab21ad41e1eb7fa961bf06b731a9b1acfc20dcd0d229c8f8e820b3277536a40b952c58563af418eb8dc22e67d3e8a9dbd5c6f48bd74f5b6529d62f91863cc7a1afb3885ea943713d51ed1ca0faec08d1431ad7f27b1f49c43e5959dc84aea0b02ef2b6c6bef2d1bf895484a44851b56d63009a54dba67ce1f1b9805e4cf777268e92b57180125d9d2c394ea40117557fee16f95f887cd7852e908fa0095272c362eb64c723a98d97f86fad5c30a86162b419ea94b7b3e429d972548ab5f669d6a47cb4aaa961be477c45d5397445beef9d21bac4c693f4bf79edf38c1971448937bc54c3635f208099d4d32fd19c127731688005a4cdd09f56106d4ddbc75bc59bd8c68a78e9706fa50219b1c7d471abd0e1bf078feaacae9994d600865a4f27908254b4e933f4bdd0f4e66d93143ab9bb5a93c9e2bdeb512473fb8a07578524c51410f3f23d32602c4ea77126ac7480720bad9c24a7b25bed88b7205ecea85ee807c88f03a66fdd514fc0f1524af3ed287c736ac1dee4d8026c8952964746d2ee369a84c09d0a16a22b3f04832763962c04242b62e12772fcb00aefdab287c2b4e18ea6112cf07cddee43e23516bffee0e116242096992eef418d21254e3aaaeebd999e3c8e35986c05c8bf3b6e471a5826d43047768751f66e7da4e0fe53c381aa80445454288c7c07439bd8932d673c5177d8d93a5708c51cc709048724c76aeceed1308605f65a042f8f850e31e8a5e910e7d55cef7c7df8e51a80839e4a9acea64abc144631e84de330de8a703bd0bc74cbf2a793bf6dfae2c709a54e9359955fcf6b34f1695d13f63d1435ca00f9a361083614fdb58a657472920c1620a11f4d8e87a351141af340e8ca107ba47fc4d79bb8cb9e57fd05773527f656881a81d2ad5fdaca719a31d45c3b40231b98e2c272d31c0333edd2bcc6404bc8134ab563cd6fd31f795f185004dce383cadc8bd40ac55bf12fd637cac891d6c7edf197a7d417f156228273e5d673dabb9eaa88127444b96f2752ed6414b6b294d6ac0d985443a514b38a44127ebc357e42d97b0908c12bda571c0ca84ded4b569053a1189a8267d24f777279f7b265e9d9e05581a68515b0de68ae8ee485efe5d6655a93ba4993a46bc253325a5f3f733c6c55926cddb0d3bf1edcd9fca12213a8f7247fd72a13282c944029b4641b1c80fbda9a039c3bd4477acb60d10470fa66d9c02ddaf1a783a2b7a3173b4603b7e6026027dc793452eaa8f1f4c64319370b27d478c1ceac886e4ce3720b4a62b012e3ad4ab56b4b2beee496bbdbb4c164e930a9d6b5af057c2f829443e372b5cb3b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x9c, 0x9, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x537}]}, {0x67, 0x6, "9434ed3143f7322468211b35b1a7b74560efdd63ac4a377169c639311b95c19105949e46ec10d79679f3bd35baae1ce4316dca52cd093dfc398ada30d1e49ada3ff81258b302f5e7ec99e7c1063c50c76277b290cf8a50f96ffd5912821bee495b492e"}, {0xc}, {0xc}}}, @m_csum={0xe0, 0xe, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xdb, 0xf7f, 0x5, 0x6, 0x8000}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2f1e28ba, 0x1ff, 0x7, 0x5, 0x10000}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x188, 0x9, 0x1, 0x7, 0x178}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x5, 0x3, 0xfff, 0x7f3920a8}, 0x59}}]}, {0x41, 0x6, "dd2b883e173577db0779018aba60a9ee3877a5e200094845237ce7a4b64b948ecd7f44846edfecbdb448d7f6dc70f0f55b139b5d595d6faf64fee65fdd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0xd0, 0x13, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x5, 0x10000003, 0x9771, 0x9}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x3e, 0x1, 0x0, 0xf}, {0x3, 0x81, 0x26, 0x6}, {0x9, 0x0, 0x80, 0x2}, {0x45, 0x5, 0x46, 0x5}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x39, 0x6, "92fa30823dc6a97f87848fc4389755e80313d9eef83f091a44920c2a0cbb53a2b94d4c1210481ed146b74c3c9b56a66298f56198e8"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x980, 0x1, [@m_vlan={0x138, 0x1d, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x100, 0x4, 0x0, 0x5, 0x7}, 0x5}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xf, 0x6, 0x4, 0x6, 0x7fffffff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0xc1, 0x6, "6d9cb812a2f1d9004460268e6621babdd45289b8ac7272aae6b154e06941a411558d40b232c76f455a6b308bfcb03b976b38f7b54e6c150a049d45eb2d64886b5920bd252c5c191c0f7e9c9c23aaa30613c812b77a8451ee3943b2e1cd003eab84edea849577c4d96ddbd973fddb9a735e5ca12a09236bce8f60ad116e22c952954e9e85523d1947e95413e3012826c8b799f99c9c4372eb2972b695f2c2fff35ca568c6aa616b1e2ce29bae7d5543f73e31756dc3ee0b3dbdc9cb688f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_skbmod={0x15c, 0xa, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000001, 0x3ff, 0x10000000, 0x5038, 0x10001}, 0x7}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0xcd, 0x6, "b8e5e98338f6587a019ee1ff08b8bcc4e68ca1e2db9735bb4d4d5cdf1cd2775aaf24be6d766d6da5a691d6cd6dbf0146d35dca1e2a916a2304215bde94abe872d11cd22d498bd56e2fec68edd2f96830e2fc2c06c7a9fec68ee2bf03a8030b1ec4a25db40246b71281c4d8fd4765fa3fef7b012133b07c62a3891371493dfd56254e29d4fd79cef5f7e5f197545af64c5c89e29d6e90cb1187df5dbf0db3396fa97c5709e64e2ee8d749d97b0a6a4ad14f76457349de86866f6afe1a67b7ef05b6a2642fa9c7fdb44a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x134, 0x1e, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x7, 0x0, 0xfff, 0x5}, 0x6}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf, 0x1, 0x7, 0x7, 0x1}, 0xe}}]}, {0x8d, 0x6, "8c9775ff7bf8f5b3a68a1997370940c38d03e7ae8f0baf27f22bc72025ed5b38d5d8e2d9599c91a50a449f7f0bc2519a8193138f93a4c3d37c1117c0b74a0ac8f2c07a22ade555267ee0e17bf5843d7550820da696151142026b526d5bca73f756d14d628902c4e40861541c44503bd28d38bad346aacecb1c832997bc58012612e4422ce32456afb6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x12c, 0x17, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x39e}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0xc7, 0x6, "9da8e5cf277c137bf5e2dda982cfcc9244533ae50799d78f3ebfd4e4856520df607b415eb3ca1c9d60996cc6b6c428a695da28adb666afd09bafc3832d1e2f2f2d7b8561b076f11d07e786f0a4b3f79aec28ab05a9115bee28dea70ad744401e538d2b6b3973c545492264ee1fa2703fbccb8d520404e517b8deb6bfcd63ac1ccb3610f894d3a2c995511e8ea149997b6cdb8e896c07f41e464e479bfe552c4cb00eb1c5319ba941f0d5180d50f38c8302be54bdd9cd1df6eaa62ef83b7e3704850c1e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0xc0, 0x1a, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xb45f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7828, 0x8, 0x3, 0x2, 0x81}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x54, 0x6, "eb47a878ca7f3a10371e84cc3aa7734b45bd18f1f2757c80afcb74bd2d3f8e10eba3a3fa5db8e608bf16b04a9bd24405021c371a6066f10c6947524958784921962429e3aa0f2ab737e9791067e5402f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0xd4, 0x10, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfffe}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x10000000, 0x3, 0x7fff}}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x28c}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x5, 0xffffffffffffffff, 0x80000000, 0x9}, 0x1}}]}, {0x6, 0x6, "37fe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x150, 0x11, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0xc6, 0x6, "1e190544f6866d555b4ae05b0ca87a36e496320476a4793bbd7b8ce799f6d22d9ada9a7aa0b963a4468a4ba3a49b5a536cc3cbe8a3ff968d08d2e9f755f55276985757edccb5957d54069e8dfb57de172bfd5a78153fc69c27f724fec877821f2b4e40ac1b770771af5cbd8981daebf7ced0af184ff96bf2bca50fcc8be2f80087523fb3e25879ceae6ca02a050767db05db5b1e15132644908f3d218a6eca5717b7e35d97fb58bcdd3ea08dc6517e4b96a8fd3aa99d4d889af66b928cc5467bd620"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x88, 0x1c, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1d8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa48}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa1e}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc55}]}, {0xa, 0x6, "32e3fb241a7b"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x11c, 0x0, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_CT_LABELS={0x14, 0x7, "08a80b5ef4e128182c70166c08805e13"}]}, {0xb2, 0x6, "bdd3443fe0a54cb354fd7b50469bfc20fd038a8bf44e3e068385fa9289c1b0d01dd7b7a3a6d822dff6bb10f7809a4588df78b5c50a575967a6567f783c43eea18ba15d5684ce018a0f029aad0334f51167da824f6492a9da58ef327ef004c44041aee7fcbb967d5d84b7d33ecfccad395bccb61184d29a13dec66e2842c56f0dc8b6d8c9cb01258effca16c79dbeea6730623f8c765afe11335721e21a7e3b218fc7e97def505955d524c5097840"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x331c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000006b80)={&(0x7f0000006a80)={0x10, 0x0, 0x0, 0x30220}, 0xc, &(0x7f0000006b40)={&(0x7f0000006ac0)={0x44, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}]}, 0x44}, 0x1, 0x0, 0x0, 0x44014}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000006d00)={{}, &(0x7f0000006c80), &(0x7f0000006cc0)='%pS \x00'}, 0x20) 1.302347257s ago: executing program 2 (id=4256): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x209, 0x0, 0x0, 0x82, 0x81, 0x15be, 0x9, 0x803, 0x1, 0x8000007, 'syz0\x00'}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x134, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x134}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x89a3, &(0x7f0000000100)) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x3, &(0x7f0000000380), 0x18, 0x40}], 0x1, 0x40800) accept4$inet6(r3, 0x0, &(0x7f0000000000), 0x80000) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f00000000c0)) 1.301083744s ago: executing program 1 (id=4257): sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8844}, 0x4c040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1000, '\x00', 0x0, r1, 0x0, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 979.820156ms ago: executing program 1 (id=4258): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x30}, {0x80000006, 0x0, 0x76}]}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) 979.208221ms ago: executing program 5 (id=4259): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18410000ffffffff000000002000000095000000000000004b64eb8cfb4164e868b77d44bcd07f2c1719e6466d", @ANYRESDEC=r1, @ANYRES64=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/153, 0x99}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000680)=""/67, 0x43}, {&(0x7f0000000700)=""/179, 0xb3}, {&(0x7f00000007c0)=""/223, 0xdf}], 0x6) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) socket(0x14, 0x1, 0x4) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000300)={0xffffffffffffffff, 0x8, 0x7f, 0x9, @vifc_lcl_addr=@multicast2, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xffffffffffffff0b, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffd}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000086) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x400200, 0x0) 964.648346ms ago: executing program 3 (id=4260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004080) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 864.199947ms ago: executing program 2 (id=4261): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x48000) (async) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, ' \x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r9 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0197a0b57e816213e0000a00000008000280040005"], 0x1c}}, 0x0) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x70bd2a, 0x1, {0xa, 0x80}, [@RTA_OIF={0x8, 0x1e}, @RTA_UID={0x8, 0x19, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040c14}, 0x0) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000000020073797a31000000000500010000000c00078008001240fffffffa000005000500002005ff0400"/76], 0x58}}, 0x0) (async) openat$cgroup_ro(r13, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r9) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r15, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1040) 839.557449ms ago: executing program 1 (id=4262): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = socket$kcm(0x10, 0x6, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={0x0, 0x0, 0x10}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 755.775019ms ago: executing program 2 (id=4263): connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf252100000008000300", @ANYRES32=r5], 0x38}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004c00004400000000000690780a210104ac1414aa44140a01e000000100000000e000000100000000070704030ec0a40000000000b1dd1fe6ee6cce76bfa446c3580ee77feb3d0611df0c4f516a73919515e9b05f6f12b4002591a21d220463f2", @ANYRES32=0x41424344, @ANYRES64, @ANYBLOB="5c80000090780000"], 0x0) r6 = socket$inet(0x2, 0xa, 0x9) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @rand_addr=0x64010101}, {0x306}, 0x40, {0x2, 0x4e20, @multicast2}, 'vlan1\x00'}) 704.21734ms ago: executing program 3 (id=4264): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x3}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20000400) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x3}, 0xe) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) (async) 674.588484ms ago: executing program 1 (id=4265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x14, 0x1, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "a71e2a26c2d174b4380271c119"}]}, 0x28}}, 0x0) recvfrom$inet(r1, &(0x7f0000000480)=""/231, 0xe7, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x884}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@delqdisc={0xd8, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0xd, 0xffe0}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xbadc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}], 0x1}, 0x101}], 0x1, 0x60, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000a9003b3500000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000400000002c0012800b00010067656e65766500001c000280060005004e23000005000a000100000005000400d300000008000a00", @ANYRES32=r5, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) 572.378696ms ago: executing program 3 (id=4266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'wg0\x00', @multicast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000300)={'veth0_to_hsr\x00', @remote}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='GPL\x00'}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'team_slave_1\x00', 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, r3, 0x60c, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x10, 0x4, @l2={'ib', 0x3a, 'syz_tun\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24048000) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$inet(0x2, 0x6, 0x8) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000007c0)={{0xd10, 0x2}, 0x100, './file0\x00'}) (async) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000007c0)={{0xd10, 0x2}, 0x100, './file0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x8001, 0xd7e0, 0x64, 0xfff}}}}]}, 0x4c}}, 0x4008000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x8001, 0xd7e0, 0x64, 0xfff}}}}]}, 0x4c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$caif_stream(0x25, 0x1, 0x4) (async) r9 = socket$caif_stream(0x25, 0x1, 0x4) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000006c0)=r4) setsockopt$CAIFSO_REQ_PARAM(r9, 0x116, 0x80, &(0x7f0000000540)="3392b002f5cf88478134e810a31373e0f080e0fc0fcdadf54179ea8213cd40c6560c255b9c8617cfe95b3b5ade54e261fe169717e5ae02f19c17f3fb19fdaad36cffffeeba1de329d7755229749e333c28990cdeccfe91bf81e883def285b335e9647131fe04f1dd4c73451196bcb070d8334d2f941ff41bbb5569e372c0b3a485a7651b3cbe28a4f0cba157fb05557e36", 0x91) 400.294362ms ago: executing program 2 (id=4267): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="240400000000000000bd7000ffdbdf25022080ccfd02c8060004000008001e0001000000"], 0x24}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r1, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x32, 0x58}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x24000051) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r5, 0x0, 0x1, 0x0, &(0x7f0000000740)) (async, rerun: 32) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x5, 0x1f, 0x0, &(0x7f0000000100)="66d4492a0a1b30e6f5d85a6d99", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) 154.523229ms ago: executing program 1 (id=4268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@empty}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x5, 0x9}, {0xffff, 0x9}, {0x0, 0xed27c9fa5277b9b7}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x2c}}, 0x20008000) 136.580761ms ago: executing program 6 (id=4269): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x50, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x30}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000006}, 0x24018040) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) (async) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x80) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 400.827µs ago: executing program 2 (id=4270): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x400, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 0s ago: executing program 6 (id=4271): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x800) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept(r1, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x80) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0xfd1) kernel console output (not intermixed with test programs): q: adding VLAN 0 to HW filter on device bond12 [ 272.518973][T15877] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2794'. [ 272.766523][T15893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2796'. [ 272.783344][T15893] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2796'. [ 272.809093][T15898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2796'. [ 272.835775][T15898] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2796'. [ 272.935757][T15912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.198076][T15931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2805'. [ 273.524208][T15955] validate_nla: 4 callbacks suppressed [ 273.524224][T15955] netlink: 'syz.3.2814': attribute type 10 has an invalid length. [ 273.545940][T15955] bridge_slave_1: entered promiscuous mode [ 273.567305][T15955] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 273.807696][T15980] tap0: tun_chr_ioctl cmd 1074025673 [ 273.813973][T15979] tap0: tun_chr_ioctl cmd 1074025678 [ 273.819500][T15979] tap0: group set to 0 [ 273.881512][T15985] ipvlan2: entered promiscuous mode [ 274.418121][T15998] bond0: Caught tx_queue_len zero misconfig [ 274.587803][T16004] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 274.835721][T16018] tipc: Enabling of bearer rejected, already enabled [ 275.017214][T16033] netlink: 'syz.3.2841': attribute type 1 has an invalid length. [ 275.149320][T16045] bond8: (slave gretap0): making interface the new active one [ 275.158593][T16045] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 275.875245][T16094] netlink: 'syz.3.2858': attribute type 1 has an invalid length. [ 276.014464][T16105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.195453][T16121] netlink: 'syz.4.2865': attribute type 2 has an invalid length. [ 276.605049][T16150] __nla_validate_parse: 8 callbacks suppressed [ 276.605067][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 276.621187][T16150] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2872'. [ 276.632199][T16150] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.841046][T16162] netlink: 'syz.1.2876': attribute type 1 has an invalid length. [ 276.881278][T16162] bond11: entered promiscuous mode [ 276.889976][T16162] 8021q: adding VLAN 0 to HW filter on device bond11 [ 277.035100][T16170] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2877'. [ 277.044666][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2877'. [ 277.137514][T16166] bond11: (slave bridge6): making interface the new active one [ 277.152331][T16166] bridge6: entered promiscuous mode [ 277.163194][T16166] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 277.335704][T16188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2881'. [ 277.358724][T16188] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2881'. [ 277.376198][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2881'. [ 277.501726][T16202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2883'. [ 277.922482][T16222] tipc: Enabled bearer , priority 0 [ 277.998522][T16222] tipc: Resetting bearer [ 278.032607][T16220] tipc: Resetting bearer [ 278.071375][T16220] tipc: Disabling bearer [ 278.102312][T16233] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2896'. [ 278.377339][T16252] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.2902'. [ 278.381267][T16254] netlink: 'syz.0.2904': attribute type 1 has an invalid length. [ 278.402004][T16254] netlink: 'syz.0.2904': attribute type 3 has an invalid length. [ 278.411896][T16254] NCSI netlink: No device for ifindex 131080 [ 278.426343][T16254] netlink: 'syz.0.2904': attribute type 1 has an invalid length. [ 278.436197][T16254] netlink: 'syz.0.2904': attribute type 3 has an invalid length. [ 278.447750][T16254] NCSI netlink: No device for ifindex 131080 [ 278.633534][T16273] netlink: 'syz.4.2908': attribute type 7 has an invalid length. [ 278.811957][T16276] netlink: 'syz.2.2912': attribute type 10 has an invalid length. [ 278.845236][T16276] veth1_macvtap: left promiscuous mode [ 278.931592][T16285] netlink: 'syz.3.2914': attribute type 1 has an invalid length. [ 279.068737][T16287] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 279.085590][T16293] netlink: 'syz.4.2917': attribute type 24 has an invalid length. [ 279.106361][T16285] 8021q: adding VLAN 0 to HW filter on device bond9 [ 279.115150][T10966] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 279.186979][T16299] TCP: TCP_TX_DELAY enabled [ 279.192420][T16285] veth7: entered promiscuous mode [ 279.214392][T16285] bond9: (slave veth7): Enslaving as a backup interface with a down link [ 279.236606][T16301] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 279.251579][T10961] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 279.253122][T16306] netlink: 'syz.4.2917': attribute type 24 has an invalid length. [ 279.307985][T16301] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 280.208127][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 280.416564][ T5185] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.429966][ T5185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.451225][ T5185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.461974][ T5185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.473543][ T5185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.844139][T16385] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 281.683138][T16360] chnl_net:caif_netlink_parms(): no params data found [ 281.806489][T16444] __nla_validate_parse: 9 callbacks suppressed [ 281.806505][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2961'. [ 281.822266][T16444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.920245][T16452] netlink: 'syz.3.2964': attribute type 4 has an invalid length. [ 281.939632][T16445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2962'. [ 281.971942][T16360] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.988603][T16360] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.997665][T16360] bridge_slave_0: entered allmulticast mode [ 282.006693][T16360] bridge_slave_0: entered promiscuous mode [ 282.022678][T16360] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.032106][T16360] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.039577][T16360] bridge_slave_1: entered allmulticast mode [ 282.047603][T16360] bridge_slave_1: entered promiscuous mode [ 282.121429][T16457] syzkaller0: entered promiscuous mode [ 282.126988][T16457] syzkaller0: entered allmulticast mode [ 282.251434][T16465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2968'. [ 282.275610][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2968'. [ 282.287200][T16465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2968'. [ 282.457562][T16478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2969'. [ 282.528817][ T5185] Bluetooth: hci5: command tx timeout [ 284.003848][T16360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.014749][T16493] syzkaller0: mtu less than device minimum [ 284.080908][T16360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.215566][T16360] team0: Port device team_slave_0 added [ 284.236180][T16360] team0: Port device team_slave_1 added [ 284.337828][T16518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.411280][T16520] gtp0: entered promiscuous mode [ 284.416381][T16520] gtp0: entered allmulticast mode [ 284.432348][T16360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.445136][T16360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.500761][T16360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.522964][T16360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.535211][T16360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.562383][T16360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.608753][ T5185] Bluetooth: hci5: command tx timeout [ 284.635149][T16526] tipc: Enabled bearer , priority 0 [ 284.661916][T16360] hsr_slave_0: entered promiscuous mode [ 284.668889][T16360] hsr_slave_1: entered promiscuous mode [ 284.675761][T16528] syzkaller0: entered promiscuous mode [ 284.682995][T16528] syzkaller0: entered allmulticast mode [ 284.698143][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2986'. [ 284.718588][T16526] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 284.822631][T16526] tipc: Resetting bearer [ 284.829172][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2989'. [ 284.829785][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 284.862804][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2989'. [ 284.901637][T16525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.966515][T16546] netlink: 'syz.3.2990': attribute type 2 has an invalid length. [ 284.976275][T16546] netlink: 'syz.3.2990': attribute type 1 has an invalid length. [ 284.984205][T16546] netlink: 'syz.3.2990': attribute type 1 has an invalid length. [ 284.993942][T16546] netlink: 'syz.3.2990': attribute type 2 has an invalid length. [ 285.001933][T16525] tipc: Resetting bearer [ 285.017335][T16525] tipc: Disabling bearer [ 285.112310][T16360] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.125804][T16360] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 285.203034][T16360] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.237977][T16360] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 285.292856][T16555] netlink: 'syz.3.2993': attribute type 21 has an invalid length. [ 285.307285][T16360] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.317514][T16360] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 285.340081][T16555] : renamed from bridge_slave_0 [ 285.393128][T16360] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.408663][T16360] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 285.521951][T16568] netlink: 'syz.3.2998': attribute type 23 has an invalid length. [ 285.808669][T16360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 285.821042][T16360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 285.852121][T16360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.895961][T16360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 286.216314][T16360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.276501][T16612] netlink: 'syz.0.3011': attribute type 126 has an invalid length. [ 286.293757][T16360] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.349811][T10966] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.356947][T10966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.382592][T10966] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.389813][T10966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.545310][T16625] netlink: 'syz.0.3015': attribute type 1 has an invalid length. [ 286.684528][T16633] 8021q: adding VLAN 0 to HW filter on device bond16 [ 286.691756][ T5185] Bluetooth: hci5: command tx timeout [ 286.699278][T16633] bond15: (slave bond16): making interface the new active one [ 286.707184][T16633] bond15: (slave bond16): Enslaving as an active interface with an up link [ 286.718678][T16360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.783685][T16633] 8021q: adding VLAN 0 to HW filter on device bond15 [ 286.793464][T16641] openvswitch: netlink: Multiple metadata blocks provided [ 286.995075][T16651] __nla_validate_parse: 6 callbacks suppressed [ 286.995092][T16651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3025'. [ 287.165997][T16661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3029'. [ 287.226953][T16661] geneve3: entered promiscuous mode [ 287.309966][T16360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.415657][T16673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3032'. [ 287.473826][T16360] veth0_vlan: entered promiscuous mode [ 287.501198][T16673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3032'. [ 287.527091][T16360] veth1_vlan: entered promiscuous mode [ 287.606651][T16680] netlink: 'syz.4.3035': attribute type 21 has an invalid length. [ 287.629485][T16680] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.649007][T16682] netlink: 'syz.4.3035': attribute type 21 has an invalid length. [ 287.673254][T16360] veth0_macvtap: entered promiscuous mode [ 287.694336][T16360] veth1_macvtap: entered promiscuous mode [ 287.734908][T16360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.791723][T16360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.862465][T10961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.876496][T10961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.912151][T10961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.986912][ T7837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.154893][ T7837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.175052][ T7837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.235872][T10961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.244036][T10961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.299762][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3047'. [ 288.387534][T16718] erspan0: entered promiscuous mode [ 288.398314][T16722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3048'. [ 288.423014][T16718] macvtap1: entered promiscuous mode [ 288.447791][T16718] macvtap1: entered allmulticast mode [ 288.476511][T16718] erspan0: entered allmulticast mode [ 288.505643][T16719] erspan0: left allmulticast mode [ 288.523773][T16719] erspan0: left promiscuous mode [ 288.751501][T16730] gtp0: entered promiscuous mode [ 288.756501][T16730] gtp0: entered allmulticast mode [ 288.768728][ T5872] Bluetooth: hci5: command tx timeout [ 288.902495][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3053'. [ 289.246745][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.250771][ T5185] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 289.254976][ T5881] Bluetooth: hci2: command 0x0406 tx timeout [ 289.268123][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.275758][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.287122][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.295006][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.842251][T16786] IPv6: sit5: Disabled Multicast RS [ 289.853050][T16786] sit5: entered allmulticast mode [ 289.887545][T16782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3069'. [ 289.897022][T16782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3069'. [ 289.919052][T16782] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3069'. [ 290.084228][T16794] geneve2: entered promiscuous mode [ 290.094964][T16794] geneve2: entered allmulticast mode [ 290.131930][T15899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 290.141599][T15899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 290.162195][T15899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 290.171513][T16794] Bluetooth: MGMT ver 1.23 [ 290.222052][T15899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 290.281885][T16801] validate_nla: 132 callbacks suppressed [ 290.281903][T16801] netlink: 'syz.0.3073': attribute type 83 has an invalid length. [ 290.395458][T16754] chnl_net:caif_netlink_parms(): no params data found [ 290.413114][T16807] netlink: 'syz.0.3074': attribute type 3 has an invalid length. [ 290.499055][T16810] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 291.155527][T16834] netlink: 'syz.0.3079': attribute type 29 has an invalid length. [ 291.176217][T16754] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.195500][T16754] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.231703][T16754] bridge_slave_0: entered allmulticast mode [ 291.247364][T16754] bridge_slave_0: entered promiscuous mode [ 291.277318][T16843] netlink: 'syz.0.3079': attribute type 29 has an invalid length. [ 291.318366][T16754] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.325524][T16754] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.340120][T16754] bridge_slave_1: entered allmulticast mode [ 291.346132][ T5872] Bluetooth: hci1: command tx timeout [ 291.347808][T16754] bridge_slave_1: entered promiscuous mode [ 291.451216][T16754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.466846][T16863] gtp0: entered promiscuous mode [ 291.473478][T16863] gtp0: entered allmulticast mode [ 291.484993][T16754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.600138][T16754] team0: Port device team_slave_0 added [ 291.623195][T16754] team0: Port device team_slave_1 added [ 291.640740][T16865] openvswitch: netlink: IP tunnel dst address not specified [ 291.789831][T16754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.797809][T16754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.858390][T16754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.872377][T16754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.886129][T16754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.914625][T16754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.964450][T16876] netlink: 'syz.1.3092': attribute type 1 has an invalid length. [ 292.108957][T16882] __nla_validate_parse: 4 callbacks suppressed [ 292.108975][T16882] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3094'. [ 292.165647][T16884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3096'. [ 292.180150][T16884] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3096'. [ 292.202028][T16754] hsr_slave_0: entered promiscuous mode [ 292.218410][T16754] hsr_slave_1: entered promiscuous mode [ 292.226289][T16754] debugfs: 'hsr0' already exists in 'hsr' [ 292.238667][T16754] Cannot create hsr debugfs directory [ 292.253395][T16885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.618768][T16907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3101'. [ 292.668011][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3101'. [ 293.135478][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3107'. [ 293.151415][T16754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.165707][T16754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 293.192020][T16934] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3109'. [ 293.280337][T16941] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 293.322513][T16754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.338173][T16754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 293.417222][ T5872] Bluetooth: hci1: command tx timeout [ 293.442321][T16754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.459534][T16754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 293.591838][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3113'. [ 293.701383][T16962] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3118'. [ 293.714474][T16962] netlink: 'syz.1.3118': attribute type 2 has an invalid length. [ 293.723720][T16962] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3118'. [ 293.733458][T16962] nbd: must specify at least one socket [ 293.881106][T16969] netlink: 'syz.4.3119': attribute type 4 has an invalid length. [ 293.891269][T16754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 293.907243][T16969] netlink: 'syz.4.3119': attribute type 4 has an invalid length. [ 293.907519][T16754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.922292][T16970] netlink: 'syz.4.3119': attribute type 4 has an invalid length. [ 293.936360][T16754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 293.956347][T16754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 294.177736][T16991] gtp1: entered promiscuous mode [ 294.189808][T16991] gtp1: entered allmulticast mode [ 294.316541][T16754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.366926][T16754] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.393913][T17003] netlink: 'syz.0.3128': attribute type 1 has an invalid length. [ 294.405437][T17004] FAULT_INJECTION: forcing a failure. [ 294.405437][T17004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.426790][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.434045][ T7837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.446213][ T7837] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.453430][ T7837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.495722][T17004] CPU: 0 UID: 0 PID: 17004 Comm: syz.1.3127 Not tainted syzkaller #0 PREEMPT(full) [ 294.495747][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.495758][T17004] Call Trace: [ 294.495766][T17004] [ 294.495774][T17004] dump_stack_lvl+0x189/0x250 [ 294.495799][T17004] ? __pfx____ratelimit+0x10/0x10 [ 294.495818][T17004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.495835][T17004] ? __pfx__printk+0x10/0x10 [ 294.495856][T17004] ? __might_fault+0xb0/0x130 [ 294.495889][T17004] should_fail_ex+0x414/0x560 [ 294.495918][T17004] _copy_from_user+0x2d/0xb0 [ 294.495939][T17004] ___sys_sendmsg+0x158/0x2a0 [ 294.495963][T17004] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.496017][T17004] ? __fget_files+0x2a/0x420 [ 294.496030][T17004] ? __fget_files+0x3a0/0x420 [ 294.496053][T17004] __x64_sys_sendmsg+0x19b/0x260 [ 294.496077][T17004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.496107][T17004] ? __pfx_ksys_write+0x10/0x10 [ 294.496132][T17004] ? do_syscall_64+0xbe/0x3b0 [ 294.496153][T17004] do_syscall_64+0xfa/0x3b0 [ 294.496169][T17004] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.496185][T17004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.496207][T17004] ? clear_bhb_loop+0x60/0xb0 [ 294.496228][T17004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.496244][T17004] RIP: 0033:0x7fa6bcb8eec9 [ 294.496260][T17004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.496275][T17004] RSP: 002b:00007fa6bda97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.496294][T17004] RAX: ffffffffffffffda RBX: 00007fa6bcde5fa0 RCX: 00007fa6bcb8eec9 [ 294.496305][T17004] RDX: 0000000000000080 RSI: 0000200000000740 RDI: 0000000000000005 [ 294.496316][T17004] RBP: 00007fa6bda97090 R08: 0000000000000000 R09: 0000000000000000 [ 294.496325][T17004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.496335][T17004] R13: 00007fa6bcde6038 R14: 00007fa6bcde5fa0 R15: 00007ffcf2dddf38 [ 294.496362][T17004] [ 294.710741][T16754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.721305][T16754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.969004][T17017] bond13: entered promiscuous mode [ 294.975818][T17017] bond13: entered allmulticast mode [ 294.981851][T17017] 8021q: adding VLAN 0 to HW filter on device bond13 [ 295.261172][T16754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.371145][T16754] veth0_vlan: entered promiscuous mode [ 295.386308][T17045] sctp: [Deprecated]: syz.2.3140 (pid 17045) Use of int in max_burst socket option deprecated. [ 295.386308][T17045] Use struct sctp_assoc_value instead [ 295.427630][T16754] veth1_vlan: entered promiscuous mode [ 295.492300][T16754] veth0_macvtap: entered promiscuous mode [ 295.504801][T16754] veth1_macvtap: entered promiscuous mode [ 295.505327][ T5872] Bluetooth: hci1: command tx timeout [ 295.533430][T16754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.549409][T16754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.633847][T15899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.668716][T15899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.684865][T15899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.729281][T15899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.925372][T17060] validate_nla: 1 callbacks suppressed [ 295.925390][T17060] netlink: 'syz.1.3146': attribute type 29 has an invalid length. [ 295.966941][ T7836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.986780][ T7836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.024360][T17060] netlink: 'syz.1.3146': attribute type 29 has an invalid length. [ 296.058662][T10966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.066601][T10966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.111919][T17073] openvswitch: netlink: Multiple metadata blocks provided [ 296.262041][T17076] bridge0: port 1(batadv0) entered blocking state [ 296.274507][T17076] bridge0: port 1(batadv0) entered disabled state [ 296.328454][T17076] batadv0: entered allmulticast mode [ 296.360088][T17076] batadv0: entered promiscuous mode [ 296.719235][T17101] delete_channel: no stack [ 296.754362][T10961] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 296.765024][T10961] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 297.093847][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.103583][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.113138][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.127811][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.140706][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.247170][T17119] __nla_validate_parse: 9 callbacks suppressed [ 297.247189][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3162'. [ 297.408777][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3164'. [ 297.457925][T17129] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3164'. [ 297.498860][T17129] netlink: 'syz.2.3164': attribute type 5 has an invalid length. [ 297.567984][ T5879] Bluetooth: hci1: command tx timeout [ 297.599074][T17135] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3167'. [ 297.811307][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3173'. [ 297.911240][T17151] netlink: 'syz.2.3172': attribute type 10 has an invalid length. [ 297.927405][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3175'. [ 297.941964][T17149] bridge0: port 3(syz_tun) entered blocking state [ 297.949074][T17149] bridge0: port 3(syz_tun) entered disabled state [ 297.958403][T17154] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.3174'. [ 297.971338][T17149] syz_tun: entered allmulticast mode [ 297.982601][T17149] syz_tun: entered promiscuous mode [ 297.997737][T17149] bridge0: port 3(syz_tun) entered blocking state [ 298.004603][T17149] bridge0: port 3(syz_tun) entered forwarding state [ 298.035895][T17151] bridge0: port 3(syz_tun) entered disabled state [ 298.042549][T17151] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.050282][T17151] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.115519][T17151] bridge0: port 3(syz_tun) entered blocking state [ 298.122164][T17151] bridge0: port 3(syz_tun) entered forwarding state [ 298.129123][T17151] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.136295][T17151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.143821][T17151] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.151021][T17151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.176116][T17151] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 298.735180][T17165] netlink: 'syz.2.3179': attribute type 2 has an invalid length. [ 298.774090][T17160] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3180'. [ 298.940054][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3183'. [ 298.970058][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.980177][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.008063][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.030086][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.045651][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.203366][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.212727][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.224953][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.242671][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.250815][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.308743][T17190] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3188'. [ 299.338659][T17190] netlink: zone id is out of range [ 299.343809][T17190] netlink: zone id is out of range [ 299.371860][T17190] netlink: zone id is out of range [ 299.387444][T17190] netlink: get zone limit has 8 unknown bytes [ 299.619900][T17200] veth3: entered promiscuous mode [ 299.625048][T17200] veth3: entered allmulticast mode [ 299.635527][T17204] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 299.642349][T17204] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 299.645160][T17205] openvswitch: netlink: Key 0 has unexpected len 8 expected 0 [ 299.662823][T17207] netlink: 'syz.1.3192': attribute type 29 has an invalid length. [ 299.703353][T17207] netlink: 'syz.1.3192': attribute type 29 has an invalid length. [ 299.761789][T17209] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 300.100183][T17229] netlink: 'syz.1.3199': attribute type 6 has an invalid length. [ 300.132410][T17229] netlink: 'syz.1.3199': attribute type 6 has an invalid length. [ 300.173166][T17231] bridge: RTM_NEWNEIGH with invalid ether address [ 300.180049][T17229] netlink: 'syz.1.3199': attribute type 6 has an invalid length. [ 300.425911][T17173] chnl_net:caif_netlink_parms(): no params data found [ 300.653317][T17244] veth0: entered promiscuous mode [ 300.665560][T17186] chnl_net:caif_netlink_parms(): no params data found [ 300.867309][T17173] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.897589][T17173] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.915089][T17173] bridge_slave_0: entered allmulticast mode [ 300.927154][T17173] bridge_slave_0: entered promiscuous mode [ 301.015114][T17173] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.048511][T17173] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.055813][T17173] bridge_slave_1: entered allmulticast mode [ 301.064829][T17173] bridge_slave_1: entered promiscuous mode [ 301.082266][T17271] validate_nla: 62 callbacks suppressed [ 301.082284][T17271] netlink: 'syz.1.3213': attribute type 21 has an invalid length. [ 301.102169][ T5879] Bluetooth: hci0: command tx timeout [ 301.286426][T17173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.328552][ T5879] Bluetooth: hci2: command tx timeout [ 301.348385][T17186] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.355608][T17186] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.369819][T17186] bridge_slave_0: entered allmulticast mode [ 301.377796][T17186] bridge_slave_0: entered promiscuous mode [ 301.391180][T17173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.437731][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.445920][T17186] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.455272][T17186] bridge_slave_1: entered allmulticast mode [ 301.463767][T17186] bridge_slave_1: entered promiscuous mode [ 301.710285][T17186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.722009][T17173] team0: Port device team_slave_0 added [ 301.738842][T17173] team0: Port device team_slave_1 added [ 301.769187][T17186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.925812][T17186] team0: Port device team_slave_0 added [ 301.949042][T17173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.956014][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.003452][T17173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.019763][T17186] team0: Port device team_slave_1 added [ 302.220173][T17173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.235938][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.263039][T17173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.284026][T17325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.307384][T17186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.315447][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.344609][T17322] netlink: 'syz.2.3227': attribute type 13 has an invalid length. [ 302.345635][T17331] syz.3.3229: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 302.379718][T17331] CPU: 1 UID: 0 PID: 17331 Comm: syz.3.3229 Not tainted syzkaller #0 PREEMPT(full) [ 302.379745][T17331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 302.379757][T17331] Call Trace: [ 302.379765][T17331] [ 302.379774][T17331] dump_stack_lvl+0x189/0x250 [ 302.379805][T17331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.379827][T17331] ? __pfx__printk+0x10/0x10 [ 302.379851][T17331] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 302.379873][T17331] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 302.379896][T17331] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 302.379920][T17331] warn_alloc+0x214/0x310 [ 302.379947][T17331] ? stack_depot_save_flags+0x40/0x860 [ 302.379975][T17331] ? __pfx_warn_alloc+0x10/0x10 [ 302.380002][T17331] ? kasan_save_track+0x4f/0x80 [ 302.380024][T17331] ? xskq_create+0x56/0x170 [ 302.380040][T17331] ? xsk_init_queue+0xb0/0x110 [ 302.380054][T17331] ? xsk_setsockopt+0x4dc/0x8d0 [ 302.380083][T17331] ? do_sock_setsockopt+0x179/0x1b0 [ 302.380103][T17331] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 302.380121][T17331] ? do_syscall_64+0xfa/0x3b0 [ 302.380138][T17331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.380165][T17331] __vmalloc_node_range_noprof+0x125/0x12f0 [ 302.380224][T17331] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 302.380250][T17331] ? xskq_create+0x56/0x170 [ 302.380271][T17331] ? __kasan_kmalloc+0x93/0xb0 [ 302.380297][T17331] vmalloc_user_noprof+0xad/0xf0 [ 302.380321][T17331] ? xskq_create+0xbf/0x170 [ 302.380340][T17331] xskq_create+0xbf/0x170 [ 302.380361][T17331] xsk_init_queue+0xb0/0x110 [ 302.380382][T17331] xsk_setsockopt+0x4dc/0x8d0 [ 302.380409][T17331] ? __pfx_xsk_setsockopt+0x10/0x10 [ 302.380434][T17331] ? __pfx_aa_sk_perm+0x10/0x10 [ 302.380464][T17331] ? aa_sock_opt_perm+0xff/0x1b0 [ 302.380490][T17331] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 302.380509][T17331] ? __pfx_xsk_setsockopt+0x10/0x10 [ 302.380536][T17331] do_sock_setsockopt+0x179/0x1b0 [ 302.380563][T17331] __x64_sys_setsockopt+0x13f/0x1b0 [ 302.380590][T17331] do_syscall_64+0xfa/0x3b0 [ 302.380608][T17331] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.380626][T17331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.380643][T17331] ? clear_bhb_loop+0x60/0xb0 [ 302.380665][T17331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.380682][T17331] RIP: 0033:0x7fc2ec18eec9 [ 302.380698][T17331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.380713][T17331] RSP: 002b:00007fc2ed0df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.380732][T17331] RAX: ffffffffffffffda RBX: 00007fc2ec3e5fa0 RCX: 00007fc2ec18eec9 [ 302.380745][T17331] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 302.380756][T17331] RBP: 00007fc2ec211f91 R08: 0000000000000004 R09: 0000000000000000 [ 302.380768][T17331] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.380779][T17331] R13: 00007fc2ec3e6038 R14: 00007fc2ec3e5fa0 R15: 00007ffe89814258 [ 302.380812][T17331] [ 302.380830][T17331] Mem-Info: [ 302.412168][T17186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.447736][T17331] active_anon:3824 inactive_anon:0 isolated_anon:0 [ 302.447736][T17331] active_file:3340 inactive_file:40005 isolated_file:0 [ 302.447736][T17331] unevictable:768 dirty:137 writeback:0 [ 302.447736][T17331] slab_reclaimable:12576 slab_unreclaimable:118782 [ 302.447736][T17331] mapped:28990 shmem:1365 pagetables:930 [ 302.447736][T17331] sec_pagetables:0 bounce:0 [ 302.447736][T17331] kernel_misc_reclaimable:0 [ 302.447736][T17331] free:1302865 free_pcp:14449 free_cma:0 [ 302.455684][T17186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.521961][T17331] Node 0 active_anon:15296kB inactive_anon:0kB active_file:13360kB inactive_file:159816kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115960kB dirty:548kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15248kB pagetables:3580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 302.527527][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.578165][T17331] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 302.582208][T17186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.600454][T17331] Node 0 [ 302.712807][T17340] __nla_validate_parse: 7 callbacks suppressed [ 302.712826][T17340] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3231'. [ 302.784554][T17331] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 302.784607][T17331] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 302.784650][T17331] Node 0 DMA32 free:1314024kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15352kB inactive_anon:0kB active_file:13360kB inactive_file:158248kB unevictable:1536kB writepending:444kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:37724kB local_pcp:22148kB free_cma:0kB [ 302.784704][T17331] lowmem_reserve[]: 0 0 1 1 1 [ 302.784742][T17331] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 302.784795][T17331] lowmem_reserve[]: 0 0 0 0 0 [ 302.784835][T17331] Node 1 Normal free:3881016kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19736kB local_pcp:8272kB free_cma:0kB [ 302.784890][T17331] lowmem_reserve[]: 0 0 0 0 0 [ 302.784931][T17331] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 302.785067][T17331] Node 0 DMA32: 612*4kB (UME) 167*8kB (ME) 183*16kB (UME) 21*32kB (M) 12*64kB (UM) 18*128kB (ME) 8*256kB (UME) 50*512kB (UM) 20*1024kB (UM) 3*2048kB (UME) 305*4096kB (M) = 1314008kB [ 302.785245][T17331] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 302.785365][T17331] Node 1 Normal: 52*4kB (UE) 53*8kB (UME) 48*16kB (UME) 76*32kB (UME) [ 302.866133][T17342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3231'. [ 302.888224][T17331] 25*64kB (UME) 4*128kB (UM) 3*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3881016kB [ 303.106015][T17331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.117346][T17331] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.136539][T17331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.156545][T17331] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.172905][ T5879] Bluetooth: hci0: command tx timeout [ 303.183986][T17331] 44707 total pagecache pages [ 303.194207][T17331] 0 pages in swap cache [ 303.204313][T17331] Free swap = 124996kB [ 303.214222][T17331] Total swap = 124996kB [ 303.222161][T17331] 2097051 pages RAM [ 303.225975][T17331] 0 pages HighMem/MovableOnly [ 303.232302][T17331] 425672 pages reserved [ 303.236460][T17331] 0 pages cma reserved [ 303.408081][ T5879] Bluetooth: hci2: command tx timeout [ 303.590433][T17173] hsr_slave_0: entered promiscuous mode [ 303.597066][T17173] hsr_slave_1: entered promiscuous mode [ 303.613495][T17173] debugfs: 'hsr0' already exists in 'hsr' [ 303.620014][T17353] netlink: 'syz.3.3234': attribute type 1 has an invalid length. [ 303.628145][T17173] Cannot create hsr debugfs directory [ 303.654084][T17186] hsr_slave_0: entered promiscuous mode [ 303.667610][T17186] hsr_slave_1: entered promiscuous mode [ 303.683551][T17186] debugfs: 'hsr0' already exists in 'hsr' [ 303.699076][T17186] Cannot create hsr debugfs directory [ 303.710160][T17357] bond0: (slave ip6_vti0): Error: Device type is different from other slaves [ 303.771512][T17367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3237'. [ 303.813821][T17358] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 303.825767][T17358] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 303.958480][T17374] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 304.209447][T17387] netlink: 'syz.1.3245': attribute type 13 has an invalid length. [ 304.276968][T17387] macvtap0: entered allmulticast mode [ 304.286734][T17387] macvtap0: refused to change device tx_queue_len [ 304.307378][T17390] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 304.551119][T17173] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.590812][T17173] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.644027][T17173] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.670302][T17173] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.815958][T17186] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 304.832860][T17186] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 304.860031][T17186] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 304.876059][T17186] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 304.964677][T17429] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3257'. [ 304.990821][T17433] netlink: 'syz.2.3258': attribute type 1 has an invalid length. [ 305.007829][T17433] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3258'. [ 305.017419][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3258'. [ 305.181408][T17173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.242451][T17173] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.258912][ T5879] Bluetooth: hci0: command tx timeout [ 305.274315][T17186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.296689][T17442] netlink: 'syz.2.3261': attribute type 12 has an invalid length. [ 305.307174][T17186] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.332186][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.339403][ T7837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.367690][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.374920][ T7836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.399275][T17444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'. [ 305.420396][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.422027][T17444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3262'. [ 305.427578][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.449089][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.456247][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.467461][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'. [ 305.488680][ T5879] Bluetooth: hci2: command tx timeout [ 305.574120][T17186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.629609][T17449] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3264'. [ 305.743831][T17457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.341148][T17475] team0 (unregistering): Port device team_slave_0 removed [ 306.365073][T17475] team0 (unregistering): Port device team_slave_1 removed [ 306.404868][T17480] macvtap1: entered promiscuous mode [ 306.410705][T17480] vlan0: entered promiscuous mode [ 306.416064][T17480] macvtap1: entered allmulticast mode [ 306.421647][T17480] vlan0: entered allmulticast mode [ 306.426823][T17480] bond0: entered allmulticast mode [ 306.433835][T17480] bond_slave_0: entered allmulticast mode [ 306.446013][T17480] bond_slave_1: entered allmulticast mode [ 306.516585][T17173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.535113][T17186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.791097][T17499] : entered promiscuous mode [ 307.274820][T17173] veth0_vlan: entered promiscuous mode [ 307.296926][T17173] veth1_vlan: entered promiscuous mode [ 307.315831][T17186] veth0_vlan: entered promiscuous mode [ 307.328404][ T5879] Bluetooth: hci0: command tx timeout [ 307.345630][T17186] veth1_vlan: entered promiscuous mode [ 307.366745][T17173] veth0_macvtap: entered promiscuous mode [ 307.381979][T17173] veth1_macvtap: entered promiscuous mode [ 307.419220][T17173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.433591][T17173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.450665][T17186] veth0_macvtap: entered promiscuous mode [ 307.465852][T15899] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.475910][T15899] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.492633][T15899] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.505145][T15899] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.516635][T17186] veth1_macvtap: entered promiscuous mode [ 307.569720][ T5879] Bluetooth: hci2: command tx timeout [ 307.587487][T17186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.605848][T17186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.622822][ T7836] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.632620][ T7836] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.642152][ T7836] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.654841][ T7836] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.904540][T17531] netlink: 'syz.1.3283': attribute type 1 has an invalid length. [ 307.925096][ T7836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.944352][T17538] __nla_validate_parse: 8 callbacks suppressed [ 307.944367][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3283'. [ 307.948884][ T7836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.155424][T10963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.185435][T10963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.277727][T10963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.298387][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.301820][T10963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.306208][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.391370][T17558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 308.404310][T17558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3289'. [ 308.609597][T17565] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 308.652568][T17565] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 308.835164][T17570] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3292'. [ 308.893453][T17580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3294'. [ 308.905447][T17570] ip6tnl0: Caught tx_queue_len zero misconfig [ 308.916538][T17579] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3295'. [ 308.973267][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3294'. [ 309.087065][T17589] sctp: [Deprecated]: syz.2.3296 (pid 17589) Use of int in max_burst socket option. [ 309.087065][T17589] Use struct sctp_assoc_value instead [ 309.240140][T17592] syzkaller1: entered promiscuous mode [ 309.245637][T17592] syzkaller1: entered allmulticast mode [ 309.362874][T17599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3299'. [ 309.469351][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.479273][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.494251][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.499442][T17607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3299'. [ 309.503392][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.520917][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.585248][ T5873] syz_tun (unregistering): left promiscuous mode [ 309.630613][T17610] tipc: Started in network mode [ 309.635629][T17610] tipc: Node identity 06104f5bdfc8, cluster identity 4711 [ 309.658136][ T5879] Bluetooth: hci2: command tx timeout [ 309.668991][T17610] tipc: Enabled bearer , priority 0 [ 309.697383][T17604] syzkaller0: entered promiscuous mode [ 309.736482][T17604] syzkaller0: entered allmulticast mode [ 309.752987][T17604] tipc: Resetting bearer [ 309.770783][T17604] netlink: 'syz.5.3301': attribute type 4 has an invalid length. [ 309.800293][T17601] tipc: Resetting bearer [ 309.881475][T17601] tipc: Disabling bearer [ 309.918062][T17625] lo: Caught tx_queue_len zero misconfig [ 310.105600][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3309'. [ 310.171477][T17638] netlink: 'syz.2.3309': attribute type 11 has an invalid length. [ 310.432805][T17656] Bluetooth: MGMT ver 1.23 [ 310.812029][T17673] netlink: 'syz.6.3320': attribute type 32 has an invalid length. [ 310.968294][T17605] chnl_net:caif_netlink_parms(): no params data found [ 311.267086][T17605] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.276191][T17605] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.291562][T17605] bridge_slave_0: entered allmulticast mode [ 311.307272][T17605] bridge_slave_0: entered promiscuous mode [ 311.347844][T17605] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.366028][T17605] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.373606][T17605] bridge_slave_1: entered allmulticast mode [ 311.384709][T17605] bridge_slave_1: entered promiscuous mode [ 311.478730][T17605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.504548][T17605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.547120][T17705] netlink: 'syz.6.3327': attribute type 1 has an invalid length. [ 311.576536][ T5879] Bluetooth: hci3: command tx timeout [ 311.610738][T17605] team0: Port device team_slave_0 added [ 311.628789][T17605] team0: Port device team_slave_1 added [ 311.706552][T17605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.716554][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.788524][T17605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.834060][T17605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.844951][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.873747][T17605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.997973][T17720] Bluetooth: MGMT ver 1.23 [ 312.016618][T17605] hsr_slave_0: entered promiscuous mode [ 312.023932][T17605] hsr_slave_1: entered promiscuous mode [ 312.031859][T17605] debugfs: 'hsr0' already exists in 'hsr' [ 312.037773][T17605] Cannot create hsr debugfs directory [ 313.100838][T17605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 313.128676][T17749] __nla_validate_parse: 14 callbacks suppressed [ 313.128692][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3342'. [ 313.182630][T17605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.255952][T17605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.341058][T17605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 313.363047][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3345'. [ 313.383719][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3345'. [ 313.398849][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3347'. [ 313.516927][T17782] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 313.660087][ T5872] Bluetooth: hci3: command tx timeout [ 313.666926][T17605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.703093][T17605] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.719931][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.727120][ T7837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.761846][T10966] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.769054][T10966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.045257][T17605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.058909][ T5879] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 314.065292][ T5872] Bluetooth: hci0: command 0x0c1a tx timeout [ 314.106220][T17605] veth0_vlan: entered promiscuous mode [ 314.123319][T17605] veth1_vlan: entered promiscuous mode [ 314.164453][T17605] veth0_macvtap: entered promiscuous mode [ 314.174884][T17605] veth1_macvtap: entered promiscuous mode [ 314.197514][T17605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.214635][T17605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.236312][T15902] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.247250][T10966] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.265810][T10966] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.274879][T10966] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.484274][T17807] netlink: 'syz.6.3354': attribute type 1 has an invalid length. [ 314.490414][T10966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.503750][T17807] netlink: 208 bytes leftover after parsing attributes in process `syz.6.3354'. [ 314.516995][T10966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.525467][T17812] openvswitch: netlink: IPv4 tun info is not correct [ 314.537048][T17807] netlink: 'syz.6.3354': attribute type 1 has an invalid length. [ 314.546589][T17807] netlink: 'syz.6.3354': attribute type 2 has an invalid length. [ 314.642696][T15902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.650763][T15902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.757001][T17821] bond0: Caught tx_queue_len zero misconfig [ 314.796122][T17824] netlink: 'syz.3.3359': attribute type 8 has an invalid length. [ 314.845337][T17834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.970169][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3364'. [ 314.999191][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3364'. [ 315.070956][T17843] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3366'. [ 315.302491][T17856] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3371'. [ 315.491470][T17869] netlink: 'syz.2.3374': attribute type 1 has an invalid length. [ 315.522448][T17869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3374'. [ 315.539139][T17877] netlink: 'syz.1.3375': attribute type 1 has an invalid length. [ 315.561213][T17877] netlink: 'syz.1.3375': attribute type 1 has an invalid length. [ 315.608331][T17874] gre1: entered promiscuous mode [ 315.623891][T17874] gre1: entered allmulticast mode [ 315.744338][ T5872] Bluetooth: hci3: command tx timeout [ 315.924416][T17886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.954735][T17886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.975364][T17903] netlink: 'syz.6.3383': attribute type 1 has an invalid length. [ 315.982089][T17886] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 315.992589][T17886] bridge0: port 3(syz_tun) entered disabled state [ 315.999651][T17886] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.007136][T17886] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.019619][T17886] bond0 (unregistering): Released all slaves [ 316.112490][T17903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.192526][T17904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.214950][T17904] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 316.230274][T17904] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 316.468886][T17927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.476155][T17927] IPv6: NLM_F_CREATE should be set when creating new route [ 316.483451][T17927] IPv6: NLM_F_CREATE should be set when creating new route [ 316.490694][T17927] IPv6: NLM_F_CREATE should be set when creating new route [ 316.546909][T17932] netlink: 'syz.1.3392': attribute type 8 has an invalid length. [ 316.550164][T17929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.673351][T17935] tipc: Started in network mode [ 316.692276][T17935] tipc: Node identity 36450240039e, cluster identity 4711 [ 316.713623][T17935] tipc: Enabled bearer , priority 0 [ 316.765099][T17935] syzkaller0: entered promiscuous mode [ 316.787333][T17935] syzkaller0: entered allmulticast mode [ 316.813707][T17947] netlink: 'syz.3.3397': attribute type 4 has an invalid length. [ 316.823814][T17934] tipc: Resetting bearer [ 316.862542][T17934] tipc: Disabling bearer [ 316.873275][T17941] tipc: Started in network mode [ 316.878678][T17941] tipc: Node identity c2cde3039375, cluster identity 4711 [ 316.902263][T17941] tipc: Enabled bearer , priority 0 [ 316.915310][T17948] x_tables: ip_tables: udp match: only valid for protocol 17 [ 316.938458][T17945] syzkaller0: entered promiscuous mode [ 316.944046][T17945] syzkaller0: entered allmulticast mode [ 317.002520][T17941] tipc: Resetting bearer [ 317.023292][T17948] openvswitch: netlink: Invalid VLAN frame [ 317.029426][T17947] openvswitch: netlink: Invalid VLAN frame [ 317.077106][T17940] tipc: Resetting bearer [ 317.097023][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.121317][T17940] tipc: Disabling bearer [ 317.535533][T17980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.544158][T17980] bond1: (slave bond2): making interface the new active one [ 317.559669][T17980] bond1: (slave bond2): Enslaving as an active interface with an up link [ 317.572005][T17984] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 317.603656][T17975] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 317.644142][T17991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.720898][T17997] syz.1.3409 (17997) used obsolete PPPIOCDETACH ioctl [ 317.799723][T18008] 8021q: VLANs not supported on ip_vti0 [ 317.814440][ T5872] Bluetooth: hci3: command tx timeout [ 318.198820][T18028] : entered promiscuous mode [ 318.413428][T18048] veth0: entered promiscuous mode [ 318.426349][T18047] __nla_validate_parse: 72 callbacks suppressed [ 318.426366][T18047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3425'. [ 318.449347][T18048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3424'. [ 318.458892][T18048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3424'. [ 318.475967][T18048] netlink: 'syz.5.3424': attribute type 11 has an invalid length. [ 318.484811][T18048] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3424'. [ 318.500409][T18047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3425'. [ 318.560339][T18050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.567503][T18045] veth0: left promiscuous mode [ 318.585699][T18050] bond2: (slave geneve2): making interface the new active one [ 318.614955][T18050] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 318.625238][T18053] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 318.769162][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3427'. [ 318.789015][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3427'. [ 318.841288][T18066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3429'. [ 319.135561][T18078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3434'. [ 319.204587][T18081] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3436'. [ 319.261605][T18080] delete_channel: no stack [ 319.588828][T18094] validate_nla: 9 callbacks suppressed [ 319.588845][T18094] netlink: 'syz.1.3441': attribute type 10 has an invalid length. [ 319.623127][T18094] bridge0: port 3(team0) entered blocking state [ 319.638249][T18094] bridge0: port 3(team0) entered disabled state [ 319.668306][T18094] team0: entered allmulticast mode [ 319.678417][T18094] team_slave_0: entered allmulticast mode [ 319.684501][T18094] team_slave_1: entered allmulticast mode [ 319.707066][T18094] team0: entered promiscuous mode [ 319.730362][T18094] team_slave_0: entered promiscuous mode [ 319.749659][T18094] team_slave_1: entered promiscuous mode [ 319.774889][T18094] bridge0: port 3(team0) entered blocking state [ 319.781367][T18094] bridge0: port 3(team0) entered forwarding state [ 319.894037][ T5879] Bluetooth: hci3: command tx timeout [ 320.070812][T10961] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.095935][T10961] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.121449][T10961] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.175357][T10961] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.203888][T18137] tipc: Started in network mode [ 320.209672][T18137] tipc: Node identity 629d8c607db5, cluster identity 4711 [ 320.217038][T18137] tipc: Enabled bearer , priority 0 [ 320.273543][T18146] netlink: 'syz.2.3458': attribute type 1 has an invalid length. [ 320.318481][T18137] tipc: Disabling bearer [ 321.194479][T18205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.204399][T18205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.217619][T18205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.233747][T18205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.297225][T18208] netlink: 'syz.2.3480': attribute type 1 has an invalid length. [ 321.375953][T18210] tap0: tun_chr_ioctl cmd 1074025676 [ 321.382390][T18210] tap0: owner set to 0 [ 321.585445][T18215] syzkaller0: entered promiscuous mode [ 321.593235][T18215] syzkaller0: entered allmulticast mode [ 321.840831][T18222] netlink: 'syz.3.3486': attribute type 1 has an invalid length. [ 321.927698][T18222] sctp: [Deprecated]: syz.3.3486 (pid 18222) Use of int in max_burst socket option deprecated. [ 321.927698][T18222] Use struct sctp_assoc_value instead [ 321.987916][ T5879] Bluetooth: hci3: command 0x0405 tx timeout [ 323.351234][T18278] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 323.687300][T18300] netlink: 'syz.3.3510': attribute type 50 has an invalid length. [ 323.961528][T18311] batadv0: entered promiscuous mode [ 323.990044][T18311] bond0: entered promiscuous mode [ 323.997812][T18311] bond_slave_0: entered promiscuous mode [ 324.014830][T18320] __nla_validate_parse: 16 callbacks suppressed [ 324.014846][T18320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3516'. [ 324.048233][T18311] bond_slave_1: entered promiscuous mode [ 324.053989][ T5879] Bluetooth: hci3: command 0x0405 tx timeout [ 324.126091][T18311] debugfs: 'hsr1' already exists in 'hsr' [ 324.147980][T18311] Cannot create hsr debugfs directory [ 324.157467][T18311] hsr1: entered allmulticast mode [ 324.169482][T18311] batadv0: entered allmulticast mode [ 324.174929][T18311] bond0: entered allmulticast mode [ 324.190473][T18311] bond_slave_0: entered allmulticast mode [ 324.199136][T18311] bond_slave_1: entered allmulticast mode [ 324.205418][T18311] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 324.216122][T18315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3515'. [ 324.321192][T18320] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.384159][T18328] syzkaller0: entered promiscuous mode [ 324.391716][T18328] syzkaller0: entered allmulticast mode [ 324.424519][T18333] tipc: Enabled bearer , priority 0 [ 324.461919][T18335] netlink: 'syz.3.3518': attribute type 1 has an invalid length. [ 324.477211][T18335] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3518'. [ 324.495796][T18335] netlink: 'syz.3.3518': attribute type 2 has an invalid length. [ 324.510178][T18335] netlink: 'syz.3.3518': attribute type 1 has an invalid length. [ 324.571533][T18332] tipc: Resetting bearer [ 324.580475][T18335] bond0: option ad_select: unable to set because the bond device is up [ 324.599988][T18327] tipc: Resetting bearer [ 324.725223][T18327] tipc: Disabling bearer [ 324.744232][T18354] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3522'. [ 324.782511][T18358] netlink: 'syz.3.3524': attribute type 27 has an invalid length. [ 324.795903][T18359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3523'. [ 324.979230][T18372] netlink: 'syz.5.3529': attribute type 1 has an invalid length. [ 325.167211][T18378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3526'. [ 325.525014][T18418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.537787][T18418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.547579][T18418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.561201][T18418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.612951][T18418] batadv0 (unregistering): left promiscuous mode [ 326.440534][T18456] ipvlan2: entered promiscuous mode [ 326.451607][ T43] IPVS: starting estimator thread 0... [ 326.479619][T18461] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 326.552752][T18461] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 326.590004][T18464] IPVS: using max 25 ests per chain, 60000 per kthread [ 326.945993][T18499] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.3558'. [ 327.053495][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3559'. [ 327.408323][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3562'. [ 328.003361][T18537] netlink: 288 bytes leftover after parsing attributes in process `syz.6.3567'. [ 328.143483][T18532] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 328.285997][T18561] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 328.313957][T18560] macvlan0: entered promiscuous mode [ 328.321142][T18560] batadv0: entered promiscuous mode [ 328.327062][T18560] debugfs: 'hsr1' already exists in 'hsr' [ 328.333063][T18561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.370855][T18560] Cannot create hsr debugfs directory [ 328.379722][T18560] hsr1: entered allmulticast mode [ 328.384771][T18560] macvlan0: entered allmulticast mode [ 328.410885][T18560] veth1_vlan: entered allmulticast mode [ 328.428024][T18560] batadv0: entered allmulticast mode [ 328.461245][T18560] macvlan0: left promiscuous mode [ 328.476832][T18560] batadv0: left promiscuous mode [ 328.844319][T18592] netlink: 'syz.1.3580': attribute type 3 has an invalid length. [ 330.274464][T18587] team0: Caught tx_queue_len zero misconfig [ 330.415326][T18603] __nla_validate_parse: 5 callbacks suppressed [ 330.415343][T18603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3581'. [ 330.565972][T18610] netlink: 'syz.3.3585': attribute type 16 has an invalid length. [ 330.598499][T18610] netlink: 'syz.3.3585': attribute type 3 has an invalid length. [ 330.607602][T18610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3585'. [ 330.687350][T18617] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3587'. [ 331.047270][T18636] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3593'. [ 331.141336][T18647] team0: Device gtp0 is of different type [ 331.447552][T18663] nbd: must specify a device to reconfigure [ 331.477058][T18663] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3601'. [ 331.554691][T18674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3602'. [ 331.782479][T18691] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3607'. [ 331.804616][T18694] bridge0: port 3(team0) entered disabled state [ 332.129218][T18694] team0 (unregistering): left allmulticast mode [ 332.155875][T18694] team_slave_0: left allmulticast mode [ 332.186216][T18694] team_slave_1: left allmulticast mode [ 332.225433][T18694] team0 (unregistering): left promiscuous mode [ 332.258101][T18694] team_slave_0: left promiscuous mode [ 332.263878][T18694] team_slave_1: left promiscuous mode [ 332.279569][T18694] bridge0: port 3(team0) entered disabled state [ 332.306352][T18694] team0 (unregistering): Port device team_slave_0 removed [ 332.331735][T18694] team0 (unregistering): Port device team_slave_1 removed [ 332.747232][T18709] tipc: Started in network mode [ 332.753522][T18709] tipc: Node identity 06b6a397d3b8, cluster identity 4711 [ 332.770015][T18709] tipc: Enabled bearer , priority 0 [ 332.813213][T18709] syzkaller0: entered promiscuous mode [ 332.822624][T18709] syzkaller0: entered allmulticast mode [ 332.841604][T18709] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 333.012204][T18728] netlink: 'syz.5.3620': attribute type 11 has an invalid length. [ 333.020376][T18728] netlink: 'syz.5.3620': attribute type 5 has an invalid length. [ 333.028135][T18728] netlink: 4112 bytes leftover after parsing attributes in process `syz.5.3620'. [ 333.065308][T18729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3621'. [ 333.172856][T18734] netlink: 'syz.1.3617': attribute type 12 has an invalid length. [ 333.215477][T18734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3617'. [ 333.458271][T18698] tipc: Resetting bearer [ 333.529437][T18698] tipc: Disabling bearer [ 334.203394][T18775] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 334.318950][T18784] netlink: 'syz.3.3638': attribute type 1 has an invalid length. [ 334.425886][T18795] netlink: 'syz.1.3640': attribute type 24 has an invalid length. [ 334.493898][T18799] netlink: 'syz.3.3641': attribute type 10 has an invalid length. [ 334.528934][T18795] netlink: 'syz.1.3640': attribute type 4 has an invalid length. [ 334.586829][T18805] netlink: 'syz.1.3640': attribute type 4 has an invalid length. [ 335.115582][T18824] veth1_vlan (unregistering): left allmulticast mode [ 335.501198][T18840] : renamed from veth1_vlan (while UP) [ 335.545742][T18854] tun0: tun_chr_ioctl cmd 1074025675 [ 335.551143][T18861] __nla_validate_parse: 7 callbacks suppressed [ 335.551159][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3662'. [ 335.590084][T18854] tun0: persist disabled [ 335.865038][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3671'. [ 335.912310][T18881] team1: entered promiscuous mode [ 335.946389][T18881] team1: entered allmulticast mode [ 336.123156][T18894] netlink: 'syz.6.3673': attribute type 1 has an invalid length. [ 336.134315][T18894] netlink: 220 bytes leftover after parsing attributes in process `syz.6.3673'. [ 336.250765][T18895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3674'. [ 336.566712][T18914] netlink: 'syz.5.3679': attribute type 7 has an invalid length. [ 336.642155][T18918] FAULT_INJECTION: forcing a failure. [ 336.642155][T18918] name failslab, interval 1, probability 0, space 0, times 0 [ 336.671706][T18918] CPU: 0 UID: 0 PID: 18918 Comm: syz.3.3680 Not tainted syzkaller #0 PREEMPT(full) [ 336.671751][T18918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 336.671784][T18918] Call Trace: [ 336.671791][T18918] [ 336.671798][T18918] dump_stack_lvl+0x189/0x250 [ 336.671823][T18918] ? __pfx____ratelimit+0x10/0x10 [ 336.671840][T18918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.671859][T18918] ? __pfx__printk+0x10/0x10 [ 336.671886][T18918] ? __pfx___might_resched+0x10/0x10 [ 336.671907][T18918] should_fail_ex+0x414/0x560 [ 336.671934][T18918] should_failslab+0xa8/0x100 [ 336.671955][T18918] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 336.671976][T18918] ? __alloc_skb+0x112/0x2d0 [ 336.671996][T18918] __alloc_skb+0x112/0x2d0 [ 336.672017][T18918] netlink_sendmsg+0x5c6/0xb30 [ 336.672044][T18918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.672064][T18918] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.672082][T18918] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.672100][T18918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.672118][T18918] __sock_sendmsg+0x219/0x270 [ 336.672145][T18918] ____sys_sendmsg+0x505/0x830 [ 336.672171][T18918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.672201][T18918] ? import_iovec+0x74/0xa0 [ 336.672225][T18918] ___sys_sendmsg+0x21f/0x2a0 [ 336.672248][T18918] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.672305][T18918] ? __fget_files+0x2a/0x420 [ 336.672320][T18918] ? __fget_files+0x3a0/0x420 [ 336.672346][T18918] __x64_sys_sendmsg+0x19b/0x260 [ 336.672369][T18918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.672399][T18918] ? __pfx_ksys_write+0x10/0x10 [ 336.672418][T18918] ? rcu_is_watching+0x15/0xb0 [ 336.672448][T18918] ? do_syscall_64+0xbe/0x3b0 [ 336.672470][T18918] do_syscall_64+0xfa/0x3b0 [ 336.672487][T18918] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.672505][T18918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.672521][T18918] ? clear_bhb_loop+0x60/0xb0 [ 336.672542][T18918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.672558][T18918] RIP: 0033:0x7fc2ec18eec9 [ 336.672573][T18918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.672587][T18918] RSP: 002b:00007fc2ed0df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.672605][T18918] RAX: ffffffffffffffda RBX: 00007fc2ec3e5fa0 RCX: 00007fc2ec18eec9 [ 336.672618][T18918] RDX: 0000000020040880 RSI: 0000200000000280 RDI: 0000000000000006 [ 336.672629][T18918] RBP: 00007fc2ed0df090 R08: 0000000000000000 R09: 0000000000000000 [ 336.672639][T18918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.672650][T18918] R13: 00007fc2ec3e6038 R14: 00007fc2ec3e5fa0 R15: 00007ffe89814258 [ 336.672680][T18918] [ 337.309150][T18947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3686'. [ 337.433591][T18955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3689'. [ 337.584905][T18955] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3689'. [ 337.602883][T18950] wg1: entered promiscuous mode [ 337.612607][T18950] wg1: entered allmulticast mode [ 337.645382][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3689'. [ 337.696703][T18955] netlink: 'syz.2.3689': attribute type 11 has an invalid length. [ 337.700641][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3693'. [ 337.735949][T18975] openvswitch: netlink: Flow actions attr not present in new flow. [ 338.431828][T19020] FAULT_INJECTION: forcing a failure. [ 338.431828][T19020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.449071][T19020] CPU: 0 UID: 0 PID: 19020 Comm: syz.6.3707 Not tainted syzkaller #0 PREEMPT(full) [ 338.449096][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 338.449107][T19020] Call Trace: [ 338.449114][T19020] [ 338.449121][T19020] dump_stack_lvl+0x189/0x250 [ 338.449145][T19020] ? __pfx____ratelimit+0x10/0x10 [ 338.449164][T19020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.449182][T19020] ? __pfx__printk+0x10/0x10 [ 338.449203][T19020] ? __might_fault+0xb0/0x130 [ 338.449233][T19020] should_fail_ex+0x414/0x560 [ 338.449261][T19020] _copy_from_iter+0x1de/0x1790 [ 338.449285][T19020] ? rcu_is_watching+0x15/0xb0 [ 338.449302][T19020] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 338.449325][T19020] ? __pfx__copy_from_iter+0x10/0x10 [ 338.449345][T19020] ? __build_skb_around+0x257/0x3e0 [ 338.449368][T19020] ? netlink_sendmsg+0x642/0xb30 [ 338.449383][T19020] ? skb_put+0x11b/0x210 [ 338.449404][T19020] netlink_sendmsg+0x6b2/0xb30 [ 338.449431][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.449452][T19020] ? aa_sock_msg_perm+0xf1/0x1d0 [ 338.449471][T19020] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.449486][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.449503][T19020] __sock_sendmsg+0x219/0x270 [ 338.449528][T19020] ____sys_sendmsg+0x505/0x830 [ 338.449552][T19020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.449581][T19020] ? import_iovec+0x74/0xa0 [ 338.449604][T19020] ___sys_sendmsg+0x21f/0x2a0 [ 338.449625][T19020] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.449697][T19020] ? __fget_files+0x2a/0x420 [ 338.449712][T19020] ? __fget_files+0x3a0/0x420 [ 338.449738][T19020] __x64_sys_sendmsg+0x19b/0x260 [ 338.449763][T19020] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.449791][T19020] ? __pfx_ksys_write+0x10/0x10 [ 338.449808][T19020] ? rcu_is_watching+0x15/0xb0 [ 338.449829][T19020] ? do_syscall_64+0xbe/0x3b0 [ 338.449854][T19020] do_syscall_64+0xfa/0x3b0 [ 338.449871][T19020] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.449887][T19020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.449903][T19020] ? clear_bhb_loop+0x60/0xb0 [ 338.449922][T19020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.449938][T19020] RIP: 0033:0x7f7ebd78eec9 [ 338.449954][T19020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.449968][T19020] RSP: 002b:00007f7ebb9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.449987][T19020] RAX: ffffffffffffffda RBX: 00007f7ebd9e5fa0 RCX: 00007f7ebd78eec9 [ 338.449999][T19020] RDX: 0000000020040880 RSI: 0000200000000280 RDI: 0000000000000006 [ 338.450010][T19020] RBP: 00007f7ebb9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 338.450020][T19020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.450029][T19020] R13: 00007f7ebd9e6038 R14: 00007f7ebd9e5fa0 R15: 00007ffdf3fbca68 [ 338.450059][T19020] [ 338.867432][T19024] netlink: 340 bytes leftover after parsing attributes in process `syz.5.3709'. [ 338.932141][ T43] IPVS: starting estimator thread 0... [ 338.965189][T19022] veth5: entered allmulticast mode [ 338.988186][T19034] batadv_slave_1: entered promiscuous mode [ 339.078047][T19035] IPVS: using max 30 ests per chain, 72000 per kthread [ 339.231614][T19041] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.273155][T19041] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.309963][T19056] netlink: 'syz.2.3717': attribute type 27 has an invalid length. [ 339.490399][T19031] batadv_slave_1: left promiscuous mode [ 339.851113][T19081] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 339.891325][T19084] tipc: Enabled bearer , priority 0 [ 339.922337][T19090] netlink: 'syz.3.3729': attribute type 3 has an invalid length. [ 340.043292][T19084] syzkaller0: entered promiscuous mode [ 340.049971][T19084] syzkaller0: entered allmulticast mode [ 340.056324][T19084] tipc: Resetting bearer [ 340.077520][T19083] tipc: Resetting bearer [ 340.131460][T19100] openvswitch: netlink: Multiple metadata blocks provided [ 340.143461][T19100] netlink: zone id is out of range [ 340.148950][T19100] netlink: zone id is out of range [ 340.154239][T19100] netlink: zone id is out of range [ 340.160498][T19100] netlink: zone id is out of range [ 340.176676][T19100] netlink: zone id is out of range [ 340.182443][T19100] netlink: zone id is out of range [ 340.188040][T19100] netlink: zone id is out of range [ 340.193588][T19100] netlink: zone id is out of range [ 340.435977][T19111] netlink: 'syz.3.3734': attribute type 1 has an invalid length. [ 340.919102][ T10] tipc: Node number set to 1371071235 [ 341.864614][T19083] tipc: Disabling bearer [ 341.913990][T19113] netdevsim netdevsim5: Direct firmware load for failed with error -2 [ 341.936290][T19113] netdevsim netdevsim5: Falling back to sysfs fallback for: [ 342.020439][T19124] __nla_validate_parse: 6 callbacks suppressed [ 342.020453][T19124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3737'. [ 342.102396][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3738'. [ 342.203349][T19135] netem: incorrect ge model size [ 342.234265][T19135] netem: change failed [ 342.293649][T19139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3742'. [ 342.326522][T19143] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3743'. [ 342.348600][T19144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3745'. [ 342.809219][T19173] netlink: 'syz.5.3752': attribute type 18 has an invalid length. [ 342.857043][ T7837] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.886939][ T7837] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.891950][T19176] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3753'. [ 342.920424][ T7837] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.953242][ T7837] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.995548][T19181] netlink: 'syz.3.3755': attribute type 12 has an invalid length. [ 343.237821][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3759'. [ 343.335330][T19194] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3760'. [ 343.349862][T19194] net_ratelimit: 9 callbacks suppressed [ 343.349878][T19194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.367603][T19198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3761'. [ 343.533666][T19210] netlink: 'syz.6.3764': attribute type 1 has an invalid length. [ 343.653145][T10963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.663380][T19222] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3765'. [ 343.694790][T10963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.731684][T19220] bond3: (slave geneve3): making interface the new active one [ 343.740270][T19220] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 343.745859][T19226] netlink: 'syz.5.3767': attribute type 1 has an invalid length. [ 343.831992][T15902] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.849347][T15902] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.926467][T19226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.964603][T15902] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.975933][T15902] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 344.043901][T19226] veth3: entered promiscuous mode [ 344.071635][T19226] bond3: (slave veth3): Enslaving as an active interface with a down link [ 344.114380][T19228] vlan2: entered allmulticast mode [ 344.130647][T19228] bond3: entered allmulticast mode [ 344.142541][T19228] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 344.491038][T19252] netlink: 'syz.1.3773': attribute type 7 has an invalid length. [ 344.518420][T19252] netlink: 'syz.1.3773': attribute type 8 has an invalid length. [ 344.526634][T19256] tipc: Enabled bearer , priority 10 [ 344.605389][T19255] netlink: 'syz.5.3776': attribute type 1 has an invalid length. [ 344.645454][T19255] netlink: 'syz.5.3776': attribute type 2 has an invalid length. [ 344.664496][T19255] netlink: 'syz.5.3776': attribute type 1 has an invalid length. [ 344.866827][T19275] netlink: 'syz.6.3781': attribute type 1 has an invalid length. [ 344.971778][T19275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.040310][T19277] bond4: (slave gretap1): making interface the new active one [ 345.072134][T19277] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 345.160592][T19292] sctp: [Deprecated]: syz.5.3785 (pid 19292) Use of int in max_burst socket option deprecated. [ 345.160592][T19292] Use struct sctp_assoc_value instead [ 345.638327][ T10] tipc: Node number set to 3574506391 [ 346.254600][T19345] vlan2: entered promiscuous mode [ 346.268927][T19345] vlan2: entered allmulticast mode [ 346.648710][ T30] audit: type=1107 audit(1758836499.201:3): pid=19370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='pF*#YOm8!pgO&j:k੨}J`a֐Ӳ1|z|/V_BuWX' [ 346.687183][ T30] audit: type=1107 audit(1758836499.201:4): pid=19370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='pF*#YOm8!pgO&j:k੨}J`a֐Ӳ1|z|/V_BuWX' [ 347.061945][T19401] __nla_validate_parse: 13 callbacks suppressed [ 347.061965][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3816'. [ 347.265577][T19413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3820'. [ 347.551153][T19427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.566748][T19426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3824'. [ 347.611116][T19426] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3824'. [ 347.782488][T19444] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 347.878516][T19444] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 347.913396][T19444] gretap2: entered promiscuous mode [ 347.925401][T19444] gretap2: entered allmulticast mode [ 348.026221][T19447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3828'. [ 348.112331][T10966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.135134][T19461] validate_nla: 6 callbacks suppressed [ 348.135151][T19461] netlink: 'syz.1.3831': attribute type 1 has an invalid length. [ 348.139644][T10966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.140789][T19461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.155829][T10966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 348.187359][T19453] tipc: Enabling of bearer rejected, media not registered [ 348.410137][T10966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.447115][T10966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.460764][T10966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 348.465569][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3836'. [ 348.515694][T19466] netlink: 'syz.6.3835': attribute type 1 has an invalid length. [ 348.520653][T19478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3836'. [ 348.523835][T19466] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3835'. [ 348.567567][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3835'. [ 348.625683][T10966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.651558][T10966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.671050][T10966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 348.712546][T15899] tipc: Subscription rejected, illegal request [ 348.749148][T19478] batadv_slave_1: Caught tx_queue_len zero misconfig [ 348.781708][T19494] netlink: 'syz.1.3840': attribute type 12 has an invalid length. [ 348.881914][T10966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.893806][T10966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.904711][T10966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 349.037103][T19504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3843'. [ 349.284425][T19520] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 349.347507][T19521] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 349.538582][T19540] netlink: 'syz.2.3852': attribute type 1 has an invalid length. [ 349.679077][T19543] block nbd5: server does not support multiple connections per device. [ 349.714056][T19543] block nbd5: shutting down sockets [ 350.032121][T10966] bond2 (unregistering): (slave gretap1): Releasing active interface [ 350.041989][T10966] gretap1 (unregistering): left allmulticast mode [ 350.067422][T10966] bond10 (unregistering): (slave gretap2): Releasing active interface [ 350.142964][T10966] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 350.464530][T10966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.476830][T10966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.490950][T10966] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 350.515928][T10966] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 350.527733][T10966] bond0 (unregistering): Released all slaves [ 350.641231][T10966] bond1 (unregistering): Released all slaves [ 350.757028][T10966] bond2 (unregistering): Released all slaves [ 350.771076][T10966] bond3 (unregistering): Released all slaves [ 350.786552][T10966] bond4 (unregistering): Released all slaves [ 350.900817][T10966] bond5 (unregistering): Released all slaves [ 350.916323][T10966] bond6 (unregistering): Released all slaves [ 350.929807][T10966] bond7 (unregistering): Released all slaves [ 351.043003][T10966] bond8 (unregistering): Released all slaves [ 351.061699][T10966] bond9 (unregistering): Released all slaves [ 351.079957][T10966] bond10 (unregistering): Released all slaves [ 351.102448][T10966] bond11 (unregistering): (slave bond12): Releasing backup interface [ 351.111990][T10966] bond11 (unregistering): Released all slaves [ 351.227037][T10966] bond12 (unregistering): Released all slaves [ 351.342362][T10966] bond13 (unregistering): Released all slaves [ 351.388075][T19556] netlink: 'syz.6.3856': attribute type 4 has an invalid length. [ 351.402226][T19557] netlink: 'syz.6.3856': attribute type 4 has an invalid length. [ 351.624632][T10966] tipc: Left network mode [ 351.646452][T19565] openvswitch: netlink: Unknown key attributes 2 [ 351.739343][T19571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.746614][T19571] IPv6: NLM_F_CREATE should be set when creating new route [ 351.754027][T19571] IPv6: NLM_F_CREATE should be set when creating new route [ 351.761290][T19571] IPv6: NLM_F_CREATE should be set when creating new route [ 351.802254][T19562] netlink: 'syz.2.3858': attribute type 1 has an invalid length. [ 351.884333][T19562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.109714][T19588] __nla_validate_parse: 6 callbacks suppressed [ 352.109733][T19588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 352.151185][T19591] delete_channel: no stack [ 352.160404][T19589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 352.235134][T19588] team0: entered promiscuous mode [ 352.249029][T19588] team0: entered allmulticast mode [ 352.293345][T19600] netlink: 'syz.1.3869': attribute type 11 has an invalid length. [ 352.339581][T19600] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3869'. [ 352.351368][T19589] team1: entered promiscuous mode [ 352.356435][T19589] team1: entered allmulticast mode [ 352.434159][T19603] bond0: (slave ip6_vti0): Error: Device type is different from other slaves [ 352.468545][T19607] sch_fq: defrate 0 ignored. [ 352.483334][T19606] bond0: (slave ip6_vti0): Error: Device type is different from other slaves [ 352.635466][T19619] netlink: 'syz.2.3874': attribute type 1 has an invalid length. [ 352.674094][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3873'. [ 353.029270][T19648] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 353.062130][T10966] hsr_slave_0: left promiscuous mode [ 353.081122][T10966] hsr_slave_1: left promiscuous mode [ 353.082685][T19635] IPVS: persistence engine module ip_vs_pe_ not found [ 353.087415][T10966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.123500][T10966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.157353][T10966] veth1_macvtap: left promiscuous mode [ 353.165838][T10966] veth0_macvtap: left promiscuous mode [ 353.351875][T10966] pimreg (unregistering): left allmulticast mode [ 353.664371][T10966] team0 (unregistering): Port device team_slave_1 removed [ 353.704614][T10966] team0 (unregistering): Port device team_slave_0 removed [ 354.399340][T19671] netlink: 'syz.2.3887': attribute type 21 has an invalid length. [ 354.436700][T19671] netlink: 'syz.2.3887': attribute type 22 has an invalid length. [ 354.507618][T19671] netlink: 'syz.2.3887': attribute type 23 has an invalid length. [ 354.544337][T19671] netlink: 'syz.2.3887': attribute type 25 has an invalid length. [ 354.581655][T19671] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3887'. [ 354.811058][T19700] atomic_op ffff8880590f0198 conn xmit_atomic 0000000000000000 [ 354.819425][T19706] atomic_op ffff88805b78a998 conn xmit_atomic 0000000000000000 [ 354.893510][T19705] syzkaller1: entered promiscuous mode [ 354.911851][T19710] netlink: 'syz.5.3892': attribute type 10 has an invalid length. [ 354.912779][T19705] syzkaller1: entered allmulticast mode [ 355.036557][T19710] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 355.096494][T10966] IPVS: stop unused estimator thread 0... [ 355.339669][T19731] syz.2.3899: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 355.348106][T19733] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3900'. [ 355.374122][T19731] CPU: 1 UID: 0 PID: 19731 Comm: syz.2.3899 Not tainted syzkaller #0 PREEMPT(full) [ 355.374159][T19731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 355.374171][T19731] Call Trace: [ 355.374178][T19731] [ 355.374186][T19731] dump_stack_lvl+0x189/0x250 [ 355.374218][T19731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.374239][T19731] ? __pfx__printk+0x10/0x10 [ 355.374268][T19731] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 355.374293][T19731] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 355.374316][T19731] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 355.374340][T19731] warn_alloc+0x214/0x310 [ 355.374366][T19731] ? stack_depot_save_flags+0x40/0x860 [ 355.374395][T19731] ? __pfx_warn_alloc+0x10/0x10 [ 355.374422][T19731] ? kasan_save_track+0x4f/0x80 [ 355.374444][T19731] ? xskq_create+0x56/0x170 [ 355.374460][T19731] ? xsk_init_queue+0xb0/0x110 [ 355.374474][T19731] ? xsk_setsockopt+0x4dc/0x8d0 [ 355.374495][T19731] ? do_sock_setsockopt+0x179/0x1b0 [ 355.374512][T19731] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 355.374530][T19731] ? do_syscall_64+0xfa/0x3b0 [ 355.374546][T19731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.374573][T19731] __vmalloc_node_range_noprof+0x125/0x12f0 [ 355.374632][T19731] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.374663][T19731] ? __kasan_kmalloc+0x93/0xb0 [ 355.374688][T19731] vmalloc_user_noprof+0xad/0xf0 [ 355.374710][T19731] ? xskq_create+0xbf/0x170 [ 355.374727][T19731] xskq_create+0xbf/0x170 [ 355.374747][T19731] xsk_init_queue+0xb0/0x110 [ 355.374768][T19731] xsk_setsockopt+0x4dc/0x8d0 [ 355.374795][T19731] ? __pfx_xsk_setsockopt+0x10/0x10 [ 355.374819][T19731] ? __pfx_aa_sk_perm+0x10/0x10 [ 355.374848][T19731] ? aa_sock_opt_perm+0xff/0x1b0 [ 355.374870][T19731] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 355.374888][T19731] ? __pfx_xsk_setsockopt+0x10/0x10 [ 355.374914][T19731] do_sock_setsockopt+0x179/0x1b0 [ 355.374940][T19731] __x64_sys_setsockopt+0x13f/0x1b0 [ 355.374967][T19731] do_syscall_64+0xfa/0x3b0 [ 355.374984][T19731] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.375002][T19731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.375019][T19731] ? clear_bhb_loop+0x60/0xb0 [ 355.375042][T19731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.375058][T19731] RIP: 0033:0x7f26d718eec9 [ 355.375075][T19731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.375090][T19731] RSP: 002b:00007f26d7fb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 355.375110][T19731] RAX: ffffffffffffffda RBX: 00007f26d73e5fa0 RCX: 00007f26d718eec9 [ 355.375123][T19731] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 355.375134][T19731] RBP: 00007f26d7211f91 R08: 0000000000000004 R09: 0000000000000000 [ 355.375153][T19731] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.375166][T19731] R13: 00007f26d73e6038 R14: 00007f26d73e5fa0 R15: 00007fff373461c8 [ 355.375197][T19731] [ 355.375274][T19731] Mem-Info: [ 355.527703][T19742] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 355.551230][T19731] active_anon:3906 inactive_anon:0 isolated_anon:0 [ 355.551230][T19731] active_file:3340 inactive_file:40033 isolated_file:0 [ 355.551230][T19731] unevictable:768 dirty:87 writeback:0 [ 355.551230][T19731] slab_reclaimable:13031 slab_unreclaimable:124178 [ 355.551230][T19731] mapped:29101 shmem:1365 pagetables:1061 [ 355.551230][T19731] sec_pagetables:0 bounce:0 [ 355.551230][T19731] kernel_misc_reclaimable:0 [ 355.551230][T19731] free:1297537 free_pcp:13622 free_cma:0 [ 355.745307][T19731] Node 0 active_anon:15724kB inactive_anon:0kB active_file:13360kB inactive_file:159928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116404kB dirty:348kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15600kB pagetables:4204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.777946][T19731] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.867974][T19731] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.918061][T19731] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 355.924061][T19731] Node 0 DMA32 free:1291916kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15560kB inactive_anon:0kB active_file:13360kB inactive_file:158360kB unevictable:1536kB writepending:348kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:36400kB local_pcp:15380kB free_cma:0kB [ 355.976332][T19731] lowmem_reserve[]: 0 0 1 1 1 [ 355.994151][T19731] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 356.041212][T19731] lowmem_reserve[]: 0 0 0 0 0 [ 356.046140][T19731] Node 1 Normal free:3882888kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17828kB local_pcp:10404kB free_cma:0kB [ 356.080602][T19731] lowmem_reserve[]: 0 0 0 0 0 [ 356.096722][T19731] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 356.120100][T19731] Node 0 DMA32: 2694*4kB (UME) 1041*8kB (UME) 465*16kB (UME) 461*32kB (UME) 63*64kB (UME) 73*128kB (UME) 26*256kB (UM) 15*512kB (UME) 8*1024kB (UME) 7*2048kB (UME) 293*4096kB (M) = 1291664kB [ 356.164878][T19731] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 356.186988][T19731] Node 1 Normal: 172*4kB (UE) 55*8kB (UME) 50*16kB (UME) 104*32kB (UME) 32*64kB (UME) 4*128kB (UM) 3*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3882888kB [ 356.217229][T19731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.236679][T19731] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.246190][T19731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.257402][T19731] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.267380][T19731] 44736 total pagecache pages [ 356.299600][T19731] 0 pages in swap cache [ 356.304679][T19731] Free swap = 124996kB [ 356.310629][T19731] Total swap = 124996kB [ 356.314804][T19731] 2097051 pages RAM [ 356.318998][T19731] 0 pages HighMem/MovableOnly [ 356.323751][T19731] 425672 pages reserved [ 356.330537][T19731] 0 pages cma reserved [ 356.384319][T19769] netlink: 'syz.2.3910': attribute type 9 has an invalid length. [ 356.395867][T19769] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.3910'. [ 356.452556][T19772] atomic_op ffff888058d3f998 conn xmit_atomic 0000000000000000 [ 356.495412][T19775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3911'. [ 356.565309][T19783] openvswitch: netlink: Duplicate or invalid key (type 0). [ 356.582685][T19783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.731029][T19789] netlink: 'syz.6.3917': attribute type 39 has an invalid length. [ 356.907377][T19805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3920'. [ 356.975146][T19807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3922'. [ 357.009417][T19809] netlink: 'syz.3.3923': attribute type 1 has an invalid length. [ 357.074932][T19809] bond4: entered promiscuous mode [ 357.081363][T19809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 357.096128][T19807] gretap0: entered promiscuous mode [ 357.117482][T19807] gretap0: left promiscuous mode [ 357.209258][T19809] bond4: (slave bridge2): making interface the new active one [ 357.216771][T19809] bridge2: entered promiscuous mode [ 357.236985][T19809] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 357.308179][T19823] __nla_validate_parse: 1 callbacks suppressed [ 357.308199][T19823] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3927'. [ 357.340606][T19832] 8021q: VLANs not supported on wg1 [ 357.773669][T19857] netlink: 'syz.1.3935': attribute type 13 has an invalid length. [ 358.030151][T19873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3941'. [ 358.039942][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3941'. [ 358.090771][T19877] tipc: Enabling of bearer rejected, failed to enable media [ 358.107238][T19873] bridge_slave_1: left allmulticast mode [ 358.113634][T19873] bridge_slave_1: left promiscuous mode [ 358.120171][T19873] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.135963][T19879] netlink: 'syz.6.3944': attribute type 1 has an invalid length. [ 358.158932][T19873] bridge_slave_0: left allmulticast mode [ 358.178061][T19873] bridge_slave_0: left promiscuous mode [ 358.185152][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3942'. [ 358.185204][T19873] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.338280][T19892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3944'. [ 358.359282][T19879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 358.827090][T19908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.999531][T19908] IPVS: persistence engine module ip_vs_pe_ not found [ 359.015615][T19914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.045230][T19914] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 359.060953][T19914] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 359.172365][T19927] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 359.207584][T19927] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.3956'. [ 359.341753][T19938] tipc: Enabling of bearer rejected, failed to enable media [ 359.406260][T19945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3959'. [ 359.423002][T19945] veth1_macvtap: left promiscuous mode [ 359.578332][T19952] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3959'. [ 359.765629][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3968'. [ 359.973811][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3967'. [ 359.996920][T19984] geneve2: entered promiscuous mode [ 360.006805][T19984] geneve2: entered allmulticast mode [ 360.036604][T10961] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 360.172950][T19984] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.186458][T19984] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.210615][T10961] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 360.222191][T10961] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 361.059445][T20037] veth0: entered promiscuous mode [ 361.105050][T20036] veth0: left promiscuous mode [ 361.173671][T20041] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 361.242209][T20047] validate_nla: 1 callbacks suppressed [ 361.242225][T20047] netlink: 'syz.6.3992': attribute type 24 has an invalid length. [ 361.464537][T20057] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 361.491274][T20057] netlink: 'syz.1.3997': attribute type 1 has an invalid length. [ 361.585742][T20057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.596041][T20057] bond2: (slave bond3): making interface the new active one [ 361.604120][T20057] bond2: (slave bond3): Enslaving as an active interface with an up link [ 361.740315][T20070] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 361.816856][T20057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.930116][T19984] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.943648][T19984] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.954122][T19984] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 362.117224][T19984] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.159268][T19984] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.177778][T19984] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 362.346255][T19984] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.358614][T19984] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.369842][T19984] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 362.668334][T10966] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.683122][T10966] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 362.693626][T10966] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.884238][ T7837] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.903440][ T7837] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 362.936216][ T7837] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.005589][ T7837] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.017618][ T7837] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 363.037014][ T7837] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.074449][ T7836] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.083289][ T7836] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 363.104713][ T7836] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.559820][T20175] tipc: Enabled bearer , priority 0 [ 363.582522][T20175] syzkaller0: entered promiscuous mode [ 363.597473][T20175] syzkaller0: entered allmulticast mode [ 363.621465][T20172] tipc: Resetting bearer [ 363.652948][T20172] tipc: Disabling bearer [ 363.695755][T20189] __nla_validate_parse: 11 callbacks suppressed [ 363.695770][T20189] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4030'. [ 363.713240][T20189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.765993][T20189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4030'. [ 363.776749][T20189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4030'. [ 363.793281][T20196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4033'. [ 363.896064][T20199] sctp: [Deprecated]: syz.3.4035 (pid 20199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.896064][T20199] Use struct sctp_sack_info instead [ 363.957292][T20207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4036'. [ 364.197446][T20226] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4042'. [ 364.235466][T20226] gretap0: entered promiscuous mode [ 364.511752][T20245] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4046'. [ 364.607024][T20245] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4046'. [ 364.633145][T20253] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4048'. [ 364.650900][ T5928] IPVS: starting estimator thread 0... [ 364.758165][T20262] IPVS: using max 33 ests per chain, 79200 per kthread [ 364.849773][T20271] netlink: 'syz.3.4054': attribute type 4 has an invalid length. [ 364.899685][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4055'. [ 365.204405][T20286] xt_limit: Overflow, try lower: 604147548/4200216962 [ 365.584247][T20301] netlink: 'syz.3.4064': attribute type 21 has an invalid length. [ 365.826521][T20309] 0{X: renamed from gretap0 (while UP) [ 365.896553][T20309] 0{X: entered allmulticast mode [ 365.944959][T20309] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 366.034699][T20314] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 366.067097][T20324] tipc: Enabled bearer , priority 10 [ 366.357045][T20346] netlink: 'syz.5.4078': attribute type 2 has an invalid length. [ 366.402045][T20350] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 367.178045][ T1212] tipc: Node number set to 903545408 [ 367.245963][T20400] syzkaller1: entered promiscuous mode [ 367.275952][T20400] syzkaller1: entered allmulticast mode [ 367.373466][T20400] netlink: 'syz.2.4094': attribute type 1 has an invalid length. [ 368.230089][T20448] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.426040][T20466] netlink: 'syz.1.4111': attribute type 1 has an invalid length. [ 368.444369][T20462] netlink: 'syz.1.4111': attribute type 1 has an invalid length. [ 368.579879][T20468] bond4 (unregistering): Released all slaves [ 368.859365][T20494] __nla_validate_parse: 12 callbacks suppressed [ 368.859381][T20494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4120'. [ 368.875178][T20494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4120'. [ 368.889637][T20490] syzkaller1: entered promiscuous mode [ 368.918055][T20490] syzkaller1: entered allmulticast mode [ 368.936195][T20498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4121'. [ 369.170235][T20513] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4123'. [ 369.197676][T20513] nbd: couldn't find a device at index 0 [ 369.490869][T20524] scsi_nl_rcv_msg: discarding partial skb [ 369.669021][T20543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.685262][T20545] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4134'. [ 370.109688][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4143'. [ 370.152937][T20576] bridge_slave_1: left allmulticast mode [ 370.180026][T20576] bridge_slave_1: left promiscuous mode [ 370.204081][T20576] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.263021][T20576] bridge_slave_0: left allmulticast mode [ 370.270773][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4145'. [ 370.280374][T20576] bridge_slave_0: left promiscuous mode [ 370.280598][T20576] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.305642][ T7837] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 370.574159][T20600] syzkaller0: entered promiscuous mode [ 370.580776][T20600] syzkaller0: entered allmulticast mode [ 370.612188][T20606] tipc: Enabling of bearer rejected, failed to enable media [ 370.697735][T20609] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4150'. [ 370.714739][T20609] nbd: must specify a size in bytes for the device [ 370.750795][T20611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4151'. [ 370.916740][T20620] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4153'. [ 371.161000][T20630] netlink: 'syz.2.4156': attribute type 6 has an invalid length. [ 371.460358][T20649] vlan4: entered allmulticast mode [ 371.479518][T20649] hsr0: entered allmulticast mode [ 371.484660][T20649] hsr_slave_0: entered allmulticast mode [ 371.499646][T20649] hsr_slave_1: entered allmulticast mode [ 371.820005][T20677] netlink: 'syz.6.4167': attribute type 6 has an invalid length. [ 371.859733][T20677] netlink: 'syz.6.4167': attribute type 6 has an invalid length. [ 372.079683][T20690] sctp: [Deprecated]: syz.3.4170 (pid 20690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.079683][T20690] Use struct sctp_sack_info instead [ 372.435318][T20709] bridge0: port 3(syz_tun) entered blocking state [ 372.441940][T20709] bridge0: port 3(syz_tun) entered forwarding state [ 372.449696][T20709] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.456856][T20709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.464351][T20709] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.471536][T20709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.525334][T20709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.837472][T20734] openvswitch: netlink: Message has -1 unknown bytes. [ 372.928773][T20727] : renamed from vxcan1 (while UP) [ 373.228464][T20751] nbd: must specify a device to reconfigure [ 373.772953][T20766] IPv6: sit2: Disabled Multicast RS [ 373.956284][T20783] __nla_validate_parse: 5 callbacks suppressed [ 373.956304][T20783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4201'. [ 374.140760][T20793] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4203'. [ 374.222234][T20797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4205'. [ 374.301519][T20797] netlink: 'syz.2.4205': attribute type 1 has an invalid length. [ 374.330615][T20801] (unnamed net_device) (uninitialized): option use_carrier: invalid value (16) [ 374.398160][T20806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4208'. [ 374.415495][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4208'. [ 374.485258][T20810] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4210'. [ 374.505226][T20810] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4210'. [ 374.535565][T20810] netlink: 'syz.6.4210': attribute type 5 has an invalid length. [ 374.549550][T20810] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4210'. [ 374.552104][T20813] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 375.441834][T20867] tipc: Enabled bearer , priority 0 [ 375.470165][T20869] tipc: Enabling of bearer rejected, already enabled [ 375.505476][T20876] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 375.570461][T20876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.635551][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4232'. [ 375.679433][T20865] tipc: Disabling bearer [ 375.996470][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4235'. [ 376.104606][T20910] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.359795][T20924] netlink: 'syz.2.4240': attribute type 3 has an invalid length. [ 376.512363][T20934] netlink: 'syz.2.4242': attribute type 1 has an invalid length. [ 376.567194][T20934] bond1: entered promiscuous mode [ 376.574191][T20934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.611015][T20934] bond1: (slave bridge7): making interface the new active one [ 376.618887][T20934] bridge7: entered promiscuous mode [ 376.625433][T20934] bond1: (slave bridge7): Enslaving as an active interface with an up link [ 377.353910][T20956] netlink: 'syz.2.4247': attribute type 12 has an invalid length. [ 377.664571][T20971] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 377.687200][T20969] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 378.472888][T20996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 378.782997][T21010] siw: device registration error -23 [ 378.955550][T21021] xfrm1: entered allmulticast mode [ 379.025906][T21029] __nla_validate_parse: 3 callbacks suppressed [ 379.025924][T21029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4263'. [ 379.145474][T21034] tipc: Enabled bearer , priority 0 [ 379.357338][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880421b1000: rx timeout, send abort [ 379.365718][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880421b2000: rx timeout, send abort [ 379.374754][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880421b1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 379.389152][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880421b2000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 379.469457][T21033] tipc: Disabling bearer [ 380.232077][T21001] ================================================================== [ 380.240183][T21001] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350 [ 380.247738][T21001] Read of size 8 at addr ffff88807f3500a0 by task khidpd_15be0009/21001 [ 380.256076][T21001] [ 380.258414][T21001] CPU: 1 UID: 0 PID: 21001 Comm: khidpd_15be0009 Not tainted syzkaller #0 PREEMPT(full) [ 380.258436][T21001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.258450][T21001] Call Trace: [ 380.258458][T21001] [ 380.258465][T21001] dump_stack_lvl+0x189/0x250 [ 380.258488][T21001] ? __kasan_check_byte+0x12/0x40 [ 380.258511][T21001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.258528][T21001] ? lock_release+0x4b/0x3e0 [ 380.258553][T21001] ? __virt_addr_valid+0x4a5/0x5c0 [ 380.258574][T21001] print_report+0xca/0x240 [ 380.258591][T21001] ? __mutex_lock+0x801/0x1350 [ 380.258608][T21001] kasan_report+0x118/0x150 [ 380.258631][T21001] ? __mutex_lock+0x801/0x1350 [ 380.258651][T21001] __mutex_lock+0x801/0x1350 [ 380.258670][T21001] ? __mutex_lock+0x5bb/0x1350 [ 380.258690][T21001] ? l2cap_unregister_user+0x6a/0x1b0 [ 380.258712][T21001] ? __pfx___mutex_lock+0x10/0x10 [ 380.258732][T21001] ? __pfx___timer_delete_sync+0x10/0x10 [ 380.258756][T21001] l2cap_unregister_user+0x6a/0x1b0 [ 380.258780][T21001] hidp_session_thread+0x3c9/0x410 [ 380.258804][T21001] ? __pfx_hidp_session_thread+0x10/0x10 [ 380.258825][T21001] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 380.258841][T21001] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 380.258865][T21001] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 380.258888][T21001] ? __kthread_parkme+0x7b/0x200 [ 380.258906][T21001] ? __kthread_parkme+0x1a1/0x200 [ 380.258926][T21001] kthread+0x70e/0x8a0 [ 380.258945][T21001] ? __pfx_hidp_session_thread+0x10/0x10 [ 380.258966][T21001] ? __pfx_kthread+0x10/0x10 [ 380.258985][T21001] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.259000][T21001] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.259017][T21001] ? __pfx_kthread+0x10/0x10 [ 380.259035][T21001] ret_from_fork+0x439/0x7d0 [ 380.259054][T21001] ? __pfx_ret_from_fork+0x10/0x10 [ 380.259073][T21001] ? __switch_to_asm+0x39/0x70 [ 380.259092][T21001] ? __switch_to_asm+0x33/0x70 [ 380.259110][T21001] ? __pfx_kthread+0x10/0x10 [ 380.259129][T21001] ret_from_fork_asm+0x1a/0x30 [ 380.259156][T21001] [ 380.259162][T21001] [ 380.460777][T21001] Allocated by task 17605: [ 380.465176][T21001] kasan_save_track+0x3e/0x80 [ 380.469846][T21001] __kasan_kmalloc+0x93/0xb0 [ 380.474425][T21001] __kmalloc_noprof+0x27a/0x4f0 [ 380.479262][T21001] hci_alloc_dev_priv+0x28/0x2060 [ 380.484277][T21001] vhci_create_device+0x120/0x650 [ 380.489284][T21001] vhci_write+0x3ce/0x4a0 [ 380.493600][T21001] vfs_write+0x5c9/0xb30 [ 380.497823][T21001] ksys_write+0x145/0x250 [ 380.502227][T21001] do_syscall_64+0xfa/0x3b0 [ 380.506719][T21001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.512607][T21001] [ 380.514918][T21001] Freed by task 17605: [ 380.518975][T21001] kasan_save_track+0x3e/0x80 [ 380.523649][T21001] kasan_save_free_info+0x46/0x50 [ 380.528746][T21001] __kasan_slab_free+0x5b/0x80 [ 380.533502][T21001] kfree+0x18e/0x440 [ 380.537392][T21001] bt_host_release+0x82/0x90 [ 380.541971][T21001] device_release+0x9c/0x1c0 [ 380.546555][T21001] kobject_put+0x22b/0x480 [ 380.550952][T21001] vhci_release+0x15a/0x1a0 [ 380.555439][T21001] __fput+0x44c/0xa70 [ 380.559402][T21001] task_work_run+0x1d1/0x260 [ 380.563980][T21001] do_exit+0x6b5/0x2300 [ 380.568120][T21001] do_group_exit+0x21c/0x2d0 [ 380.572690][T21001] __x64_sys_exit_group+0x3f/0x40 [ 380.577703][T21001] x64_sys_call+0x21f7/0x2200 [ 380.582376][T21001] do_syscall_64+0xfa/0x3b0 [ 380.586858][T21001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.592733][T21001] [ 380.595035][T21001] Last potentially related work creation: [ 380.600725][T21001] kasan_save_stack+0x3e/0x60 [ 380.605387][T21001] kasan_record_aux_stack+0xbd/0xd0 [ 380.610569][T21001] insert_work+0x3d/0x330 [ 380.614887][T21001] __queue_work+0xbaf/0xfb0 [ 380.619375][T21001] queue_work_on+0x181/0x270 [ 380.623947][T21001] hci_cmd_sync_submit+0x285/0x2b0 [ 380.629042][T21001] process_scheduled_works+0xae1/0x17b0 [ 380.634581][T21001] worker_thread+0x8a0/0xda0 [ 380.639162][T21001] kthread+0x70e/0x8a0 [ 380.643233][T21001] ret_from_fork+0x439/0x7d0 [ 380.647808][T21001] ret_from_fork_asm+0x1a/0x30 [ 380.652572][T21001] [ 380.654883][T21001] Second to last potentially related work creation: [ 380.661446][T21001] kasan_save_stack+0x3e/0x60 [ 380.666122][T21001] kasan_record_aux_stack+0xbd/0xd0 [ 380.671320][T21001] insert_work+0x3d/0x330 [ 380.675640][T21001] __queue_work+0xcd2/0xfb0 [ 380.680127][T21001] queue_work_on+0x181/0x270 [ 380.684713][T21001] hci_cmd_sync_submit+0x285/0x2b0 [ 380.689810][T21001] process_scheduled_works+0xae1/0x17b0 [ 380.695339][T21001] worker_thread+0x8a0/0xda0 [ 380.699916][T21001] kthread+0x70e/0x8a0 [ 380.703977][T21001] ret_from_fork+0x439/0x7d0 [ 380.708550][T21001] ret_from_fork_asm+0x1a/0x30 [ 380.713299][T21001] [ 380.715600][T21001] The buggy address belongs to the object at ffff88807f350000 [ 380.715600][T21001] which belongs to the cache kmalloc-8k of size 8192 [ 380.729638][T21001] The buggy address is located 160 bytes inside of [ 380.729638][T21001] freed 8192-byte region [ffff88807f350000, ffff88807f352000) [ 380.743509][T21001] [ 380.745818][T21001] The buggy address belongs to the physical page: [ 380.752217][T21001] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f350 [ 380.760973][T21001] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 380.769469][T21001] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 380.777433][T21001] page_type: f5(slab) [ 380.781398][T21001] raw: 00fff00000000040 ffff88801a442280 ffffea0000a02000 dead000000000005 [ 380.789972][T21001] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 380.798541][T21001] head: 00fff00000000040 ffff88801a442280 ffffea0000a02000 dead000000000005 [ 380.807203][T21001] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 380.815854][T21001] head: 00fff00000000003 ffffea0001fcd401 00000000ffffffff 00000000ffffffff [ 380.824514][T21001] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 380.833254][T21001] page dumped because: kasan: bad access detected [ 380.839664][T21001] page_owner tracks the page as allocated [ 380.845361][T21001] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5523, tgid 5523 (sh), ts 45062292292, free_ts 45015828119 [ 380.865058][T21001] post_alloc_hook+0x240/0x2a0 [ 380.869816][T21001] get_page_from_freelist+0x21e4/0x22c0 [ 380.875344][T21001] __alloc_frozen_pages_noprof+0x181/0x370 [ 380.881130][T21001] alloc_pages_mpol+0x232/0x4a0 [ 380.885964][T21001] allocate_slab+0x8a/0x370 [ 380.890451][T21001] ___slab_alloc+0xbeb/0x1420 [ 380.895117][T21001] __kmalloc_cache_noprof+0x296/0x3d0 [ 380.900475][T21001] tomoyo_init_log+0x111f/0x1f70 [ 380.905393][T21001] tomoyo_supervisor+0x340/0x1480 [ 380.910402][T21001] tomoyo_env_perm+0x149/0x1e0 [ 380.915153][T21001] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 380.920768][T21001] tomoyo_bprm_check_security+0x11c/0x180 [ 380.926468][T21001] security_bprm_check+0x89/0x270 [ 380.931472][T21001] bprm_execve+0x8ee/0x1450 [ 380.935957][T21001] do_execveat_common+0x510/0x6a0 [ 380.940963][T21001] __x64_sys_execve+0x94/0xb0 [ 380.945621][T21001] page last free pid 5522 tgid 5522 stack trace: [ 380.951955][T21001] __free_frozen_pages+0xbc4/0xd30 [ 380.957055][T21001] __put_partials+0x156/0x1a0 [ 380.961712][T21001] put_cpu_partial+0x17c/0x250 [ 380.966459][T21001] __slab_free+0x2d5/0x3c0 [ 380.970855][T21001] qlist_free_all+0x97/0x140 [ 380.975481][T21001] kasan_quarantine_reduce+0x148/0x160 [ 380.980943][T21001] __kasan_slab_alloc+0x22/0x80 [ 380.985791][T21001] __kmalloc_cache_noprof+0x1be/0x3d0 [ 380.991157][T21001] load_elf_binary+0x1e82/0x2740 [ 380.996085][T21001] bprm_execve+0x999/0x1450 [ 381.000657][T21001] do_execveat_common+0x510/0x6a0 [ 381.005667][T21001] __x64_sys_execve+0x94/0xb0 [ 381.010328][T21001] do_syscall_64+0xfa/0x3b0 [ 381.014815][T21001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.020700][T21001] [ 381.023009][T21001] Memory state around the buggy address: [ 381.028617][T21001] ffff88807f34ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 381.036665][T21001] ffff88807f350000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 381.044792][T21001] >ffff88807f350080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 381.052829][T21001] ^ [ 381.057919][T21001] ffff88807f350100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 381.065958][T21001] ffff88807f350180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 381.074086][T21001] ================================================================== [ 381.082323][T21001] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 381.089522][T21001] CPU: 1 UID: 0 PID: 21001 Comm: khidpd_15be0009 Not tainted syzkaller #0 PREEMPT(full) [ 381.099332][T21001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.109399][T21001] Call Trace: [ 381.112677][T21001] [ 381.115601][T21001] dump_stack_lvl+0x99/0x250 [ 381.120196][T21001] ? __asan_memcpy+0x40/0x70 [ 381.124792][T21001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.129992][T21001] ? __pfx__printk+0x10/0x10 [ 381.134614][T21001] vpanic+0x281/0x750 [ 381.138600][T21001] ? __pfx_vpanic+0x10/0x10 [ 381.143133][T21001] ? irqentry_exit+0x74/0x90 [ 381.147742][T21001] panic+0xb9/0xc0 [ 381.151464][T21001] ? __pfx_panic+0x10/0x10 [ 381.155877][T21001] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 381.161769][T21001] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 381.167664][T21001] ? __mutex_lock+0x801/0x1350 [ 381.172432][T21001] check_panic_on_warn+0x89/0xb0 [ 381.177378][T21001] ? __mutex_lock+0x801/0x1350 [ 381.182147][T21001] end_report+0x78/0x160 [ 381.186396][T21001] kasan_report+0x129/0x150 [ 381.190904][T21001] ? __mutex_lock+0x801/0x1350 [ 381.195674][T21001] __mutex_lock+0x801/0x1350 [ 381.200272][T21001] ? __mutex_lock+0x5bb/0x1350 [ 381.205035][T21001] ? l2cap_unregister_user+0x6a/0x1b0 [ 381.210413][T21001] ? __pfx___mutex_lock+0x10/0x10 [ 381.215442][T21001] ? __pfx___timer_delete_sync+0x10/0x10 [ 381.221083][T21001] l2cap_unregister_user+0x6a/0x1b0 [ 381.226292][T21001] hidp_session_thread+0x3c9/0x410 [ 381.231412][T21001] ? __pfx_hidp_session_thread+0x10/0x10 [ 381.237047][T21001] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 381.242944][T21001] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 381.249203][T21001] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 381.255536][T21001] ? __kthread_parkme+0x7b/0x200 [ 381.260473][T21001] ? __kthread_parkme+0x1a1/0x200 [ 381.265505][T21001] kthread+0x70e/0x8a0 [ 381.269578][T21001] ? __pfx_hidp_session_thread+0x10/0x10 [ 381.275217][T21001] ? __pfx_kthread+0x10/0x10 [ 381.279809][T21001] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.285000][T21001] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.290196][T21001] ? __pfx_kthread+0x10/0x10 [ 381.294787][T21001] ret_from_fork+0x439/0x7d0 [ 381.299384][T21001] ? __pfx_ret_from_fork+0x10/0x10 [ 381.304505][T21001] ? __switch_to_asm+0x39/0x70 [ 381.309270][T21001] ? __switch_to_asm+0x33/0x70 [ 381.314033][T21001] ? __pfx_kthread+0x10/0x10 [ 381.318622][T21001] ret_from_fork_asm+0x1a/0x30 [ 381.323398][T21001] [ 381.326680][T21001] Kernel Offset: disabled [ 381.330987][T21001] Rebooting in 86400 seconds..