last executing test programs: 1m41.505792073s ago: executing program 1 (id=1142): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc}, 0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000580), &(0x7f0000000600)}, 0x20) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1325}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x61d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcca}]}]}, 0x64}}, 0x4004) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1325}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x61d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcca}]}]}, 0x64}}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r8], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r8], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x4) (async) close(0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x60, 0x0, &(0x7f0000000f00)) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x12) (async) r11 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001280)={0x4d4, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_PAYLOAD={0xd8, 0xa, "fb627ca3dc639e849e58b2f37f6e6abc2f8415a657d57bcff7448b09f4265596e08067f44541ae2e309c6bc75a6d37df2a46c1a8400b8efeb439ddcb860c67d4d0b7231e31e2dd175f5ad9343d0fdba6bff52209ad5313b6cbd2b85857bb9cc30c8d5b42a5fa9891a582f4348d963dc2048f6f72198dccc0546ed8ea155c2f0e17508577e74a9548ee2266dc7479539c42c213abf419698cdac0d623d5a4fbb3b054dd625178c972979b14e1a33300b4b208cf60da3130e8ee4e2e8ca4503ef29faacd2acdd11ba26ffc2103fe2e6fd25203b9a6"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8694}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}, @NFQA_CT={0x8c, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x46dac153}, @CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffa466}]}, @NFQA_PAYLOAD={0xc8, 0xa, "cc93fef7ce681cf408df4d1c8043c7d77721c78ff5debafa4ca7ed794e59ae241cf6fd835f9d11eb230c23247dd7d1566daed0499879b0c6b917a6a21a5f82ded96f752ea15b3adbc8e1ed9771e0f447bf5e61fbe8dc884b43d54178be1fa189ac092534bde5a310d39685c86a9c0dca37825b231884cc545e49b2621b62abbbcbcc3d99f7033a8f6586b4220bb61d5ec5df4d5274f286dd368e24b937b3ac488fe8bc71c2e575096f0cc827e8b84aaaaf8a3d28f5e404deedf2ee65bbe9a63ebcee5879"}, @NFQA_EXP={0x264, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x118, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4000810}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xb1, 0x3, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x7, 0x7, 0xfffffff2, 0xfffff801}}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x8a0, 0x14701}}, 0x20}}, 0x0) 1m26.573796571s ago: executing program 1 (id=1142): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc}, 0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000580), &(0x7f0000000600)}, 0x20) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1325}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x61d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcca}]}]}, 0x64}}, 0x4004) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1325}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x61d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcca}]}]}, 0x64}}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r8], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r8], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x4) (async) close(0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x60, 0x0, &(0x7f0000000f00)) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x12) (async) r11 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001280)={0x4d4, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_PAYLOAD={0xd8, 0xa, "fb627ca3dc639e849e58b2f37f6e6abc2f8415a657d57bcff7448b09f4265596e08067f44541ae2e309c6bc75a6d37df2a46c1a8400b8efeb439ddcb860c67d4d0b7231e31e2dd175f5ad9343d0fdba6bff52209ad5313b6cbd2b85857bb9cc30c8d5b42a5fa9891a582f4348d963dc2048f6f72198dccc0546ed8ea155c2f0e17508577e74a9548ee2266dc7479539c42c213abf419698cdac0d623d5a4fbb3b054dd625178c972979b14e1a33300b4b208cf60da3130e8ee4e2e8ca4503ef29faacd2acdd11ba26ffc2103fe2e6fd25203b9a6"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8694}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}, @NFQA_CT={0x8c, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x46dac153}, @CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffa466}]}, @NFQA_PAYLOAD={0xc8, 0xa, "cc93fef7ce681cf408df4d1c8043c7d77721c78ff5debafa4ca7ed794e59ae241cf6fd835f9d11eb230c23247dd7d1566daed0499879b0c6b917a6a21a5f82ded96f752ea15b3adbc8e1ed9771e0f447bf5e61fbe8dc884b43d54178be1fa189ac092534bde5a310d39685c86a9c0dca37825b231884cc545e49b2621b62abbbcbcc3d99f7033a8f6586b4220bb61d5ec5df4d5274f286dd368e24b937b3ac488fe8bc71c2e575096f0cc827e8b84aaaaf8a3d28f5e404deedf2ee65bbe9a63ebcee5879"}, @NFQA_EXP={0x264, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x118, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4000810}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xb1, 0x3, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x7, 0x7, 0xfffffff2, 0xfffff801}}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x8a0, 0x14701}}, 0x20}}, 0x0) 1m8.983671002s ago: executing program 1 (id=1142): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc}, 0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000580), &(0x7f0000000600)}, 0x20) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1325}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x61d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcca}]}]}, 0x64}}, 0x4004) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1325}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x61d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcca}]}]}, 0x64}}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r8], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r8], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x4) (async) close(0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x60, 0x0, &(0x7f0000000f00)) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x12) (async) r11 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001280)={0x4d4, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_PAYLOAD={0xd8, 0xa, "fb627ca3dc639e849e58b2f37f6e6abc2f8415a657d57bcff7448b09f4265596e08067f44541ae2e309c6bc75a6d37df2a46c1a8400b8efeb439ddcb860c67d4d0b7231e31e2dd175f5ad9343d0fdba6bff52209ad5313b6cbd2b85857bb9cc30c8d5b42a5fa9891a582f4348d963dc2048f6f72198dccc0546ed8ea155c2f0e17508577e74a9548ee2266dc7479539c42c213abf419698cdac0d623d5a4fbb3b054dd625178c972979b14e1a33300b4b208cf60da3130e8ee4e2e8ca4503ef29faacd2acdd11ba26ffc2103fe2e6fd25203b9a6"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8694}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}, @NFQA_CT={0x8c, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x46dac153}, @CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffa466}]}, @NFQA_PAYLOAD={0xc8, 0xa, "cc93fef7ce681cf408df4d1c8043c7d77721c78ff5debafa4ca7ed794e59ae241cf6fd835f9d11eb230c23247dd7d1566daed0499879b0c6b917a6a21a5f82ded96f752ea15b3adbc8e1ed9771e0f447bf5e61fbe8dc884b43d54178be1fa189ac092534bde5a310d39685c86a9c0dca37825b231884cc545e49b2621b62abbbcbcc3d99f7033a8f6586b4220bb61d5ec5df4d5274f286dd368e24b937b3ac488fe8bc71c2e575096f0cc827e8b84aaaaf8a3d28f5e404deedf2ee65bbe9a63ebcee5879"}, @NFQA_EXP={0x264, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x118, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4000810}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xb1, 0x3, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x7, 0x7, 0xfffffff2, 0xfffff801}}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x8a0, 0x14701}}, 0x20}}, 0x0) 54.681858646s ago: executing program 1 (id=1142): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc}, 0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000580), &(0x7f0000000600)}, 0x20) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1325}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x61d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcca}]}]}, 0x64}}, 0x4004) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1325}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x61d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcca}]}]}, 0x64}}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r8], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r8], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x4) (async) close(0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x60, 0x0, &(0x7f0000000f00)) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x12) (async) r11 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001280)={0x4d4, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_PAYLOAD={0xd8, 0xa, "fb627ca3dc639e849e58b2f37f6e6abc2f8415a657d57bcff7448b09f4265596e08067f44541ae2e309c6bc75a6d37df2a46c1a8400b8efeb439ddcb860c67d4d0b7231e31e2dd175f5ad9343d0fdba6bff52209ad5313b6cbd2b85857bb9cc30c8d5b42a5fa9891a582f4348d963dc2048f6f72198dccc0546ed8ea155c2f0e17508577e74a9548ee2266dc7479539c42c213abf419698cdac0d623d5a4fbb3b054dd625178c972979b14e1a33300b4b208cf60da3130e8ee4e2e8ca4503ef29faacd2acdd11ba26ffc2103fe2e6fd25203b9a6"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8694}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}, @NFQA_CT={0x8c, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x46dac153}, @CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffa466}]}, @NFQA_PAYLOAD={0xc8, 0xa, "cc93fef7ce681cf408df4d1c8043c7d77721c78ff5debafa4ca7ed794e59ae241cf6fd835f9d11eb230c23247dd7d1566daed0499879b0c6b917a6a21a5f82ded96f752ea15b3adbc8e1ed9771e0f447bf5e61fbe8dc884b43d54178be1fa189ac092534bde5a310d39685c86a9c0dca37825b231884cc545e49b2621b62abbbcbcc3d99f7033a8f6586b4220bb61d5ec5df4d5274f286dd368e24b937b3ac488fe8bc71c2e575096f0cc827e8b84aaaaf8a3d28f5e404deedf2ee65bbe9a63ebcee5879"}, @NFQA_EXP={0x264, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x118, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4000810}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xb1, 0x3, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x7, 0x7, 0xfffffff2, 0xfffff801}}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x8a0, 0x14701}}, 0x20}}, 0x0) 33.650810205s ago: executing program 1 (id=1142): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc}, 0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000580), &(0x7f0000000600)}, 0x20) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1325}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x61d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcca}]}]}, 0x64}}, 0x4004) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1325}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x61d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcca}]}]}, 0x64}}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r8], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r8], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x4) (async) close(0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x60, 0x0, &(0x7f0000000f00)) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x12) (async) r11 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001280)={0x4d4, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_PAYLOAD={0xd8, 0xa, "fb627ca3dc639e849e58b2f37f6e6abc2f8415a657d57bcff7448b09f4265596e08067f44541ae2e309c6bc75a6d37df2a46c1a8400b8efeb439ddcb860c67d4d0b7231e31e2dd175f5ad9343d0fdba6bff52209ad5313b6cbd2b85857bb9cc30c8d5b42a5fa9891a582f4348d963dc2048f6f72198dccc0546ed8ea155c2f0e17508577e74a9548ee2266dc7479539c42c213abf419698cdac0d623d5a4fbb3b054dd625178c972979b14e1a33300b4b208cf60da3130e8ee4e2e8ca4503ef29faacd2acdd11ba26ffc2103fe2e6fd25203b9a6"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8694}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}, @NFQA_CT={0x8c, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x46dac153}, @CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffa466}]}, @NFQA_PAYLOAD={0xc8, 0xa, "cc93fef7ce681cf408df4d1c8043c7d77721c78ff5debafa4ca7ed794e59ae241cf6fd835f9d11eb230c23247dd7d1566daed0499879b0c6b917a6a21a5f82ded96f752ea15b3adbc8e1ed9771e0f447bf5e61fbe8dc884b43d54178be1fa189ac092534bde5a310d39685c86a9c0dca37825b231884cc545e49b2621b62abbbcbcc3d99f7033a8f6586b4220bb61d5ec5df4d5274f286dd368e24b937b3ac488fe8bc71c2e575096f0cc827e8b84aaaaf8a3d28f5e404deedf2ee65bbe9a63ebcee5879"}, @NFQA_EXP={0x264, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x118, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4000810}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xb1, 0x3, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x7, 0x7, 0xfffffff2, 0xfffff801}}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x8a0, 0x14701}}, 0x20}}, 0x0) 12.445618894s ago: executing program 1 (id=1142): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x3, 0x2d, 0xfffffffc}, 0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000580), &(0x7f0000000600)}, 0x20) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1325}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x61d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcca}]}]}, 0x64}}, 0x4004) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1325}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x61d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcca}]}]}, 0x64}}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r8], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r8], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x4) (async) close(0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x60, 0x0, &(0x7f0000000f00)) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x12) (async) r11 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001280)={0x4d4, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_PAYLOAD={0xd8, 0xa, "fb627ca3dc639e849e58b2f37f6e6abc2f8415a657d57bcff7448b09f4265596e08067f44541ae2e309c6bc75a6d37df2a46c1a8400b8efeb439ddcb860c67d4d0b7231e31e2dd175f5ad9343d0fdba6bff52209ad5313b6cbd2b85857bb9cc30c8d5b42a5fa9891a582f4348d963dc2048f6f72198dccc0546ed8ea155c2f0e17508577e74a9548ee2266dc7479539c42c213abf419698cdac0d623d5a4fbb3b054dd625178c972979b14e1a33300b4b208cf60da3130e8ee4e2e8ca4503ef29faacd2acdd11ba26ffc2103fe2e6fd25203b9a6"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8694}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}, @NFQA_CT={0x8c, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x46dac153}, @CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffa466}]}, @NFQA_PAYLOAD={0xc8, 0xa, "cc93fef7ce681cf408df4d1c8043c7d77721c78ff5debafa4ca7ed794e59ae241cf6fd835f9d11eb230c23247dd7d1566daed0499879b0c6b917a6a21a5f82ded96f752ea15b3adbc8e1ed9771e0f447bf5e61fbe8dc884b43d54178be1fa189ac092534bde5a310d39685c86a9c0dca37825b231884cc545e49b2621b62abbbcbcc3d99f7033a8f6586b4220bb61d5ec5df4d5274f286dd368e24b937b3ac488fe8bc71c2e575096f0cc827e8b84aaaaf8a3d28f5e404deedf2ee65bbe9a63ebcee5879"}, @NFQA_EXP={0x264, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x118, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4000810}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0xb1, 0x3, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x7, 0x7, 0xfffffff2, 0xfffff801}}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x8a0, 0x14701}}, 0x20}}, 0x0) 10.150632782s ago: executing program 4 (id=3152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5ea29bd7000ffffffff07000002", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x2, r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x8, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x15c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe1f10434e6dca4fd}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x20004800) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbef, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2044010}, 0x20004000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xc0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x5}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) ioctl$TUNSETVNETLE(r12, 0x400454dc, &(0x7f00000000c0)) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="090001"], 0x38}}, 0x0) 8.94166945s ago: executing program 4 (id=3158): syz_emit_ethernet(0x151, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x1b, 0x4, 0x0, 0x31, 0x143, 0x65, 0x0, 0x1, 0x2, 0x0, @private=0xa010101, @multicast2, {[@generic={0x89, 0x3, "c5"}, @ssrr={0x89, 0x2b, 0x1d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}, @empty, @rand_addr=0x64010102, @multicast1, @local, @broadcast]}, @ssrr={0x89, 0x27, 0xd3, [@remote, @remote, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, @multicast1]}]}}, {0x13, 0x6, 0x0, @remote, "8b9d73b0a9ce9355588d3006cb97c4d1d27f9a2faec2f6d3915d356241d35c78b6d598c5d94d2f8ee5487edb79718ca6d511e75bf1ec95fba997b30a0fbd1aaefcbf3ffc6e42ae394e528f6081ba52279dd445956cc8678208e7e5cdc4bb2b4fd31c60f5ef7d7c1efa4fc9376a72e4023479c8aad5bba05cd2571747a1d2bab1d1c2c96954b8b3efc81b8b91f2a2f9054c479eb5ae1371950172d606f871d2dd8537b93a015e79c1df07c00f07d4e6a47f9d7410b4136e8165011ec1bcb8e157e8dae0ff6e637cddd63c37767f5a6a"}}}}}, 0x0) 8.635935949s ago: executing program 4 (id=3160): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) 8.147071968s ago: executing program 4 (id=3162): r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000000061108800000000ee63012c000000000095000000000000004e924f52a480675a71e976fce6c07ce967acb2238b67e114696b8c5d161c46f53dbca59237af5bfe9d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2b0, 0x20a, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00'}, 0x7a, 0x118, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0x3}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="02"], 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="140004006e736376663000000000000101000000080005"], 0x50}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) (async) unshare(0x8000000) (async) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000014000000240007800c00040000000000000000000c00"], 0x38}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket(0x2d, 0x2, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2d, 0x4e24, @rand_addr=0x64010100}, 0x10) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000300c6f898"], 0x40}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @remote, 0x6}, 0x1c) 7.619668826s ago: executing program 4 (id=3168): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) syz_emit_ethernet(0x48, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @multicast1}, "0a186371ae9b"}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r2, 0x0) accept$inet6(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x4, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x3a}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000000000000000000000000071109500000000009500"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 7.064938581s ago: executing program 4 (id=3174): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc7, 0xc7, 0x6, [@struct={0xe, 0x1, 0x0, 0x4, 0x0, 0x7, [{0x8, 0x4, 0xf4}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x3}, @float={0xf, 0x0, 0x0, 0x10, 0x4}, @datasec={0xa, 0x4, 0x0, 0xf, 0x3, [{0x2, 0xa3, 0x2}, {0x1, 0x4e21, 0x2}, {0x2, 0x6, 0x22}, {0x2, 0x9, 0x5}], "3bb430"}, @struct={0x2, 0x3, 0x0, 0x4, 0x0, 0xb, [{0x2, 0x0, 0x400}, {0xa, 0x2, 0x6}, {0xe, 0x4, 0x1c}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x3, 0x4}, @volatile={0x10, 0x0, 0x0, 0x9, 0x2}, @const={0xa, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61, 0x61, 0x61, 0x71]}}, &(0x7f0000000280)=""/221, 0xe6, 0xdd, 0x0, 0x6}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB="000000e200000000000002000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet(0x23, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010400000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000380)="3418", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, 0x0, &(0x7f00000002c0)=""/26}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x2cb, 0x0, 0x8000, 0x0, r0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r4, 0x0) mmap(&(0x7f00006ed000/0x4000)=nil, 0x4000, 0x8, 0x810, r4, 0xbb37000) 2.38644762s ago: executing program 2 (id=3195): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e23, @remote}], 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) (rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b40)={0x2480, 0x23, 0x400, 0x70bd26, 0x25dfdbfe, {0x11}, [@nested={0x10fe, 0x13a, 0x0, 0x1, [@nested={0x4, 0x120}, @nested={0x4, 0x7b}, @generic="9eb08cbb2d5c6b64a51a763d89d19b34c8848be8bbee90a5ec2a9b8c0c813c16a4601e5fc2248a4b68b6d1dcc54d5446a13fa853570a8017a587c3dd10e5a34b20947806971754d3749b1f8ce325f2584352147a855a146cebb7351d05c04f99b7019174bae3f273b081a8aac716edb6a91d9e1a1a87411084b3d8855165aeb58658e1da1663b872e42e6450a2a7b2191b944d36d332f809377c863f448f7ce6cd793a272b65357194bdde33aae5e7ee343349b56ae696f9275916e78748c525af5d8b0643155eee1d1e9c4b44059ee6256ef7550b6780c257580d1a9e19a7a18bf57d61c8562011374333b929d2", @nested={0x4, 0x140}, @generic="5d9ad23ea5484f00b3c782ad4cbddea4e049a03511e45019eb3e4d429ad5e138016aec42c21bf27a43f8fcc297eef94b4b9b43ca8d3add60789a3ada50a807c032a67ff0313da6873492a12cfcd7e6bbfdadd59f45fa909043edaa4c0ada2582980c6257aedb955a4c4d7c03db46bdd1b01ad1e3117d2757cdeb5e56b9faedf07dba2a8d824c57cfc0943c49f0290f7226869d0ca5322d237b40769d7db770a643bc1ec04d97c2b7942c2a739671bcbb5954f41bea033e85b96436c8f6778dd34888e9bcfdacca192942796a9b848cf884c141dd05d1ecd4467fed298238eb8f632aeb96d37d12f68f554d607dfff138cb2ee9461eccc93cab2ee8dfa0bc7a0a2ffc5de26ab6d7177354146e22e50104b4fb3e868d9299bb374513c527e199f60926d826c1c8d5625f4de61acf54d3deed51bba1717c324065a81643f9f7fdc74f167eed7cc8f5af46881effd5a565df9b2c1d563e6f41ce652e667d4e152bd559ae3a90cda166f5355d64e7d5dc765a4a1d984b139c6b3a4677e9080f5c82d375113931a6360773bf84bc3a1b074f3492bd637ee48dcd6e7448571959d5cd5a92baffa4a3bc86009817600280a2aac9ea95d09846a8ac2fa24c62487956c155735ae669d5cdf6b1363a0de1900c64437c652703d685eeda9ddc1bfebc0132427edca31cf468895fb875e33dcb29eb05aaf878216905751c2e0bdc8ca50c7bd8054568107284023bd0690c1c8986a3693e6345124d504dd13fcd6afbf66bab27b3128744c9a2f187d856e25f0a2d7f7f1b781d2d32284898bab75a00b8e8fc7569e3cf1d69c79d4378a9dbd06dcc9bc76bb0f7b0ff84307eb9c9e607917872c27a6d6ac29f8d6ff596e8dbb23b2cb90c1ffae34b751dbb5133839ffebdb61477c5375f5a660517af33423981f709a7ce6fb8dbc76c8397800df95e0ce323c781da11ae94bb8b140101157454f14091cb086759449e344dcaed42636bdda62542d64cec7e74db02f97d1f4f3d8f36287170453ef8e6fc24c49c9591c7db7dfde2fea6f3a9502d54ae6fd9260b28cb7358c81ce8484e218b049f2f1261f43bd02ec1c8b8c6b92bbd0a49597f72fe61c8d52cfa605214b00abba0073103931759ecf2271f43be17697613b937057f82632fe9f5ef8c16b6763807c57f6498f6bce3aa060ef1ab441fd8ed0718d8ffaa21c8a35329eee93304487261887b8de8d6cac4c8936166d69ca4d2cd3809ec937c27beb9f4f7553948a73aa9ad0394d522c332f720a4144b7f1a9f1a9e6f52909502c980d8d0d698457c5749863378f5d0f7e4eda6588f6133de082cf934b2480363adf868ec04fd597a2f6893c3691d16ea7942f826e605298227512a39475301705f6e97001ae016487066285f99120a9d82a977e52eee70e34858cfadce2ab28f9f6124d8371d9cc9f6c6f37fe0f5260613c7c08c05d522231c003193039f05bac49161fe6e655a5f56aba1f9c8c0b73b2f1364361f0b6141f6ade8c20ff85ad552192bf5c9acf206532eb7f406b2c4e20b8c11e4f49f152fadeb024a8e83fb66db232877f720614de4ca94bde57b82270d0c649b72ec6ed4b17f7d12013152152e09dbe0b2b4a7dc713dc82e7497ba303945febe9a47c020fd1d09b83114553e3b502552cd5de339d2fa1b56584e06fee5989d429873dcbe25321af4ff14bc3ba7db9da5dcbfdfeca8ef338bac250b7dd117bb087a73f3f0620b1bcfef232935e45c8d6e44a1565d06c750e7f05bcbc7a7bec8fd05328f498baae81f6941e079565e71e369c66e7ddda765b3d096ab8ca14df6e0644c1e9edf6b1be4bf72c02e6e6c0c5fc0529f0f667f6b0f3a29e1db07b10fd6da715ed87fa6e93130f03128806d0b4a3343cffdd68774c4400cda597c45c37b231d5b61e07939e0bf7a0b8dfef4d45f0680a4b55ec04cf7865eb2bd2f94eae2a3b52aaba7633c931fad50af226e5e794b7da70edce38211295a1d443d4d4d9af71b2abb95a94348b1d7c6a42529d11474117fc8e57d82a1aeedf7ff444942d097ed35d141ead31b017a16aa510e8787759cbc4e1faeaea7ddd6de80043a3c047b7964b2b9e0f81f1e284dc937c50f1041c21a2e99100fafa412e65c2d0500a2b9c4bcf677a436a378855d9447808f9e964baee69311dd61153938c467fcb600449ca477aad7db18fbd4fa5984093afaddbec74d06732e8501d55c3a706793f264e9d5c66190b9b2623b9941499eb12ab6f0b9cf3fa70682433a8eb4d2f7533a38a3271756a63443eff29c7abaa01efa98bfe75228d3f91ad6e5801f55bf80da3428a4c0b590534f968b19764e91935847fe158157495d0553d7e880c286a47d84adbe9ebcc5a6910984306f5d68431647ea227ee94d9d49fb76bad230360ec6b389402db3e8c71024aa54d3236dc13af1f93a199bd5a8b89783a124b6b5aaf974e3716dcd9dc0b0d82feb0c8adf1beeb92355d5ef820f6cb7d959870f3583aa5802e3184ba2c840c4f95021ac5357ceff9cfd8ff092fb8ef27f83432de5c228127209d419ad06dd75d175e09f05a293c024884c66dd62883d0752cb703f12b46dd1ae295921421ea92a0b4196fed5d794bb46db8db178a90e2d024100129cb65c4539457927c76fc423b4e51343dabc00a72105bebc5905d99b7f3dc8b0818247b75dc7be44b7b98c9713ef8b611f402cd4380a3f209f8e79786720275e676dc9a6d69427407a8df685ff69eeced1d8c154aa9426318ae69ee4ddacb520e46634a24b02f7222d5cc40704b9c605961446583f9feeffdf4e6fd66784670d4f64ef1ca4e27dd868c765e833c493142ff6761cf24e5150aee90af573285ad879130ae3deea7f33cac0447e7d7eb1e049f8bbd7cac895cd43772dbbf9956bef23efbb346d3e79c3aefc080929d552b46d37c5cec12982c854e3b35452791bdc0a1d0d24d7412d5efd81b18ad189918050537688ff473a68d1e7318f86394797a08f9b51b1be7fc455f12e6cc24ac18fb032020b2ccd575788dca8fde81ce2c9431f58a51ecbdc9ad455dad4f4034702aa5f400e05643becc9b98ee9d183561f54832a029a999bf9d302ca12b9b0bfd8891e5d8376153b2dc3bdc88539d16141080a7be96b013b5b7479d93a5e984dd31b7d261cf573d6f13d03424426597846dfcb3dea18f530414f75da894db515fb669763049dfb2bdadebb9e4e68f54b3792b3a335baaf13f7e2b86d3b65d1919eeec0fd2d62c7371c7cc637fe50adb5bfa7fd82fc057db15dde6821818f1d032c2915e8f64e0914227b457faa2de08bfdaee11b373c8fc743782d129f61dd5836cbc34162fac7c33ccbb45b0a11e0be152aa8555aa04aea03a895e081b1338c9e659f2b99e0a2517b524770b2afef3083b8c3a50cdf467a5d34feae1edd8721845d0344e0f184a83f22115d2c9f654359b61830ee385e867d0b72e49a2b67812cf6e93e71dd284b13a2e130cd54b9c25b8fe66497c9ef3d029c88e17d6a4c143cfd09b19cee2abd94614e1558772648ce55623484e3b3b78eaaca9a5534b1bb97870c9f75f55815d0d0c8ed41a974147d68303e3998c53ca567d4409db756c41c1054084ec9e1e19ede809d4be71af17605226349305aea657940cd3bb816b34bd4ed55c19bf37c90ab4e3f8805f72a529018318cd8cbe17ce9e12db36fc0f4baf325fd0e858ddf762c822386c7bcb5d24ad5a71f4d79fa8efd1032d888c2c0070de680202236182e7ad551da171c22b08d21d399d85a65ff775b50998802a39dbb7d916635620ecf40e8520097f9642ba26a271b221ee3a6c0d39c2eb531e693ac2da02f3672c657653c026bd372ff22bb923af02f5deca004d04ef3171549738e91f191642047c5df4585c9994d16575c56aecf68cbc492ea3b220a5bbe29f32d95713ae81ea0814739b36cd98ad10f1bb20e3a0f9051e9d29adba7f2694d9d9bc6b4b44fd4f2ff632f5a7a6f1998cc268b3d7450043c5518b7bbfce334ee0df32b3e58bd064b2869bb85f395315d921612d86db6cb35cb0686d78d3d1bf290e9f41dcf8803a5c038882f95a9baf8876e975ab8be9985c12e9abd8857595aa492470309e785967754340f83863d8268048fe2859dd493f7979b57e1f71a484cc5751722a3ec7ce144f7067d7a13ff517fd7b4cef6fca586fc5387b4def02f2feee3cd21e3e65baf5a1bdead0e7346113c0287417921766eed46beb39e601165c1e72b1a9281d83fe87583fee248990136349dd1d7df7d7cc38d636351bbd1745aa037a054110be7a34767c2709f18df0c5d84a9986e9cabf42bd3ded45bb7c7f95923ec625ba3f3cb03672f60b4c4dc83005e7da48cd78f8844acc5c7835596d6d8282c9e0e999da42d0f32222c03436f28af220b7595f5f20311b9a550c9e59eb588cec5cc9b0594f4c7810252995bc1272eb694c4a90d947826e7ec6dd708db76e623999f376341cce5a5a348d05fc6f5903363d2ea0fb72270c799398957565a507e791a643f45d7235cd8226dd965f702f0ed846865c372aa753e6fcef2767ce63a5bd573d20920d94f7094c2790596031b9bdd7459bf8df46670cf7b53f7bc22aa77924ff0433f20d6cfc1109f8695800374f8814f9b380f0b0086e5557ec89bd334e6aebe64168efb5cb5e674df82bc59bf37b7cbbb3f751df35632c50dad8cba1c5ec501e7f796a751d37d7259334953494ffca8c419f67f44aa28536e7491c39deb52b6d50d0d4612dddbb1ec85a791f863a083d8c7386af14b1f30d9e0629841abf6dc2ea570eb447660e497adef975e17b56e9f6f9bb9ea4fef352175dc7d8a87c40c3deef39500853afe9419ea3628d5f54f1afcc8c9da9155c48b054e4d39aefa53cb3d1505f8f7cba0692ec70749aee66ac51d646178cbb257cd82c68af39344a1eef308533037f63c8ad135a4d3e196a26dc7a930a8ca3855c1089feaa03154c98ecf107ba4f23780e2d942c07e0b89e78c9b2018f1180ed6159eb723f0f1dac647a1b6891fffd7642c339691d0d96cab12ebca6ceb8ce4d557ada49f3f1be612e799ed84913a686ec795ee06db92cdb347a6aa350762393f59854edcd4228fe41d4818d9c7deab5f870b4668a21b67164339715e01e45236512425fba2034b44cb4089a8090a2b2c8e5d8afb06dd57eb0802844446fb3e593eba9952f3020b8172079efc6eaf2c72357ff2800a61174c50eab3ba18561b10d6bd468944c2739a7d292febf5ddd5c5ec3a2859c3cfa4ed57ddf7bb56c1dd6a56f1fd8dd3e5b47a5e8d9f66b31126747ffb395b4f9ca0d91914dbf4c00840d2b370f5ce430b44d86e536c4c797929ff4b523b02bc8b410cebfe96aab42e4a8dda3358bbdbe34acfbeb0f8f93a5ef173cd178ea5a859579d38f117f5f8edf24ee1126df26643ac76cceb3a3b00ad06ea6c5ac83f7cb474a69fdc005e530c8d5f2bea3f66992b8311f2687c7af71801bfd4da89c3d456722a1d2c53185fac332a2822de7a4e51dacb2cd234cd14e85831b80e7de53359cf0683405e7dff3ccf39d91b17a659ccde3fe29fa9d518c46e978d880ee3a2f0aacf9b6986e3a697029ae7c642906b5c18ec5a5e30c698f40708967e4e3fede5454c61b5942137150dafa64fd26905b9abd292c7c83b31b6a6741746895ba4895454eafa4789b5a34648e95b79c3e214a9ddc80da9db7afa06d5ec9ea61da4395b5fd5361c46decf3db50599a075b1b7de0c4901048fa280ceb3bca23ba16ac14d0fec221270c5edb6bef694a28138edfa45904044482cee"]}, @generic="d4fde5193d751ce3053803c7f20b456870d07d0275b057a5518b8d70396dabbe7123120fac13806d9205ef165d8cfd79b4ae1cb9ccd3b572183711605dbeb3ae54", @nested={0x10c, 0xa9, 0x0, 0x1, [@nested={0x4, 0x16}, @generic="67ab97cec722f338277f26e58dd5b1385103c71cdb64e30531d5c818b3424dc251f68aa52e2fe5abd3725c26cbbd31aaea2a592cbb79f0423829108ceb5e9e2b62419b0d304ad9465ca5b4d5170c0e376f10e42fb0987c5daf0ac75b88f6b639e2167bc8dcdb8325f960fac77cc8c231960bdd923327ebdf17d3d88805211223b4952aef2df3634456a436ea40bc5a517feb24a4b92f0e871e3cac9d8b88c682ec6135ba2feff21ed8c714596b3504516dc1dded14e5fa", @typed={0xc, 0x12b, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x139}, @typed={0xc, 0x93, 0x0, 0x0, @u64=0x9}, @generic="a6d20b4c54aae4c8ad600a85f373cab11af10032c9d8f1323fcd60e32a0aa79c297274c00b93a0cf18fc45c7d6820e2ebb"]}, @typed={0xc, 0xc5, 0x0, 0x0, @u64=0xadb}, @nested={0x10d6, 0x10b, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @uid=r3}, @generic="30e26c9d4d3b7cfe420b6c47df3ee6bb58f84360b7399ea15be17214d02563348e1d26582731643b79c297f81df02937feb27ced11f7f4036b2d14d498dc7226a7e4153e69c8344b9133f3d106c8b68f210347afff5742ad7c94328933a778ab8988f1a06599e43de7baa3c0b9d2be266a059bfc8da24ed50adf339248efcbdff3d214d2a882426f51d06e6993cd50dd95ef2df59c8a87a50a2a0b8518d61a6f3ef4d53878d0", @nested={0x4, 0xcc}, @typed={0xc, 0x7f, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast2}, @generic="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"]}, @nested={0x4, 0xb4}, @nested={0xec, 0x6c, 0x0, 0x1, [@typed={0x4, 0x90}, @generic="f36bfed8ad1886b73ed496a6b622bf561ba974443d686ac81965071e27553e2691933e138afebb20b1330e9508f96b3eb184083b2624b1bd747edffdeefe44b6935624ace083712fa04c717f275e608d04ed0fb58ff40e065830bd210170c0e530066fa3cc7561afb9dc678ce26c738790effb8459661b6261fc4aaeb0331ed069fdfb2519a9e9edfe377832719987b178acd4cc44a23a3db1cbb8a51268fc7eae3d70ef79fecfafe1113b55cd67a07c564be0a43f18873574f1a600d7934277f0990fcd670108f34ce51fb1b692193753690f553ad0ca66df259dd4f2f063c3", @nested={0x4, 0x8f}]}, @generic="56ea0b41da7e7f5713c0fea3c445c6cba955222a59fce2ef281da0b41aaad7a6240384abf9646d32112b4851f4346b27c9dc59388916e85f8bb4e7b13dc5e236ac93eb5af0ed6c46708b"]}, 0x2480}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040000) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)=@updpolicy={0x270, 0x19, 0x2, 0x70bd25, 0x25dfdbfb, {{@in=@empty, @in=@rand_addr=0x64010101, 0x4e21, 0x67cc, 0x4e23, 0x7f, 0x2, 0x668e6b7c780371a8, 0x80, 0x16, r2, r3}, {0x800000000000000, 0x8, 0x9, 0x6, 0x4, 0x9, 0x8, 0x5}, {0x0, 0x6, 0x6, 0x4}, 0x2, 0x6e6bbd, 0x0, 0x0, 0x1, 0x1}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in6=@mcast1}}, @algo_comp={0x71, 0x3, {{'lzs\x00'}, 0x148, "7537f696472cbfc256801287c9157b4fa9ea0a193d589d75fe27a717e781c57ee05999741ddd803b0f"}}, @mark={0xc, 0x15, {0x35075b, 0xf755}}, @algo_auth={0xef, 0x1, {{'sha1-ssse3\x00'}, 0x538, "5319bce05a36656711cd429a9f6e9e05323d74a0004b518e01812c17a2b5f313b1b2414fa9ba8838eb661e700289feeb40770d5028156695d6622b459b7fe800d0469315a2047b8949764615c53bddf1894811fca09afa81d8d7c33f72b4f0569b5c11c722f31a6bf9f8dcbd1af65ae81b31c0b9bb4bee7f0cace694e13ade0834c408e66c27a1c87ef7604bc5aeb732611ed7127247ae5b09955c48976838f40375f96b38b64c"}}, @lifetime_val={0x24, 0x9, {0x7, 0x3, 0x1}}, @replay_thresh={0x8, 0xb, 0x3}]}, 0x270}, 0x1, 0x0, 0x0, 0x44}, 0x40) (rerun: 32) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000400)={0x1f, @none}, 0x8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0x13, 0x0, 0x0) (async) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000002c0), 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@canfd={{0x2}, 0x14, 0x2, 0x0, 0x0, "07f4c30d05efb2a0adf028153adee13ad367f5d170a636be4764dabe7f3c37b66001484bdac9310c696863109d7d4164ce712a0c15c3b89c07ea4b0b2dc892e1"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x35906424e21b5c4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f00"], 0x0, 0x3a, 0x0, 0x6}, 0x28) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 2.334660696s ago: executing program 0 (id=3196): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x1000, {0xa, 0x0, 0x0, r2, 0x0, 0x5e}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.291067839s ago: executing program 2 (id=3197): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$pppoe(0x18, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x2, @multicast, 'veth1_to_bond\x00'}}, 0x1e) (async) connect$pppoe(r3, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000380)={@val={0x1c, 0x800}, @val={0x1, 0x80, 0x0, 0x14, 0x14, 0xb}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @random="f9d81995419c", @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x2a) 1.564102845s ago: executing program 0 (id=3198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03030000fffffff50000020000000c00024000000000000000020900010073797a30"], 0x54}}, 0x80) 1.471984639s ago: executing program 2 (id=3200): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf251500000008000300", @ANYRES32=r4, @ANYBLOB="0c00d88008000100fdffffff"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24000480) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x7c, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfff8}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x60891}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1433010000000000140012800b00010062726964676500000400028008000a0088ea9f9f9d13aaaf309341ceb0285bc716c642855126dfeb0ca9a53512637aa06017ae1bedde2c5ff72c276ac530fd16e49064c444572b4fa7469ab8c798802f9a01d0ae385b4d42f84d1ad0405ecc3cac61b00630c6db8ebec181f0903d6e031f033408ae3b207af2a5298b41bee9fb5585b17aba863337f2d0cc09e430a36e27db9d54036d5f5527429b6ecd9d325368f56d02752224783adbba", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0xba01}, 0x0) 1.408077459s ago: executing program 0 (id=3201): socket(0x8, 0x1, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) 1.37490578s ago: executing program 3 (id=3202): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x9, 0x3ff, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x10, 0x8000, 0x7fff, 0x7}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x75, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, r1}, 0x94) 1.26608975s ago: executing program 0 (id=3203): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="e03f0300eb03"], 0x33fe0}}, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, r4, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xf8b}, @device_b, @device_a, @initial, {0x1, 0x9}}, 0x30, @val={0x8c, 0x10, {0x4fe, "ed8dab2b8783", @short="199e33b456c7e6d4"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x100000c0}, 0x10) 1.13205324s ago: executing program 3 (id=3204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4, 0x4}}}}]}, 0x34}}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xe8, 0x453, 0x400, 0x70bd2d, 0x25dfdbff, "318f42688758f5a6c9f474954c12942b8e82d8f8f00e3c06582a5ebe1b1ccde68e1368c7c5db9e450865ee1507bb44c3c80bd54eaf65260fedae9d04d2b056beca52258f2d4d51adb664a3d6ab41b2d131100acde5060366a2c949cb5a7dfe63cb36afdcbae5070f78632b79df3e7ec56005f1704d978ba85dc3eb80171b3d8e403922a59d91ddca63c0b1e13b46fbc9fd5dcffed7e34df872492c0dc868f6da44eb4c42f33ca78245fee9e35e533af3cc8a0434c4b109b435b3b0f075537634182b445cb80157fb12e4dec9a72184e20be8117c62d5", ["", "", "", ""]}, 0xe8}, 0x1, 0x0, 0x0, 0x8044}, 0xc0d4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x48) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRES64=r0, @ANYRES32=r0, @ANYRES8=r1, @ANYRES16=r2, @ANYRESOCT=r2], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) 838.599218ms ago: executing program 3 (id=3205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000002a00000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000002a00000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) write(r0, &(0x7f0000000100)="2d698dd76c6fb276993d908db1a87d916cf9e959c28ef6ce91802b2a11aa9ffecd0d4089f319089ca5a469835f663359d2d4f6bd2e0c992496c96c668285be930151d6eb90d4e5e1b083b1ca50", 0x4d) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1c, 0x21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) (async) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x70}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {0x94, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) r4 = socket(0x15, 0x5, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40012160, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 830.964783ms ago: executing program 0 (id=3206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000020000000000010510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000078540000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000003f00000000000000200000000000000000ae00000000000000000000000000000000000000000000000000000000543c715b0000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000"], 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) socket$kcm(0x29, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000000)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfec}], 0x3}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe800000000000000000000000fbffaa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) listen(r8, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000040000007300000008000300", @ANYRES32=r12], 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x20040080) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) 715.698721ms ago: executing program 2 (id=3207): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="21000000000000000000b2f02633cf8a6d9e1c7a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="21000000000000000000b2f02633cf8a6d9e1c7a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x6, 0xa9, &(0x7f0000000080)="ab970c06eb2a", &(0x7f00000000c0)=""/169, 0x81, 0x0, 0x46, 0xec, &(0x7f0000000180)="ef1e890748676af2b670ad456e9c80a6991b712b0568d127445deb6f768fbc8eac34fc302dffb14f8a06adb430b64a6c194ad09488ca3a7761ec9a98a9e42601330503569d9d", &(0x7f0000000340)="13db23a4ccbb20fb8b9ac13824d2efd8c36824e94a2811be92615ff057ee2ea990a07333261a1c993b415fe5b9924311291e57630685b3fad494fce07feb12a9fb6c8840544ee983d706eb6bc2ccc53ba8bb365d7797e2eeba58b01a0cf5fdb8239d4c0e6759c4a80bb067969abb4e4a5d19593988c19d932e7146d38c0c18d83b52ce858dcdda22f76662d24153538120075b2691ef98266e0eeaea073b65a7e8ba8c15b7ce79caf06095d6da2e768b119733cd71189551e7cac22dfca3ec00b9ec24bdc7f7785074d92e44afbb69c2119d42110db650876449354caaf4df0855bca21628b33f4bea0c17cf", 0x4, 0x0, 0x3}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x6, 0xa9, &(0x7f0000000080)="ab970c06eb2a", &(0x7f00000000c0)=""/169, 0x81, 0x0, 0x46, 0xec, &(0x7f0000000180)="ef1e890748676af2b670ad456e9c80a6991b712b0568d127445deb6f768fbc8eac34fc302dffb14f8a06adb430b64a6c194ad09488ca3a7761ec9a98a9e42601330503569d9d", &(0x7f0000000340)="13db23a4ccbb20fb8b9ac13824d2efd8c36824e94a2811be92615ff057ee2ea990a07333261a1c993b415fe5b9924311291e57630685b3fad494fce07feb12a9fb6c8840544ee983d706eb6bc2ccc53ba8bb365d7797e2eeba58b01a0cf5fdb8239d4c0e6759c4a80bb067969abb4e4a5d19593988c19d932e7146d38c0c18d83b52ce858dcdda22f76662d24153538120075b2691ef98266e0eeaea073b65a7e8ba8c15b7ce79caf06095d6da2e768b119733cd71189551e7cac22dfca3ec00b9ec24bdc7f7785074d92e44afbb69c2119d42110db650876449354caaf4df0855bca21628b33f4bea0c17cf", 0x4, 0x0, 0x3}, 0x50) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)={@empty, @local}, &(0x7f0000000680)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)={@empty, @local, 0x0}, &(0x7f0000000680)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000280)=""/6, 0x308000, 0x0, 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000ec0)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000ec0)={'bond0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@delqdisc={0x7c, 0x25, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8cc3c65a246cf534, 0xf}, {0x6, 0xffe0}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_taprio={{0xb}, {0x18, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffffffc}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x5}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x7c}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6, 0x0, r4}, 0x10) socket(0x10, 0x803, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x1012101, 0x4) bind$xdp(r8, &(0x7f0000000640)={0x2c, 0x0, r2, 0x3a, r4}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmsg$nl_route(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c000000100003040000000000000000000000004f868a21668506e3b2a7341c27b4e8fe86ae9c1749d3869190b2dc37fbb4c86fc50eec406dfe56410a10e2c77995a5f3d76b35814397201ec205d8700ae7fe9eaa33003c2d549c55e77b748de90cca51c1321963f0d306ebe35ed1b98871226590070ab78ce7cf671ee943b2875e56368d029168f68490f35d3b65d950c1479958e8ea12b8a7c00d64a8260746b9930e4a651d37fdf07b5d922fba48305556a4cae560317650af5bc2bec11432341f546f442d098ea207ddac3359b65a2e2c2afc798b2e7be19a84066c099d001235b370a10a5c39d1a0e638e9cda1110072428622830df62836b674404f1f1856537cea0ecd8af6d0000000", @ANYRES32=r9, @ANYBLOB="00000000000000004400128009000100766c616e00000000340002800600010000000000280003800c00010000000000000000000c00010000000100070000000c000100000000000310000008000500", @ANYRES32=r1, @ANYBLOB, @ANYRESHEX=r10, @ANYRESDEC=r0], 0x6c}, 0x1, 0xba01}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6c000000100003040000000000000000000000004f868a21668506e3b2a7341c27b4e8fe86ae9c1749d3869190b2dc37fbb4c86fc50eec406dfe56410a10e2c77995a5f3d76b35814397201ec205d8700ae7fe9eaa33003c2d549c55e77b748de90cca51c1321963f0d306ebe35ed1b98871226590070ab78ce7cf671ee943b2875e56368d029168f68490f35d3b65d950c1479958e8ea12b8a7c00d64a8260746b9930e4a651d37fdf07b5d922fba48305556a4cae560317650af5bc2bec11432341f546f442d098ea207ddac3359b65a2e2c2afc798b2e7be19a84066c099d001235b370a10a5c39d1a0e638e9cda1110072428622830df62836b674404f1f1856537cea0ecd8af6d0000000", @ANYRES32=r9, @ANYBLOB="00000000000000004400128009000100766c616e00000000340002800600010000000000280003800c00010000000000000000000c00010000000100070000000c000100000000000310000008000500", @ANYRES32=r1, @ANYBLOB, @ANYRESHEX=r10, @ANYRESDEC=r0], 0x6c}, 0x1, 0xba01}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae", @ANYRES32=r10, @ANYRESDEC=0x0], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$tipc2(0x0, r12) 503.841429ms ago: executing program 3 (id=3208): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create(0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) 287.05671ms ago: executing program 3 (id=3209): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x1, 0xfffffffffffffff7}) recvmsg$can_bcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000300)=""/247, 0xf7}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/246, 0xf6}, {&(0x7f00000015c0)=""/162, 0xa2}, {&(0x7f0000001680)=""/225, 0xe1}], 0x8, &(0x7f0000001800)=""/4096, 0x1000}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf001}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000028c0)={r0, 0x58, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002900)=0x0) sendmsg$nl_route(r0, &(0x7f00000029c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)=@bridge_dellink={0x28, 0x11, 0x100, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x12000, 0x288}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x1) (async) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000d060307eeffffffffffffff02000000"], 0x14}}, 0x24000810) 201.497304ms ago: executing program 3 (id=3210): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r0, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x38}}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 200.927103ms ago: executing program 2 (id=3211): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, 0x0, 0x7, 0x2, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x320, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x9e, 0x2a, [@random={0x7, 0x5a, "28eab5db36e8d5771d75760ded31959d04f58af5d2984e36a80ae8b1815fd5e44b3bd2d204eaea162298e3aa508cab4a01829c89d9ca2ffb4fd2a37d0149b2fdfbc7082ecad2ef3bf51e2bbd856d7b03eab8ba90bda0c94c1958"}, @ssid={0x0, 0x17, @random="1ee6931f1a89fb59e4a0f0d1caddc1253a16e2b0aa776f"}, @ht={0x2d, 0x1a, {0x1000, 0x1, 0x3, 0x0, {0x650, 0x28, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x7, 0x2}}, @chsw_timing={0x68, 0x4, {0x6, 0x8}}, @supported_rates={0x1, 0x1, [{0x60}]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0xc9, 0x2a, [@ibss={0x6, 0x2, 0x29e4}, @chsw_timing={0x68, 0x4, {0x2, 0x3}}, @ht={0x2d, 0x1a, {0x10d0, 0x3, 0x2, 0x0, {0x66, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x400, 0x7, 0x9}}, @measure_req={0x26, 0x7f, {0x30, 0x1, 0xf, "b212a7d5a2e27435feb64f25f66a356550bad6955d79747f62b4b5fcf173ab5e72f9485e7286d5ca5f0fcee0cb4748d112c6d0a903e62c7a71f2001ffcd711626164afc7130a13206dda814fd2075ddfa1af066436c582281402903fb0a417d924c607fd6d5fa182904681d33de9113b38daaa9422fac5bdf0bd4712"}}, @tim={0x5, 0x16, {0x2, 0x68, 0x7, "28d0a95a9733b49644e64920f1000114f99b16"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xd2, 0x64, 0x56}}]}, @NL80211_ATTR_IE={0x175, 0x2a, [@supported_rates={0x1, 0x3, [{0x48}, {0x48, 0x1}, {0x16, 0x1}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x19, 0x6a, @broadcast, 0x7, @value, 0x8001, 0x8001, @device_b, 0x5}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x6, 0x20}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0xe6, "f9d68aaa7bbba4fe1ac4e03f2d3353eabd3236d1a6db56853a8bc1ed9c4279537e8f7dfcf1689aae2544c331631f1fec9e5d316c60516bbce9209abbb3a7cccb21d0c71a2e9cf2c220306c31b72404a6d08f498cecad20bcf7b5e84e0405cb10ad9795e526229a2c168291faf89f02dae0626883e8bc62b62634bc948f8dc20681fe3dd90782a0fc2ca75c87a1dd2f21040e73284271a4989a66504f7af201c88a141669c0fbb1925e2857ecbb0aeb9ae26f72b39d5c0493e59d293d9812b22944a643ff3e67dd613fa3f8917dba9448a0066b4af3459d74fa77be646e21db0dd4b77a04599f"}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x5, 0x0, {0x808d, 0x10, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x400, 0x0, 0x7}}, @mesh_chsw={0x76, 0x6, {0xc, 0x6, 0x14, 0x9}}, @dsss={0x3, 0x1, 0x78}, @dsss={0x3, 0x1, 0x70}, @random={0x3, 0x20, "8450cfb24d4b380c2ebbef993193cd9566ec18b1e3afb7676efcf2c354958afe"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x36e}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}]}, 0x320}, 0x1, 0x0, 0x0, 0x1}, 0x44010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x34, 0x66, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xe, 0xfff3}, {0xfff1, 0x7}, {0xfff3, 0x9}}, [{0x8, 0xb, 0x3f}, {0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048001}, 0x440d4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffb, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 200.511521ms ago: executing program 0 (id=3212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x57}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x10000000) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000001) sendfile(r0, r0, 0x0, 0x2) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80000) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x74, 0x24, 0x3fe3aa0262d8c187, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x44, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f, 0x401, 0x6, 0xc, 0x19, 0x1}}]}}]}, 0x74}}, 0x0) getsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 0s ago: executing program 2 (id=3213): r0 = socket$inet(0x2, 0x80001, 0x84) (async) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) (async) shutdown(r2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): .256352][T14340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.267595][T14345] netlink: 'syz.3.2193': attribute type 33 has an invalid length. [ 323.275671][T14345] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2193'. [ 323.314217][T14340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.334740][T14340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.365714][T14340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.400509][T14357] netlink: 'syz.2.2195': attribute type 10 has an invalid length. [ 323.432944][T14340] team0: Port device geneve0 added [ 323.695769][T14156] hsr_slave_0: entered promiscuous mode [ 323.709907][T14156] hsr_slave_1: entered promiscuous mode [ 324.373892][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 324.411003][T14391] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2204'. [ 324.428722][T14395] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2203'. [ 324.539058][ T5839] Bluetooth: hci0: command tx timeout [ 324.645736][T14391] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2204'. [ 325.139512][T14425] xt_socket: unknown flags 0x4 [ 325.180292][T14431] openvswitch: netlink: Unknown key attributes 2 [ 325.300009][T14415] bond0: (slave macvlan5): Error -98 calling set_mac_address [ 325.363189][T14439] netlink: 'syz.2.2215': attribute type 1 has an invalid length. [ 325.801690][T14156] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 325.863177][T14156] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 325.885167][T14156] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 325.900652][T14156] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.103185][T14476] netlink: 'syz.2.2223': attribute type 154 has an invalid length. [ 326.147296][T14156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.240223][T14156] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.289195][T10092] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.296405][T10092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.354252][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.361705][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.503974][T14488] netlink: 'syz.2.2227': attribute type 2 has an invalid length. [ 326.527827][T14488] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2227'. [ 326.553876][T14156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.589862][T14488] nbd: must specify a device to reconfigure [ 326.617653][ T5839] Bluetooth: hci0: command tx timeout [ 326.663130][T14495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'. [ 326.794312][T14502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.263760][T14522] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2234'. [ 327.474596][T14156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.571993][T14156] veth0_vlan: entered promiscuous mode [ 327.639422][T14156] veth1_vlan: entered promiscuous mode [ 327.770876][T14156] veth0_macvtap: entered promiscuous mode [ 327.824478][T14156] veth1_macvtap: entered promiscuous mode [ 327.898278][T14156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.933571][T14156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.973086][T14156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.993992][T14156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.006685][T14156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.015677][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2239'. [ 328.025970][T14156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.582983][T10093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.602533][T10093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.709245][T10093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.747432][T10093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.924537][T14548] netlink: 'syz.2.2245': attribute type 7 has an invalid length. [ 328.950437][T14548] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2245'. [ 329.416856][ C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 329.607520][ T1092] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.649757][T14582] tipc: Enabling of bearer rejected, failed to enable media [ 329.831156][ T1092] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.942644][ T1092] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.093221][ T1092] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.319894][ T1092] bridge_slave_1: left allmulticast mode [ 330.325649][ T1092] bridge_slave_1: left promiscuous mode [ 330.347160][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.369330][ T1092] bridge_slave_0: left allmulticast mode [ 330.375066][ T1092] bridge_slave_0: left promiscuous mode [ 330.395417][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.191449][T14607] netlink: 'syz.0.2258': attribute type 21 has an invalid length. [ 331.233303][T14607] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.277256][T14607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.284906][T14607] IPv6: NLM_F_CREATE should be set when creating new route [ 331.292401][T14607] IPv6: NLM_F_CREATE should be set when creating new route [ 331.299713][T14607] IPv6: NLM_F_CREATE should be set when creating new route [ 331.388772][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.434149][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.472570][ T1092] bond0 (unregistering): Released all slaves [ 331.530947][T14617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2262'. [ 331.725007][T14621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2263'. [ 332.240882][T14646] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 332.265034][T14646] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 332.285326][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.295336][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.304517][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.316887][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.326903][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.408031][T14640] : entered promiscuous mode [ 333.264124][T14675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2273'. [ 333.286079][ T1092] hsr_slave_0: left promiscuous mode [ 333.352717][ T1092] hsr_slave_1: left promiscuous mode [ 333.370093][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.394865][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.443883][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.484418][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.639015][ T1092] veth1_macvtap: left promiscuous mode [ 333.665623][ T1092] veth0_macvtap: left promiscuous mode [ 333.692072][ T1092] veth1_vlan: left promiscuous mode [ 333.710972][ T1092] veth0_vlan: left promiscuous mode [ 334.379098][ T5839] Bluetooth: hci0: command tx timeout [ 334.400152][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 334.444172][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 335.046158][T14709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2282'. [ 335.364813][T14723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2288'. [ 335.614088][T14733] vlan1: entered promiscuous mode [ 335.628602][T14733] bridge0: entered promiscuous mode [ 335.696981][T14644] chnl_net:caif_netlink_parms(): no params data found [ 335.845428][T14746] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2294'. [ 335.866429][T14746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2294'. [ 335.887020][T14746] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2294'. [ 335.933697][T14746] netlink: 'syz.3.2294': attribute type 2 has an invalid length. [ 335.951182][T14746] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2294'. [ 336.468307][ T5839] Bluetooth: hci0: command tx timeout [ 336.872221][T14644] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.893690][T14644] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.902095][T14644] bridge_slave_0: entered allmulticast mode [ 336.915121][T14644] bridge_slave_0: entered promiscuous mode [ 336.924195][T14644] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.936189][T14644] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.944608][T14644] bridge_slave_1: entered allmulticast mode [ 336.959123][T14644] bridge_slave_1: entered promiscuous mode [ 336.989829][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2299'. [ 337.121575][T14644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.153098][T14644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.289226][T14792] pimreg: entered allmulticast mode [ 337.357982][T14644] team0: Port device team_slave_0 added [ 337.391439][T14644] team0: Port device team_slave_1 added [ 337.599976][T14644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.625460][T14644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.666890][T14818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2310'. [ 337.682002][T14644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.741323][T14644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.757842][T14644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.796239][T14644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.856079][T14823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2312'. [ 337.924734][T14823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2312'. [ 337.993890][T14823] tipc: Can't bind to reserved service type 1 [ 338.098526][T14644] hsr_slave_0: entered promiscuous mode [ 338.131007][T14644] hsr_slave_1: entered promiscuous mode [ 338.346256][T14850] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2318'. [ 338.639164][T14859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2321'. [ 338.658127][T14862] xt_ecn: cannot match TCP bits for non-tcp packets [ 338.762758][T14862] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2323'. [ 338.871679][T14871] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 338.901391][T14871] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2325'. [ 338.920285][T14871] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 338.995920][T14877] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 339.614752][T14892] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2331'. [ 339.801115][T14904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2334'. [ 339.870807][T14896] smc: net device erspan0 applied user defined pnetid SYZ0 [ 339.890333][T14896] Cannot find add_set index 4 as target [ 340.169860][T14644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 340.208186][T14644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 340.248316][T14644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 340.286165][T14644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 340.353396][T14922] xt_CT: No such helper "pptp" [ 340.495162][T14929] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 340.819728][T14644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.846538][T14952] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 341.097402][T14968] netlink: 'syz.2.2350': attribute type 10 has an invalid length. [ 341.162934][T14644] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.228976][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.236222][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.265270][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.272540][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.334826][T14975] bond0: entered promiscuous mode [ 341.345493][T14975] bond0: entered allmulticast mode [ 341.360921][T14975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.533724][T14982] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.543578][T14982] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.553336][T14982] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.562727][T14982] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.011694][T14999] __nla_validate_parse: 10 callbacks suppressed [ 342.011715][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2357'. [ 342.022764][T14644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.055638][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2357'. [ 342.246328][T15008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2359'. [ 342.285905][T14644] veth0_vlan: entered promiscuous mode [ 342.340579][T14644] veth1_vlan: entered promiscuous mode [ 342.357717][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'. [ 342.468699][T14644] veth0_macvtap: entered promiscuous mode [ 342.510051][T14644] veth1_macvtap: entered promiscuous mode [ 342.613892][T14644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.744527][T14644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.942236][T15036] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2368'. [ 342.947411][T14644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.965392][T14644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.975931][T14644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.985374][T14644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.525041][T15048] : entered promiscuous mode [ 343.548497][T10098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.571845][T10098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.744375][T10101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.780681][T10101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.196352][T15078] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 344.250821][T15078] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 344.443212][T10093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.709695][T10093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.836442][T10093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.941306][T10093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.112846][T10093] bridge_slave_1: left allmulticast mode [ 345.122102][T10093] bridge_slave_1: left promiscuous mode [ 345.128772][T10093] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.142371][T10093] bridge_slave_0: left allmulticast mode [ 345.149780][T10093] bridge_slave_0: left promiscuous mode [ 345.155666][T10093] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.633955][T10093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.646081][T10093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.662190][T10093] bond0 (unregistering): Released all slaves [ 346.173999][T15142] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 346.189655][T15141] SET target dimension over the limit! [ 346.373327][T15142] bond0: entered promiscuous mode [ 346.388284][T15142] bond0: entered allmulticast mode [ 346.401424][T15142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.480544][T15141] x_tables: duplicate underflow at hook 2 [ 346.520659][T10093] hsr_slave_0: left promiscuous mode [ 346.540596][T10093] hsr_slave_1: left promiscuous mode [ 346.567571][T10093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.597437][T10093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.624006][T10093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.640746][T10093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.760153][T10093] veth1_macvtap: left promiscuous mode [ 346.788393][T15168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2386'. [ 346.799439][T10093] veth0_macvtap: left promiscuous mode [ 346.822604][T10093] veth1_vlan: left promiscuous mode [ 346.831109][T10093] veth0_vlan: left promiscuous mode [ 347.044685][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.057164][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.073081][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.093822][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.102696][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.583119][T10093] team0 (unregistering): Port device team_slave_1 removed [ 347.623191][T10093] team0 (unregistering): Port device team_slave_0 removed [ 348.000101][T15170] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 348.408184][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2393'. [ 348.460222][T15208] IPVS: Unknown mcast interface: virt_wifi0 [ 348.480640][T15205] syzkaller0: entered promiscuous mode [ 348.516740][T15205] syzkaller0: entered allmulticast mode [ 348.544005][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2394'. [ 348.732920][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'. [ 348.786817][T15214] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 348.807650][T15214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.067755][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2398'. [ 349.098535][T15225] netlink: 'syz.3.2397': attribute type 29 has an invalid length. [ 349.139115][T15232] netlink: 'syz.3.2397': attribute type 29 has an invalid length. [ 349.177302][ T5839] Bluetooth: hci0: command tx timeout [ 349.532332][T15242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2401'. [ 349.600994][T15242] netlink: 'syz.0.2401': attribute type 7 has an invalid length. [ 349.614206][T15253] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2404'. [ 349.632944][T15242] netlink: 'syz.0.2401': attribute type 8 has an invalid length. [ 349.659429][T15253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.678293][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2401'. [ 349.694674][T15182] chnl_net:caif_netlink_parms(): no params data found [ 350.024934][T15266] netlink: 'syz.2.2409': attribute type 21 has an invalid length. [ 350.065375][T15266] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2409'. [ 350.110098][T15278] netlink: 'syz.2.2409': attribute type 21 has an invalid length. [ 350.117810][T15270] Bluetooth: MGMT ver 1.23 [ 350.118281][T15278] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2409'. [ 350.148650][T15270] netlink: 'syz.0.2410': attribute type 23 has an invalid length. [ 350.174083][T15266] netlink: 'syz.2.2409': attribute type 4 has an invalid length. [ 350.182414][T15266] netlink: 'syz.2.2409': attribute type 5 has an invalid length. [ 350.190432][T15266] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2409'. [ 350.292097][T15278] netlink: 'syz.2.2409': attribute type 4 has an invalid length. [ 350.441658][T15182] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.478954][T15182] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.511572][T15182] bridge_slave_0: entered allmulticast mode [ 350.530280][T15182] bridge_slave_0: entered promiscuous mode [ 350.550013][T15182] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.564555][T15182] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.579660][T15182] bridge_slave_1: entered allmulticast mode [ 350.597398][T15182] bridge_slave_1: entered promiscuous mode [ 350.810039][T15182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.879798][T15182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.067610][T15182] team0: Port device team_slave_0 added [ 351.109655][T15182] team0: Port device team_slave_1 added [ 351.131132][T15319] netlink: zone id is out of range [ 351.148974][T15319] netlink: zone id is out of range [ 351.168218][T15319] netlink: zone id is out of range [ 351.173423][T15319] netlink: zone id is out of range [ 351.202189][T15319] netlink: zone id is out of range [ 351.227144][T15319] netlink: zone id is out of range [ 351.233353][T15319] netlink: zone id is out of range [ 351.251283][T15182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.259481][ T5839] Bluetooth: hci0: command tx timeout [ 351.276090][T15182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.302395][T15182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.317398][T15182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.324411][T15182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.350610][T15182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.454652][T15182] hsr_slave_0: entered promiscuous mode [ 351.461922][T15182] hsr_slave_1: entered promiscuous mode [ 351.633259][T15341] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.651624][T15341] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.675868][T15341] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.686074][T15341] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.743652][T15341] team0: Port device geneve0 removed [ 351.753497][T15341] bond5: (slave ip6gretap1): Releasing backup interface [ 352.950616][T15182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 353.001181][T15182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 353.050211][T15182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 353.096431][T15182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.337083][ T5839] Bluetooth: hci0: command tx timeout [ 353.487041][T15438] __nla_validate_parse: 10 callbacks suppressed [ 353.487063][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2451'. [ 353.561052][T15182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.610611][T15438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2451'. [ 353.652122][T15182] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.660295][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'. [ 353.683042][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.690353][T10096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.760818][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.768118][T10096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.833259][T15449] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2455'. [ 353.872749][T15449] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2455'. [ 353.934844][T15440] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2452'. [ 354.473849][T15182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.661870][T15182] veth0_vlan: entered promiscuous mode [ 354.696188][T15182] veth1_vlan: entered promiscuous mode [ 354.915118][T15487] syzkaller0: entered promiscuous mode [ 354.948530][T15487] syzkaller0: entered allmulticast mode [ 354.988423][T15495] xt_connbytes: Forcing CT accounting to be enabled [ 355.040626][T15495] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 355.049351][T15498] net_ratelimit: 12 callbacks suppressed [ 355.049377][T15498] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 355.417412][ T5839] Bluetooth: hci0: command tx timeout [ 356.941402][T15182] veth0_macvtap: entered promiscuous mode [ 356.991337][T15182] veth1_macvtap: entered promiscuous mode [ 357.014042][T15182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.045054][T15182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.081833][T15182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.085665][T15525] x_tables: unsorted underflow at hook 4 [ 357.110912][T15182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.141028][T15182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.161783][T15182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.410037][T10092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.453897][T10092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.545018][T10101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.546192][T15543] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.2477'. [ 357.574217][T10101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.807495][T15557] validate_nla: 9 callbacks suppressed [ 357.807515][T15557] netlink: 'syz.0.2483': attribute type 29 has an invalid length. [ 357.830724][T15557] netlink: 'syz.0.2483': attribute type 29 has an invalid length. [ 357.845053][T15557] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2483'. [ 358.164001][T10101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.284689][T10101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.596936][T10101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.772722][T10101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.932479][T10101] bridge_slave_1: left allmulticast mode [ 358.941997][T10101] bridge_slave_1: left promiscuous mode [ 358.948494][T10101] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.958856][T10101] bridge_slave_0: left allmulticast mode [ 358.964520][T10101] bridge_slave_0: left promiscuous mode [ 358.970825][T10101] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.310141][T10101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.322284][T10101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.332916][T10101] bond0 (unregistering): Released all slaves [ 359.682692][T15571] netlink: 'syz.2.2485': attribute type 1 has an invalid length. [ 359.716695][T15571] netlink: 'syz.2.2485': attribute type 3 has an invalid length. [ 359.728817][T15571] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2485'. [ 360.038120][T15583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2490'. [ 360.061595][T15585] sctp: [Deprecated]: syz.2.2491 (pid 15585) Use of int in maxseg socket option. [ 360.061595][T15585] Use struct sctp_assoc_value instead [ 360.336033][T15600] openvswitch: netlink: Flow key attr not present in new flow. [ 360.432619][T10101] hsr_slave_0: left promiscuous mode [ 360.451602][T10101] hsr_slave_1: left promiscuous mode [ 360.473201][T10101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.506850][T10101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.548534][T10101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.556033][T10101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.672561][T10101] veth1_macvtap: left promiscuous mode [ 360.680881][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.698259][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.710549][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.718042][T10101] veth0_macvtap: left promiscuous mode [ 360.727315][T10101] veth1_vlan: left promiscuous mode [ 360.736760][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.747237][T10101] veth0_vlan: left promiscuous mode [ 360.764195][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.799001][T15620] netlink: 'syz.0.2498': attribute type 1 has an invalid length. [ 360.808643][T15620] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2498'. [ 360.831157][T15620] nbd: illegal input index 1048576 [ 361.385074][T10101] team0 (unregistering): Port device team_slave_1 removed [ 361.431955][T10101] team0 (unregistering): Port device team_slave_0 removed [ 362.003547][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2501'. [ 362.013978][T15630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2501'. [ 362.065905][T15630] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.096030][T15630] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.106131][T15637] netlink: 'syz.3.2503': attribute type 11 has an invalid length. [ 362.123026][T15630] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.145996][T15630] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.165660][T15630] geneve3: entered promiscuous mode [ 362.177068][T15630] geneve3: entered allmulticast mode [ 362.697305][T15653] veth9: entered allmulticast mode [ 362.857169][ T5839] Bluetooth: hci0: command tx timeout [ 362.942699][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2508'. [ 362.953196][T15663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2508'. [ 363.147465][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2510'. [ 363.184749][T15671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2510'. [ 363.216857][T15671] netlink: 'syz.4.2510': attribute type 15 has an invalid length. [ 363.617026][T15694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2515'. [ 363.851784][T15612] chnl_net:caif_netlink_parms(): no params data found [ 364.090957][T15715] netlink: 'syz.2.2519': attribute type 1 has an invalid length. [ 364.099645][T15717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.134049][T15707] 8021q: adding VLAN 0 to HW filter on device bond6 [ 364.213675][T15709] vlan4: entered allmulticast mode [ 364.257304][T15709] bond6: entered allmulticast mode [ 364.322546][T15724] netlink: 'syz.3.2521': attribute type 1 has an invalid length. [ 364.404492][T15726] netlink: 'syz.2.2522': attribute type 1 has an invalid length. [ 364.422810][T15709] vlan4: entered allmulticast mode [ 364.584248][T15709] vlan4: entered allmulticast mode [ 364.796246][T15612] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.837460][T15612] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.867437][T15612] bridge_slave_0: entered allmulticast mode [ 364.895887][T15612] bridge_slave_0: entered promiscuous mode [ 364.937859][ T5839] Bluetooth: hci0: command tx timeout [ 364.981087][T15612] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.012518][T15612] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.042844][T15612] bridge_slave_1: entered allmulticast mode [ 365.051897][T15612] bridge_slave_1: entered promiscuous mode [ 365.093642][T15757] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 365.182640][T15612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.229218][T15612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.345587][T15767] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 365.376532][T15768] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 365.397604][T15768] __nla_validate_parse: 7 callbacks suppressed [ 365.397624][T15768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2533'. [ 365.494181][T15612] team0: Port device team_slave_0 added [ 365.529661][T15612] team0: Port device team_slave_1 added [ 365.812426][T15612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.824458][T15612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.883479][T15612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.933840][T15612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.970255][T15612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.037218][T15612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.131264][T15811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2543'. [ 366.236970][T15811] IPVS: Error connecting to the multicast addr [ 366.521972][T15612] hsr_slave_0: entered promiscuous mode [ 366.542236][T15612] hsr_slave_1: entered promiscuous mode [ 366.723477][T15845] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2550'. [ 366.737362][T15846] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2548'. [ 366.763635][T15840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.016874][ T5839] Bluetooth: hci0: command tx timeout [ 367.110743][T15863] openvswitch: netlink: IP tunnel TTL not specified. [ 367.382760][T15876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2557'. [ 367.675178][T15895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2561'. [ 367.891855][T15902] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2563'. [ 368.488158][T15944] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2573'. [ 368.515449][T15944] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.526382][T15944] IPv6: Can't replace route, no match found [ 368.750977][T15957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2576'. [ 368.763051][T15957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2576'. [ 369.097078][ T5839] Bluetooth: hci0: command tx timeout [ 369.383608][T15612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.419540][T15612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.455300][T15612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.518960][T15612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.893483][T15612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.008303][T15612] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.052663][T10102] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.059894][T10102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.139671][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.146952][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.261743][T16029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.668039][T16051] netlink: 'syz.4.2599': attribute type 32 has an invalid length. [ 370.726805][T16051] __nla_validate_parse: 6 callbacks suppressed [ 370.726824][T16051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2599'. [ 370.808202][T16051] (unnamed net_device) (uninitialized): option coupled_control: invalid value (64) [ 370.923713][T16065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2602'. [ 370.943223][T16065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2602'. [ 371.108077][T15612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.253024][T16071] netlink: 'syz.4.2604': attribute type 21 has an invalid length. [ 371.290880][T16071] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2604'. [ 371.302630][T15612] veth0_vlan: entered promiscuous mode [ 371.330417][T16071] netlink: 'syz.4.2604': attribute type 4 has an invalid length. [ 371.348420][T16078] netlink: 'syz.4.2604': attribute type 21 has an invalid length. [ 371.363657][T16071] netlink: 'syz.4.2604': attribute type 5 has an invalid length. [ 371.386760][T16078] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2604'. [ 371.411507][T16071] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2604'. [ 371.538285][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2604'. [ 371.743997][T16078] netlink: 'syz.4.2604': attribute type 4 has an invalid length. [ 371.754920][T16078] netlink: 'syz.4.2604': attribute type 5 has an invalid length. [ 371.763401][T16078] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2604'. [ 371.904735][T15612] veth1_vlan: entered promiscuous mode [ 372.035085][T16096] openvswitch: netlink: Message has 57 unknown bytes. [ 372.037865][T15612] veth0_macvtap: entered promiscuous mode [ 372.089990][T15612] veth1_macvtap: entered promiscuous mode [ 372.169863][T16102] ip6t_rpfilter: unknown options [ 372.174211][T15612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.252936][T15612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.294260][T15612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.334002][T15612] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.376123][T15612] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.408944][T15612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.471045][T16114] netlink: 'syz.3.2611': attribute type 1 has an invalid length. [ 372.540016][T16114] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2611'. [ 372.549965][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2612'. [ 372.851144][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.894347][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.039484][T10100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.065688][T10100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.219097][T16142] openvswitch: netlink: Flow key attr not present in new flow. [ 373.986301][ T1153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.117064][T16162] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 374.306406][ T1153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.482524][ T1153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.623366][ T1153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.665261][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.679226][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.690318][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.710938][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.718736][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.961587][ T1153] bridge_slave_1: left allmulticast mode [ 374.977592][ T1153] bridge_slave_1: left promiscuous mode [ 374.984732][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.012707][ T1153] bridge_slave_0: left allmulticast mode [ 375.034384][ T1153] bridge_slave_0: left promiscuous mode [ 375.045127][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.602963][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.616111][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.628094][ T1153] bond0 (unregistering): Released all slaves [ 376.098728][T16216] __nla_validate_parse: 5 callbacks suppressed [ 376.098749][T16216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2626'. [ 376.220836][T16219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2628'. [ 376.247338][T16219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2628'. [ 376.265606][T16223] pim6reg: entered allmulticast mode [ 376.290839][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2627'. [ 376.313941][T16216] siw: device registration error -23 [ 376.551494][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.567117][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.573119][T16233] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2630'. [ 376.593811][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 376.620981][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 376.631915][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 376.688086][T16242] sctp: [Deprecated]: syz.4.2629 (pid 16242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.688086][T16242] Use struct sctp_sack_info instead [ 376.777250][ T5839] Bluetooth: hci0: command tx timeout [ 377.089009][T16172] chnl_net:caif_netlink_parms(): no params data found [ 377.156135][T16261] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2633'. [ 377.191696][T16261] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2633'. [ 377.432932][T16273] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2635'. [ 377.549898][T16274] netlink: 'syz.2.2636': attribute type 1 has an invalid length. [ 377.569037][T16264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2634'. [ 377.626660][ T1153] hsr_slave_0: left promiscuous mode [ 377.641420][ T1153] hsr_slave_1: left promiscuous mode [ 377.667966][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.692960][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.718353][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.736398][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.799094][ T1153] veth1_macvtap: left promiscuous mode [ 377.813303][ T1153] veth0_macvtap: left promiscuous mode [ 377.824651][ T1153] veth1_vlan: left promiscuous mode [ 377.830741][ T1153] veth0_vlan: left promiscuous mode [ 378.564353][T16303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2639'. [ 378.702576][ T5839] Bluetooth: hci4: command tx timeout [ 378.717750][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.840364][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 378.856801][ T5839] Bluetooth: hci0: command tx timeout [ 378.923274][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 379.675711][T16325] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 379.785184][T16172] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.794271][T16172] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.801650][T16172] bridge_slave_0: entered allmulticast mode [ 379.809717][T16172] bridge_slave_0: entered promiscuous mode [ 379.841913][T16172] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.856778][T16172] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.876196][T16172] bridge_slave_1: entered allmulticast mode [ 379.888662][T16172] bridge_slave_1: entered promiscuous mode [ 380.041026][T16334] tc_dump_action: action bad kind [ 380.053522][T16330] sch_fq: defrate 0 ignored. [ 380.224067][T16172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.321630][T16172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.515668][ T13] bond0: (slave wlan1): link status definitely down, disabling slave [ 380.531003][ T13] bond0: now running without any active interface! [ 380.620600][T16172] team0: Port device team_slave_0 added [ 380.733632][T16172] team0: Port device team_slave_1 added [ 380.737604][T16372] netlink: 'syz.0.2652': attribute type 10 has an invalid length. [ 380.776775][ T5839] Bluetooth: hci4: command tx timeout [ 380.865508][T16172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.873405][T16172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.901156][T16172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.936837][ T5839] Bluetooth: hci0: command tx timeout [ 381.029403][T16172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.036428][T16172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.104258][T16172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.227460][T16390] unsupported nla_type 52263 [ 381.250414][T16390] __nla_validate_parse: 2 callbacks suppressed [ 381.250435][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2659'. [ 381.278354][T16390] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 381.310523][T16172] hsr_slave_0: entered promiscuous mode [ 381.318625][T16172] hsr_slave_1: entered promiscuous mode [ 381.841673][T16230] chnl_net:caif_netlink_parms(): no params data found [ 382.523442][T16172] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.553153][T16172] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.836033][T16172] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.856866][ T5839] Bluetooth: hci4: command tx timeout [ 382.865263][T16172] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.905099][T16230] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.941768][T16230] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.982418][T16230] bridge_slave_0: entered allmulticast mode [ 383.016210][T16230] bridge_slave_0: entered promiscuous mode [ 383.019516][ T5839] Bluetooth: hci0: command tx timeout [ 383.063138][T16230] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.091305][T16230] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.123452][T16230] bridge_slave_1: entered allmulticast mode [ 383.134704][T16230] bridge_slave_1: entered promiscuous mode [ 383.175811][T16172] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.191862][T16172] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.404542][T16172] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.415322][T16172] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.460777][T16230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.486214][T16230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.688361][T16230] team0: Port device team_slave_0 added [ 383.711060][T16230] team0: Port device team_slave_1 added [ 383.849461][T16230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.863455][T16230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.898097][T16230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.979510][T16230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.986525][T16230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.057334][T16230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.273073][T16515] openvswitch: netlink: IPv6 tunnel dst address is zero [ 384.349788][T16230] hsr_slave_0: entered promiscuous mode [ 384.357469][T16230] hsr_slave_1: entered promiscuous mode [ 384.364108][T16230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.373165][T16230] Cannot create hsr debugfs directory [ 384.539255][T16172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.615691][T16527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.649646][T16172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.669037][T16172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.735293][T16172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.747066][T16532] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2691'. [ 384.789394][T16536] netlink: 'syz.2.2692': attribute type 3 has an invalid length. [ 384.937344][ T5839] Bluetooth: hci4: command tx timeout [ 385.342807][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2694'. [ 385.356107][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2694'. [ 385.389374][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2694'. [ 385.403713][T16560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.804076][T16588] IPv6: Can't replace route, no match found [ 385.816212][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2703'. [ 385.833774][T16588] netlink: 'syz.0.2703': attribute type 5 has an invalid length. [ 385.844294][T16588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2703'. [ 385.863723][T16590] geneve1: entered promiscuous mode [ 385.889297][T16588] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 385.926998][T16588] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 385.945772][T16588] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 385.976034][T16588] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 385.993507][T16588] geneve2: entered promiscuous mode [ 385.994682][T16595] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 386.000369][T16588] geneve2: entered allmulticast mode [ 386.250485][T16172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.368943][T16230] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 386.405338][T16230] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 386.433261][T16172] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.462584][T16230] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 386.502518][T16230] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.521459][T16613] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2710'. [ 386.549055][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.556257][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.654186][T10102] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.661716][T10102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.075591][T16643] netlink: 'syz.0.2716': attribute type 33 has an invalid length. [ 387.104072][T16230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.119981][T16643] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2716'. [ 387.224159][T16230] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.269765][T16650] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2717'. [ 387.300191][T10102] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.307954][T10102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.345500][T16650] veth0_vlan: entered allmulticast mode [ 387.379257][T10102] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.386692][T10102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.645154][T16667] sctp: [Deprecated]: syz.4.2720 (pid 16667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.645154][T16667] Use struct sctp_sack_info instead [ 387.796217][T16172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.976295][T16683] netlink: 'syz.2.2722': attribute type 10 has an invalid length. [ 388.050473][T16172] veth0_vlan: entered promiscuous mode [ 388.103786][T16172] veth1_vlan: entered promiscuous mode [ 388.254022][T16172] veth0_macvtap: entered promiscuous mode [ 388.328264][T16172] veth1_macvtap: entered promiscuous mode [ 388.413721][T16172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.486151][T16172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.532027][T16172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.546185][T16172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.556929][T16172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.566056][T16172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.682646][T16230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.951810][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.982449][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.079675][T16230] veth0_vlan: entered promiscuous mode [ 389.128919][T10090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.134395][T16230] veth1_vlan: entered promiscuous mode [ 389.176986][T10090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.313663][T16230] veth0_macvtap: entered promiscuous mode [ 389.398326][T16230] veth1_macvtap: entered promiscuous mode [ 389.538238][T16230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.612520][T16230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.655027][T16230] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.684935][T16230] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.710096][T16230] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.735884][T16230] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.783868][T16744] netlink: 4092 bytes leftover after parsing attributes in process `syz.3.2738'. [ 389.859184][T16749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2739'. [ 390.106885][T16758] veth3: entered allmulticast mode [ 390.131740][T16764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2743'. [ 390.194604][T16764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2743'. [ 390.400209][T10100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.416186][T10100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.533187][T10100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.573236][T10100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.697408][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2750'. [ 390.756364][T16787] pim6reg: entered allmulticast mode [ 390.798203][T16798] pim6reg: left allmulticast mode [ 391.023452][T16806] tipc: Started in network mode [ 391.060054][T16806] tipc: Node identity 9ad4db7a699a, cluster identity 4711 [ 391.084863][T16806] tipc: Enabled bearer , priority 0 [ 391.124370][T16801] tipc: Resetting bearer [ 391.322642][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.481648][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.639850][T16797] tipc: Disabling bearer [ 391.775300][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.843992][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.977916][ T12] bridge_slave_1: left allmulticast mode [ 391.983659][ T12] bridge_slave_1: left promiscuous mode [ 391.989919][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.000892][ T12] bridge_slave_0: left allmulticast mode [ 392.007226][ T12] bridge_slave_0: left promiscuous mode [ 392.012967][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.348779][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.360662][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.371727][ T12] bond0 (unregistering): Released all slaves [ 392.928316][ T12] hsr_slave_0: left promiscuous mode [ 392.934803][ T12] hsr_slave_1: left promiscuous mode [ 392.943720][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.952512][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.967609][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.975080][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.023565][ T12] veth1_macvtap: left promiscuous mode [ 393.050469][ T12] veth0_macvtap: left promiscuous mode [ 393.084028][ T12] veth1_vlan: left promiscuous mode [ 393.093488][ T12] veth0_vlan: left promiscuous mode [ 393.113640][T16842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2758'. [ 393.164356][T16842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2758'. [ 393.672995][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 393.684463][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.694745][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.703390][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.711548][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 394.000826][ T12] team0 (unregistering): Port device team_slave_1 removed [ 394.042822][ T12] team0 (unregistering): Port device team_slave_0 removed [ 394.647582][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2759'. [ 394.759026][T16861] bond8 (unregistering): Released all slaves [ 395.137231][T16882] bridge_slave_0: left allmulticast mode [ 395.142962][T16882] bridge_slave_0: left promiscuous mode [ 395.209144][T16882] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.252808][T16894] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2769'. [ 395.325272][T16882] bridge_slave_1: left allmulticast mode [ 395.346281][T16882] bridge_slave_1: left promiscuous mode [ 395.377675][T16882] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.424804][T16882] bond0: (slave bond_slave_0): Releasing backup interface [ 395.475105][T16882] bond0: (slave bond_slave_1): Releasing backup interface [ 395.553816][T16882] team0: Port device team_slave_0 removed [ 395.587288][T16882] team0: Port device team_slave_1 removed [ 395.594385][T16882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.603808][T16882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.613772][T16882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.645899][T16882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.753351][T16898] sch_tbf: peakrate 9 is lower than or equals to rate 3325826297750451116 ! [ 395.827046][ T5847] Bluetooth: hci4: command tx timeout [ 395.838946][T16913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2775'. [ 395.848520][T16913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2775'. [ 396.020401][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2776'. [ 396.513023][T16944] netlink: 'syz.3.2781': attribute type 1 has an invalid length. [ 396.553140][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2781'. [ 396.777224][T16863] chnl_net:caif_netlink_parms(): no params data found [ 396.997753][T16967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2788'. [ 397.041254][T16967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2788'. [ 397.216458][T16863] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.224246][T16863] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.232865][T16863] bridge_slave_0: entered allmulticast mode [ 397.244576][T16863] bridge_slave_0: entered promiscuous mode [ 397.255488][T16863] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.294148][T16863] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.337094][T16863] bridge_slave_1: entered allmulticast mode [ 397.383667][T16863] bridge_slave_1: entered promiscuous mode [ 397.538948][T16995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.632058][T16863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.681369][T16863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.897700][ T5847] Bluetooth: hci4: command tx timeout [ 397.904277][T16863] team0: Port device team_slave_0 added [ 397.969350][T16863] team0: Port device team_slave_1 added [ 398.101378][T16863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.116304][T16863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.161397][T16863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.192624][T16863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.239650][T16863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.308610][T16863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.321805][T17035] __nla_validate_parse: 2 callbacks suppressed [ 398.321825][T17035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2807'. [ 398.571105][T17030] bridge0: entered promiscuous mode [ 398.578687][T17030] bridge0: entered allmulticast mode [ 398.624090][T16863] hsr_slave_0: entered promiscuous mode [ 398.657449][T16863] hsr_slave_1: entered promiscuous mode [ 398.666336][T16863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.675833][T16863] Cannot create hsr debugfs directory [ 399.031501][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 399.088011][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2817'. [ 399.397557][T17082] netlink: 'syz.4.2819': attribute type 24 has an invalid length. [ 399.533409][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2820'. [ 399.976948][ T5847] Bluetooth: hci4: command tx timeout [ 400.211521][T17113] xt_l2tp: missing protocol rule (udp|l2tpip) [ 400.725064][T17139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2834'. [ 400.763907][T17139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2834'. [ 400.809333][T17139] netlink: 'syz.2.2834': attribute type 39 has an invalid length. [ 400.824003][T16863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 400.931668][T16863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 400.976386][T16863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.025959][T16863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.516276][T16863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.679327][T17193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.712705][T17193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.775837][T17193] hsr0: entered promiscuous mode [ 401.795660][T17193] hsr0: entered allmulticast mode [ 401.832169][T17193] hsr_slave_0: entered allmulticast mode [ 401.854240][T17193] hsr_slave_1: entered allmulticast mode [ 401.881676][T16863] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.974416][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.981660][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.008109][T17212] netlink: 'syz.3.2850': attribute type 21 has an invalid length. [ 402.016173][T17212] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2850'. [ 402.044995][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.052281][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.060892][ T5847] Bluetooth: hci4: command tx timeout [ 402.089917][T17212] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2850'. [ 402.542063][T17236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.952482][T16863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.147708][T16863] veth0_vlan: entered promiscuous mode [ 403.189597][T16863] veth1_vlan: entered promiscuous mode [ 403.354430][T16863] veth0_macvtap: entered promiscuous mode [ 403.416491][T16863] veth1_macvtap: entered promiscuous mode [ 403.427378][T17278] netlink: 'syz.0.2866': attribute type 15 has an invalid length. [ 403.504281][T17281] netlink: 'syz.4.2867': attribute type 2 has an invalid length. [ 403.509078][T16863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.554967][T16863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.601098][T16863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.626713][T16863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.636147][T16863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.693583][T16863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.055636][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.088835][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.135700][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 404.271929][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.320495][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.468771][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 404.600605][T17326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2877'. [ 404.922602][T17342] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2880'. [ 405.145371][T17351] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2884'. [ 405.167351][T17352] netlink: 'syz.2.2883': attribute type 11 has an invalid length. [ 405.187437][T17351] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.2884'. [ 405.189573][T17352] netlink: 'syz.2.2883': attribute type 11 has an invalid length. [ 405.237127][T17351] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.2884'. [ 405.250631][T17352] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2883'. [ 405.618296][T17376] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2887'. [ 405.724660][T10100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.946366][T10100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.122125][T10100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.278793][T10100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.535283][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.544600][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.552517][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.572527][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.585504][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.606210][T10100] bridge_slave_1: left allmulticast mode [ 406.613186][T10100] bridge_slave_1: left promiscuous mode [ 406.620365][T10100] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.642161][T10100] bridge_slave_0: left allmulticast mode [ 406.651415][T10100] bridge_slave_0: left promiscuous mode [ 406.659663][T10100] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.058898][T10100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.071189][T10100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.082925][T10100] bond0 (unregistering): Released all slaves [ 407.902101][T10100] hsr_slave_0: left promiscuous mode [ 407.923970][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2890'. [ 407.933305][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2890'. [ 407.946146][T10100] hsr_slave_1: left promiscuous mode [ 407.969096][T10100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.998493][T10100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.018935][T10100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.037113][T10100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.104496][T10100] veth1_macvtap: left promiscuous mode [ 408.122005][T10100] veth0_macvtap: left promiscuous mode [ 408.132241][T10100] veth1_vlan: left promiscuous mode [ 408.148055][T10100] veth0_vlan: left promiscuous mode [ 408.418966][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 408.431891][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.441039][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.450424][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.460614][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.696883][ T5839] Bluetooth: hci2: command tx timeout [ 409.241828][T10100] team0 (unregistering): Port device team_slave_1 removed [ 409.288573][T10100] team0 (unregistering): Port device team_slave_0 removed [ 409.959937][T17453] netlink: 'syz.0.2895': attribute type 10 has an invalid length. [ 410.178244][T17385] chnl_net:caif_netlink_parms(): no params data found [ 410.182118][T17460] netlink: 'syz.3.2897': attribute type 8 has an invalid length. [ 410.243720][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2897'. [ 410.537098][ T5839] Bluetooth: hci4: command tx timeout [ 410.627705][T17476] netlink: 'syz.2.2899': attribute type 10 has an invalid length. [ 410.659381][T17476] veth1_macvtap: left promiscuous mode [ 410.687624][T17476] team0: Device veth1_macvtap failed to register rx_handler [ 410.778149][ T5839] Bluetooth: hci2: command tx timeout [ 411.003847][T17385] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.033853][T17385] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.053164][T17385] bridge_slave_0: entered allmulticast mode [ 411.074385][T17385] bridge_slave_0: entered promiscuous mode [ 411.204776][T17385] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.228297][T17385] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.247325][T17385] bridge_slave_1: entered allmulticast mode [ 411.280877][T17385] bridge_slave_1: entered promiscuous mode [ 411.543920][T17385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.574465][T17385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.604445][T17517] netlink: 'syz.2.2907': attribute type 1 has an invalid length. [ 411.653928][T17522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2909'. [ 411.699061][T17385] team0: Port device team_slave_0 added [ 411.805491][T17385] team0: Port device team_slave_1 added [ 411.952679][T17537] vlan2: entered promiscuous mode [ 411.962823][T17537] bridge0: entered promiscuous mode [ 411.970548][T17385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.978434][T17385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.023227][T17385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.056167][T17385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.084614][T17540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2913'. [ 412.093982][T17385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.167837][T17385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.175867][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'. [ 412.484694][T17562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2918'. [ 412.617416][ T5839] Bluetooth: hci4: command tx timeout [ 412.742220][T17385] hsr_slave_0: entered promiscuous mode [ 412.771257][T17385] hsr_slave_1: entered promiscuous mode [ 412.813158][T17385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.843911][T17385] Cannot create hsr debugfs directory [ 412.856881][ T5839] Bluetooth: hci2: command tx timeout [ 412.959609][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2922'. [ 414.698616][ T5839] Bluetooth: hci4: command tx timeout [ 414.937398][ T5839] Bluetooth: hci2: command tx timeout [ 415.146033][T17618] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2928'. [ 415.394866][T17631] __nla_validate_parse: 1 callbacks suppressed [ 415.394887][T17631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2930'. [ 416.166424][T10100] bond1 (unregistering): Released all slaves [ 416.182137][T10100] bond2 (unregistering): Released all slaves [ 416.198426][T10100] bond3 (unregistering): Released all slaves [ 416.215535][T10100] bond4 (unregistering): Released all slaves [ 416.237107][T10100] bond5 (unregistering): Released all slaves [ 416.351354][T10100] bond0 (unregistering): Released all slaves [ 416.457612][T10100] bond6 (unregistering): Released all slaves [ 416.472837][T10100] bond7 (unregistering): Released all slaves [ 416.491931][T17429] chnl_net:caif_netlink_parms(): no params data found [ 416.545449][T17636] netlink: 'syz.2.2930': attribute type 7 has an invalid length. [ 416.700579][T10100] IPVS: stopping backup sync thread 9455 ... [ 416.776772][ T5839] Bluetooth: hci4: command tx timeout [ 417.056224][T17429] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.077246][T17429] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.084667][T17429] bridge_slave_0: entered allmulticast mode [ 417.094599][T17429] bridge_slave_0: entered promiscuous mode [ 417.435092][T17429] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.449161][T17429] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.467191][T17429] bridge_slave_1: entered allmulticast mode [ 417.500670][T17429] bridge_slave_1: entered promiscuous mode [ 417.799587][T17429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.882368][T17429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.990635][T17700] x_tables: unsorted underflow at hook 4 [ 418.152431][T17707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2947'. [ 418.308445][T17707] vlan2: entered allmulticast mode [ 418.324770][T17707] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 418.347375][T17429] team0: Port device team_slave_0 added [ 418.353630][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2945'. [ 418.429415][T10100] hsr_slave_0: left promiscuous mode [ 418.442862][T10100] hsr_slave_1: left promiscuous mode [ 418.450925][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'. [ 418.461520][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2950'. [ 418.471059][T17717] netlink: 'syz.0.2950': attribute type 11 has an invalid length. [ 418.496351][T10100] pim6reg (unregistering): left allmulticast mode [ 418.540645][T10100] pimreg (unregistering): left allmulticast mode [ 419.339521][T17429] team0: Port device team_slave_1 added [ 419.569691][T17385] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 419.592089][T17731] xt_policy: neither incoming nor outgoing policy selected [ 419.634268][T17429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.652755][T17429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.693731][T17429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.705736][T17737] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2953'. [ 419.717609][T17429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.724617][T17429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.756220][T17429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.771479][T17738] openvswitch: netlink: IP tunnel dst address not specified [ 419.780483][T17385] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.820868][T17385] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.882788][T17385] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.046303][T17745] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2956'. [ 420.076647][T17746] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2956'. [ 420.113999][T17429] hsr_slave_0: entered promiscuous mode [ 420.140652][T17429] hsr_slave_1: entered promiscuous mode [ 420.158203][T17429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.165830][T17429] Cannot create hsr debugfs directory [ 420.203860][T10100] IPVS: stop unused estimator thread 0... [ 420.363128][T17773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2959'. [ 420.600705][T17781] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 420.627717][T17781] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 420.678355][T17781] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 420.701417][T17781] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 420.728518][T17780] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.738007][T17780] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.746868][T17780] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.755616][T17780] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.164590][T17385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.326420][T17385] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.466075][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.473370][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.653855][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.661117][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.911103][T17385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.107513][T17429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.137981][T17429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 422.160118][T17429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 422.193718][T17429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 422.379950][T17857] netlink: 'syz.0.2982': attribute type 1 has an invalid length. [ 422.415996][T17857] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2982'. [ 422.532610][T17429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.656609][T17429] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.685540][T17385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.721468][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.728772][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.833083][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.840367][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.076781][T17885] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 423.323912][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 423.395325][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2991'. [ 423.735560][T17385] veth0_vlan: entered promiscuous mode [ 423.775249][T17385] veth1_vlan: entered promiscuous mode [ 423.860518][T17429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.950427][T17385] veth0_macvtap: entered promiscuous mode [ 423.991472][T17385] veth1_macvtap: entered promiscuous mode [ 424.073978][T17385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.094874][T17429] veth0_vlan: entered promiscuous mode [ 424.128321][T17385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.198449][T17429] veth1_vlan: entered promiscuous mode [ 424.205629][T17931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2996'. [ 424.231601][T17385] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.286930][T17385] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.295715][T17385] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.305115][T17927] xt_CT: No such helper "syz0" [ 424.326252][T17385] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.410040][T17941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3001'. [ 424.558738][T17944] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 424.580710][T17944] bond4: (slave vcan0): Error -95 calling set_mac_address [ 424.761212][T17429] veth0_macvtap: entered promiscuous mode [ 424.835070][T17429] veth1_macvtap: entered promiscuous mode [ 424.931720][ T968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.952672][T17429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.976851][ T968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.087725][T17429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.158319][T17966] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3007'. [ 425.176475][T17429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.193892][T17429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.210093][T17429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.220277][T17429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.263407][T17976] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 425.292915][T10102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.317853][T10102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.489555][T17983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3011'. [ 425.537714][T17978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.558064][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3011'. [ 425.765135][T10090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.784896][T17988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.799859][T10090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.865785][T10102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.896130][T10102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.931184][T17999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.112460][T18004] IPVS: Unknown mcast interface: rose0 [ 426.171423][T18004] IPVS: Unknown mcast interface: rose0 [ 426.653936][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.869408][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.042215][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.173900][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.584190][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.597081][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.607736][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.618349][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.626171][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.704298][ T12] bridge_slave_1: left allmulticast mode [ 427.723569][ T12] bridge_slave_1: left promiscuous mode [ 427.733034][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.744845][ T12] bridge_slave_0: left allmulticast mode [ 427.754960][ T12] bridge_slave_0: left promiscuous mode [ 427.763955][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.224774][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.237186][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.247814][ T12] bond0 (unregistering): Released all slaves [ 428.930136][T18059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3018'. [ 429.073176][ T12] hsr_slave_0: left promiscuous mode [ 429.113333][ T12] hsr_slave_1: left promiscuous mode [ 429.144617][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.162354][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.191762][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.207922][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.321162][ T12] veth1_macvtap: left promiscuous mode [ 429.334018][ T12] veth0_macvtap: left promiscuous mode [ 429.350694][ T12] veth1_vlan: left promiscuous mode [ 429.365673][ T12] veth0_vlan: left promiscuous mode [ 429.561348][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 429.570858][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.584536][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.594275][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.603600][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.662372][ T5847] Bluetooth: hci1: command tx timeout [ 430.013745][ T12] team0 (unregistering): Port device team_slave_1 removed [ 430.060953][ T12] team0 (unregistering): Port device team_slave_0 removed [ 430.678244][T18087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'. [ 430.933958][T18091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.943871][T18091] bond0: (slave bond1): Enslaving as an active interface with an up link [ 431.059911][T18098] vxcan1: entered allmulticast mode [ 431.098500][T18031] chnl_net:caif_netlink_parms(): no params data found [ 431.395270][T18119] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 431.402098][T18119] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 431.414135][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3032'. [ 431.432008][T18121] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 431.438642][T18121] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 431.544459][T18116] sctp: [Deprecated]: syz.4.3031 (pid 18116) Use of int in max_burst socket option deprecated. [ 431.544459][T18116] Use struct sctp_assoc_value instead [ 431.659032][ T5847] Bluetooth: hci4: command tx timeout [ 431.665478][T18133] netlink: 'syz.3.3034': attribute type 10 has an invalid length. [ 431.708161][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3031'. [ 431.739011][ T5847] Bluetooth: hci1: command tx timeout [ 431.798537][T18133] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 431.848598][T18031] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.855883][T18031] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.875863][T18031] bridge_slave_0: entered allmulticast mode [ 431.910194][T18031] bridge_slave_0: entered promiscuous mode [ 431.930709][T18031] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.958682][T18031] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.969570][T18031] bridge_slave_1: entered allmulticast mode [ 431.979885][T18031] bridge_slave_1: entered promiscuous mode [ 432.073457][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.084163][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.095500][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 432.291991][T18148] xt_CT: No such helper "syz0" [ 432.362367][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.389822][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.406982][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 432.426001][T18031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.438613][T18154] macsec0: entered promiscuous mode [ 432.444666][T18154] macsec0: entered allmulticast mode [ 432.452273][T18156] veth1_macvtap: entered allmulticast mode [ 432.463757][T18156] veth1_macvtap: entered promiscuous mode [ 432.470094][T18156] macsec0: left promiscuous mode [ 432.475226][T18156] veth1_macvtap: left promiscuous mode [ 432.481430][T18156] macsec0: left allmulticast mode [ 432.486508][T18156] veth1_macvtap: left allmulticast mode [ 432.529431][T18031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.550188][T18162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3041'. [ 432.611275][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.628286][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.638799][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 432.709461][T18165] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3042'. [ 432.753331][T18031] team0: Port device team_slave_0 added [ 432.849322][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.892723][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.937535][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 433.011931][T18031] team0: Port device team_slave_1 added [ 433.090373][T18183] netlink: 212352 bytes leftover after parsing attributes in process `syz.3.3045'. [ 433.100500][T18184] netlink: 212352 bytes leftover after parsing attributes in process `syz.3.3045'. [ 433.234412][T18190] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3048'. [ 433.247338][T18031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.279370][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.346078][T18031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.363861][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3049'. [ 433.388698][T18031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.395708][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.422505][T18031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.736959][ T5847] Bluetooth: hci4: command tx timeout [ 433.804237][T18079] chnl_net:caif_netlink_parms(): no params data found [ 433.816774][ T5847] Bluetooth: hci1: command tx timeout [ 433.901969][T18031] hsr_slave_0: entered promiscuous mode [ 433.924818][T18031] hsr_slave_1: entered promiscuous mode [ 433.934605][T18031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.970122][T18031] Cannot create hsr debugfs directory [ 434.350322][T18243] __nla_validate_parse: 1 callbacks suppressed [ 434.350343][T18243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3059'. [ 434.370892][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'. [ 434.565309][T18254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3058'. [ 434.582854][T18254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3058'. [ 434.777817][T18258] netlink: 'syz.2.3060': attribute type 1 has an invalid length. [ 435.027963][T18258] 8021q: adding VLAN 0 to HW filter on device bond7 [ 435.222003][T18279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3063'. [ 435.819077][ T5847] Bluetooth: hci4: command tx timeout [ 435.906867][ T5847] Bluetooth: hci1: command tx timeout [ 435.989216][T18298] netlink: 'syz.4.3067': attribute type 1 has an invalid length. [ 436.344390][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 436.353219][ T12] bond0 (unregistering): Released all slaves [ 436.455018][ T12] bond1 (unregistering): Released all slaves [ 436.471865][ T12] bond2 (unregistering): Released all slaves [ 436.487105][ T12] bond3 (unregistering): Released all slaves [ 436.506170][ T12] bond4 (unregistering): Released all slaves [ 436.525580][T18079] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.533039][T18079] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.540943][T18079] bridge_slave_0: entered allmulticast mode [ 436.550458][T18079] bridge_slave_0: entered promiscuous mode [ 436.560201][T18079] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.570484][T18079] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.578382][T18079] bridge_slave_1: entered allmulticast mode [ 436.586830][T18079] bridge_slave_1: entered promiscuous mode [ 436.660009][T18280] macvtap1: entered promiscuous mode [ 436.665514][T18280] bond7: entered promiscuous mode [ 436.671923][T18280] macvtap1: entered allmulticast mode [ 436.677878][T18280] bond7: entered allmulticast mode [ 436.692160][T18280] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 436.697937][ T12] IPVS: stopping master sync thread 11258 ... [ 436.721939][T18258] bond7: (slave gretap3): making interface the new active one [ 436.729936][T18258] gretap3: entered promiscuous mode [ 436.735718][T18258] gretap3: entered allmulticast mode [ 436.743176][ T12] IPVS: stopping backup sync thread 6911 ... [ 436.749740][T18258] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 437.019492][T18079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.115425][T18308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3070'. [ 437.125290][T18079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.184270][T18312] dvmrp0: entered allmulticast mode [ 437.263942][T18308] dvmrp0: left allmulticast mode [ 437.571636][T18079] team0: Port device team_slave_0 added [ 437.590604][T18331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.665440][T18079] team0: Port device team_slave_1 added [ 437.685288][T18335] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 437.719330][T18335] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3075'. [ 437.747948][T18335] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 437.767819][T18335] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3075'. [ 437.896803][ T5847] Bluetooth: hci4: command tx timeout [ 437.935347][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3077'. [ 438.023289][T18079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.043155][T18079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.090195][T18079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.172068][T18356] Bluetooth: MGMT ver 1.23 [ 438.177149][T18355] netlink: 'syz.4.3081': attribute type 23 has an invalid length. [ 438.267753][T18079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.275351][T18079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.343660][T18079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.596477][T18368] netlink: 'syz.3.3084': attribute type 1 has an invalid length. [ 438.612022][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3084'. [ 438.809272][ T12] hsr_slave_0: left promiscuous mode [ 438.825923][ T12] hsr_slave_1: left promiscuous mode [ 438.840783][T18376] FAULT_INJECTION: forcing a failure. [ 438.840783][T18376] name failslab, interval 1, probability 0, space 0, times 0 [ 438.845651][ T12] veth1_vlan: left promiscuous mode [ 438.853875][T18376] CPU: 0 UID: 0 PID: 18376 Comm: syz.2.3086 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 438.853910][T18376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.853935][T18376] Call Trace: [ 438.853946][T18376] [ 438.853958][T18376] dump_stack_lvl+0x189/0x250 [ 438.854004][T18376] ? __pfx____ratelimit+0x10/0x10 [ 438.854043][T18376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.854087][T18376] ? __pfx__printk+0x10/0x10 [ 438.854132][T18376] should_fail_ex+0x414/0x560 [ 438.854170][T18376] should_failslab+0xa8/0x100 [ 438.854199][T18376] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 438.854225][T18376] ? __alloc_skb+0x112/0x2d0 [ 438.854247][T18376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 438.854289][T18376] __alloc_skb+0x112/0x2d0 [ 438.854320][T18376] tipc_buf_acquire+0x2b/0xe0 [ 438.854357][T18376] tipc_named_withdraw+0x1db/0x760 [ 438.854402][T18376] tipc_nametbl_withdraw+0xcc/0x280 [ 438.854438][T18376] tipc_sk_withdraw+0x2f6/0x630 [ 438.854480][T18376] ? __pfx_tipc_sk_withdraw+0x10/0x10 [ 438.854514][T18376] ? do_raw_spin_unlock+0x122/0x240 [ 438.854548][T18376] tipc_sk_bind+0x234/0x300 [ 438.854575][T18376] ? tipc_bind+0x6c/0x260 [ 438.854610][T18376] __sys_bind+0x2c3/0x3e0 [ 438.854631][T18376] ? __fget_files+0x3a0/0x420 [ 438.854659][T18376] ? __pfx___sys_bind+0x10/0x10 [ 438.854698][T18376] ? __pfx_ksys_write+0x10/0x10 [ 438.854717][T18376] ? rcu_is_watching+0x15/0xb0 [ 438.854765][T18376] __x64_sys_bind+0x7a/0x90 [ 438.854790][T18376] do_syscall_64+0xfa/0x3b0 [ 438.854810][T18376] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.854845][T18376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.854868][T18376] ? clear_bhb_loop+0x60/0xb0 [ 438.854898][T18376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.854928][T18376] RIP: 0033:0x7f7fd158e929 [ 438.854950][T18376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.854971][T18376] RSP: 002b:00007f7fd2344038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 438.854997][T18376] RAX: ffffffffffffffda RBX: 00007f7fd17b5fa0 RCX: 00007f7fd158e929 [ 438.855015][T18376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 438.855028][T18376] RBP: 00007f7fd2344090 R08: 0000000000000000 R09: 0000000000000000 [ 438.855043][T18376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.855057][T18376] R13: 0000000000000000 R14: 00007f7fd17b5fa0 R15: 00007ffde40a4408 [ 438.855106][T18376] [ 438.855118][T18376] tipc: Withdrawal distribution failure [ 439.380008][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3088'. [ 440.032283][T18079] hsr_slave_0: entered promiscuous mode [ 440.039391][T18079] hsr_slave_1: entered promiscuous mode [ 440.045703][T18079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.053405][T18079] Cannot create hsr debugfs directory [ 440.074204][T18385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3088'. [ 440.146120][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.424701][T18404] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3095'. [ 440.438656][T18408] tipc: Withdrawal distribution failure [ 440.511055][T18031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 440.582701][T18031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 440.649695][T18031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 440.752394][T18414] C: renamed from team_slave_0 [ 440.770016][T18414] netlink: 'syz.2.3098': attribute type 1 has an invalid length. [ 440.796256][T18414] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 440.841368][T18031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 440.970840][T18428] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 440.988229][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3100'. [ 441.039753][T18437] tipc: Enabling of bearer rejected, already enabled [ 441.534056][T18031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.605447][T18031] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.650117][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.657381][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.742243][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.749526][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.853001][T18457] FAULT_INJECTION: forcing a failure. [ 441.853001][T18457] name failslab, interval 1, probability 0, space 0, times 0 [ 441.865766][T18457] CPU: 0 UID: 0 PID: 18457 Comm: syz.3.3107 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 441.865795][T18457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 441.865808][T18457] Call Trace: [ 441.865817][T18457] [ 441.865826][T18457] dump_stack_lvl+0x189/0x250 [ 441.865865][T18457] ? __pfx____ratelimit+0x10/0x10 [ 441.865898][T18457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.865933][T18457] ? __pfx__printk+0x10/0x10 [ 441.865974][T18457] should_fail_ex+0x414/0x560 [ 441.866007][T18457] should_failslab+0xa8/0x100 [ 441.866032][T18457] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 441.866055][T18457] ? __alloc_skb+0x112/0x2d0 [ 441.866089][T18457] ? __local_bh_enable_ip+0x12d/0x1c0 [ 441.866126][T18457] __alloc_skb+0x112/0x2d0 [ 441.866163][T18457] tipc_buf_acquire+0x2b/0xe0 [ 441.866195][T18457] tipc_named_withdraw+0x1db/0x760 [ 441.866231][T18457] tipc_nametbl_withdraw+0xcc/0x280 [ 441.866260][T18457] tipc_sk_withdraw+0x2f6/0x630 [ 441.866296][T18457] ? __pfx_tipc_sk_withdraw+0x10/0x10 [ 441.866325][T18457] ? do_raw_spin_unlock+0x122/0x240 [ 441.866355][T18457] tipc_sk_bind+0x234/0x300 [ 441.866378][T18457] ? tipc_bind+0x6c/0x260 [ 441.866406][T18457] __sys_bind+0x2c3/0x3e0 [ 441.866425][T18457] ? __fget_files+0x3a0/0x420 [ 441.866448][T18457] ? __pfx___sys_bind+0x10/0x10 [ 441.866482][T18457] ? __pfx_ksys_write+0x10/0x10 [ 441.866498][T18457] ? rcu_is_watching+0x15/0xb0 [ 441.866553][T18457] __x64_sys_bind+0x7a/0x90 [ 441.866575][T18457] do_syscall_64+0xfa/0x3b0 [ 441.866593][T18457] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.866623][T18457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.866644][T18457] ? clear_bhb_loop+0x60/0xb0 [ 441.866670][T18457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.866708][T18457] RIP: 0033:0x7f852738e929 [ 441.866727][T18457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.866747][T18457] RSP: 002b:00007f852812a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 441.866769][T18457] RAX: ffffffffffffffda RBX: 00007f85275b5fa0 RCX: 00007f852738e929 [ 441.866785][T18457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 441.866796][T18457] RBP: 00007f852812a090 R08: 0000000000000000 R09: 0000000000000000 [ 441.866808][T18457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.866819][T18457] R13: 0000000000000000 R14: 00007f85275b5fa0 R15: 00007ffe299b2d98 [ 441.866860][T18457] [ 442.114040][T18457] tipc: Withdrawal distribution failure [ 442.183081][T18460] openvswitch: netlink: Message has 199 unknown bytes. [ 442.190159][T18460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.205683][T18079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 442.315713][T18079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 442.364686][T18079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 442.395082][T18079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 442.543300][T18476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3109'. [ 442.572927][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'. [ 442.590600][T18477] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.604395][T18466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3109'. [ 442.634570][T18477] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 442.668734][T18479] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3111'. [ 442.748564][T18477] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.763223][T18477] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 442.794000][T18031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.869741][T18477] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.888364][T18477] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 442.901849][T18488] netlink: 'syz.4.3113': attribute type 2 has an invalid length. [ 442.979322][T18477] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.008351][T18477] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 443.435726][T18506] openvswitch: netlink: IPv4 tun info is not correct [ 443.595848][T18491] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.608304][T18491] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.618704][T18491] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.630089][T18491] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.741588][T18079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.800492][T18031] veth0_vlan: entered promiscuous mode [ 443.883923][T18031] veth1_vlan: entered promiscuous mode [ 443.954540][T18477] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 443.969571][T18477] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.065274][T18477] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 444.097090][T18477] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.118030][T18079] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.187434][T18477] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 444.206419][T18477] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.272735][T18477] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 444.284795][T18477] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 444.314133][T10100] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.321400][T10100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.362045][T10100] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.369392][T10100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.398532][T18535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3122'. [ 444.558159][T18031] veth0_macvtap: entered promiscuous mode [ 444.599682][T18031] veth1_macvtap: entered promiscuous mode [ 444.660315][T18544] xt_l2tp: missing protocol rule (udp|l2tpip) [ 444.748986][T18031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.804359][T18031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.886059][T18031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.926902][T18031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.947365][T18031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.966670][T18031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.984785][T18561] x_tables: unsorted underflow at hook 2 [ 445.090752][T18561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3127'. [ 445.146984][T18561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3127'. [ 445.224737][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.255918][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.374711][T10090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.388240][T10090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.423498][T18079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.591880][T18079] veth0_vlan: entered promiscuous mode [ 445.632510][T18079] veth1_vlan: entered promiscuous mode [ 445.789694][T18079] veth0_macvtap: entered promiscuous mode [ 445.811653][T18589] Bluetooth: MGMT ver 1.23 [ 445.822878][T18079] veth1_macvtap: entered promiscuous mode [ 445.872853][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3130'. [ 445.895883][T18079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.963794][T18079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.015210][T18079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.065447][T18079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.116996][T18079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.157998][T18079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.310720][T18609] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3133'. [ 446.368597][T18616] xt_ecn: cannot match TCP bits for non-tcp packets [ 446.451119][T18616] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3135'. [ 446.840175][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.888358][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.034109][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.048354][T18641] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 447.062901][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.074454][T18641] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 447.635944][T18662] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3146'. [ 447.857814][T10100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.099762][T10100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.249354][T10100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.315389][T10100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.463092][T10100] bridge_slave_1: left allmulticast mode [ 448.469379][T10100] bridge_slave_1: left promiscuous mode [ 448.475198][T10100] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.488698][T10100] bridge_slave_0: left allmulticast mode [ 448.494481][T10100] bridge_slave_0: left promiscuous mode [ 448.500382][T10100] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.824293][T10100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.835619][T10100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.846942][T10100] bond0 (unregistering): Released all slaves [ 449.333577][T10100] hsr_slave_0: left promiscuous mode [ 449.340062][T10100] hsr_slave_1: left promiscuous mode [ 449.346312][T10100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.375704][T10100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.388914][T10100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.396427][T10100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.428219][T10100] veth1_macvtap: left promiscuous mode [ 449.433831][T10100] veth0_macvtap: left promiscuous mode [ 449.443505][T10100] veth1_vlan: left promiscuous mode [ 449.452209][T10100] veth0_vlan: left promiscuous mode [ 450.213302][T10100] team0 (unregistering): Port device team_slave_1 removed [ 450.292640][T18708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.304264][T10100] team0 (unregistering): Port device team_slave_0 removed [ 450.378436][T18711] netlink: 'syz.4.3152': attribute type 8 has an invalid length. [ 450.419687][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 450.447972][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 450.458422][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 450.468440][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 450.477591][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 451.536126][T18738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.887976][T18748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.895343][T18748] IPv6: NLM_F_CREATE should be set when creating new route [ 451.902818][T18748] IPv6: NLM_F_CREATE should be set when creating new route [ 451.910165][T18748] IPv6: NLM_F_CREATE should be set when creating new route [ 451.974265][T18750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 452.195158][T18756] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 452.341725][T18759] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3165'. [ 452.366678][T18759] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3165'. [ 452.537066][ T5839] Bluetooth: hci4: command tx timeout [ 452.632323][T18712] chnl_net:caif_netlink_parms(): no params data found [ 452.719220][T18783] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3169'. [ 452.753570][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3169'. [ 452.780162][T18785] netlink: 'syz.0.3170': attribute type 1 has an invalid length. [ 452.804967][T18785] netlink: 'syz.0.3170': attribute type 2 has an invalid length. [ 452.826793][T18785] netlink: 'syz.0.3170': attribute type 1 has an invalid length. [ 452.835127][T18785] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.3170'. [ 452.938584][T18783] hsr_slave_0: left promiscuous mode [ 452.945338][T18783] hsr_slave_1: left promiscuous mode [ 453.117688][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3172'. [ 453.127199][T18796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3172'. [ 453.255176][T18712] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.273414][T18712] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.281040][T18712] bridge_slave_0: entered allmulticast mode [ 453.295894][T18712] bridge_slave_0: entered promiscuous mode [ 453.336121][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.389468][T18807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3176'. [ 453.421528][T18712] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.438544][T18712] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.446068][T18712] bridge_slave_1: entered allmulticast mode [ 453.460095][T18712] bridge_slave_1: entered promiscuous mode [ 453.595630][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.835172][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.890229][T18712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.934502][T18712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.238949][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 454.251215][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 454.261823][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 454.317452][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.329529][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 454.396060][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.447586][T18712] team0: Port device team_slave_0 added [ 454.504123][T18712] team0: Port device team_slave_1 added [ 454.617264][ T5847] Bluetooth: hci4: command tx timeout [ 454.646328][T18712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.673920][T18712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.784428][T18712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.827616][T18712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.849003][T18712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.938711][T18712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.052519][T18870] syzkaller0: entered promiscuous mode [ 455.058159][T18870] syzkaller0: entered allmulticast mode [ 455.064524][T18871] netlink: 'syz.3.3187': attribute type 2 has an invalid length. [ 456.389284][ T5847] Bluetooth: hci2: command tx timeout [ 456.698267][ T5847] Bluetooth: hci4: command tx timeout [ 457.073095][T18712] hsr_slave_0: entered promiscuous mode [ 457.092886][T18712] hsr_slave_1: entered promiscuous mode [ 457.177834][T18891] netlink: 'syz.3.3190': attribute type 64 has an invalid length. [ 457.186139][T18891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3190'. [ 457.506384][ T36] bridge_slave_1: left allmulticast mode [ 457.530082][ T36] bridge_slave_1: left promiscuous mode [ 457.536001][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.582854][ T36] bridge_slave_0: left allmulticast mode [ 457.601371][ T36] bridge_slave_0: left promiscuous mode [ 457.616461][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.773018][ T5959] IPVS: starting estimator thread 0... [ 457.889256][T18908] IPVS: using max 24 ests per chain, 57600 per kthread [ 458.239965][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.254970][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.266301][ T36] bond0 (unregistering): (slave bond1): Releasing backup interface [ 458.275293][ T36] bond0 (unregistering): Released all slaves [ 458.389866][ T36] bond1 (unregistering): Released all slaves [ 458.471044][ T5847] Bluetooth: hci2: command tx timeout [ 458.778472][ T5847] Bluetooth: hci4: command tx timeout [ 459.061121][ T30] audit: type=1107 audit(1751515588.938:6): pid=18943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1BhXtL+<X*^h۞EeD Ne&ҰVR%-MQd֫A1 [ 459.061121][ T30] fIZ}c6ܺxc+y>~`pM]=@9"c;F]MrI,hDLB 80 3c 28 00 74 08 4c 89 e7 e8 28 08 ff f7 49 8b 2c 24 49 8d 7c [ 460.243002][ T36] RSP: 0018:ffffc90000ac7038 EFLAGS: 00010206 [ 460.249094][ T36] RAX: 000000001fffe000 RBX: 1ffff1100b968d82 RCX: ffff88801d6a5a00 [ 460.257079][ T36] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 460.265064][ T36] RBP: 0000000000000001 R08: ffffffff8fa10cf7 R09: 1ffffffff1f4219e [ 460.273053][ T36] R10: dffffc0000000000 R11: fffffbfff1f4219f R12: 00000000ffff0000 [ 460.281039][ T36] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805cb46c10 [ 460.289023][ T36] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 460.297963][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.304581][ T36] CR2: 00007f85251d4f98 CR3: 00000000344ca000 CR4: 00000000003526f0 [ 460.312580][ T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 460.320567][ T36] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 460.328641][ T36] Call Trace: [ 460.331929][ T36] [ 460.334875][ T36] __ipv6_dev_mc_dec+0x30d/0x390 [ 460.339843][ T36] __ipv6_ifa_notify+0x43d/0xac0 [ 460.344803][ T36] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 460.350286][ T36] ? __lock_acquire+0xab9/0xd20 [ 460.355172][ T36] ? __local_bh_enable_ip+0x12d/0x1c0 [ 460.360574][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.365813][ T36] ? __local_bh_enable_ip+0x12d/0x1c0 [ 460.371238][ T36] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 460.376998][ T36] addrconf_ifdown+0xe69/0x1880 [ 460.381875][ T36] ? tls_dev_event+0x717/0xec0 [ 460.386665][ T36] ? __pfx_addrconf_ifdown+0x10/0x10 [ 460.391990][ T36] addrconf_notify+0x1bc/0x1010 [ 460.396872][ T36] notifier_call_chain+0x1b3/0x3e0 [ 460.402016][ T36] dev_close_many+0x29c/0x410 [ 460.406729][ T36] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 460.412735][ T36] ? __pfx_dev_close_many+0x10/0x10 [ 460.417956][ T36] unregister_netdevice_many_notify+0x834/0x2320 [ 460.424318][ T36] ? __local_bh_enable_ip+0x12d/0x1c0 [ 460.429753][ T36] ? __local_bh_enable_ip+0x12d/0x1c0 [ 460.435190][ T36] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 460.441997][ T36] ? unregister_netdevice_queue+0x1b3/0x380 [ 460.447919][ T36] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 460.454096][ T36] default_device_exit_batch+0x819/0x890 [ 460.459754][ T36] ? __pfx___might_resched+0x10/0x10 [ 460.465065][ T36] ? __pfx_default_device_exit_batch+0x10/0x10 [ 460.471244][ T36] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 460.476742][ T36] ? net_generic+0x1e/0x240 [ 460.481294][ T36] ? __pfx_default_device_exit_batch+0x10/0x10 [ 460.487660][ T36] ops_undo_list+0x525/0x990 [ 460.492276][ T36] ? __pfx_ops_undo_list+0x10/0x10 [ 460.497554][ T36] cleanup_net+0x4c5/0x800 [ 460.502003][ T36] ? __pfx_cleanup_net+0x10/0x10 [ 460.506963][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.512180][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 460.517923][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 460.523672][ T36] process_scheduled_works+0xae1/0x17b0 [ 460.529260][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 460.535283][ T36] worker_thread+0x8a0/0xda0 [ 460.539941][ T36] kthread+0x70e/0x8a0 [ 460.544034][ T36] ? __pfx_worker_thread+0x10/0x10 [ 460.549180][ T36] ? __pfx_kthread+0x10/0x10 [ 460.553803][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.559049][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.564275][ T36] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 460.568895][ T36] ret_from_fork+0x3fc/0x770 [ 460.573511][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 460.578651][ T36] ? __switch_to_asm+0x39/0x70 [ 460.583431][ T36] ? __switch_to_asm+0x33/0x70 [ 460.588214][ T36] ? __pfx_kthread+0x10/0x10 [ 460.592819][ T36] ret_from_fork_asm+0x1a/0x30 [ 460.597630][ T36] [ 460.600680][ T36] Modules linked in: [ 460.605487][ T36] ---[ end trace 0000000000000000 ]--- [ 460.623848][ T5847] Bluetooth: hci2: command tx timeout [ 460.647174][ T36] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 460.652892][ T36] Code: ff ff ff e8 c9 f1 41 01 89 c5 31 ff 89 c6 e8 ce 88 9b f7 85 ed 74 45 e8 85 84 9b f7 eb 05 e8 7e 84 9b f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 08 ff f7 49 8b 2c 24 49 8d 7c [ 460.674388][ T36] RSP: 0018:ffffc90000ac7038 EFLAGS: 00010206 [ 460.680577][ T36] RAX: 000000001fffe000 RBX: 1ffff1100b968d82 RCX: ffff88801d6a5a00 [ 460.688711][ T36] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 460.700073][ T36] RBP: 0000000000000001 R08: ffffffff8fa10cf7 R09: 1ffffffff1f4219e [ 460.708282][ T36] R10: dffffc0000000000 R11: fffffbfff1f4219f R12: 00000000ffff0000 [ 460.716387][ T36] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805cb46c10 [ 460.724571][ T36] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 460.733959][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.740749][ T36] CR2: 00007f14e30e7d60 CR3: 0000000069dee000 CR4: 00000000003526f0 [ 460.748965][ T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 460.757356][ T36] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 460.766597][ T36] Kernel panic - not syncing: Fatal exception [ 460.773212][ T36] Kernel Offset: disabled [ 460.777586][ T36] Rebooting in 86400 seconds..