last executing test programs: 5.184518748s ago: executing program 1 (id=7803): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000005c0), 0x1, 0x0) syz_emit_ethernet(0x187, &(0x7f00000007c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@mpls_mc={0x8848, {[{}, {0xa0398}, {0xc}, {0x6, 0x0, 0x1}, {0x3}, {0x3, 0x0, 0x1}], @ipv4=@dccp={{0x38, 0x4, 0x0, 0x6, 0x161, 0x68, 0x0, 0x5, 0x21, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x2b, 0x5a, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, @broadcast, @local, @multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0x3c, 0x30, 0x3, 0xd, [{@empty, 0x9f}, {@rand_addr=0x64010100, 0x9}, {@multicast1}, {@multicast2, 0x80}, {@private=0xa010100, 0x2b0f}, {@empty, 0x7fff}, {@multicast2, 0xbb3}]}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x57, 0x3, [{0x5, 0xd, "dcc5447d15457af783b5b0"}, {0x2, 0x6, "f284af04"}, {0x5, 0xf, "7d00e66bc27e627a0805731e1d"}, {0x2, 0x12, "dfc2df7efbe522414f39285086047891"}, {0x7, 0xd, "42458b90d93f58b399a697"}, {0x5, 0x10, "573657684e1c902d09792b3c5d79"}]}, @noop, @ra={0x94, 0x4}]}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x8, 0x0, 0x0, 0x2, 0x6, "bc8b23", 0x40, "e606ae"}, "17d8c93f58c1eb92971f46c32b0a5d0df1997d493e5b4166ae3e1a90f58cd82b2833c3de7ec3ee99f3172ffbc4e737075f59254c757f7cee6a018638585922cf12e8961d7758de333bf2192d7a08e9143c34d07a1b208aad0a7bb9c395d8e32c3d7195177d7d66922a32b4015a8f026f97"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = socket(0x1e, 0x4, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe, 0x1c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000200), 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket(0x2, 0xa, 0x300) 4.573211604s ago: executing program 1 (id=7809): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) write$nbd(r3, &(0x7f0000000740)={0x67446698, 0x0, 0x2, 0x2, 0x1, "00660d5ea889a138a0802649e1bfb8f8179cf17aa0cfa6b54586331559d761eb"}, 0x30) recvmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/36, 0x24}, {&(0x7f0000000900)=""/203, 0xcb}], 0x2}, 0x8}], 0x1, 0x10000, 0x0) listen(r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104fcffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="3f000000000000001c0012800b00010062726964676500000c4002800500170000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 4.559706964s ago: executing program 0 (id=7810): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080000080"], 0x26}}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x3a8d, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r1, &(0x7f0000000240)="d87171f1fc793b75e31375490dfff62abbaf4a18f1a1", &(0x7f0000000380)=""/216}, 0x20) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) (async) connect$rds(r0, &(0x7f00000004c0)={0x2, 0x4e22, @broadcast}, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r6}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r6}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x6}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x6, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.409348829s ago: executing program 4 (id=7813): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280140007002001000000000000000000000000000008000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x3, 0xa, 0x80000000) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000010c0)=[@in6={0xa, 0x4e23, 0x80000000, @loopback, 0x4}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20004012}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000001080)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001d80)=ANY=[@ANYBLOB="928e47635aa17f6fc7ec3c7b2152f6700c3dad78543ab5953e3848cbcdae5c271ff65d948e280980d33fc575351af6b5a4a11b60e5865c00f5daba3a305a35b7919a88863e04d8c01bed61db1d763f1e509fe8dc3b6c688778aa83c05275995ca1d2ddf9a47a05", @ANYRES16=r7, @ANYBLOB="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"], 0x10b4}, 0x1, 0x0, 0x0, 0x1}, 0x8854) r8 = socket(0x2, 0x2, 0x8000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r9, 0x0, 0x12, 0x0, &(0x7f0000000700)) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40080c9}], 0x1, 0x8040) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB="6c0000002b365e162779a9f1b4f0a1d0f4028c0747d2", @ANYRES16=r7, @ANYBLOB="00022abd7000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r11) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000001c00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r12, 0x0) accept(r8, &(0x7f0000001280)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001240)=0xb5) 4.36216326s ago: executing program 0 (id=7814): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x1, 0x6) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x485, 0x6, [0x5, 0x8000, 0xd, 0x0, 0x8, 0x7]}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000200)=r5, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000004c0)=@delqdisc={0x44c, 0x25, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x4, 0x10}, {0x0, 0xc}, {0x2, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4d}, @TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x5, 0xffff, 0x7, 0x0, 0x8001, 0xff, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x1, 0x1, 0x5, 0xec2, 0x1, 0xfffffff6, 0x1, 0x4}}, {0xc, 0x2, [0x8001, 0x4, 0x2, 0x28]}}, {{0x1c, 0x1, {0x2, 0xd5, 0x800, 0x5, 0x1, 0xd, 0x5, 0x4}}, {0xc, 0x2, [0x7, 0x7, 0x32, 0x101]}}, {{0x1c, 0x1, {0x2, 0x9, 0x40, 0x8, 0x2, 0x401, 0x1, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x22, 0xb5, 0x5, 0x6, 0x0, 0xb474, 0x10, 0x3}}, {0xa, 0x2, [0x3, 0x5, 0x1]}}, {{0x1c, 0x1, {0x9b, 0xc, 0x2, 0x6, 0x2, 0x10, 0x2, 0xa}}, {0x18, 0x2, [0x67, 0x8, 0x4, 0x7, 0x6e4, 0x7, 0x5, 0x3, 0x1, 0x9]}}, {{0x1c, 0x1, {0x7b, 0xb9, 0x90, 0xf8d, 0x2, 0x3, 0x3, 0x4}}, {0xc, 0x2, [0x9, 0x2, 0x3, 0x5]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x3, 0xffffffff, 0x1, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x1, 0xbc00, 0x1de3, 0xffff, 0x2, 0x4, 0x6, 0x1, 0x6]}}, {{0x1c, 0x1, {0x2, 0x8, 0xd8, 0xfffffffe, 0x4, 0x9, 0x5d3c, 0x2}}, {0x8, 0x2, [0xcbe, 0x8001]}}, {{0x1c, 0x1, {0x0, 0xf8, 0xc, 0x7fffffff, 0x0, 0xd, 0x8001, 0x2}}, {0x8, 0x2, [0x7f, 0x7f]}}, {{0x1c, 0x1, {0x4, 0x0, 0x8, 0x7fff, 0x0, 0x1, 0xf, 0x5}}, {0xe, 0x2, [0x19, 0x0, 0x8, 0x4, 0x1]}}]}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x22, 0x2, 0x9, 0x7, 0x0, 0x5, 0x33, 0x3}}, {0xa, 0x2, [0x3, 0x7, 0x0]}}, {{0x1c, 0x1, {0x8, 0x1, 0xcf, 0xcb53, 0x1, 0x10001, 0x2, 0x8}}, {0x14, 0x2, [0x7, 0x7, 0x2, 0x3, 0x15, 0x0, 0xffff, 0x7]}}, {{0x1c, 0x1, {0xd6, 0x81, 0x2, 0x4, 0x0, 0x9, 0xffffff81, 0x7}}, {0x12, 0x2, [0x0, 0xfffc, 0x3, 0x5, 0x3f1, 0x5, 0x6]}}, {{0x1c, 0x1, {0x0, 0x5, 0x3, 0x10000, 0x2, 0x0, 0x4, 0x3}}, {0xa, 0x2, [0x8, 0x7fff, 0x100]}}, {{0x1c, 0x1, {0x0, 0x9, 0x0, 0x4800, 0x2, 0x6, 0x2, 0x5}}, {0xe, 0x2, [0x9, 0x3, 0x9, 0xfb1, 0x3]}}]}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0xe, 0x40, 0x1, 0x1, 0xabca, 0x4, 0x5}}, {0xe, 0x2, [0x1fe0, 0x5, 0x80, 0xf801, 0xc42b]}}, {{0x1c, 0x1, {0x3c, 0x6, 0x7, 0xc7ca, 0x2, 0x4, 0x7, 0x4}}, {0xc, 0x2, [0xec8d, 0x80, 0xfffd, 0x3]}}, {{0x1c, 0x1, {0x9, 0x8, 0x300, 0x7, 0x0, 0x6, 0x5, 0x3}}, {0xa, 0x2, [0x800, 0xd, 0x0]}}, {{0x1c, 0x1, {0xc, 0x8, 0x40, 0x8, 0x1, 0x200, 0x7fffffff, 0x2}}, {0x8, 0x2, [0x401, 0xfffb]}}, {{0x1c, 0x1, {0x4, 0x5, 0x9, 0x6, 0x2, 0x1ff, 0x100, 0xa}}, {0x18, 0x2, [0xf75, 0x9, 0x808, 0x2, 0x61, 0x1, 0xff, 0xb, 0x6, 0x4]}}, {{0x1c, 0x1, {0x8f, 0xa, 0x4, 0x4, 0x1, 0xf7, 0x2, 0x4}}, {0xc, 0x2, [0x80, 0x8, 0xfff8, 0x3]}}, {{0x1c, 0x1, {0xe, 0x7, 0x7, 0x7, 0x0, 0x2, 0x57c, 0x8}}, {0x14, 0x2, [0x1, 0x4882, 0x4, 0x9, 0x1, 0x3, 0x200, 0x6]}}, {{0x1c, 0x1, {0x4, 0x9, 0x8, 0x6, 0x1, 0x6, 0x0, 0x2}}, {0x8, 0x2, [0x10, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0xe, 0x1}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4008005}, 0x8001) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0xd}}}, 0x24}}, 0x880) close(0x3) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) sendmmsg$sock(r0, 0x0, 0x0, 0x8015) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000c00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x1c8, r8, 0x3106b613023dc59, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4872}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc31}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2b}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x32cf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9b20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "13f5fe27bd40aeeecdb079ca72765734d158792921e9341b31df8c55316b59765db2ad92"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1000}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x800}, 0x80081) socket$inet_udp(0x2, 0x2, 0x0) close(r0) 4.287982541s ago: executing program 2 (id=7815): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000000180)=""/169}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000002030300000000000000008c517d42667990d9165800000100000800010001000000c3e8aefb4c9e8f175e4c"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000014c0)=ANY=[@ANYBLOB="04000000"], 0x14}}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000540)={0x1, 0x6, 0xe5, &(0x7f0000000440)=""/229}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=@dellinkprop={0xc0, 0x6d, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x70241, 0x4085}, [@IFLA_PHYS_SWITCH_ID={0x18, 0x24, "fcaeb065c20f8413d5af835c17c4c95e2d87c514"}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vlan0\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'vlan0\x00'}]}, @IFLA_PHYS_PORT_ID={0x20, 0x22, "b8f29328ffc9a1720d85d1b4fa4fd48dd7fe99dadf16ddcc622c663c"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'nr0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) unshare(0x26020480) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES16=r0, @ANYRESDEC=r4, @ANYRES64=r1, @ANYRESHEX=r4, @ANYRES64=r1, @ANYRES16=r0], 0x1c}}, 0x0) 4.225467272s ago: executing program 4 (id=7817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="56184db5066f31525b899fed92040f3d0814716247ee5289fa83b21a29a3e5f12b9bcef414048b7f60125d5dc86bc7df8fddf29e1787736ceb38468405741e06dc868e17a4ae84b0f214091fbdf651498eae929f7884d05e2c7411c04f2c4a08f05d99ff8dd23f6c6bc2f72494", 0x6d}], 0x1, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}, 0x20000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 4.060794314s ago: executing program 2 (id=7818): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}]}}}}}}}}, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) read(r5, &(0x7f0000000100)=""/19, 0x13) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) 4.033177254s ago: executing program 3 (id=7819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x401}, 0x14}}, 0x0) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0xc090, 0x0, 0x0) close(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2220, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x220c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x15, 0x6, 0x1, 0x0, "c4f415cca0d8cd10ca4cd04856ba3dd0c2"}]}, {0x3d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "9fc8165c00d667fcca7dc532536cafe2ac7f7a511729ca53c0ae9f205668b65df67d8001e2243af34229ed2fb8b345a25b5d2168dc4026d3720b29cf89c39fadd0524f5a291e0cdd4cc0950ef1"}, @NFTA_DATA_VALUE={0xf6, 0x1, "bf295648431864e10ebe319822d929a791d809e5758294cde4561e0ca146068cb66740f2d63894f15ed2e676b01a948774cfff92ce73fcc6ab6beb6c08734e84cbcd6051f2a669f38b4ddae00410a14c3d3063f53624f7b074f1082be5501e09f5176f4e7866b6b9d2fddea65dadb8b1684b366b3704e5f8709bf019d7dfb3bff5dd3140b58f28bf5d64d0bc2fe5a54b3994de95b28d09e08ecd7af83448102446bc69c12dfe5db228ee555d85dd23696aff5954692c7e92230961344df9bcd46e81c49be2dc44f4e444c074e87b334cd28aa44ec5cb5d2dd67cc01ffbf670d6352e6b42549c0fae344da0780171d498498e"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xec, 0x1, "d9c2b4f03d1f277c2a2a5e50d7dc4077bced3d4f0db97633eb5a7ba941ddbebaf16b3bad327be47b7bd0b5192c6d22945f3c274568a29f948ab6b80a28be180bf966893fc48ebb4cee26c3b279a4c329c991edaed67e0f8da676e820f3467bf79cc1dea545dbb3f38f4eb03fa44b7ac7836deb862b72d4d6f62fdac1613b4c9f7151c70e34ca4bfb0b1b21add9fb0496f7323e4297fc3d21fd90d7d4a952e25be683e0733b1abbb845f25245e4299447ca571d5fd46552e8783505adf41300ee5c63877c27d6fbbe47bc5aa78073ff4e6e71ded769051716a67ee991f4b6bcf1cc42acf74ee9e929"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd8}, @NFTA_SET_ELEM_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x26, 0x1, "39a9a47a47039970dd7482980595cbafad687e19c644f149859234dbfd0ac554dd7c"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x27, 0x1, "0cf4a91e776f9d091c36f7691236c0c0516a888339ba4f2fb645d3b961eb55f1330c29"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x1824, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc0, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_DATA={0x12e4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x13, 0x1, "4571b0610927fe524d593391a503e0"}, @NFTA_DATA_VALUE={0xe2, 0x1, "735f1977b6ac4296b619cf3725e89c5de0985978035153713b28a390227ed01f7c2962895e4f95e12ac2c6cfc605c03f0881b1e50c2b37e1f76d749f991b1889f52fac1ee9e04b7ca106f29578bdc61a2b790a1d25bf43d92230fe4b72392a5f67d2166ff786e1546263f6e851564ebb9816dfcea2944003216cec8dbfcee5e0681175aa8af275545e1c7b1516d98b8936119757fe2d82a949877a0b8dbbcba2a6f6b50ea9fe08db1d24c337eb50933213def4208bcda90c7b40ac2bf832ef2d01771a037610694169fa037a913da79a4fdb37e9a76454dc91e60978cd4d"}, @NFTA_DATA_VALUE={0x5d, 0x1, "8c1cbbffe5aedae7d789518d772d70bd83094355232416e3ffd39bb7fa5b0a7b57d207676e544280df0136cf75c9f0a4a1c5163a496b307817659d7d1bbfeff59a3a997d992631d2d6ade8027e86ca10cdf1811952ffe2b023"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "bbbd5001da77fb6056e59ea22dd5c6742b6989d4ae3666b15d0318ae2952942acee0bffd76e07c6c6412ddbe5628518ce4e11b1b6ac55a1c2f137193e50830ea899038e9c53cd3e1c55dec765dbd84dcd7389fd3700c71bf3f7289053b7ee0b3d032f5a089599f4e281bc5c20657395b405796ff28a47b0d2afc00132cda0f0a83f7f440a048234db8c4bf98bf83294d06860429edcc0991fe116abcbe5dd3c33ff8f915c7387d3d6713c47e00616e3589622d5d8b9ac6f818ecc7c6aef2bc09ff9eea2d12cc2e9440fc162b218995a7eda363c508b3869a98d3e5efea6144546085a48a70e89719f85b7e38f314159152a1bf06999be50d2ece6dfa9cbf28cce35af7633a14d68f5b80240d00da791ede8cdccc2a3d015aafebc6c965f3a58c7aeca99155601b73dc95e50f1c9df22e46e76ab42d23ff664db08f7fc548bdc949aafc479574e37fdc73ed94c3e353a324b4ef9fbbdcabcb68a6b24eda53a6d53225f438ea50da14538076ab71280ba082b6135eb2fe032a419d6f24df826d4f35cbe0cc11c0fc793aada54a9aa6e69dc54e999b375656cc4bc19fddbd83ba159e99b81708e1ed955ea81de6fc6a88ccf52f25fb8ce23cf34ed1542e7903dbff7331fd7c38c3846e5c6dc958adb76b8a5626bf93c99b26bab1fcfbfbd9fb716c313e30daf2797009a3db28091401444328fc3c9ee67b63eeebffc2ec8c3695f592897135d08a4087d24408b666cd38403280d812232a0970caf4fdbe3432ad4fcbc78f5b52f54ecf4b300519c848a3c827dd5e3edc1424e54b11a8951a0261720fd922ec2383a48b3c913380706d437c63cd4db7a5207d0f31ae4b237cbf430f6074b5ca17b73c02b00649df24a0c8d13fbbf9a26e500138186b2e9ffe0652da8041b38a3f2f6b683d1e5cc64c300e513151e64b916bdc2c8cac408a53cb916f2dfd385fd70b381b2a3838fd9b415f924d3e6d292479a12d07e8ad5964dc1e59ffebd0af542c31650e14945a85b25f1b560a312621b3d0af6a5d80f533bdc1ef814b6760dcece9df7e7194bb7e034977f335681da7fc0a6f1b0e98e667e7c4843c221104d763b9cb01b07ec24dfa6c1f58bfe7fccf968358749a0ab7a923d637de1dadebdf51be4a6ce01f1e48c9da9af32e8c980ed88fe7a23120f07a0c9c044dcc68cf26732d1c41ca499caa3093b413cedfbb880990d359aa8ccf40993927d75b3188cc7bb0d98f56bc4cfef5dd229c3d40e0071811ebee77cfaed3c92d43bde84d4e028ac3decdfd7a4b3df03598c1eaf6e1ad3e95b819cc9d210e0afa58fc2d987cbf74eab9a07940046ea76eb5231d9df43b83d6a0c2dc871350411792b74176577afe8df4ad7d941f816f7ca00f124a82ad585673027e3973dcf20195e737d642e61d2d0b5c10a81b9c195a873e1be69eb632b934a11e4f523f3918e811ac4d71ff9491691738f49451f0b4bab3621d9ee61456089c56def7c629f9df50553c20c05405e0c53ef3b86e14ad2d5e9eb17786050c6f4768dbf91ab9360bd923097f117fe233c3ca3b34f1bf50c5008a6b4e4b8a61191c03b6d6d23f25253d8503af46c89163176260f39d78da6ca7af6e54b2d6ec7acd8d14f07eab45a8e92b9892d556e75d1cf39097f7779255211c27296327700fef7592944d9e624472e3d61a6452c9d24a4c4d0e8e52865e2549e43d9d3d841c67ec9dbdc3b2b6cf29d8e7b5ab778586a70bbcabb31913574eb1e4e4a87b36a55fdc1d9225d349fde2c39c89b119c093915f4485a4eb4432e6ce8268adc34ab9b79d9afbe72e888885767abea9ef4de46dd91bea949ecb66267ed671eaa0c19952c49258716f49b3a6841171ca1879651c30b164a9264550ea827b5ed49004703e4633267530042f78c5fe8d6470e48ae1dc245afd643129404241b07b1ceefd415bb1a21bb6448ce7128e43b2045563c99ac604d03e5f7de52581d346c92105fd22190a1674b0b889559b4da67020595bedab5db9594638d776c3a66b653d8a8f3ce40ba4947be02189ec4e9c9043b1d939123dc5e1527612519f5f23f525227cd71c8da7c87a5dba56d1b1b94d16147223389bb3a1d4530c6ab9efcebd6374fd76ba9075e15cd13f9b00e66f6b5a04a3da275a835a6c0be7d8a44ac747d1d9602f8053909e4341607e4a41dc987dea33f8a109a255e3aba5226ab641808f10c1f4ec6c2cab3183a89cd6506f78956f17e6e413c7ee1059c5f106bfc9208b7ce455a38d56abbb2c87c0c4627c019c6180e661d03fcfb7424a5f63b5bf1da485a9302e6394164c42d68db441450d86053635ef0392d071f8ef05b07557080cf1b9a8918d2dca1eb0d2224541284ca9e743f1da881fc4a10e563acc2252b2e067c236e6c616f064205ce1f5d5264d980054ca70d5caf5597c6a8cd837d8feaa5fb4900fe47dea0690fb1601e527b5593c85ddcab9068134220d28aa8387a5c8e3a18713b746f84abd7fa5fc8f46b51a7f688e0eb10708367dee66c5630ddf7b4a79366f75f9e59fdeeebef2099c90191c26ad3e0fa616fd688b45bce77f61b4e4d6d0b565bb59250d848dd8162ec706361b7da0a08640027f348c817ecca61ef54b34790ae711ebf21c627ab8d88ab41ddb29db47799bdea2fa09297226c6bb54fe1ae248fec7573db9c51d0da40d02125fc51ac202607c72c1acfe9fe207a6d8cac88d6173dc83187c00767b8dd16e29226a0c3bb3721a08324e8019d22cbce72d77174fb923f31ad455c73192373dc144e691e42a471aa5639d9171f1144ad95b066c8c8c0f81418ef9cf8a3c2e6274fa7b94e022dc67ecb57de947ae48ba575f9fe8e12db63abd77a87551f4a7ff23d14de4cd108d302133434c67f48340aabb4c99b34583e95807dab562f4519054848b7334564b5cb1308e1d16ffc2b396f4423be6d82074b7bf5cf67534957527070f6c69068fad32773e7da6d3913b04add60d1682e212421b3573f1e927aac2cf738ffc64541cd3cbc1ac4200aa64144c5b7c6be6bcdc3e20444b060aa3b0ee4c9f24859ee273fd60237b5e8d341dc3064c32476e33e4240f97fd6e177777bdbfafdc554f8335490983bf409c194d527fc5f863e66f9fa1c9f6b0fc1a6e8d3cce8e48561f71653e79370b864f37bde6f2724925fa768af03217ded77e771a810f4b09ff5cfd0771463e6e279348201c1c8c08c2aa408c3a0efabf1193582ffe48392807a5cfc591f744cbc803d50fc15ab713fbbd75ad8d02291872b58c8394742c2163a89f0053e5df128d609eb145e49370f01e5cdc58c7317345cb58ff3974befc41680c4282e06ae07d1bfd7916ae1bc6b261504d2cd773cdc35cee10a392bc88151eb86000a9e09880d0647124f83fe888e204320b91bdcb49d219c68ac18b6b2382e4256783dc2bca67be8787be0204dfdfc3eff88a3839aa25946b3940a7edb88771b219b09115c915366cc3f139b9c3663a7552ab843c97cb5036287b5a0d72fec41199abf269d6c2d5c28b57b0d7461e77ae1e049645af9351491cac0c354b8676e94b9d31b6c0df2450e5499dac7cdbe0168471bcbafcf80172428729c7bc35c549be888e13923e50405d765f89e12a99e999e7bf755d00409754a7eb9c3d42d71a112a949a0a870066df9be1b9ae732ae08e4db5694ebcc312acc0797493cc864891d5b179228e86af5ed85ca029f8a2caba2a55bbd5251a204a6393e9d7409272806f23dbc2469c98ccef2c6fce99071167db5e428dd261b9f6b06b743ed43eb66299afd4ca0b86b0bacdfd714344f69ce4c47952605fdce58f962b6b0b6e8cf5663708de0d3b6199190f4ebd6f9a99b3cd4e2483fff0bff83c3681351e17830d401358c63c412f648384f8c6f42edb0332ddf6f9737973c30f2b7b36762892740e427ff5d3e4b0145069de54a37e6a9bf9e29aa0ce3856e10f9425f2fc0011291f0831fd56154554f108808cae2cd46613b5388a2e01cb8d0eecbeb5a9528fd863d1f245c494bd2789c6f11196b4cdc84d28096c1881a181752aa4e116ac7b9b26cdbbdcfc97dcdf2f38c93c1ed358c0578c95c20c7bbe85f798006345f9bd34c2fff61ebeab35dc7b02778ea74dee1f75aa8796904fca310cf8118f176d995bf647eeeca32b84a69e89205b939bb0967d940df5a0220ac02479c93ed95086787c4ea5f66d5dd9f394ab5dddcd5cbbb8cdda04cb3afb4b042cd59863dc28fb9a5caee6a5536462e4f07c1f0a17224a8e9ffedea1995608ba260eef1c48d85443860f09c0603201fb8212305a153a188aff477c2a1b674fea55f75696dc1431834c8bf864b504a519d3494de959367563d4a344c8c8a64c6ecf4c15f28b733e6e12051e0f4d03c357e4bfc305d42001aedcfa16a2d916dddad496fb3c970c9e18667fdeca4b3cd287ca12d721bdf6c2ff0ce387b7d5fe091e6658008672e31d1749e59f27005dbb1bfb5622e28ddfe3571b8175531eff438984669eb5d17f68ff4a0a44921d90b5a9cceeb1bf03414e27a8acb03ca8663e306718feb32819e4426c2f0d308327d26998811af3377c1a41a3d10a7b1c887e23572794351e60ce3c28f1b6c712d79318f3584566fce4396375bbf07477b41e58945bf05ede56d8ad284fd3a9ad1f06c387248033603f743908006169203d179091ad7d3bc9a1307fc1082689657c0168f9a3b5c53176c7ffd1700ef85575fce150557e6b00dd44b6772d6a810af80bd0f2c81209216776704b08fe9288c1c7d38360f53a2e669510f15cf0e9868a2a2e43b2eb9ebb02a897fb011fac02a11ee21bf005d321ce1fe2073ee1ddcd1b52fa26e6e5aeb3474a30cc8270ce28cceaca07ba0ccb351db746280ec73ae7dc27cd4f7578346a9e47b52753765c13bf112bd471cfc76b7edd74f56489add484456e6831541c8781da3bce01f21aab41acc90199e460ecf5b0dd4099f0c9265165f926ceb53b820c7f44e6b0874616dd08a01004e85dd4963f30aa63a7949ffc5bbce2b5b783fa8fed5641364473cbb7e02b3d50625983e7b8f088adf7cfc7f931ac3bef8b4b97855afd59c6d46185b1802d3e920791ee2c1024adb815615cb859ed5e6f5f968e4a6be4b556ce03d713b232dfe2e55be275aafd7f55c95fc489bc4ae5b3bb0a7446f094576d860b51d67480259a49c7b3ec85f422f365d5b1a7bbf22b69d95f0a9732f4864c07aa841a8922463cd87021f1b55c36eb91bed1ec24cf89cbbfe0ec36cc93413fb0a050c5b6fc644bb1104108b6ae35061ec299e646dc3dac938cbe2d7dea587c1c5eabdda3abc668b7c700a59823216e29f377675da720237c723fcf4ccc5fb6ed0fc86adae960c48487bbea0bca4e2b42a5d7cb87d48ec2c4eb9f22bde8dc5ba050fade2cc2d4e069df9dded159854e66c79a9e2178ac57449ad59e285bc292281358461d88d3d024aaab66c282ee0f8de63818c9748684f90476279086df9e2c8d167a10ed494ecd3dec66f7943389ff7b23ded639565f15459a57afb2fde1bfea9ddb1a4df863ee84aca5c5b29d7df6eb88533e6e24db607b3e7beb576531ebba4aae890b47a9d5da3c4f4ea921f0cd11a28fea7beb5946f9d798610165357d1a7f99c0a72f7f05ed468146bdef3129362b7bf3faae4fea6d12ea9fb1af54b32164b8c862cd4380b45add0f8528395ae979fdd8c992ab176a0e4bd565a5923c52bf613165622defb18ff61675da26f0d5ebf0372a5fd9f9ee2502a0331ec5875664e9f65b465e8a2f697c97b24c650874d5404c95f329fdf061771a9f5b"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0xfffffffffffffef1, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xce, 0x1, "78fcca33030a138ab9b8992d52473760f5b086e4ce88553d84ae860a07a21f7971de7b9d08807d002c6d4ea74f9f98107a934872a39be77ba7406325a83304ffeff3a42454c1c95dd0b4286f8295e1562f9541a43be3a55bea8a7a3437169e2a753d7b0c9ffb1994f8179d5998dec2a5142a64c81faaf3cca7a38a4c8dd296d12fe3df0402201f056a1c395cc4a80c5037500e3fe430bb30210edbe85b8a57b58ac7409aa1ec9b7611e93bf6dbb1d5393c87213cabc63407d9ea485de766f02f69c4b45278ec13feabf0"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x3d8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "ae0ac9880908cc01565b26612e59eccc8a912f06571794667d0602fa30e37538d67f373c07a9c38391e53649e52dca1c3d678dfe6b1683fb8e182973164f7f1e3593c2161a321dbf89dc084a6f371ffaeab31c2161"}, @NFTA_DATA_VALUE={0xf8, 0x1, "f473561845f044f491cf7413522af29da181e0d99b36f3869e41866eee7d0b794c64f4d1bec50d41ce52cfa7ff8c603a360f545d2f197989dec1f2bb8e9c9beb607efc25968d602aec5debd9040d9478878e45256d6d8f2a8a533db22b417ebe1616ff496b5e41ce4ad72a41abcc51b6364093ed17522b010fb8ad15f16a067a02c935ca31f513be5ccc801866a65ba6266dc3fd880beb9a9e00ad6df74c2735d2fc42e7c23e8ebaf04449ded0778e4821ffe313b4bfa4bd25d86ec60c45ade53208e5849775bd0886aa1c574d40f775e3c7cb99cd72c0066909911bfa7734e60811b106875508df8ac99f1a8d0e19d1e10d43a1"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "dd05a6880d9f35e37a4365db30b8dbdb2d74d376679f1c3dd60ff60b8ba4e74ac5b1438c73ce44efc659ce92b6a8309302fed795045932745451260a84f8da3b1b12dad2f7033ebe0e695740d24b47e9db4f72c3f177af791e59160f7266fd72c41228ef786f07b6c950524f028de017643ebf117b062f50457d082cde9bae34906ecaab64783b545e525325590a4bd325d0923b82fe4c1324"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xee, 0x1, "65508c2719a1d69c240758171c85494dc444c965793577957cbcfbec7508eb89ddff94d846beddc4934ecf213089ffb97dcbee01159bd3a13382196f5708f2f8e677bc0be1eb9d7841956064569edb301cae30570d3a721336c2d6943718f4a2c5a79c057e67d7c961e92419fe9ac4cc97eb4f12697d1f0ff55edf0517129191ee3f2c5f8319732750522cc3ca9d8e4fa6ffa5cd800dc73c03a19362402f239da64c8b03ac94773b1d3d095f7a8ec984cd7e6900036c258e9ae80883fa58f48f45f60042764505e76d30749554bb855cce14986a80a543cbafd147de86c53c3d7e46584b983dde7a7900"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x5a, 0x6, 0x1, 0x0, "4185d5cf5609d2cb5bc86402323a9357da4be6034f5a76e3b022fe6722fecffb8607d49d87e114b3db1173826384f9153ece0321656f09fe9ab9f208214689d0a63c8f8dc2f98dba831d66e5c5a5e2254ce1bf3f454e"}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}, {0x458, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xcc, 0x6, 0x1, 0x0, "cf7a91d30787ce7d871a475a3e927b6110f98a8b8f123d3ed1ccde942408d1ab1bbcfbcc716c3fc7b96a77fcf99fb05cb7df4a61edd045e179dbdda89e3c1ace5c2b43dab2e8c8e98a377b0f8f89afaf24948edd67ca1c0fe505b981832fffd61682779a14896b1689cd881c14faa09b9f891e42f1b8814c21f70872d92fe2419ae86b3e33a2ce6e8e685f1751395660d406835775bf7802e79f44c8f935b4a6ccafb99e441f757a0610c3ce053b4d8aa823ca907e52264a6d42721d94e8c6d952e0e9aa6ffc14f2"}, @NFTA_SET_ELEM_KEY_END={0x24c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x91, 0x1, "f568b6d762b6031c0a10b2324c675fef98264038d3568a7cb2fc95944ed24e70549b906b2b3512b178c435b24508459bb58f420f75d28d71092fc708d9f217fa5870ae14ec76dfd7707f00be164a7367ff883b20ecf368dc1a02e88dc57c160c1e2ff3bda206a357bb5c301f98fe1e17348041348607cee0a54572c8f8b0a698ed6c20a1bab800da7a1c25bb3c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "331b2fe7014c660f13ceaf2e27f046c75717b41244356e814b31bc5c5d1746bf54cbd27fd27e75d794da92590523513f3f04650cfd8230047a8de35c18ae6a87566201591c20cc5e3c5a4b93ddaf6e0d601e75d6e8c6f526f2916e11452ae33163ca573576127f402728893687f5c176644db7511dc1add874f3476967857cc9d0c2f8fccbca981ff7856c3f8405b1226d7458745e145d3c952c9232aceaf24e62c3f6a98f7aaa02353c0fa0275edf2d3ddfc642d430f499da7ee81afa3841c5f2886039ccdc6131721451382f093f60a4"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdc, 0x1, "e8aefc47c5942159e1410361496c15427882a031fa3a1ef0eb354da9f1595969c7d04c2c95c588d66f68ba8f2516f68d65f5fa9c6963645c40de8e64251e19f14845aee190f0db580f4360743a344d394addaf6315d5848ba66355a524c369d7d1175f0e1444fed629b072aeb8b13889716dfd0ba1e521526864108c7709049bc51ee01b75f1eb0a56e2528de7c1932c9d0760a607f5808daec11f50a6fccec5675c2484696e0a8f4dd8041bfbbd56c2fe28c4fbe035d1bb6c936fa9df5692c39cfa72d7f25dbb4713698e97fc9a4cbcee3cea1a43849a69"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x17c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x67}, @NFTA_SET_ELEM_DATA={0x16c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x97, 0x1, "7f53a28f374050e43f8b6d0b027124cfaf2743f323b3c2e0b71c1035125e63d3709c7d14ebd1c964f97f01a2e3eb9799c5fa9c87483207ed57d79438a5b90c8b053284a6f560496ac3aaf89c62c8e5781a0510b2be14c7c40639a094ed51693c39067aa845faf9543557217bf8623446b6ddd5b4d103be566ebff70c83f8463584f2bbbea181aa775ba8c474d2eef1c46c91a6"}, @NFTA_DATA_VALUE={0xb5, 0x1, "0e91067469ed96f031437b369e05482332ae409cba23c1859e48dfa1173cc1744525c4dfdcbae8e8217d0a5013f88ac9ea6f7a2734f9b5bde54004386f3e5900cc2963f12378eb895f3109105c8b510f4410623ce3c05e6a065763b89303d658022fad333f92b0ca002f650e5db5989eca6687ee6a3c5b1ce08c6e6b9972c2f990c49c1542d1c8d37613b608ab195063f9f8dc6d33923673601e5632b37da14da87b4867770df17a06fdfdd1b4484a65d9"}]}]}]}]}], {0x14, 0x10}}, 0x2268}}, 0x0) 3.949469582s ago: executing program 4 (id=7820): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x1e, 0x4, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r1, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000e40)}, 0x8}], 0x1, 0x20, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x4800) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007b108a000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 3.947054733s ago: executing program 0 (id=7821): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)="99cd8c906943e0b775c54c80feb5af1643dbd8def710f8fa57d7c5779fc04d803e0ae009c7", 0x25}, 0x1, 0x0, 0x0, 0x4090}, 0x40040c4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000a00000000007110b2000000000095000000000000009f2b959a2a03ef64e7345cd1"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.933338541s ago: executing program 2 (id=7822): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)={0x38, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) (rerun: 64) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x1}]}}]}, 0x3c}}, 0x20008000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x44890) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r9) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r12, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x884) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r11) (async) r14 = socket(0x2d, 0x2, 0x0) recvmmsg(r14, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="330528bd7000dcdbdf25280000000a0001007770616e3100000005002b0803000000a5fe9b35d74190a69f838d54b1ae3f06e794a410a6b5fa1f8cdb8e6399c8d6cee7cb91a34c5d68a9e8811cf920feb994558e9d786a5c37340c354c9d6c68fb015c5d6cace1f2a5853459ed2f4b48d343e7f17b68a38d3a495c863f12dafc43f553a7e4b6f9773f84a8d8246015ff73c9a81d30a1648b0e60fa46b17c1e72b75cbd444c9239fea7d6d9ae872f8398e272f1742696a29fbda758498623cad5675ce5f51275e36667e4cd330bbe22090fcc9a3b886881810000006b5a602fd3091ec9e376ba829169db6905e79fb7"], 0x28}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) (async) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffc, 0x10000, {0x17, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x17, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0x27}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r6) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x5008004}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r15, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.855763875s ago: executing program 3 (id=7823): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)='g', 0x1}], 0x1, 0x0, 0x0, 0x4008801}], 0x1, 0x20008084) r3 = accept4$ax25(r2, 0x0, 0x0, 0x80800) recvfrom$ax25(r3, 0x0, 0x0, 0x12000, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r6 = socket(0x28, 0x1, 0x0) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7) 3.741516811s ago: executing program 0 (id=7824): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd26, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1d}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) shutdown(r2, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) recvmmsg(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x102, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x6, 0x4) r3 = socket(0x1, 0x803, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xee11}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x44) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000080)) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000180)) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xf) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1f0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xfe}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x67f3, 0xd, [0x38, 0x1c, 0x2e, 0x2a, 0x4, 0x20, 0x37, 0x15, 0x2b, 0x2, 0x15, 0x3, 0x3f, 0x1e, 0x4, 0x4], 0x2, 0x6, 0x7}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, 0xff, 0xffffffff, 'bridge0\x00', 'veth0\x00', {}, {}, 0x11, 0x2}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0xcf8c, 0x3, [0x26, 0x27, 0x32, 0xe, 0x38, 0x39, 0x1c, 0x27, 0x23, 0x2c, 0xb, 0x5, 0x34, 0x1f, 0xd, 0x2d], 0x0, 0x9, 0x80}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x69ac}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, 0x1, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x65}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 3.673751626s ago: executing program 2 (id=7825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000800080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x31) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000400)=[{r1, 0x40}], 0x1, 0x3) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2e, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff44}, 0x94) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240008001a000100000000000000000081000000000000000000000008000f8000000000"], 0x24}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) (async) write$tun(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_cmd={0x1e, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x0, 0x5, 0xb, 0x6, 0xc988, [0xd4, 0x6]}}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1a}) 3.585193816s ago: executing program 3 (id=7826): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000020100006111c400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.533450308s ago: executing program 1 (id=7827): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r2, 0x4}, &(0x7f00000000c0)=0x8) 3.419437268s ago: executing program 1 (id=7828): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1, 0xfffffffe}}}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0xfedb, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4, [{0xd, 0x5}]}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x10003}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x8cd9}}, @union={0xe, 0x0, 0x0, 0x5, 0x1, 0x7d6, [{0x0, 0x0, 0x400}]}]}}, 0x0, 0x52}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 3.345088085s ago: executing program 3 (id=7829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'ip6gre0\x00', @broadcast}) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0x2}, {0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) clock_gettime(0x6, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000280)={'nat\x00', 0x0, [0xa, 0x8, 0x57, 0x8, 0xc000000]}, &(0x7f0000000300)=0x54) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r7, 0x800442d4, &(0x7f00000000c0)=0x4) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0) r10 = openat$cgroup_int(r8, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000240)="80", 0x1, 0x200c4004, &(0x7f00000001c0)={0x11, 0xe1, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.263243792s ago: executing program 1 (id=7830): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/74, 0x4a}], 0x2}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r5, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000002b40)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x2, 0x1, 0x43}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x27, 0x28, 0x68, 0x0, 0x2, 0x6, 0x0, @empty, @remote}, {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x9, 0x0, 0x2}}}}}}, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000200)=0x8) getsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/74, 0x4a}], 0x2}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r5, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f0000002b40)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x2, 0x1, 0x43}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x27, 0x28, 0x68, 0x0, 0x2, 0x6, 0x0, @empty, @remote}, {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x9, 0x0, 0x2}}}}}}, 0x0) (async) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000200)=0x8) (async) getsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) (async) 3.097355595s ago: executing program 2 (id=7831): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32) r4 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0xfff3}, {}, {0x3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x91d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 3.013894408s ago: executing program 4 (id=7832): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) (async) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, r3, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r2) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 2.865524199s ago: executing program 0 (id=7833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x1, 0x70bd2f, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x20000094) 2.714193294s ago: executing program 4 (id=7834): r0 = socket$nl_route(0x10, 0x3, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x10, 0x80400) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x38}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) 383.458009ms ago: executing program 1 (id=7835): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000003140)=[{&(0x7f0000003280)="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", 0x10ad}, {&(0x7f0000001ec0)="423a859e136a79635442f7c33a76f98025d20a95045782f2a4851df1bd594a", 0x1f}, {&(0x7f0000001f00)="0b1ef03caa799fa1ca79bc8cb5c8e4afa3e202a99f152a2a90fe3331fd8ba7167b0022308451b750eb619b71ab8c95206a5785caa8936b3a69bb3acc216a2fdc3d9bff7fc99d356211e97a4748fde0042820e801b685426583051eecc547ee2bf7ec21b59cef01c50fa11312c033dc65edeeeed262518beb26466070bf1e7552", 0x80}, {&(0x7f0000001f80)="f3ea610ad89314a1a468c4586b9e810249c171723b20c78ce91fe2220e28f0b5b755778c1a503eb6fb151045acb7a1654ee965ca6a94cc454ddfeeef469d4d574e737d1383e26b93d65f6196b3ce3bb3a9dabef8bce575fc00d675da48fe7d165fb18a4d00", 0x65}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="7714f7f76b4974eeb8d1008a2e03375ca751b2f24a98b1ad0f72bc4c18992902142ae7c4104d365da7beb4", 0x2b}, {&(0x7f0000003040)="f6b7b015eff815904e1f3b8ba8a6b9a74768be842f72bcbdbcbc1749647aef602a7d2bb0d3ed2d68b835e2fd3abd3ef891b8ac635ac404d2", 0xa}, {&(0x7f00000031c0)="911420292b83cc4899edc3687e109de1842de6324d8b2a4686aa5c38043f8cc28de03d7b6d3eee509f831502cd093078c2a1cf949624fe59b51d833260df67a2b0054d40bd5f9b480f9ac2fe8876f4884ab323de867b654a336376aac53d8d7c6e3685ffff46f100"/135, 0x87}], 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x46, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6cd62c83000f21fefe800000000000000000000000000ca60030200100000000000000000000000000004e234e200491907834a4251f09ef"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a00010000000001000000008100800000001600a24e0097140002"], 0x30}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000240)={0x7, 0x5}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000520000022dbd7000fcdbdf250000000088c028e60b12cf78f6e5594f4f0d4aac1604e7242af1f8c3e700d52fd4ee875b31a36723a008e5f8c3f003699f9100ea956e4c668d86ec4e5507404f36a384cf892075e427bce933551241c684654caf95"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4004000) sendmsg$NFT_BATCH(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000fdffffff00000000000007000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc5e977221f83c3f179e65022fc067b787cd67b6d9983b1bddaf0200000000000000d2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a3200000000"], 0xcc}, 0x1, 0x0, 0x0, 0x8800}, 0x4000800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fedbdf251000000008000600", @ANYRES32=0x0, @ANYBLOB="08050300", @ANYRES32=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r11, 0x89e2) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x224}}, 0x0) bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc) 313.651343ms ago: executing program 3 (id=7836): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newqdisc={0x130, 0x24, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0x3}, {0x3, 0x6}, {0xfff1, 0xfff1}}, [@TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x7, 0x1, 0x101, 0x2, 0x1, 0x7fff, 0x5}}, {0xe, 0x2, [0x0, 0xd6d0, 0x3, 0x5, 0x5]}}, {{0x1c, 0x1, {0x3, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x55, 0xa}}, {0x18, 0x2, [0x397, 0x5, 0x1, 0x800, 0xde89, 0xfff9, 0x3, 0x9b, 0x9, 0x8]}}]}, @TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0x81, 0x76, 0x2, 0x134, 0x4950d97a, 0x6}}, {0x10, 0x2, [0x800, 0xacc, 0x3, 0xe0, 0x8, 0x1000]}}, {{0x1c, 0x1, {0x0, 0xe, 0x5c, 0xc, 0x2, 0x42c, 0x10000, 0x9}}, {0x16, 0x2, [0x5, 0x3, 0xa, 0x1ade, 0x8000, 0x4, 0x1e4, 0xb5f4, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffff}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x8f6f}]}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newqdisc={0x130, 0x24, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0x3}, {0x3, 0x6}, {0xfff1, 0xfff1}}, [@TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x7, 0x1, 0x101, 0x2, 0x1, 0x7fff, 0x5}}, {0xe, 0x2, [0x0, 0xd6d0, 0x3, 0x5, 0x5]}}, {{0x1c, 0x1, {0x3, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x55, 0xa}}, {0x18, 0x2, [0x397, 0x5, 0x1, 0x800, 0xde89, 0xfff9, 0x3, 0x9b, 0x9, 0x8]}}]}, @TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0x81, 0x76, 0x2, 0x134, 0x4950d97a, 0x6}}, {0x10, 0x2, [0x800, 0xacc, 0x3, 0xe0, 0x8, 0x1000]}}, {{0x1c, 0x1, {0x0, 0xe, 0x5c, 0xc, 0x2, 0x42c, 0x10000, 0x9}}, {0x16, 0x2, [0x5, 0x3, 0xa, 0x1ade, 0x8000, 0x4, 0x1e4, 0xb5f4, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffff}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x8f6f}]}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018100000000000000c0000000c00001402000000000000000000000d000000000000c67b"], 0x0, 0x26, 0x0, 0x1}, 0x19) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 253.635298ms ago: executing program 4 (id=7837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988", 0xd}, {&(0x7f0000000040)='G', 0x1}], 0x2) 250.549384ms ago: executing program 0 (id=7838): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xffffffff, 0x3, 0x0, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x400, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x63, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_GSO_MAX_SEGS={0x0, 0x28, 0x49bd}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000004}, 0x800) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff0000000071104b000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f0000000040)='\x00', 0x40401, &(0x7f00000000c0)={@align=0x1, {0x0, 0x2, 0x6, 0xffffffffffff3553}}, 0xfffc, &(0x7f0000000100), &(0x7f0000000140)}) sendmsg$inet6(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="713e1b78a69248b9ed06daa31c24c6819b598b7c4ea9d95fa6af88055e52a77e956a4b192977173766e4fe92ffed4fcc10ecad04c59b3fc60f7bb45e1c67db794f839dab59d26f96ea6e26690d8dea0f6b10dced4352a8fae1f9048083afd24c262a72f5b2c93552f8d8f79801bd8e8a5d529de24ee8a0d43b12422c4dd481e47cdaf91c20353fe21fe96ff049a7f07a815553f4a230e5bef12d758e0710544efeea5d1e10463b5e0cda46c1da3b3dde4392607e", 0xb4}], 0x1, &(0x7f0000000480)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @rthdrdstopts={{0x120, 0x29, 0x37, {0x0, 0x20, '\x00', [@ra={0x5, 0x2, 0x800}, @pad1, @generic={0x4, 0xb6, "16cc42d553ebde686011241ced0d5ad6369fcd865f77231bd0e3caed9afd837a10c3595c5cd1c44b5610a6567eaa0cf12e18fe96691c8f0873c4c6aa80a9b1b764c77156cb815890460e8ab3146d28dd3ec6408e7e74c76282f42e2445b1bd08541d56314a7ba995c12a15c359799cbba6c5221d53fafe9a46eb51347d971c933ce53eda4faa4e3537c314de7baf8b4791985bfb17a0c65aae371b7b8edbb3753b008621e936a4558e3ec69520e02851d6fcfa027e11"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x16}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @local}, @pad1]}}}], 0x138}, 0x40015) mmap$xdp(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0xa, 0x810, r7, 0x80000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000300)=0x80000001, 0x4) readv(r3, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) close(r4) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000044) 249.664166ms ago: executing program 2 (id=7839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) recvfrom(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet6_int(r1, 0x29, 0x38, 0x0, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000e40)) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @netrom={'nr', 0x0}, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r3) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x44080}, 0x4010091) 0s ago: executing program 3 (id=7840): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1, 0xfffffffe}}}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0xfedb, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4, [{0xd, 0x5}]}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x10003}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x8cd9}}, @union={0xe, 0x0, 0x0, 0x5, 0x1, 0x7d6, [{0x0, 0x0, 0x400}]}]}}, 0x0, 0x52}, 0x20) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c86dd6000ed0403183afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000050aa78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200010000050000000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1570f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a67060500000049dfb58d00000000000000000b17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f00e07b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a027440000000000000000000000000c5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600027628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) kernel console output (not intermixed with test programs): 05] wireguard0: entered promiscuous mode [ 812.612888][T28405] wireguard0: entered allmulticast mode [ 812.709958][ T6060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.721640][ T6060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.733205][ T6060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 812.774265][T28320] vxcan1 speed is unknown, defaulting to 1000 [ 813.303350][T28430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6093'. [ 813.538930][T28427] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 813.814261][T28443] tipc: Enabled bearer , priority 10 [ 814.085210][ T6060] gretap0: left promiscuous mode [ 814.093654][ T6060] bridge0: port 3(gretap0) entered disabled state [ 814.126649][ T6060] bridge_slave_1: left allmulticast mode [ 814.133185][ T6060] bridge_slave_1: left promiscuous mode [ 814.156224][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.180962][ T6060] bridge_slave_0: left allmulticast mode [ 814.189414][ T6060] bridge_slave_0: left promiscuous mode [ 814.196965][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.223627][ T6060] pimreg: left allmulticast mode [ 814.526931][ T6060] bond7 (unregistering): (slave gretap3): Releasing active interface [ 814.542863][ T5848] Bluetooth: hci5: command tx timeout [ 814.576793][ T6060] bond9 (unregistering): (slave geneve2): Releasing active interface [ 814.622952][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 814.650589][ T6060] bond6 (unregistering): (slave bridge1): Releasing backup interface [ 814.659184][ T6060] bridge1 (unregistering): left promiscuous mode [ 814.980205][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.992035][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.005161][ T6060] bond0 (unregistering): Released all slaves [ 815.017309][ T6060] bond1 (unregistering): Released all slaves [ 815.037049][ T6060] bond2 (unregistering): Released all slaves [ 815.054502][ T6060] bond3 (unregistering): Released all slaves [ 815.076335][ T6060] bond4 (unregistering): Released all slaves [ 815.092565][ T6060] bond5 (unregistering): Released all slaves [ 815.111928][ T6060] bond6 (unregistering): Released all slaves [ 815.136599][ T6060] bond7 (unregistering): Released all slaves [ 815.153355][ T6060] bond8 (unregistering): Released all slaves [ 815.169909][ T6060] bond9 (unregistering): Released all slaves [ 815.193521][ T6060] bond10 (unregistering): Released all slaves [ 815.215832][ T6060] bond11 (unregistering): Released all slaves [ 815.242254][ T6060] bond12 (unregistering): (slave veth9): Releasing active interface [ 815.252488][ T6060] bond12 (unregistering): Released all slaves [ 815.270908][ T6060] bond13 (unregistering): Released all slaves [ 815.288793][ T6060] bond14 (unregistering): Released all slaves [ 815.330194][T28461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6103'. [ 815.385650][T28468] ip6gre2: entered allmulticast mode [ 815.588757][T28474] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6105'. [ 815.670895][T28480] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6105'. [ 815.734319][T28470] bond6: entered promiscuous mode [ 815.801584][T28476] macvlan2: entered promiscuous mode [ 815.816233][T28476] macvlan2: entered allmulticast mode [ 815.825691][T28476] bond6: (slave macvlan2): Opening slave failed [ 816.036648][ T6060] tipc: Left network mode [ 816.214117][T28320] chnl_net:caif_netlink_parms(): no params data found [ 816.623185][ T5848] Bluetooth: hci5: command tx timeout [ 816.955760][T28534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6114'. [ 817.212496][ T5507] 8021q: adding VLAN 0 to HW filter on device eth1 [ 817.330268][T28550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6118'. [ 817.348076][T28552] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 817.370104][T28552] xt_hashlimit: size too large, truncated to 1048576 [ 817.401827][T28553] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6118'. [ 817.456799][T28320] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.483954][T28320] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.503244][T28320] bridge_slave_0: entered allmulticast mode [ 817.511321][T28320] bridge_slave_0: entered promiscuous mode [ 817.528079][T28545] netlink: 'syz.2.6116': attribute type 12 has an invalid length. [ 817.536882][T28545] netlink: 'syz.2.6116': attribute type 29 has an invalid length. [ 817.545676][T28545] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6116'. [ 817.556000][T28545] netlink: 'syz.2.6116': attribute type 3 has an invalid length. [ 817.565476][T28545] netlink: 47 bytes leftover after parsing attributes in process `syz.2.6116'. [ 817.580073][T28554] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 817.620667][T28320] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.630049][T28320] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.637875][T28320] bridge_slave_1: entered allmulticast mode [ 817.648754][T28320] bridge_slave_1: entered promiscuous mode [ 817.707180][T28560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6120'. [ 817.849430][T28320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.894281][T28320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.971232][T28568] atomic_op ffff8880690c5198 conn xmit_atomic 0000000000000000 [ 817.995612][T28568] atomic_op ffff8880596eb998 conn xmit_atomic 0000000000000000 [ 818.016465][T28568] atomic_op ffff88805934c998 conn xmit_atomic 0000000000000000 [ 818.042007][T28568] atomic_op ffff88805934d998 conn xmit_atomic 0000000000000000 [ 818.053712][T28568] atomic_op ffff888055f31198 conn xmit_atomic 0000000000000000 [ 818.088803][T28568] atomic_op ffff888055f36998 conn xmit_atomic 0000000000000000 [ 818.106631][T28320] team0: Port device team_slave_0 added [ 818.120859][T28568] atomic_op ffff888055f35998 conn xmit_atomic 0000000000000000 [ 818.129367][T28572] netlink: 'syz.1.6123': attribute type 28 has an invalid length. [ 818.141459][T28320] team0: Port device team_slave_1 added [ 818.155361][T28572] netlink: 'syz.1.6123': attribute type 3 has an invalid length. [ 818.172237][T28568] atomic_op ffff8880776bc998 conn xmit_atomic 0000000000000000 [ 818.257925][T28568] atomic_op ffff88808a976198 conn xmit_atomic 0000000000000000 [ 818.287697][T28568] atomic_op ffff888041e56198 conn xmit_atomic 0000000000000000 [ 818.396057][T28320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.418984][T28320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.504346][T28320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.571690][T28320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.591826][T28320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.625908][T28320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.703650][ T5848] Bluetooth: hci5: command tx timeout [ 818.969949][T28320] hsr_slave_0: entered promiscuous mode [ 819.004713][T28320] hsr_slave_1: entered promiscuous mode [ 819.011567][T28320] debugfs: 'hsr0' already exists in 'hsr' [ 819.018515][T28320] Cannot create hsr debugfs directory [ 819.045459][T28602] __nla_validate_parse: 1 callbacks suppressed [ 819.045479][T28602] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6131'. [ 819.057776][T28603] netlink: 404 bytes leftover after parsing attributes in process `syz.3.6130'. [ 819.136520][T28338] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.165870][T28338] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.261218][T28609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6132'. [ 819.341629][T28338] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.376954][T28338] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.546615][T28610] vlan4: entered promiscuous mode [ 819.981677][ T5507] 8021q: adding VLAN 0 to HW filter on device eth2 [ 820.458309][T28648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 820.465662][T28648] IPv6: NLM_F_CREATE should be set when creating new route [ 820.472978][T28648] IPv6: NLM_F_CREATE should be set when creating new route [ 820.611212][T28652] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 821.008567][T28663] vti0: entered promiscuous mode [ 821.230809][T28673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6149'. [ 821.275064][T28673] netlink: 'syz.3.6149': attribute type 29 has an invalid length. [ 821.302523][T28673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6149'. [ 821.345134][ T6060] hsr_slave_0: left promiscuous mode [ 821.405402][ T6060] dummy0: left allmulticast mode [ 821.434284][ T6060] veth1_macvtap: left promiscuous mode [ 821.441533][ T6060] veth0_macvtap: left promiscuous mode [ 821.449164][ T6060] veth1_vlan: left promiscuous mode [ 821.465491][ T6060] veth0_vlan: left promiscuous mode [ 822.247279][T28686] smc: net device team0 applied user defined pnetid SYZ2 [ 822.269846][T28693] syzkaller1: entered promiscuous mode [ 822.290209][T28693] syzkaller1: entered allmulticast mode [ 822.341183][T28707] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6155'. [ 822.504870][T28709] sock: sock_timestamping_bind_phc: sock not bind to device [ 823.001090][T28722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6160'. [ 823.245280][ T6060] IPVS: stop unused estimator thread 0... [ 823.305703][T28320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 823.342869][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 823.370377][T28320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 823.426116][T28320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 823.493737][T28320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 823.540883][T28320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 823.559326][T28750] x_tables: duplicate underflow at hook 2 [ 823.604481][T28320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 823.635677][T28320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 823.665821][T28320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 823.957299][T28767] syzkaller0: entered promiscuous mode [ 823.966636][T28767] syzkaller0: entered allmulticast mode [ 824.017142][T28767] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6167'. [ 824.334680][T28320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.491641][T28320] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.563514][T28337] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.570881][T28337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.662499][T28337] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.669845][T28337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.938498][T28806] bridge9: entered promiscuous mode [ 824.958738][T28806] bridge9: entered allmulticast mode [ 825.262282][T28824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6180'. [ 825.356317][T28824] ip6erspan0: entered promiscuous mode [ 825.408923][T28829] netlink: 'syz.0.6181': attribute type 1 has an invalid length. [ 825.474886][T28829] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6181'. [ 825.553324][T28835] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 825.581933][T28829] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6181'. [ 825.624888][T28829] netlink: 'syz.0.6181': attribute type 1 has an invalid length. [ 825.690155][T28320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.702068][T28829] netlink: 618 bytes leftover after parsing attributes in process `syz.0.6181'. [ 825.870097][T28852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6185'. [ 825.910182][T28852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6185'. [ 825.989451][T28852] bond0: entered promiscuous mode [ 826.022187][T28852] bond_slave_0: entered promiscuous mode [ 826.061345][T28852] bond_slave_1: entered promiscuous mode [ 826.093110][T28852] gretap0: entered promiscuous mode [ 826.113023][T28852] hsr1: entered promiscuous mode [ 826.338281][T28868] netlink: 'syz.2.6188': attribute type 1 has an invalid length. [ 826.443152][T28873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6188'. [ 826.496876][T28876] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6190'. [ 826.934276][T28896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6193'. [ 827.159671][T28320] veth0_vlan: entered promiscuous mode [ 827.311381][T28320] veth1_vlan: entered promiscuous mode [ 827.784276][T28921] syzkaller0: entered promiscuous mode [ 827.805650][T28921] syzkaller0: entered allmulticast mode [ 830.786261][T28320] veth0_macvtap: entered promiscuous mode [ 830.810953][T28320] veth1_macvtap: entered promiscuous mode [ 830.910262][T28320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.990482][T28980] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 831.003796][T28320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.116257][T28338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.131725][T28338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.187343][T28986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 831.215086][T28338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.225221][T28338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.564150][T29001] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6216'. [ 831.635937][T28338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.658984][T28338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.730227][T29012] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6220'. [ 831.753308][T29014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6219'. [ 831.773401][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.796302][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.001195][T29018] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6222'. [ 832.315590][T29030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6059'. [ 832.367292][T29030] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6059'. [ 832.387839][T29034] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6059'. [ 832.686736][T29048] x_tables: duplicate underflow at hook 3 [ 832.699073][T29053] netlink: 'syz.1.6232': attribute type 10 has an invalid length. [ 832.740039][T29049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6229'. [ 832.831520][T29052] bond1 (unregistering): Released all slaves [ 832.905844][T29061] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6233'. [ 833.081843][T29053] team0 (unregistering): Port device team_slave_0 removed [ 833.116238][T29053] team0 (unregistering): Port device team_slave_1 removed [ 833.223354][T29073] xt_recent: Unsupported userspace flags (000000b1) [ 833.726365][T29096] netlink: 'syz.3.6243': attribute type 1 has an invalid length. [ 833.770577][T29098] xt_hashlimit: size too large, truncated to 1048576 [ 833.804834][T29096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6243'. [ 834.174086][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 834.191167][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 834.202134][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 834.215514][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 834.223819][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 834.289158][T29112] tipc: Resetting bearer [ 834.355798][T29117] nbd: socks must be embedded in a SOCK_ITEM attr [ 834.404706][T29112] wg1 speed is unknown, defaulting to 1000 [ 835.425453][T29112] vxcan1 speed is unknown, defaulting to 1000 [ 835.621029][T29177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.668571][T29185] xt_hashlimit: size too large, truncated to 1048576 [ 836.304862][ T5848] Bluetooth: hci1: command tx timeout [ 836.431183][T29216] netlink: 'syz.4.6269': attribute type 13 has an invalid length. [ 836.458816][T29211] syzkaller1: entered promiscuous mode [ 836.465292][T29211] syzkaller1: entered allmulticast mode [ 836.478814][T29216] gretap0: refused to change device tx_queue_len [ 836.494470][T29220] xt_CONNSECMARK: invalid mode: 0 [ 836.499885][T29216] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 836.760021][T29226] netlink: 'syz.2.6270': attribute type 1 has an invalid length. [ 836.812376][T29229] __nla_validate_parse: 3 callbacks suppressed [ 836.812396][T29229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6270'. [ 836.878912][T29229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6270'. [ 837.014187][T29112] chnl_net:caif_netlink_parms(): no params data found [ 837.370270][T29245] 8021q: VLANs not supported on ip6gre0 [ 837.391895][T29261] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 837.439566][T29265] netlink: 'syz.2.6278': attribute type 1 has an invalid length. [ 837.473887][T29265] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6278'. [ 837.541293][T29269] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6279'. [ 837.722420][T29112] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.758531][T29112] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.785456][T29112] bridge_slave_0: entered allmulticast mode [ 837.814472][T29112] bridge_slave_0: entered promiscuous mode [ 837.883500][T29112] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.916380][T29112] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.930574][T29286] netlink: 'syz.1.6281': attribute type 1 has an invalid length. [ 837.948171][T29112] bridge_slave_1: entered allmulticast mode [ 837.960136][T29288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6283'. [ 837.980424][T29112] bridge_slave_1: entered promiscuous mode [ 837.991836][T29287] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6283'. [ 838.232002][T29286] bond1: entered promiscuous mode [ 838.238409][T29286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 838.259696][T29112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.374758][T29112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.384984][ T5848] Bluetooth: hci1: command tx timeout [ 838.428335][T29112] team0: Port device team_slave_0 added [ 838.437707][T29112] team0: Port device team_slave_1 added [ 838.477345][T29112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.493188][T29112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.560669][T29112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.595213][T29112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.611770][T29112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.712776][T29112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.992405][T29321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 839.035648][T29320] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6289'. [ 839.070234][T29112] hsr_slave_0: entered promiscuous mode [ 839.084428][T29112] hsr_slave_1: entered promiscuous mode [ 839.091361][T29112] debugfs: 'hsr0' already exists in 'hsr' [ 839.100361][T29112] Cannot create hsr debugfs directory [ 839.686879][T29364] netem: incorrect gi model size [ 839.717545][T29364] netem: change failed [ 839.886788][T29376] bond0: (slave bridge0): Releasing backup interface [ 839.923762][T29376] bridge0: left allmulticast mode [ 839.980884][T29376] bond6: (slave bond0): Releasing active interface [ 839.992947][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 840.051473][T29376] bridge_slave_0: left promiscuous mode [ 840.060392][T29376] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.075710][T29376] bridge_slave_1: left allmulticast mode [ 840.081437][T29376] bridge_slave_1: left promiscuous mode [ 840.091535][T29376] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.107504][T29376] bond0: (slave bond_slave_0): Releasing backup interface [ 840.118738][T29376] bond_slave_0: left allmulticast mode [ 840.127865][T29376] bond0: (slave bond_slave_1): Releasing backup interface [ 840.138158][T29376] bond_slave_1: left allmulticast mode [ 840.161971][T29376] team0: Port device team_slave_0 removed [ 840.170101][T29376] team0: Port device team_slave_1 removed [ 840.180249][T29376] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 840.266388][T29389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6304'. [ 840.464408][ T5848] Bluetooth: hci1: command tx timeout [ 840.576107][T29112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.617575][T29112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.330717][T29112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.371701][T29112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.600821][T29462] netlink: 'syz.4.6317': attribute type 1 has an invalid length. [ 841.641024][T29112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.647571][T29462] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6317'. [ 841.665448][T29464] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6318'. [ 841.697667][T29112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.826846][T29468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6320'. [ 841.847520][T29457] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6317'. [ 842.036283][T29474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6322'. [ 842.060461][T29112] bond0: (slave netdevsim0): Releasing backup interface [ 842.139282][T29112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.163600][T29112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.272991][T29474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6322'. [ 842.502376][T29501] netlink: 'syz.4.6326': attribute type 21 has an invalid length. [ 842.540250][T29501] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6326'. [ 842.549001][ T5848] Bluetooth: hci1: command tx timeout [ 842.619186][T29508] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6327'. [ 842.899533][T29515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6331'. [ 843.315699][ T6054] nci: nci_rsp_packet: unknown rsp opcode 0x124 [ 843.538385][T29553] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.6338'. [ 843.565157][T29553] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.6338'. [ 843.591711][T29553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6338'. [ 846.133002][T29532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.239628][T29112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 846.284541][T29112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 846.326067][T29112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 846.355208][T29112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 846.364793][T29112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 846.394836][T29112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 846.414173][T29112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 846.430030][T29112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.480969][T29621] tipc: Started in network mode [ 846.500275][T29621] tipc: Node identity e0000001, cluster identity 4711 [ 846.520394][T29621] tipc: Enabling of bearer rejected, failed to enable media [ 846.728910][T29112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.819983][T29112] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.839155][T29641] netlink: 'syz.3.6350': attribute type 4 has an invalid length. [ 846.860827][T29641] __nla_validate_parse: 5 callbacks suppressed [ 846.860844][T29641] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6350'. [ 846.866241][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.885363][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.907031][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.914303][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.181882][T29654] syzkaller0: entered promiscuous mode [ 847.248100][T29654] syzkaller0: entered allmulticast mode [ 847.676896][T29674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6358'. [ 847.723471][T29677] delete_channel: no stack [ 847.731635][T29112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.736237][T29677] delete_channel: no stack [ 847.750043][T29677] delete_channel: no stack [ 847.764256][T29677] delete_channel: no stack [ 847.772524][T29677] delete_channel: no stack [ 847.777898][T29677] delete_channel: no stack [ 847.782604][T29677] delete_channel: no stack [ 847.788333][T29677] delete_channel: no stack [ 847.793714][T29677] delete_channel: no stack [ 847.798493][T29677] delete_channel: no stack [ 847.813366][T29677] delete_channel: no stack [ 847.822829][T29677] delete_channel: no stack [ 847.832059][T29677] delete_channel: no stack [ 847.838118][T29677] delete_channel: no stack [ 847.843450][T29677] delete_channel: no stack [ 847.848642][T29677] delete_channel: no stack [ 847.858032][T29112] veth0_vlan: entered promiscuous mode [ 847.896705][T29112] veth1_vlan: entered promiscuous mode [ 847.927333][T29681] netlink: 188816 bytes leftover after parsing attributes in process `syz.2.6360'. [ 847.957469][T29112] veth0_macvtap: entered promiscuous mode [ 847.976032][T29112] veth1_macvtap: entered promiscuous mode [ 848.015682][T29112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.039236][T29112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.064674][ T6054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.077316][ T6054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.087768][ T6054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.100188][ T6054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.291991][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.317884][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.364636][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.373704][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.777784][T29705] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6368'. [ 848.856197][T29705] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6368'. [ 848.984779][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 849.000569][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 849.012509][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 849.028950][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 849.037803][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 849.178080][T29711] wg1 speed is unknown, defaulting to 1000 [ 849.242093][T29723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 849.308402][T29724] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 849.336589][T29721] netlink: 'syz.2.6371': attribute type 32 has an invalid length. [ 849.361326][T29721] netlink: 776 bytes leftover after parsing attributes in process `syz.2.6371'. [ 849.393180][T29724] bond0: (slave lo): Error: Device can not be enslaved while up [ 849.421758][ T30] audit: type=1107 audit(1777062051.429:14): pid=29722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 849.427350][T29726] veth1_macvtap: left promiscuous mode [ 849.990227][T29742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6376'. [ 850.051861][T29747] netlink: 'syz.4.6376': attribute type 1 has an invalid length. [ 850.060676][T29747] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6376'. [ 850.129928][T29711] vxcan1 speed is unknown, defaulting to 1000 [ 850.910509][T29780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6386'. [ 851.113806][ T5862] Bluetooth: hci2: command tx timeout [ 851.512218][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 853.184526][ T5862] Bluetooth: hci2: command tx timeout [ 854.047819][T29795] IPVS: set_ctl: invalid protocol: 59 172.20.20.51:20004 [ 854.345846][T29811] IPv6: addrconf: prefix option has invalid lifetime [ 854.375176][T29811] IPv6: addrconf: prefix option has invalid lifetime [ 854.384372][T29811] IPv6: addrconf: prefix option has invalid lifetime [ 854.392834][T29811] IPv6: addrconf: prefix option has invalid lifetime [ 854.400609][T29811] IPv6: addrconf: prefix option has invalid lifetime [ 854.408544][T29811] IPv6: addrconf: prefix option has invalid lifetime [ 854.416777][T29811] IPv6: addrconf: prefix option has invalid lifetime [ 854.425467][T29811] IPv6: addrconf: prefix option has invalid lifetime [ 854.433188][T29811] IPv6: addrconf: prefix option has invalid lifetime [ 854.440789][T29811] IPv6: addrconf: prefix option has invalid lifetime [ 854.605071][T29814] bridge_slave_0: invalid flags given to default FDB implementation [ 854.669538][ T6054] bridge_slave_1: left allmulticast mode [ 854.696355][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.737733][T29820] netlink: 'syz.2.6396': attribute type 11 has an invalid length. [ 854.757305][ T6054] bridge_slave_0: left allmulticast mode [ 854.777064][ T6054] bridge_slave_0: left promiscuous mode [ 854.794731][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.979662][ T6054] pimreg: left allmulticast mode [ 855.272855][ T5848] Bluetooth: hci2: command tx timeout [ 855.305242][ T6054] bridge0 (unregistering): left allmulticast mode [ 855.825268][T29837] netlink: 'syz.1.6400': attribute type 1 has an invalid length. [ 856.248248][ T6054] team0: Port device bridge24 removed [ 856.358826][ T6054] bond6 (unregistering): (slave bridge26): Releasing backup interface [ 856.367404][ T6054] bridge26 (unregistering): left promiscuous mode [ 856.374930][ T6054] bridge26 (unregistering): left allmulticast mode [ 856.480914][ T6054] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.491224][ T6054] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.501441][ T6054] .` (unregistering): Released all slaves [ 856.514169][ T6054] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 856.525635][ T6054] veth0_to_bond: left allmulticast mode [ 856.532259][ T6054] bond1 (unregistering): Released all slaves [ 856.548972][ T6054] bond2 (unregistering): Released all slaves [ 856.567664][ T6054] bond3 (unregistering): Released all slaves [ 856.586043][ T6054] bond4 (unregistering): Released all slaves [ 856.610033][ T6054] bond0 (unregistering): Released all slaves [ 856.631549][ T6054] bond5 (unregistering): (slave C): Releasing backup interface [ 856.641387][ T6054] bond5 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 856.657123][ T6054] bond5 (unregistering): Released all slaves [ 856.687355][ T6054] bond6 (unregistering): Released all slaves [ 856.728051][T29814] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6396'. [ 856.776647][T29837] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 857.050491][ T6054] tipc: Disabling bearer [ 857.058945][ T6054] tipc: Disabling bearer [ 857.107961][ T6054] tipc: Left network mode [ 857.201174][ T6054] IPVS: stopping master sync thread 22239 ... [ 857.223316][T29711] chnl_net:caif_netlink_parms(): no params data found [ 857.356905][ T5848] Bluetooth: hci2: command 0x0419 tx timeout [ 857.687285][T29862] IPv6: sit1: Disabled Multicast RS [ 857.710500][T29862] sit1: entered allmulticast mode [ 857.955817][T29883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6411'. [ 858.074882][T29889] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6412'. [ 858.125256][T29711] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.134912][T29711] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.142303][T29711] bridge_slave_0: entered allmulticast mode [ 858.156591][T29711] bridge_slave_0: entered promiscuous mode [ 858.169672][T29711] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.202474][T29711] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.237571][T29711] bridge_slave_1: entered allmulticast mode [ 858.271575][T29711] bridge_slave_1: entered promiscuous mode [ 858.448191][T29903] netlink: 'syz.1.6416': attribute type 1 has an invalid length. [ 858.508747][T29901] netlink: 'syz.0.6417': attribute type 1 has an invalid length. [ 858.549589][T29904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6415'. [ 858.564578][T29910] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6417'. [ 858.586841][T29903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 858.598023][T29910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6417'. [ 858.631454][T29711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.646042][T29711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.942043][T29711] team0: Port device team_slave_0 added [ 859.060546][T29711] team0: Port device team_slave_1 added [ 859.433456][ T5862] Bluetooth: hci2: command 0x0419 tx timeout [ 859.454565][T29711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.478006][T29711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.549747][T29945] netlink: 412 bytes leftover after parsing attributes in process `syz.0.6425'. [ 859.558630][T29711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.604682][ T5507] 8021q: adding VLAN 0 to HW filter on device eth1 [ 859.693883][T29711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.719487][T29711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.734480][T29943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6424'. [ 859.764863][T29711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.252315][T29711] hsr_slave_0: entered promiscuous mode [ 860.312041][T29711] hsr_slave_1: entered promiscuous mode [ 860.331388][T29711] debugfs: 'hsr0' already exists in 'hsr' [ 860.351646][T29711] Cannot create hsr debugfs directory [ 860.399965][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.416159][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.726431][T29977] IPVS: set_ctl: invalid protocol: 100 172.20.20.170:20004 [ 860.800054][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 860.822392][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 860.995652][T29970] gre1: entered promiscuous mode [ 861.347654][T29993] netlink: 'syz.2.6432': attribute type 1 has an invalid length. [ 861.382203][T29984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6432'. [ 861.644875][T29993] 8021q: adding VLAN 0 to HW filter on device bond12 [ 861.759419][T29996] bond12: (slave geneve3): making interface the new active one [ 861.774614][T30008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6436'. [ 861.800586][T29996] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 861.834516][T30018] netlink: 'syz.0.6435': attribute type 1 has an invalid length. [ 861.854668][T30018] netlink: 'syz.0.6435': attribute type 1 has an invalid length. [ 861.869396][T24074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 861.884956][T24074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 861.964479][T30019] pimreg: entered allmulticast mode [ 862.054318][T28340] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 862.112260][T28340] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 862.311019][ T6054] IPVS: stop unused estimator thread 0... [ 862.692491][T30049] netlink: 576 bytes leftover after parsing attributes in process `syz.4.6442'. [ 862.772255][ T5507] 8021q: adding VLAN 0 to HW filter on device eth2 [ 863.497430][T30082] siw: device registration error -23 [ 863.618750][T30086] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6451'. [ 863.657787][T30086] netem: invalid attributes len -24 [ 863.684403][T30086] netem: change failed [ 863.786498][T30090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6451'. [ 864.117528][T24074] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.222192][T24074] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.261540][T24074] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.316015][T24074] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.394994][T30112] netlink: 'syz.2.6455': attribute type 1 has an invalid length. [ 864.574488][T30122] ipt_REJECT: ECHOREPLY no longer supported. [ 864.628675][T30116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6456'. [ 864.661675][T30116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6456'. [ 864.719201][T29711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 864.762243][T29711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 864.796078][T29711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 864.840743][T29711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 864.858730][T29711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 864.898297][T29711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 864.928858][T29711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 864.974270][T29711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 865.076643][T30143] net_ratelimit: 24 callbacks suppressed [ 865.076662][T30143] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 865.171814][T30151] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 865.184204][T30149] netlink: 'syz.1.6461': attribute type 1 has an invalid length. [ 865.214252][T30149] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6461'. [ 865.243508][T30134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6459'. [ 865.256681][T30149] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6461'. [ 865.300743][T30149] netlink: 'syz.1.6461': attribute type 1 has an invalid length. [ 865.330316][T30149] netlink: 634 bytes leftover after parsing attributes in process `syz.1.6461'. [ 865.596861][T29711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.703395][T29711] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.739967][T24074] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.747293][T24074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.802096][T24074] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.809348][T24074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.969230][T30175] pim6reg: entered allmulticast mode [ 866.040276][T29711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 866.424393][T30192] netlink: 'syz.0.6474': attribute type 1 has an invalid length. [ 866.558593][T30192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 866.728029][T29711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.027823][T29711] veth0_vlan: entered promiscuous mode [ 867.087970][T29711] veth1_vlan: entered promiscuous mode [ 867.327925][T30232] __nla_validate_parse: 3 callbacks suppressed [ 867.327945][T30232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6483'. [ 867.358437][T29711] veth0_macvtap: entered promiscuous mode [ 867.377748][T30231] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6484'. [ 867.408240][T30231] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6484'. [ 867.449465][T30231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6484'. [ 867.500147][T29711] veth1_macvtap: entered promiscuous mode [ 867.635522][T29711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.721720][T29711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.778819][ T3565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.811368][T28337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.854287][T28337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.890245][T28337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.271861][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.306462][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.532317][T28340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.541773][T28340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.798636][T30285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6497'. [ 868.933515][T30292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.151026][T30296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6499'. [ 869.179590][T30297] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6499'. [ 869.641914][T30310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6504'. [ 869.710948][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 869.728293][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 869.738777][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 869.752606][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 869.768243][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 869.820342][T30314] wg1 speed is unknown, defaulting to 1000 [ 870.338290][T18216] syz_tun (unregistering): left allmulticast mode [ 870.392114][T30337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6510'. [ 870.619031][T30314] vxcan1 speed is unknown, defaulting to 1000 [ 870.817853][T30355] openvswitch: netlink: IP tunnel dst address not specified [ 871.232373][T30370] geneve2: entered promiscuous mode [ 871.240242][ T137] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 42509 - 0 [ 871.251718][ T137] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 42509 - 0 [ 871.271926][ T137] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 42509 - 0 [ 871.318447][ T137] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 42509 - 0 [ 871.791959][T13487] IPVS: starting estimator thread 0... [ 871.818631][T30407] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6527'. [ 871.829954][ T5862] Bluetooth: hci3: command tx timeout [ 871.854475][T30407] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 871.905431][T30405] IPVS: using max 25 ests per chain, 60000 per kthread [ 872.016950][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL [ 872.184783][T30314] chnl_net:caif_netlink_parms(): no params data found [ 872.236579][T30425] netlink: 'syz.3.6531': attribute type 11 has an invalid length. [ 872.365661][T30425] tipc: Started in network mode [ 872.370625][T30425] tipc: Node identity de0c1fd5f554, cluster identity 4711 [ 872.389391][T30425] tipc: Enabled bearer , priority 0 [ 872.452325][T30432] __nla_validate_parse: 1 callbacks suppressed [ 872.452346][T30432] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6533'. [ 872.490116][T30436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6534'. [ 872.522383][T30433] syzkaller0: entered promiscuous mode [ 872.529640][T30433] syzkaller0: entered allmulticast mode [ 872.536587][T30433] tipc: Resetting bearer [ 872.613863][T30439] netlink: 'syz.1.6535': attribute type 1 has an invalid length. [ 872.684433][T30424] tipc: Resetting bearer [ 872.693201][T30436] netlink: 'syz.0.6534': attribute type 2 has an invalid length. [ 872.706558][T30436] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6534'. [ 872.731230][T30443] Bluetooth: MGMT ver 1.23 [ 872.885917][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f637000: rx timeout, send abort [ 872.910627][T30441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6535'. [ 872.931302][T30441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6535'. [ 872.961847][T30450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6535'. [ 873.386079][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f637c00: rx timeout, send abort [ 873.394453][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f637000: abort rx timeout. Force session deactivation [ 873.420914][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807f637c00: connection exists (fe ff). last cmd: 20 [ 873.670890][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033081000: rx timeout, send abort [ 873.903388][ T5862] Bluetooth: hci3: command tx timeout [ 873.905456][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 874.179308][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033081000: abort rx timeout. Force session deactivation [ 875.526317][T30424] tipc: Disabling bearer [ 875.537959][T30439] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 875.539455][T30314] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.557438][T30314] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.567288][T30314] bridge_slave_0: entered allmulticast mode [ 875.578053][T30314] bridge_slave_0: entered promiscuous mode [ 875.589273][T30314] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.597567][T30314] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.605482][T30314] bridge_slave_1: entered allmulticast mode [ 875.625271][T30314] bridge_slave_1: entered promiscuous mode [ 875.687556][ T5933] tipc: Node number set to 727195605 [ 875.861690][T30314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.920105][T30462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6541'. [ 875.944698][T30314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.983494][ T5862] Bluetooth: hci3: command tx timeout [ 876.043194][T30314] team0: Port device team_slave_0 added [ 876.052250][T30314] team0: Port device team_slave_1 added [ 876.101695][T30466] netlink: 'syz.3.6543': attribute type 10 has an invalid length. [ 876.114350][T30314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.129526][T30314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.165200][T30314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.179066][T30314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.194120][T30314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.246241][T30314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.314086][T30475] netlink: 'syz.4.6545': attribute type 6 has an invalid length. [ 876.352490][T30479] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 876.438560][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053b19800: rx timeout, send abort [ 876.489725][T30314] hsr_slave_0: entered promiscuous mode [ 876.513436][T30314] hsr_slave_1: entered promiscuous mode [ 876.525287][T30314] debugfs: 'hsr0' already exists in 'hsr' [ 876.549628][T30314] Cannot create hsr debugfs directory [ 876.618904][T30488] netlink: 'syz.4.6547': attribute type 3 has an invalid length. [ 876.640897][T30488] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6547'. [ 876.652143][T30483] syzkaller1: entered promiscuous mode [ 876.664378][T30483] syzkaller1: entered allmulticast mode [ 876.938727][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053b1a000: rx timeout, send abort [ 876.947457][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053b19800: abort rx timeout. Force session deactivation [ 877.089003][T30507] netlink: 'syz.0.6554': attribute type 1 has an invalid length. [ 877.197896][T30507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 877.294434][T30314] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.306427][T30314] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 877.347027][T30517] IPVS: Unknown mcast interface: syzkaller1 [ 877.453020][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053b1a000: abort rx timeout. Force session deactivation [ 877.474100][T30521] netlink: 'syz.4.6556': attribute type 1 has an invalid length. [ 877.522198][T30314] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.534635][T30314] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 877.583255][T30528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6558'. [ 877.625956][T30518] veth0_to_bridge: entered promiscuous mode [ 877.766948][T30521] bond1: entered promiscuous mode [ 877.773927][T30521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 877.798813][T30529] bond1: (slave bridge3): making interface the new active one [ 877.807046][T30529] bridge3: entered promiscuous mode [ 877.818191][T30529] bridge3: left promiscuous mode [ 877.869914][T30538] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6560'. [ 877.905472][T30314] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.916770][T30314] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 877.953241][T30535] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 877.966080][T30535] bond3 (unregistering): Released all slaves [ 877.996721][T30537] netlink: 'syz.0.6560': attribute type 1 has an invalid length. [ 878.005220][T30516] veth0_to_bridge: left promiscuous mode [ 878.063017][ T5862] Bluetooth: hci3: command tx timeout [ 878.157853][T30314] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.177736][T30314] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 878.509968][T30558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6564'. [ 878.598628][T30314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 878.609376][T30562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6566'. [ 878.628710][T30314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 878.646230][T30562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6566'. [ 878.660082][T30314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 878.661335][T30564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6568'. [ 878.676721][T30559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6566'. [ 878.686851][T30314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 878.689845][T30314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 878.710818][T30314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 878.734508][T30314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 878.755665][T30314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 878.974228][T30314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.044408][T30580] netlink: 596 bytes leftover after parsing attributes in process `syz.4.6572'. [ 879.095702][T30314] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.149795][T28340] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.157039][T28340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.180935][T30584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6573'. [ 879.235713][T28338] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.242987][T28338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.400870][T30593] netlink: 'syz.3.6576': attribute type 1 has an invalid length. [ 879.426981][T30595] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 879.493897][T30602] tap0: tun_chr_ioctl cmd 2148553947 [ 879.509295][T30598] tap0: tun_chr_ioctl cmd 2148553947 [ 880.001662][T30314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.041101][T30620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6585'. [ 880.077788][T30626] tipc: Enabled bearer , priority 24 [ 880.246736][T30314] veth0_vlan: entered promiscuous mode [ 880.294745][T30314] veth1_vlan: entered promiscuous mode [ 880.451742][T30314] veth0_macvtap: entered promiscuous mode [ 880.555964][T30642] bond3 (unregistering): Released all slaves [ 880.591516][T30314] veth1_macvtap: entered promiscuous mode [ 880.608627][T30647] netlink: 'syz.1.6593': attribute type 1 has an invalid length. [ 880.684217][T30647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 880.747744][T30642] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 880.760121][T30314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.784709][T30314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.825633][T24074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.860820][T24074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.887957][T24074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.912056][T24074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.231483][ T5933] tipc: Node number set to 3758096385 [ 881.264386][ T6054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.297369][ T6054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.416342][T28341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.445177][T28341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.187040][T30698] bridge1: entered promiscuous mode [ 882.235380][T30698] bridge1: entered allmulticast mode [ 882.291571][T30698] team0: Port device bridge1 added [ 882.318591][T30712] x_tables: duplicate underflow at hook 1 [ 882.320551][T30703] bridge0: port 3(team0) entered blocking state [ 882.360262][T30703] bridge0: port 3(team0) entered disabled state [ 882.374667][T30703] team0: entered allmulticast mode [ 882.394675][T30703] team_slave_0: entered allmulticast mode [ 882.405942][T30703] team_slave_1: entered allmulticast mode [ 882.419287][T30703] team0: entered promiscuous mode [ 882.427418][T30703] team_slave_0: entered promiscuous mode [ 882.434814][T30703] team_slave_1: entered promiscuous mode [ 882.441667][T30703] bridge0: port 3(team0) entered blocking state [ 882.448175][T30703] bridge0: port 3(team0) entered forwarding state [ 882.823160][T30728] __nla_validate_parse: 8 callbacks suppressed [ 882.823181][T30728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6616'. [ 882.854889][T30730] netlink: 'syz.0.6617': attribute type 1 has an invalid length. [ 882.977105][T30739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6617'. [ 883.010221][T30730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 883.029903][T30728] syzkaller0: entered promiscuous mode [ 883.037634][T30728] syzkaller0: entered allmulticast mode [ 883.109619][T30730] bond3: (slave geneve2): making interface the new active one [ 883.148461][T30730] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 883.266999][T30752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6621'. [ 883.357431][T30751] bridge2: entered promiscuous mode [ 883.371213][T30751] bridge2: entered allmulticast mode [ 883.387177][T30751] team0: Port device bridge2 added [ 883.640360][T30762] syzkaller0: entered promiscuous mode [ 883.657536][T30762] syzkaller0: entered allmulticast mode [ 883.737927][T30769] block nbd0: not configured, cannot reconfigure [ 883.764917][T30768] block nbd0: not configured, cannot reconfigure [ 883.811718][T30771] xt_CT: No such helper "snmp_trap" [ 884.045247][T30787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6632'. [ 884.054676][T30787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6632'. [ 884.510818][T30809] macsec1: entered promiscuous mode [ 884.649308][T30821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.835393][T30821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.903174][T30828] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6642'. [ 885.111591][T30836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6644'. [ 885.398315][T30842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6646'. [ 885.475628][T30849] syzkaller0: entered allmulticast mode [ 885.985063][T30878] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6657'. [ 886.036908][T30881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6657'. [ 886.180635][T30875] tipc: Enabled bearer , priority 0 [ 886.265596][T30875] syzkaller0: entered promiscuous mode [ 886.285620][T30875] syzkaller0: entered allmulticast mode [ 886.333305][T30888] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 886.361920][T30888] bond4: (slave lo): Enslaving as an active interface with an up link [ 886.377292][T30888] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 886.401989][T30880] tipc: Resetting bearer [ 886.438781][T30882] veth1_macvtap: entered promiscuous mode [ 886.455786][T30882] macsec1: entered promiscuous mode [ 886.469935][T30882] veth1_macvtap: left promiscuous mode [ 886.554914][T30874] tipc: Resetting bearer [ 886.620981][T30898] IPVS: set_ctl: invalid protocol: 50 172.30.0.1:20003 [ 886.660834][T30898] x_tables: duplicate underflow at hook 2 [ 886.692450][T30874] tipc: Disabling bearer [ 887.715369][T30942] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20003 [ 888.050017][T30959] netlink: 'syz.4.6683': attribute type 12 has an invalid length. [ 888.088683][T30958] __nla_validate_parse: 3 callbacks suppressed [ 888.088705][T30958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6680'. [ 888.186881][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6681'. [ 888.211773][T30959] bond2: option primary_reselect: invalid value (255) [ 888.265072][T30959] bond2 (unregistering): Released all slaves [ 888.291758][T30958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6680'. [ 888.426858][T30978] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6686'. [ 888.489055][T30949] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 888.516328][T30949] bond5 (unregistering): Released all slaves [ 888.812670][T30988] pim6reg1: entered promiscuous mode [ 888.824730][T30988] pim6reg1: entered allmulticast mode [ 888.949727][T30997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6692'. [ 888.983651][T30997] macvlan2: entered allmulticast mode [ 889.003996][T30997] dummy0: entered allmulticast mode [ 889.027015][T30997] dummy0: entered promiscuous mode [ 889.369438][T31017] netlink: 404 bytes leftover after parsing attributes in process `syz.2.6698'. [ 889.381650][T31024] netlink: 'syz.4.6700': attribute type 10 has an invalid length. [ 889.405608][T31017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6698'. [ 889.438420][T31017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6698'. [ 889.481330][T31017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6698'. [ 889.536118][T31024] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 889.607858][T31017] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 889.620106][T14682] IPVS: starting estimator thread 0... [ 889.712992][T31031] IPVS: using max 27 ests per chain, 64800 per kthread [ 889.829468][T31041] xt_TPROXY: Can be used only with -p tcp or -p udp [ 889.840194][T31044] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6704'. [ 890.203253][T31049] bond4: (slave bond_slave_1): Device is not our slave [ 890.223426][T31049] bond4: option active_slave: invalid value (bond_slave_1) [ 890.259230][T31049] bond4 (unregistering): Released all slaves [ 890.720611][T31069] hsr_slave_0: left promiscuous mode [ 890.759530][T31069] hsr_slave_1: left promiscuous mode [ 891.091635][T31082] netlink: 'syz.2.6717': attribute type 12 has an invalid length. [ 891.174693][T31085] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 891.227045][T31089] netlink: 'syz.2.6721': attribute type 39 has an invalid length. [ 891.341368][T31095] tipc: Started in network mode [ 891.365471][T31095] tipc: Node identity 4, cluster identity 4711 [ 891.384812][T31095] tipc: Node number set to 4 [ 891.529971][T31104] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 891.704553][T31114] netlink: 'syz.2.6727': attribute type 1 has an invalid length. [ 891.847405][T31114] bond1: entered promiscuous mode [ 891.853801][T31114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 891.975177][T31118] bond1: (slave bridge1): making interface the new active one [ 891.996595][T31118] bridge1: entered promiscuous mode [ 892.014530][T31118] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 892.060468][T31120] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 892.111429][T31120] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 892.442089][T31137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.638359][T31146] xt_policy: output policy not valid in PREROUTING and INPUT [ 893.007180][T31163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 893.165679][T31170] SET target dimension over the limit! [ 893.284569][T31178] macvlan0: entered promiscuous mode [ 893.334880][T31176] syzkaller0: entered promiscuous mode [ 893.356341][T31176] syzkaller0: entered allmulticast mode [ 893.794805][T31188] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 893.845251][T31188] netlink: 'syz.3.6747': attribute type 2 has an invalid length. [ 893.891443][T31188] __nla_validate_parse: 9 callbacks suppressed [ 893.891462][T31188] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6747'. [ 893.996549][T31198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6746'. [ 894.231736][T31204] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6750'. [ 894.428689][T31209] netlink: 'syz.3.6751': attribute type 39 has an invalid length. [ 895.061151][T31236] netlink: 'syz.3.6758': attribute type 11 has an invalid length. [ 895.085971][T31235] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6757'. [ 895.189724][T31239] netlink: 'syz.0.6760': attribute type 13 has an invalid length. [ 895.229548][T31249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6761'. [ 895.252450][T31249] netlink: 'syz.4.6761': attribute type 30 has an invalid length. [ 895.285205][T31251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6761'. [ 895.322708][T31251] netlink: 'syz.4.6761': attribute type 30 has an invalid length. [ 895.424497][T31256] netlink: 'syz.2.6763': attribute type 1 has an invalid length. [ 895.758259][T31256] bond2: entered promiscuous mode [ 895.789917][T31256] 8021q: adding VLAN 0 to HW filter on device bond2 [ 895.829514][T31262] delete_channel: no stack [ 895.838956][T28340] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.859927][T28340] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.941917][T31268] netlink: 528 bytes leftover after parsing attributes in process `syz.4.6766'. [ 895.962513][T28340] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.983748][T28340] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.103842][T31268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6766'. [ 896.186746][T31241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6759'. [ 896.211416][T31241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6759'. [ 896.639425][T31285] lo: entered promiscuous mode [ 896.677222][T31285] tunl0: entered promiscuous mode [ 896.776516][T31285] gre0: entered promiscuous mode [ 896.858210][T31285] gretap0: entered promiscuous mode [ 896.904958][T31285] erspan0: entered promiscuous mode [ 896.981942][T31285] ip_vti0: entered promiscuous mode [ 897.171723][T31303] netlink: 'syz.0.6778': attribute type 1 has an invalid length. [ 897.376630][T31307] ip6erspan0: entered allmulticast mode [ 897.565936][T31316] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 897.614043][T31316] netlink: 'syz.0.6783': attribute type 1 has an invalid length. [ 897.687562][T31318] syzkaller1: entered promiscuous mode [ 897.693883][T31318] syzkaller1: entered allmulticast mode [ 898.733050][T31262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 899.228779][T31349] __nla_validate_parse: 5 callbacks suppressed [ 899.228812][T31349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6793'. [ 899.385405][T31358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.672163][T31372] netlink: 320 bytes leftover after parsing attributes in process `syz.0.6799'. [ 899.871257][T31381] xt_hashlimit: size too large, truncated to 1048576 [ 900.198673][T31402] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6806'. [ 900.622531][T31422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6811'. [ 900.664878][T31422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.740382][T31422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.798380][T31427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6811'. [ 901.191297][T31449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6821'. [ 901.766061][T31479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6830'. [ 901.827998][T31493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6832'. [ 901.841246][T31493] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 901.849773][T31493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6832'. [ 901.976559][T31493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 902.055704][T31500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6835'. [ 902.074076][T31500] veth0: Caught tx_queue_len zero misconfig [ 902.359909][T31513] syzkaller0: entered promiscuous mode [ 902.366113][T31513] syzkaller0: entered allmulticast mode [ 902.476240][T31527] netlink: 'syz.4.6842': attribute type 39 has an invalid length. [ 903.322252][T31559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 903.456101][T31564] netlink: 'syz.0.6853': attribute type 12 has an invalid length. [ 903.486238][T31564] netlink: 'syz.0.6853': attribute type 29 has an invalid length. [ 903.519865][T31564] netlink: 'syz.0.6853': attribute type 1 has an invalid length. [ 903.558256][T31564] netlink: 'syz.0.6853': attribute type 2 has an invalid length. [ 903.618807][T31568] tipc: New replicast peer: 172.20.20.187 [ 903.643165][T31568] tipc: Enabled bearer , priority 10 [ 904.237051][T31596] __nla_validate_parse: 10 callbacks suppressed [ 904.237074][T31596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6858'. [ 904.300682][T31596] hsr_slave_1 (unregistering): left promiscuous mode [ 904.705838][T31622] tipc: Started in network mode [ 904.726026][T31622] tipc: Node identity ac14140f, cluster identity 4711 [ 904.748296][T31622] tipc: New replicast peer: 172.20.20.187 [ 904.769709][T31622] tipc: Enabled bearer , priority 10 [ 904.869124][T23154] IPVS: starting estimator thread 0... [ 904.983275][T31629] IPVS: using max 31 ests per chain, 74400 per kthread [ 905.764324][ T5938] tipc: Node number set to 2886997007 [ 906.029927][T31663] syzkaller0: entered promiscuous mode [ 906.039888][T31663] syzkaller0: entered allmulticast mode [ 909.057271][T24074] erspan0: left allmulticast mode [ 909.073192][T24074] erspan0: left promiscuous mode [ 909.088414][T24074] bridge2: port 1(erspan0) entered disabled state [ 909.125334][T24074] tipc: Resetting bearer [ 909.306551][T24074] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 909.366416][T24074] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 909.461505][T24074] tipc: Disabling bearer [ 909.520501][T24074] gretap0 (unregistering): left promiscuous mode [ 909.721226][T24074] bond1 (unregistering): Released all slaves [ 909.739477][T24074] bond2 (unregistering): Released all slaves [ 909.761438][T24074] bond0 (unregistering): left promiscuous mode [ 909.777578][T24074] bond0 (unregistering): Released all slaves [ 909.798541][T24074] bond3 (unregistering): Released all slaves [ 909.816117][T24074] bond4 (unregistering): Released all slaves [ 909.838266][T24074] bond5 (unregistering): (slave veth11): Releasing active interface [ 909.849200][T24074] bond5 (unregistering): Released all slaves [ 909.867507][T24074] bond6 (unregistering): Released all slaves [ 910.150307][T31738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6892'. [ 910.378534][T24074] tipc: Disabling bearer [ 910.401720][T24074] tipc: Left network mode [ 910.948164][T31758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6897'. [ 913.194032][T31758] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 913.420269][T31772] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6898'. [ 913.502554][T31778] macvlan0: entered promiscuous mode [ 913.707177][T31782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6903'. [ 913.813331][T31789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6906'. [ 913.846599][T31792] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.6907'. [ 913.848163][T31788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6906'. [ 913.915831][T31792] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.6907'. [ 914.006627][T31792] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.6907'. [ 914.045591][T31792] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.6907'. [ 914.619474][T31815] syzkaller0: entered promiscuous mode [ 914.652550][T31815] syzkaller0: entered allmulticast mode [ 914.740801][T31828] netlink: 'syz.1.6915': attribute type 11 has an invalid length. [ 915.227059][T31840] netlink: 'syz.0.6917': attribute type 1 has an invalid length. [ 915.687289][T31850] __nla_validate_parse: 63 callbacks suppressed [ 915.687311][T31850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6920'. [ 915.718430][T31851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6921'. [ 915.741549][T31847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6920'. [ 915.870154][T31847] team1: entered promiscuous mode [ 915.875943][T31847] team1: entered allmulticast mode [ 916.063202][T31860] syzkaller1: entered promiscuous mode [ 916.080987][T31860] syzkaller1: entered allmulticast mode [ 916.181546][T31864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6925'. [ 916.262533][T31866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6925'. [ 916.412527][T24074] hsr_slave_0: left promiscuous mode [ 916.438990][T24074] 0·: left promiscuous mode [ 916.486365][T24074] vlan0: left allmulticast mode [ 916.510340][T24074] veth0_vlan: left allmulticast mode [ 916.535506][T24074] vlan0: left promiscuous mode [ 916.559835][T24074] veth1_vlan: left promiscuous mode [ 917.629157][T24074] pim6reg (unregistering): left allmulticast mode [ 917.974746][T31890] –: renamed from vxcan1 (while UP) [ 918.950505][T24074] IPVS: stop unused estimator thread 0... [ 919.429346][T31967] syzkaller0: entered promiscuous mode [ 919.488173][T31970] netlink: 'syz.0.6949': attribute type 1 has an invalid length. [ 919.533304][T31970] netlink: 'syz.0.6949': attribute type 2 has an invalid length. [ 919.542239][T31972] netlink: 'syz.2.6950': attribute type 4 has an invalid length. [ 919.562255][T31970] netlink: 'syz.0.6949': attribute type 2 has an invalid length. [ 919.570961][T31972] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6950'. [ 919.588881][T31980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6949'. [ 919.622498][T31972] .`¹: renamed from bond0 (while UP) [ 919.680298][T31970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6949'. [ 919.717554][T31970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6949'. [ 919.753222][T31970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6949'. [ 920.151571][ T5862] Bluetooth: hci4: command 0x0406 tx timeout [ 920.241913][T32014] netlink: 'syz.2.6961': attribute type 2 has an invalid length. [ 920.322593][T32014] netlink: 'syz.2.6961': attribute type 21 has an invalid length. [ 920.388796][T32016] netlink: 'syz.2.6961': attribute type 2 has an invalid length. [ 920.901514][T32044] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6969'. [ 920.968866][T32050] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6969'. [ 921.016249][T32057] syzkaller1: entered promiscuous mode [ 921.030620][T32057] syzkaller1: entered allmulticast mode [ 921.056242][T32059] xt_hashlimit: size too large, truncated to 1048576 [ 921.328884][T32061] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.390307][T32061] bridge_slave_0 (unregistering): left allmulticast mode [ 921.419310][T32061] bridge_slave_0 (unregistering): left promiscuous mode [ 921.431426][T32061] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.607184][T32085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6977'. [ 922.104604][T32116] team0: left allmulticast mode [ 922.141147][T32116] team_slave_0: left allmulticast mode [ 922.176751][T32116] team_slave_1: left allmulticast mode [ 922.216813][T32116] team0: left promiscuous mode [ 922.229419][T32122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.249207][T32116] team_slave_0: left promiscuous mode [ 922.266989][T32122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6987'. [ 922.278080][T32116] team_slave_1: left promiscuous mode [ 922.288793][T32116] bridge0: port 3(team0) entered disabled state [ 922.301736][T32116] team0: Cannot enslave team device to itself [ 922.316737][T32119] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6985'. [ 922.451600][T32129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6989'. [ 922.486845][T32130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6989'. [ 922.526377][T32129] veth0_macvtap: left promiscuous mode [ 922.550961][T32138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6991'. [ 922.572377][T32138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6991'. [ 922.672067][T32140] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6991'. [ 922.804199][T32146] : entered promiscuous mode [ 923.128861][T32162] veth1_mac: renamed from veth0_vlan [ 923.155508][T32173] netlink: 'syz.4.6999': attribute type 2 has an invalid length. [ 923.377061][T32185] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 923.417611][T32185] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 923.860590][T32204] veth5: entered allmulticast mode [ 923.977481][T32215] netlink: 'syz.1.7010': attribute type 1 has an invalid length. [ 924.025043][T32215] netlink: 'syz.1.7010': attribute type 11 has an invalid length. [ 924.050565][T32208] veth7: entered allmulticast mode [ 925.142448][T32293] netlink: 'syz.0.7028': attribute type 7 has an invalid length. [ 925.176205][T32293] netlink: 'syz.0.7028': attribute type 8 has an invalid length. [ 925.229137][T32301] tipc: Failed to remove unknown binding: 66,1,1/727195605:3230752319/3230752321 [ 925.530811][T32316] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 925.589112][T32327] xt_hashlimit: size too large, truncated to 1048576 [ 925.968831][T32345] netlink: 'syz.1.7041': attribute type 1 has an invalid length. [ 925.978005][T32345] netlink: 'syz.1.7041': attribute type 7 has an invalid length. [ 925.986116][T32345] netlink: 'syz.1.7041': attribute type 8 has an invalid length. [ 925.994849][T32345] __nla_validate_parse: 7 callbacks suppressed [ 925.994868][T32345] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7041'. [ 926.011575][T32345] NCSI netlink: No device for ifindex 65584 [ 926.095474][T32337] bond2 (unregistering): Released all slaves [ 926.220691][T32344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7040'. [ 926.249303][T32346] H: renamed from dummy0 (while UP) [ 926.271065][T32358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7042'. [ 926.287088][T32358] netlink: 'syz.3.7042': attribute type 7 has an invalid length. [ 926.323734][T32358] netlink: 'syz.3.7042': attribute type 8 has an invalid length. [ 926.361789][T32358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7042'. [ 926.978334][T32395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7052'. [ 927.054804][T32395] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7052'. [ 927.114661][T32396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7052'. [ 927.210399][T32403] syzkaller0: entered promiscuous mode [ 927.233244][T32403] syzkaller0: entered allmulticast mode [ 927.428735][T32418] netlink: 'syz.3.7058': attribute type 28 has an invalid length. [ 927.459885][T32418] netlink: 'syz.3.7058': attribute type 3 has an invalid length. [ 927.485264][T32418] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7058'. [ 927.549135][T32424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7060'. [ 927.564811][T32424] openvswitch: netlink: Missing key (keys=40, expected=80) [ 927.609051][T32425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7060'. [ 928.574620][T32483] netlink: 'syz.3.7074': attribute type 1 has an invalid length. [ 928.612057][T13492] IPVS: starting estimator thread 0... [ 928.715566][T32489] IPVS: using max 28 ests per chain, 67200 per kthread [ 928.875372][T32494] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 929.177838][T32508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.219134][T32508] netlink: 'syz.2.7079': attribute type 33 has an invalid length. [ 929.458358][T32520] veth1_to_bond: entered allmulticast mode [ 929.497305][T32520] veth1_to_bond: left allmulticast mode [ 929.705254][T32530] syzkaller0: entered promiscuous mode [ 929.723723][T32530] syzkaller0: entered allmulticast mode [ 929.738865][T32529] syzkaller0: entered promiscuous mode [ 929.748928][T32529] syzkaller0: entered allmulticast mode [ 930.086783][ T5507] veth1_mac: left promiscuous mode [ 930.177912][ T5507] veth1_mac: entered promiscuous mode [ 930.647190][T32577] netlink: 'syz.0.7097': attribute type 10 has an invalid length. [ 930.984753][T32577] veth0_vlan: left promiscuous mode [ 931.007243][T32577] veth0_vlan: entered promiscuous mode [ 931.058752][T32577] team0: Device veth0_vlan failed to register rx_handler [ 931.148166][T32607] validate_nla: 1 callbacks suppressed [ 931.148187][T32607] netlink: 'syz.3.7104': attribute type 1 has an invalid length. [ 931.246753][T32588] bond5: entered promiscuous mode [ 931.254801][T32588] 8021q: adding VLAN 0 to HW filter on device bond5 [ 931.299133][T32592] 8021q: adding VLAN 0 to HW filter on device bond5 [ 931.318093][T32592] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 931.350409][T32592] bond5: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 931.389705][T32592] bond5: (slave ip6gre3): making interface the new active one [ 931.407442][T32592] ip6gre3: entered promiscuous mode [ 931.437329][T32592] bond5: (slave ip6gre3): Enslaving as an active interface with an up link [ 931.596433][T32620] netlink: 'syz.0.7105': attribute type 1 has an invalid length. [ 931.611053][T32607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 931.646893][T32609] bond1: (slave geneve3): making interface the new active one [ 931.660884][T32609] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 931.798198][T32620] 8021q: adding VLAN 0 to HW filter on device bond5 [ 931.822005][T32632] __nla_validate_parse: 10 callbacks suppressed [ 931.822028][T32632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7107'. [ 931.869171][ T6060] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 931.901794][ T6060] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 932.080954][ T6060] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 932.209676][ T6054] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 932.252118][T32643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 932.336904][T32648] bridge_slave_0: invalid flags given to default FDB implementation [ 932.978686][T32682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7120'. [ 933.162546][T32691] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 933.193522][T32687] IPVS: length: 239 != 24 [ 933.265465][T32699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7123'. [ 933.269386][T32697] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7122'. [ 933.291350][T32699] vlan2: entered allmulticast mode [ 933.305463][T32699] bond0: entered allmulticast mode [ 933.320886][T32699] bond_slave_0: entered allmulticast mode [ 933.328922][T32699] bond_slave_1: entered allmulticast mode [ 933.431000][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL [ 933.927171][T32729] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 934.127895][T32737] netem: change failed [ 934.145121][T32737] syzkaller0: entered promiscuous mode [ 934.163268][T32737] syzkaller0: entered allmulticast mode [ 934.204291][T32737] netlink: 'syz.3.7136': attribute type 1 has an invalid length. [ 934.230303][T32737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 934.237670][T32737] IPv6: NLM_F_CREATE should be set when creating new route [ 934.272171][T32741] erspan0: entered allmulticast mode [ 934.290909][T32745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7140'. [ 934.440116][T32748] netlink: 'syz.0.7141': attribute type 1 has an invalid length. [ 934.450488][T32745] netlink: 'syz.4.7140': attribute type 1 has an invalid length. [ 934.459337][T32745] netlink: 'syz.4.7140': attribute type 2 has an invalid length. [ 934.574428][T32758] netlink: 'syz.1.7143': attribute type 8 has an invalid length. [ 934.621443][T32761] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7141'. [ 934.655507][T32761] ip6tnl0: Caught tx_queue_len zero misconfig [ 935.079351][ T317] netlink: 'syz.3.7150': attribute type 21 has an invalid length. [ 935.115797][ T317] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7150'. [ 935.249715][ T323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7151'. [ 936.156647][ T375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7165'. [ 936.334284][ T381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7168'. [ 936.771464][ T30] audit: type=1800 audit(1777062138.779:15): pid=397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7173" name="memory.events" dev="tmpfs" ino=1101 res=0 errno=0 [ 936.821281][ T30] audit: type=1804 audit(1777062138.809:16): pid=397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.7173" name="/newroot/213/memory.events" dev="tmpfs" ino=1101 res=1 errno=0 [ 937.100684][ T409] syzkaller0: entered promiscuous mode [ 937.120023][ T409] syzkaller0: entered allmulticast mode [ 937.403763][ T408] wg1 speed is unknown, defaulting to 1000 [ 937.533869][ T422] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7181'. [ 937.555715][ T422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7181'. [ 937.945285][ T408] vxcan1 speed is unknown, defaulting to 1000 [ 938.124841][ T437] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 938.200453][ T438] syzkaller0: entered promiscuous mode [ 938.208848][ T438] syzkaller0: entered allmulticast mode [ 938.252509][ T438] tcf_pedit_act: 7 callbacks suppressed [ 938.252530][ T438] tc action pedit 'at' offset 134217728 out of bounds [ 938.267521][ T438] tc action pedit 'at' offset 134217728 out of bounds [ 938.274375][ T438] tc action pedit 'at' offset 134217728 out of bounds [ 938.281209][ T438] tc action pedit 'at' offset 134217728 out of bounds [ 938.288065][ T438] tc action pedit 'at' offset 134217728 out of bounds [ 938.294927][ T438] tc action pedit 'at' offset 134217728 out of bounds [ 938.301759][ T438] tc action pedit 'at' offset 134217728 out of bounds [ 938.308662][ T438] tc action pedit 'at' offset 134217728 out of bounds [ 938.315510][ T438] tc action pedit 'at' offset 134217728 out of bounds [ 938.322399][ T438] tc action pedit 'at' offset 134217728 out of bounds [ 938.329274][ T438] 0: reclassify loop, rule prio 0, protocol 800 [ 938.335777][ T438] 0: reclassify loop, rule prio 0, protocol 800 [ 939.238332][ T483] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7198'. [ 939.534854][ T489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7200'. [ 939.863095][ T510] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.7204'. [ 940.163073][ T520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7207'. [ 940.219358][ T523] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7207'. [ 940.568990][ T526] vlan2: entered allmulticast mode [ 940.580518][ T526] hsr0: entered allmulticast mode [ 940.586688][ T526] hsr_slave_0: entered allmulticast mode [ 940.594658][ T534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7210'. [ 940.715697][ T534] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.325670][ T563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7222'. [ 941.364825][ T563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7222'. [ 941.446890][ T576] netlink: 'syz.3.7226': attribute type 1 has an invalid length. [ 941.486475][ T568] syzkaller1: entered promiscuous mode [ 941.524777][ T568] syzkaller1: entered allmulticast mode [ 942.677406][ T631] tipc: Enabling of bearer rejected, already enabled [ 943.664527][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 950.866496][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 961.107205][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 966.067478][ T693] __nla_validate_parse: 4 callbacks suppressed [ 966.067497][ T693] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7253'. [ 966.124435][ T703] ip6erspan0: entered allmulticast mode [ 966.457743][ T718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7260'. [ 966.606909][ T735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 966.890191][ T744] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.7267'. [ 966.971386][ T741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7266'. [ 967.019449][ T741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7266'. [ 967.047917][ T741] IPVS: Error connecting to the multicast addr [ 967.290004][ T768] netlink: 'syz.1.7272': attribute type 8 has an invalid length. [ 967.309308][ T768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7272'. [ 967.805994][ T796] xt_hashlimit: size too large, truncated to 1048576 [ 968.338190][ T819] bridge3: entered promiscuous mode [ 968.361034][ T819] bridge3: entered allmulticast mode [ 968.450398][ T828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7285'. [ 968.519482][ T832] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7285'. [ 968.552263][ T834] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7287'. [ 968.674603][ T838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7289'. [ 968.761500][ T847] netlink: 'syz.3.7291': attribute type 3 has an invalid length. [ 968.790005][ T30] audit: type=1800 audit(1777062170.799:17): pid=850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7292" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1443 res=0 errno=0 [ 969.157257][ T865] bridge5: entered promiscuous mode [ 969.168882][ T865] bridge5: entered allmulticast mode [ 969.178978][ T874] netlink: 'syz.0.7301': attribute type 1 has an invalid length. [ 969.189374][ T874] netlink: 'syz.0.7301': attribute type 11 has an invalid length. [ 969.747189][ T900] x_tables: unsorted entry at hook 3 [ 969.921177][ T910] block nbd0: Unsupported socket: should be TCP or UNIX. [ 969.947223][ T909] syzkaller0: entered promiscuous mode [ 969.966052][ T909] syzkaller0: entered allmulticast mode [ 970.025440][ T6060] syzkaller0: tun_net_xmit 70 [ 970.034987][ T909] syzkaller0: tun_net_xmit 64726 [ 970.290728][ T933] netlink: 'syz.2.7319': attribute type 11 has an invalid length. [ 970.400892][ T933] veth5: entered promiscuous mode [ 970.419249][ T933] veth5: entered allmulticast mode [ 970.764266][ T970] netlink: 'syz.3.7326': attribute type 2 has an invalid length. [ 970.961266][ T977] veth9: entered allmulticast mode [ 971.562893][ T1003] __nla_validate_parse: 12 callbacks suppressed [ 971.562913][ T1003] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7334'. [ 971.614675][ T972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7327'. [ 971.658383][ T972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7327'. [ 971.960999][ T1017] IPv6: NLM_F_REPLACE set, but no existing node found! [ 972.161608][ T1025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7340'. [ 972.175118][ T1024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7341'. [ 972.220268][ T1021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.399182][ T1038] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7343'. [ 972.859560][ T1072] netlink: 'syz.2.7353': attribute type 3 has an invalid length. [ 973.231867][ T1090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7357'. [ 973.408413][ T1098] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7360'. [ 973.961470][ T1118] netlink: 'syz.2.7366': attribute type 11 has an invalid length. [ 973.974466][ T1118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 974.000218][T13492] IPVS: starting estimator thread 0... [ 974.092845][ T1120] IPVS: using max 31 ests per chain, 74400 per kthread [ 974.284610][ T1131] tipc: Trying to set illegal importance in message [ 974.384582][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 974.722162][ T1149] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7375'. [ 974.735180][ T1149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7375'. [ 974.763442][ T1149] netlink: 'syz.3.7375': attribute type 2 has an invalid length. [ 975.064726][ T1163] syzkaller0: entered promiscuous mode [ 975.085253][ T1163] syzkaller0: entered allmulticast mode [ 975.409582][ T1181] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 975.614319][ T1188] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 975.645262][ T1188] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 975.655179][ T1188] gretap1: entered promiscuous mode [ 975.660537][ T1188] gretap1: entered allmulticast mode [ 975.775854][ T1200] netlink: 'syz.0.7386': attribute type 1 has an invalid length. [ 975.813727][ T1202] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 975.864965][ T1197] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 975.890931][ T1197] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.909745][ T1206] netlink: 'syz.4.7390': attribute type 16 has an invalid length. [ 975.945254][ T1197] netdevsim netdevsim1 veth1_macvtap: renamed from netdevsim0 [ 976.480770][ T1228] netlink: 'syz.1.7398': attribute type 1 has an invalid length. [ 976.548267][ T1228] netlink: 'syz.1.7398': attribute type 1 has an invalid length. [ 976.626596][ T1228] __nla_validate_parse: 16 callbacks suppressed [ 976.626619][ T1228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7398'. [ 976.889877][ T1249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7402'. [ 977.182839][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 977.496187][ T1282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7412'. [ 977.696854][ T1291] netlink: 'syz.4.7415': attribute type 15 has an invalid length. [ 977.744391][ T1291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7415'. [ 977.901156][ T1303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7418'. [ 977.931892][ T1305] netlink: 'syz.1.7421': attribute type 1 has an invalid length. [ 977.943889][ T1305] netlink: 'syz.1.7421': attribute type 2 has an invalid length. [ 977.993674][ T1294] bond0: entered promiscuous mode [ 978.014687][ T1294] bond0: entered allmulticast mode [ 978.038446][ T1294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.146653][ T5507] 8021q: adding VLAN 0 to HW filter on device veth1_macvtap [ 978.553982][ T1335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 978.561306][ T1335] IPv6: NLM_F_CREATE should be set when creating new route [ 978.755678][ T1351] netlink: 'syz.3.7434': attribute type 62 has an invalid length. [ 978.838296][ T1355] netlink: 'syz.0.7435': attribute type 5 has an invalid length. [ 978.883006][ T1355] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7435'. [ 979.169146][ T30] audit: type=1107 audit(1777062181.179:18): pid=1371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='%`§Ñ3v‘Gú^bñe4Ê3  Ôä 0xffff: 1114244 [ 983.193715][ T1499] s5ÿÿø: renamed from vlan1 (while UP) [ 983.565241][ T1537] netlink: 'syz.2.7472': attribute type 12 has an invalid length. [ 983.675940][ T1537] bond4: option primary_reselect: invalid value (255) [ 983.688213][ T1537] bond4 (unregistering): Released all slaves [ 983.769880][ T1547] syz_tun: entered allmulticast mode [ 983.799450][ T1547] netlink: 'syz.2.7472': attribute type 21 has an invalid length. [ 983.821489][ T1547] IPv6: NLM_F_CREATE should be specified when creating new route [ 983.845147][ T1551] openvswitch: netlink: Key type 343 is out of range max 32 [ 983.871832][ T1537] syz_tun: left allmulticast mode [ 986.126697][ T1506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 986.328401][ T1570] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7479'. [ 986.348752][ T1572] netlink: 'syz.4.7480': attribute type 83 has an invalid length. [ 986.362362][ T1573] netlink: 'syz.4.7480': attribute type 83 has an invalid length. [ 986.401163][ T1572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7480'. [ 986.410956][ T1573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7480'. [ 986.446413][ T1576] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7481'. [ 986.490250][ T1582] syz.0.7483: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 986.507491][ T1582] CPU: 1 UID: 0 PID: 1582 Comm: syz.0.7483 Not tainted syzkaller #0 PREEMPT(full) [ 986.507536][ T1582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 986.507558][ T1582] Call Trace: [ 986.507568][ T1582] [ 986.507578][ T1582] dump_stack_lvl+0xe8/0x150 [ 986.507625][ T1582] warn_alloc+0x249/0x340 [ 986.507655][ T1582] ? stack_trace_save+0xa9/0x100 [ 986.507688][ T1582] ? __pfx_warn_alloc+0x10/0x10 [ 986.507724][ T1582] ? kasan_save_track+0x4f/0x80 [ 986.507748][ T1582] ? kasan_save_track+0x3e/0x80 [ 986.507772][ T1582] ? __kasan_kmalloc+0x93/0xb0 [ 986.507797][ T1582] ? __kmalloc_cache_noprof+0x31c/0x660 [ 986.507824][ T1582] ? xskq_create+0x56/0x170 [ 986.507849][ T1582] ? xsk_setsockopt+0x54c/0x990 [ 986.507872][ T1582] ? do_sock_setsockopt+0x17c/0x1b0 [ 986.507893][ T1582] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 986.507914][ T1582] ? do_syscall_64+0x15f/0xf80 [ 986.507948][ T1582] __vmalloc_node_range_noprof+0x132/0x1750 [ 986.508014][ T1582] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 986.508049][ T1582] ? __kasan_kmalloc+0x93/0xb0 [ 986.508081][ T1582] vmalloc_user_noprof+0xad/0xe0 [ 986.508106][ T1582] ? xskq_create+0xbf/0x170 [ 986.508134][ T1582] xskq_create+0xbf/0x170 [ 986.508163][ T1582] xsk_init_queue+0x8a/0xe0 [ 986.508191][ T1582] xsk_setsockopt+0x54c/0x990 [ 986.508219][ T1582] ? __pfx_xsk_setsockopt+0x10/0x10 [ 986.508245][ T1582] ? __pfx_aa_sk_perm+0x10/0x10 [ 986.508284][ T1582] ? aa_sock_opt_perm+0xff/0x1a0 [ 986.508310][ T1582] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 986.508336][ T1582] ? __pfx_xsk_setsockopt+0x10/0x10 [ 986.508363][ T1582] do_sock_setsockopt+0x17c/0x1b0 [ 986.508391][ T1582] __x64_sys_setsockopt+0x13d/0x1b0 [ 986.508418][ T1582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.508443][ T1582] do_syscall_64+0x15f/0xf80 [ 986.508472][ T1582] ? trace_irq_disable+0x3b/0x140 [ 986.508501][ T1582] ? clear_bhb_loop+0x40/0x90 [ 986.508529][ T1582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.508552][ T1582] RIP: 0033:0x7f44f6f9cdd9 [ 986.508573][ T1582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.508593][ T1582] RSP: 002b:00007f44f7e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 986.508616][ T1582] RAX: ffffffffffffffda RBX: 00007f44f7215fa0 RCX: 00007f44f6f9cdd9 [ 986.508632][ T1582] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 986.508645][ T1582] RBP: 00007f44f7032d69 R08: 0000000000000004 R09: 0000000000000000 [ 986.508659][ T1582] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 986.508672][ T1582] R13: 00007f44f7216038 R14: 00007f44f7215fa0 R15: 00007ffcd7026d68 [ 986.508706][ T1582] [ 986.508742][ T1582] Mem-Info: [ 986.536877][ T1577] bridge0: port 3(ipvlan2) entered blocking state [ 986.807730][ T1582] active_anon:5990 inactive_anon:0 isolated_anon:0 [ 986.807730][ T1582] active_file:2704 inactive_file:40776 isolated_file:0 [ 986.807730][ T1582] unevictable:768 dirty:59 writeback:0 [ 986.807730][ T1582] slab_reclaimable:12829 slab_unreclaimable:136259 [ 986.807730][ T1582] mapped:30512 shmem:1376 pagetables:1498 [ 986.807730][ T1582] sec_pagetables:0 bounce:0 [ 986.807730][ T1582] kernel_misc_reclaimable:0 [ 986.807730][ T1582] free:1268775 free_pcp:21062 free_cma:0 [ 986.844481][ T1577] bridge0: port 3(ipvlan2) entered disabled state [ 986.860049][ T1582] Node 0 active_anon:24060kB inactive_anon:0kB active_file:10816kB inactive_file:162904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32000kB dirty:236kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16408kB pagetables:5924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 986.901158][ T1582] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90048kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 986.906939][ T1577] ipvlan2: entered allmulticast mode [ 986.943522][ T1577] bridge0: entered allmulticast mode [ 986.945972][ T1582] Node 0 DMA free:11252kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 986.958182][ T1577] ipvlan2: left allmulticast mode [ 986.986298][ T1582] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 986.987690][ T1577] bridge0: left allmulticast mode [ 986.997854][ T1582] Node 0 DMA32 free:1361568kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24160kB inactive_anon:0kB active_file:10816kB inactive_file:162904kB unevictable:1536kB writepending:236kB zspages:0kB present:3129332kB managed:2550864kB mlocked:0kB bounce:0kB free_pcp:28016kB local_pcp:18028kB free_cma:0kB [ 987.037138][ T1582] lowmem_reserve[]: 0 0 0 0 0 [ 987.042107][ T1582] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:588kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 987.072435][ T1582] lowmem_reserve[]: 0 0 0 0 0 [ 987.077406][ T1582] Node 1 Normal free:3702280kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:56308kB local_pcp:27284kB free_cma:0kB [ 987.111243][ T1582] lowmem_reserve[]: 0 0 0 0 0 [ 987.117078][ T1582] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11252kB [ 987.164739][ T1582] Node 0 DMA32: 13556*4kB (UME) 8466*8kB (UME) 4562*16kB (UME) 459*32kB (UM) 167*64kB (UM) 988*128kB (UME) 956*256kB (U) 526*512kB (UME) 263*1024kB (UME) 113*2048kB (UM) 0*4096kB = 1361568kB [ 987.200086][ T1582] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 987.212004][ T1582] Node 1 Normal: 4*4kB (UM) 9*8kB (UM) 13*16kB (UM) 5*32kB (UM) 17*64kB (UM) 16*128kB (UM) 8*256kB (UM) 8*512kB (UM) 10*1024kB (UM) 6*2048kB (U) 896*4096kB (UM) = 3702280kB [ 987.232347][ T1582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 987.247101][ T1582] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 987.258431][ T1582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 987.268482][ T1582] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 987.278282][ T1582] 44852 total pagecache pages [ 987.283742][ T1582] 0 pages in swap cache [ 987.287980][ T1582] Free swap = 124996kB [ 987.292166][ T1582] Total swap = 124996kB [ 987.296672][ T1582] 2097051 pages RAM [ 987.300543][ T1582] 0 pages HighMem/MovableOnly [ 987.305408][ T1582] 427573 pages reserved [ 987.309596][ T1582] 0 pages cma reserved [ 987.316967][ T1585] netlink: 'syz.3.7482': attribute type 1 has an invalid length. [ 987.332795][ T1585] netlink: 'syz.3.7482': attribute type 1 has an invalid length. [ 987.449116][ T1593] netlink: 'syz.4.7485': attribute type 1 has an invalid length. [ 987.465509][ T1595] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.473334][ T1595] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.481140][ T1596] netlink: 'syz.4.7485': attribute type 1 has an invalid length. [ 987.495611][ T1598] openvswitch: netlink: Message has 8 unknown bytes. [ 987.502537][ T1598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 987.531522][ T1598] openvswitch: netlink: Message has 8 unknown bytes. [ 987.546426][ T1598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 987.767120][ T1613] veth1: Caught tx_queue_len zero misconfig [ 988.164847][ T1635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7500'. [ 988.196487][ T1640] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7499'. [ 988.197394][ T1635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7500'. [ 988.305581][ T1645] netlink: 'syz.3.7502': attribute type 2 has an invalid length. [ 988.318113][ T1645] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7502'. [ 988.561752][ T1657] netlink: 'syz.2.7505': attribute type 15 has an invalid length. [ 988.594604][ T1657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7505'. [ 988.634407][ T137] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 988.644323][ T1657] netlink: 'syz.2.7505': attribute type 15 has an invalid length. [ 988.656024][ T1657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7505'. [ 988.665885][ T137] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 988.678386][ T137] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 988.688930][ T137] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 988.910557][ T1678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7510'. [ 988.910557][ T1677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7510'. [ 989.103572][ T1686] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.7513'. [ 989.737745][ T1722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7524'. [ 989.889304][ T1729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.096718][ T1738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.158200][ T1743] netlink: 'syz.0.7530': attribute type 1 has an invalid length. [ 990.340496][ T1743] bond6: entered promiscuous mode [ 990.346345][ T1743] 8021q: adding VLAN 0 to HW filter on device bond6 [ 990.487351][ T1743] bond6: (slave bridge5): making interface the new active one [ 990.509607][ T1743] bridge5: entered promiscuous mode [ 990.526903][ T1743] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 990.651421][ T1768] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.715941][ T1765] netlink: 'syz.3.7535': attribute type 10 has an invalid length. [ 990.745921][ T1765] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 990.801759][ T1765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 990.829995][ T1765] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 991.779240][ T1795] veth0_macvtap: left promiscuous mode [ 991.823642][ T5848] Bluetooth: hci2: command 0x0419 tx timeout [ 992.187088][ T1830] bond4 (unregistering): Released all slaves [ 992.338091][ T1845] netlink: 'syz.0.7554': attribute type 25 has an invalid length. [ 992.634775][ T1857] syzkaller1: entered allmulticast mode [ 992.810503][ T1861] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 992.836499][ T1861] bond4 (unregistering): Released all slaves [ 992.869871][ T1867] netlink: 'syz.1.7564': attribute type 1 has an invalid length. [ 992.878229][ T1867] netlink: 'syz.1.7564': attribute type 1 has an invalid length. [ 992.887884][ T1867] netlink: 'syz.1.7564': attribute type 8 has an invalid length. [ 993.491074][ T1900] __nla_validate_parse: 12 callbacks suppressed [ 993.491098][ T1900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7573'. [ 993.530679][ T1900] netlink: 'syz.0.7573': attribute type 1 has an invalid length. [ 993.543773][ T1900] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7573'. [ 993.752100][ T1921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.896043][ T1932] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7581'. [ 993.987931][ T1935] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7581'. [ 994.017778][ T1935] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 994.066635][ T1928] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7581'. [ 994.130910][ T1940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7584'. [ 994.504765][ T1969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7591'. [ 994.526993][ T1969] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7591'. [ 994.840922][ T137] bond0: (slave bond_slave_0): interface is now down [ 994.876122][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL [ 994.896536][ T137] bond0: (slave bond_slave_1): interface is now down [ 994.921439][ T137] bond0: now running without any active interface! [ 995.272451][ T1998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7599'. [ 995.391190][ T2005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.536374][ T6054] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 995.546208][ T6054] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 995.573882][ T5938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 995.764083][T13485] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 995.843416][T13485] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 995.889905][ T2027] xt_hashlimit: size too large, truncated to 1048576 [ 995.909070][ T2012] IPv6: sit1: Disabled Multicast RS [ 996.000927][ T2031] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.138197][ T2031] bridge_slave_0 (unregistering): left allmulticast mode [ 996.161961][ T2042] netlink: 'syz.0.7611': attribute type 4 has an invalid length. [ 996.174340][ T2031] bridge_slave_0 (unregistering): left promiscuous mode [ 996.192196][ T2042] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7611'. [ 996.198202][ T2031] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.506995][ T2058] netlink: zone id is out of range [ 996.526773][ T2058] netlink: zone id is out of range [ 996.529404][ T2055] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 996.542144][ T2058] netlink: zone id is out of range [ 996.566535][ T2058] netlink: zone id is out of range [ 996.578866][ T2058] netlink: zone id is out of range [ 996.589985][ T2058] netlink: zone id is out of range [ 996.604414][ T2058] netlink: zone id is out of range [ 996.616391][ T2058] netlink: zone id is out of range [ 996.628463][ T2058] netlink: zone id is out of range [ 997.667789][ T2119] syzkaller0: entered promiscuous mode [ 997.677793][ T2119] syzkaller0: entered allmulticast mode [ 998.003347][ T2139] netlink: 'syz.4.7638': attribute type 29 has an invalid length. [ 998.035152][ T2139] netlink: 'syz.4.7638': attribute type 29 has an invalid length. [ 998.123989][ T2153] lo: Caught tx_queue_len zero misconfig [ 998.137214][ T2153] erspan0: entered allmulticast mode [ 998.278416][ T2158] netlink: 'syz.3.7644': attribute type 4 has an invalid length. [ 998.356240][ T2158] .`¹: renamed from bond0 (while UP) [ 998.545675][ T2171] __nla_validate_parse: 5 callbacks suppressed [ 998.545696][ T2171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7649'. [ 999.309437][ T2209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7659'. [ 999.363931][ T2209] netlink: 'syz.3.7659': attribute type 8 has an invalid length. [ 999.398819][ T2213] netlink: 'syz.3.7659': attribute type 1 has an invalid length. [ 999.662812][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 999.926291][ T2239] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7665'. [ 999.954731][ T2240] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7665'. [ 1000.083448][ T2245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7666'. [ 1000.871739][ T2293] netlink: 'syz.0.7678': attribute type 1 has an invalid length. [ 1001.167934][ T2308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.183660][ T2308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.201843][ T2308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.221645][ T2308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.349954][ T2274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1001.411951][ T2317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7685'. [ 1002.176592][ T2347] netlink: 420 bytes leftover after parsing attributes in process `syz.0.7692'. [ 1002.227154][ T2352] netlink: 'syz.1.7693': attribute type 32 has an invalid length. [ 1002.263121][ T2352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7693'. [ 1002.369603][ T2352] bond6: option coupled_control: invalid value (192) [ 1002.387367][ T2352] bond6 (unregistering): Released all slaves [ 1002.581843][ T2364] gtp1: entered promiscuous mode [ 1002.619886][ T2364] gtp1: entered allmulticast mode [ 1003.122507][ T2395] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7704'. [ 1003.135689][ T2396] netlink: 'syz.3.7706': attribute type 178 has an invalid length. [ 1003.181671][ T2396] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1003.559551][ T2419] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7714'. [ 1003.818204][ T2445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7718'. [ 1003.876943][ T2447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7718'. [ 1003.914598][ T2447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7718'. [ 1004.219851][ T2469] veth5: entered allmulticast mode [ 1004.353337][ T2471] bond0: option fail_over_mac: invalid value (16) [ 1004.375585][ T2471] bond0 (unregistering): Released all slaves [ 1004.458211][ T2473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7728'. [ 1004.650026][ T2489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7731'. [ 1004.739506][ T2499] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 1004.759797][ T2495] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 1004.901062][ T2504] netlink: 'syz.2.7735': attribute type 1 has an invalid length. [ 1004.926965][ T2504] netlink: 476 bytes leftover after parsing attributes in process `syz.2.7735'. [ 1004.944511][ T2504] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.7735'. [ 1004.996511][ T2509] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 1005.174254][ T2523] netlink: 'syz.2.7742': attribute type 3 has an invalid length. [ 1005.207917][ T2523] netlink: 'syz.2.7742': attribute type 3 has an invalid length. [ 1005.244143][ T2523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7742'. [ 1005.255853][ T2532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7742'. [ 1005.301374][ T2535] net_ratelimit: 5 callbacks suppressed [ 1005.301393][ T2535] netlink: zone id is out of range [ 1005.361038][ T2535] netlink: zone id is out of range [ 1005.397563][ T2531] netlink: set zone limit has 4 unknown bytes [ 1005.419536][ T2535] syzkaller0: entered promiscuous mode [ 1005.455126][ T2535] syzkaller0: entered allmulticast mode [ 1006.311654][ T2583] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1006.331484][ T2579] ip6gre4: entered allmulticast mode [ 1006.506563][ T2590] netlink: 'syz.1.7759': attribute type 16 has an invalid length. [ 1006.954735][ T2629] netlink: 'syz.3.7766': attribute type 15 has an invalid length. [ 1007.093664][ T2637] xt_NFQUEUE: number of total queues is 0 [ 1007.472722][ T2637] nbd0: detected capacity change from 0 to 63 [ 1007.491209][ T5862] block nbd0: Receive control failed (result -104) [ 1007.499618][ T5848] block nbd0: Receive control failed (result -32) [ 1008.191702][ T2712] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1008.302786][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1008.618743][ T2746] netlink: 'syz.1.7796': attribute type 16 has an invalid length. [ 1008.647240][ T2748] __nla_validate_parse: 13 callbacks suppressed [ 1008.647263][ T2748] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7798'. [ 1008.681011][ T2741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.704435][ T2746] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7796'. [ 1008.735619][ T2741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.791844][ T2741] tipc: Resetting bearer [ 1008.824532][ T2741] tipc: Resetting bearer [ 1008.891990][T28341] tipc: Resetting bearer [ 1008.899759][ T2759] netlink: 'syz.2.7801': attribute type 1 has an invalid length. [ 1008.908979][ T2759] netlink: 'syz.2.7801': attribute type 2 has an invalid length. [ 1009.172222][ T2765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7804'. [ 1009.497897][ T2765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.557459][ T2765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.784014][ T2800] netlink: 'syz.3.7812': attribute type 1 has an invalid length. [ 1009.796106][ T2800] netlink: 'syz.3.7812': attribute type 3 has an invalid length. [ 1009.807339][ T2797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7809'. [ 1009.818665][ T2800] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7812'. [ 1009.838872][ T2800] NCSI netlink: No device for ifindex 813332851 [ 1009.868046][ T2803] netlink: 'syz.4.7813': attribute type 1 has an invalid length. [ 1009.916793][ T2806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7814'. [ 1010.005171][ T2808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7815'. [ 1010.042294][ T2810] tipc: Started in network mode [ 1010.047968][ T2810] tipc: Node identity ac14140f, cluster identity 4711 [ 1010.055588][ T2810] tipc: New replicast peer: 255.255.255.255 [ 1010.062429][ T2810] tipc: Enabled bearer , priority 10 [ 1010.197044][ T2821] netlink: 'syz.2.7818': attribute type 1 has an invalid length. [ 1010.211176][ T2821] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1010.417912][ T2845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.671531][ T2853] pim6reg1: entered promiscuous mode [ 1010.704716][ T2853] pim6reg1: entered allmulticast mode [ 1010.879421][ T2864] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7828'. [ 1011.099022][ T2868] syzkaller0: entered promiscuous mode [ 1011.112775][ T2868] syzkaller0: entered allmulticast mode [ 1013.791933][T14684] tipc: Node number set to 2886997007 [ 1013.803802][ T2902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7834'. [ 1014.042466][ T2912] xt_hashlimit: size too large, truncated to 1048576 [ 1014.107148][ T2908] syzkaller0: entered promiscuous mode [ 1014.114264][ T2908] syzkaller0: entered allmulticast mode [ 1014.146434][ T2911] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1014.198910][ T2927] [ 1014.208785][ T2927] ====================================================== [ 1014.215833][ T2927] WARNING: possible circular locking dependency detected [ 1014.222932][ T2927] syzkaller #0 Not tainted [ 1014.227380][ T2927] ------------------------------------------------------ [ 1014.234436][ T2927] syz.1.7835/2927 is trying to acquire lock: [ 1014.240447][ T2927] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1014.249638][ T2927] [ 1014.249638][ T2927] but task is already holding lock: [ 1014.257040][ T2927] ffff88802abbd370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1014.266364][ T2927] [ 1014.266364][ T2927] which lock already depends on the new lock. [ 1014.266364][ T2927] [ 1014.276791][ T2927] [ 1014.276791][ T2927] the existing dependency chain (in reverse order) is: [ 1014.285826][ T2927] [ 1014.285826][ T2927] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1014.293852][ T2927] _raw_spin_lock_bh+0x36/0x50 [ 1014.299180][ T2927] nr_rt_device_down+0x153/0x860 [ 1014.304697][ T2927] nr_device_event+0x137/0x150 [ 1014.310028][ T2927] notifier_call_chain+0x1ad/0x3d0 [ 1014.315678][ T2927] __dev_notify_flags+0x16d/0x310 [ 1014.321247][ T2927] netif_change_flags+0xe8/0x1a0 [ 1014.326739][ T2927] dev_change_flags+0x130/0x270 [ 1014.332141][ T2927] dev_ioctl+0x7b4/0x1150 [ 1014.337021][ T2927] sock_do_ioctl+0x23e/0x320 [ 1014.342190][ T2927] sock_ioctl+0x5c6/0x7f0 [ 1014.347066][ T2927] __se_sys_ioctl+0xfc/0x170 [ 1014.352204][ T2927] do_syscall_64+0x15f/0xf80 [ 1014.357341][ T2927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.363781][ T2927] [ 1014.363781][ T2927] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1014.371626][ T2927] _raw_spin_lock_bh+0x36/0x50 [ 1014.376930][ T2927] nr_rt_device_down+0xbe/0x860 [ 1014.382336][ T2927] nr_device_event+0x137/0x150 [ 1014.387646][ T2927] notifier_call_chain+0x1ad/0x3d0 [ 1014.393308][ T2927] __dev_notify_flags+0x16d/0x310 [ 1014.398879][ T2927] netif_change_flags+0xe8/0x1a0 [ 1014.404367][ T2927] dev_change_flags+0x130/0x270 [ 1014.409771][ T2927] dev_ioctl+0x7b4/0x1150 [ 1014.414654][ T2927] sock_do_ioctl+0x23e/0x320 [ 1014.419793][ T2927] sock_ioctl+0x5c6/0x7f0 [ 1014.424667][ T2927] __se_sys_ioctl+0xfc/0x170 [ 1014.429806][ T2927] do_syscall_64+0x15f/0xf80 [ 1014.434942][ T2927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.441380][ T2927] [ 1014.441380][ T2927] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1014.449314][ T2927] __lock_acquire+0x15a5/0x2cf0 [ 1014.454714][ T2927] lock_acquire+0x106/0x350 [ 1014.459771][ T2927] _raw_spin_lock_bh+0x36/0x50 [ 1014.465073][ T2927] nr_rt_ioctl+0x40c/0xf90 [ 1014.470029][ T2927] sock_do_ioctl+0x101/0x320 [ 1014.475184][ T2927] sock_ioctl+0x5c6/0x7f0 [ 1014.480099][ T2927] __se_sys_ioctl+0xfc/0x170 [ 1014.485252][ T2927] do_syscall_64+0x15f/0xf80 [ 1014.490385][ T2927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.496815][ T2927] [ 1014.496815][ T2927] other info that might help us debug this: [ 1014.496815][ T2927] [ 1014.507058][ T2927] Chain exists of: [ 1014.507058][ T2927] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1014.507058][ T2927] [ 1014.520902][ T2927] Possible unsafe locking scenario: [ 1014.520902][ T2927] [ 1014.528369][ T2927] CPU0 CPU1 [ 1014.533751][ T2927] ---- ---- [ 1014.539132][ T2927] lock(&nr_node->node_lock); [ 1014.543933][ T2927] lock(nr_node_list_lock); [ 1014.551087][ T2927] lock(&nr_node->node_lock); [ 1014.558393][ T2927] lock(nr_neigh_list_lock); [ 1014.563096][ T2927] [ 1014.563096][ T2927] *** DEADLOCK *** [ 1014.563096][ T2927] [ 1014.571248][ T2927] 2 locks held by syz.1.7835/2927: [ 1014.576366][ T2927] #0: ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1014.585886][ T2927] #1: ffff88802abbd370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1014.595582][ T2927] [ 1014.595582][ T2927] stack backtrace: [ 1014.601483][ T2927] CPU: 0 UID: 0 PID: 2927 Comm: syz.1.7835 Not tainted syzkaller #0 PREEMPT(full) [ 1014.601505][ T2927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1014.601517][ T2927] Call Trace: [ 1014.601524][ T2927] [ 1014.601533][ T2927] dump_stack_lvl+0xe8/0x150 [ 1014.601563][ T2927] print_circular_bug+0x2e1/0x300 [ 1014.601589][ T2927] check_noncircular+0x12e/0x150 [ 1014.601612][ T2927] __lock_acquire+0x15a5/0x2cf0 [ 1014.601641][ T2927] ? kasan_save_track+0x4f/0x80 [ 1014.601662][ T2927] ? kasan_save_track+0x3e/0x80 [ 1014.601680][ T2927] ? kasan_save_free_info+0x46/0x50 [ 1014.601707][ T2927] ? __kasan_slab_free+0x5c/0x80 [ 1014.601725][ T2927] ? kfree+0x1c5/0x640 [ 1014.601740][ T2927] ? tomoyo_path_number_perm+0x501/0x630 [ 1014.601764][ T2927] ? security_file_ioctl+0xc3/0x2a0 [ 1014.601785][ T2927] ? __se_sys_ioctl+0x47/0x170 [ 1014.601805][ T2927] ? do_syscall_64+0x15f/0xf80 [ 1014.601826][ T2927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.601846][ T2927] ? nr_rt_ioctl+0x40c/0xf90 [ 1014.601860][ T2927] lock_acquire+0x106/0x350 [ 1014.601883][ T2927] ? nr_rt_ioctl+0x40c/0xf90 [ 1014.601899][ T2927] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1014.601923][ T2927] ? nr_rt_ioctl+0x40c/0xf90 [ 1014.601938][ T2927] _raw_spin_lock_bh+0x36/0x50 [ 1014.601958][ T2927] ? nr_rt_ioctl+0x40c/0xf90 [ 1014.601972][ T2927] nr_rt_ioctl+0x40c/0xf90 [ 1014.601992][ T2927] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1014.602011][ T2927] ? apparmor_capable+0x126/0x170 [ 1014.602034][ T2927] ? capable+0x88/0xe0 [ 1014.602058][ T2927] ? nr_ioctl+0x1b1/0x3b0 [ 1014.602080][ T2927] sock_do_ioctl+0x101/0x320 [ 1014.602104][ T2927] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1014.602124][ T2927] ? do_futex+0x395/0x420 [ 1014.602145][ T2927] sock_ioctl+0x5c6/0x7f0 [ 1014.602171][ T2927] ? __pfx_sock_ioctl+0x10/0x10 [ 1014.602191][ T2927] ? __fget_files+0x2a/0x420 [ 1014.602206][ T2927] ? __fget_files+0x3a0/0x420 [ 1014.602222][ T2927] ? __fget_files+0x2a/0x420 [ 1014.602238][ T2927] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1014.602260][ T2927] ? __pfx_sock_ioctl+0x10/0x10 [ 1014.602280][ T2927] __se_sys_ioctl+0xfc/0x170 [ 1014.602300][ T2927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.602317][ T2927] do_syscall_64+0x15f/0xf80 [ 1014.602338][ T2927] ? trace_irq_disable+0x3b/0x140 [ 1014.602360][ T2927] ? clear_bhb_loop+0x40/0x90 [ 1014.602377][ T2927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.602394][ T2927] RIP: 0033:0x7f07dc39cdd9 [ 1014.602409][ T2927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.602424][ T2927] RSP: 002b:00007f07dd1a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1014.602440][ T2927] RAX: ffffffffffffffda RBX: 00007f07dc616270 RCX: 00007f07dc39cdd9 [ 1014.602453][ T2927] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000d [ 1014.602464][ T2927] RBP: 00007f07dc432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1014.602474][ T2927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.602484][ T2927] R13: 00007f07dc616308 R14: 00007f07dc616270 R15: 00007ffe9f4b22e8 [ 1014.602522][ T2927] [ 1014.927916][ T2930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7840'. [ 1015.233784][ T2920] netlink: 'syz.2.7839': attribute type 29 has an invalid length. [ 1015.241657][ T2920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7839'. [ 1015.356523][ T3565] dvmrp0: left allmulticast mode [ 1015.410535][ T3565] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 1015.424242][ T3565] bond10 (unregistering): (slave ip6gre1): Releasing backup interface [ 1015.432437][ T3565] ip6gre1 (unregistering): left promiscuous mode [ 1015.558186][ T3565] bond12 (unregistering): (slave geneve3): Releasing active interface [ 1015.577853][ T3565] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1016.018705][ T3565] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1016.028117][ T3565] mac80211_hwsim hwsim44 wlan1: left allmulticast mode [ 1016.035800][ T3565] bond0 (unregistering): Released all slaves [ 1016.045107][ T3565] bond1 (unregistering): Released all slaves [ 1016.057132][ T3565] bond2 (unregistering): Released all slaves [ 1016.070772][ T3565] bond3 (unregistering): Released all slaves [ 1016.081585][ T3565] bond4 (unregistering): Released all slaves [ 1016.092135][ T3565] bond5 (unregistering): Released all slaves [ 1016.104831][ T3565] bond6 (unregistering): Released all slaves [ 1016.120688][ T3565] bond7 (unregistering): Released all slaves [ 1016.133283][ T3565] bond8 (unregistering): Released all slaves [ 1016.144505][ T3565] bond9 (unregistering): Released all slaves [ 1016.155385][ T3565] bond10 (unregistering): Released all slaves [ 1016.171303][ T3565] bond11 (unregistering): Released all slaves [ 1016.183175][ T3565] bond12 (unregistering): Released all slaves [ 1016.293343][ T3565] IPVS: stopping master sync thread 19356 ... [ 1016.791592][ T3565] hsr_slave_0: left promiscuous mode [ 1017.003923][ T3565] smc: removing net device team0 with user defined pnetid SYZ2 [ 1017.340358][ T3565] IPVS: stop unused estimator thread 0...