last executing test programs: 2.802828883s ago: executing program 1 (id=4406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x258, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0xeb, 0x6, "01476c8beb834651d9c82c3baa4fbdf3c888bd0feadad637a038113220695acf4b69af0421cdcf208668bcf1ddcd280ba513f437b3701fab48155cd7b6a8759a8aa6775947ba83fb540d26bde02fc5dc185a71b28bd2af1d98779fe03be5527ac5d9da0bee29871c389518159ef7e0b3e93c26e096c2d7b17d5cb93a11984393b9d18f116ef152299056efef1a60aa48b909a3ed4754598183fc4d2c25bd5821bbdaa006f910f7daa5b0c6665121556598f09ec035bf6bc638a08893256b430b83be897f386dbedf0bf1dcecc4f24be24034e51976c091b74ccb2dac73cc1e3e37fd1a0cf89d79"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x3e, 0x6, "81635b9a7de8012babfbe94fe90492b8535857f4792924f7ee7ef23999fc0ebce825a680843e7d00916b7c4066d99f83db906a91f8c0f3c1da40"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xe2, 0x6, "486fa9f44601a34b6884d65e88cf8742d1ab28606cc1f973d0875d6295dec55e65ba178620f26db8753e46986773701f1133b8345d39b4e6937e61eb8c3485223131226f610a84018181123db21812729925b724ec5cecbdb4ad44cf9839a0938db665f40899cfa5be25ba44f8355799e84639b3f1e642313b247a1ed54cc41f953201112e367e720ccc9edc9da88aa206c894a4785a4b3ebed1e53a19f7399b0a09ccf783589707e4ec2a24d3b7c35e4f1aefb75c08491838b065b230322424f9066510c91d776df3dee48fd344e1b8cd15123dc2a4861d34a52a3cca4f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10}}, 0x2e8}}, 0x0) 2.702228985s ago: executing program 1 (id=4407): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400892f88668c48e4a31c400000"], 0x14}, 0x1, 0x0, 0x0, 0x14048080}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000520001c7b67583212a00e10f00a70000101c04ec465f146cd63c9abec573d38d6c5840ca1984d369dcad3816cb201336d399071f398c38ded84efc0a2c597daaf24959151c53666a2b496a8d5934a3b73c62132bcd01102063dae387ee678dba95839f0f59871861f46c"], 0x18}}, 0x4000000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r3, 0x3) accept4(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000015b301000000000600008e000144f30abe5d87bb05"], 0x1c}, 0x1, 0x0, 0x0, 0x4048004}, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000380)={[0x1ff]}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3d10bcd3", @ANYRES16=r8, @ANYBLOB="030f000000000000000008000000a00001000500000000000000000000000000000000c19f7a1454d56fddf96d337648f7cfc3c0413fc7ce5e12bcbad680b7a9bcc90e8e6b8361db14f7e8fba00c12f352f8ebfba7c06a5f5bc01d7d4d81c202bc84d426525450a7fbef652bfc7579833269876d094286f234535b897fe233c6626aa7e49c8e4886d9d423a6da88bff3e40cf16a54806acd1a1bd85eef99148a2ae64b8763936d7918e8481033f0"], 0xb4}}, 0x20000000) 1.76032818s ago: executing program 2 (id=4420): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="4ee0ffff00febabec91177fb86dd", 0x0, 0x6e980000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f"], 0x2c}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r5, 0x29, 0x7, 0x0, &(0x7f0000000180)) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r6, 0x118, 0x3, 0x0, &(0x7f00000003c0)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="a3", 0x2}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x9, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r9, 0x0, r8, 0x0, 0x8000f25, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r9, r4, 0x3d, 0x2000, 0x0, @value, @void, @void, @void, r7}, 0x20) 1.702497935s ago: executing program 1 (id=4422): r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmmsg$inet(r4, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x4050) (async) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000180)=""/214, 0xd6}], 0x2, &(0x7f00000002c0)}, 0x10162) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095003387099f3cb25ea0000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 1.554019949s ago: executing program 2 (id=4423): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000010c0)=@newtaction={0x930, 0x30, 0x871a15abc695fb3d, 0x0, 0x100000, {}, [{0x91c, 0x1, [@m_police={0x918, 0x2, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x41, 0x5, 0x7f, 0x2, 0x1, 0x4, 0x7, 0xfffffffb, 0x4, 0x100, 0x97, 0xb8ba, 0x8, 0x9, 0xfffffff8, 0x0, 0x5, 0x9, 0x6, 0x6, 0x80000001, 0x6, 0x2, 0x7, 0x4, 0x34, 0x3, 0x8001, 0x2, 0x86, 0x4, 0x2, 0x3, 0x1, 0xc, 0x81, 0xf055, 0x44, 0x7, 0x7f, 0x401, 0x9, 0x0, 0x2, 0x8, 0x59, 0x8, 0x7fff, 0x3ff, 0x4, 0xc8a00000, 0xffff, 0x1db7, 0x0, 0x6, 0xdb9, 0xf, 0x7, 0x6, 0x87, 0x800, 0x10, 0x2e3d, 0x2, 0x2, 0xad, 0x0, 0x9, 0x1, 0x9, 0x8001, 0xde6, 0x7, 0x1, 0x9, 0x1, 0x10000, 0x2, 0x6, 0x81, 0xfffffff8, 0x8001, 0x5, 0x1, 0x9, 0x7f, 0x0, 0x4, 0x49, 0x2, 0x5, 0x6000, 0x9, 0xc, 0x3, 0x101, 0x90, 0x6ace, 0x7, 0x2a, 0x0, 0x8001, 0x9, 0x4, 0xc, 0x2, 0xce, 0x0, 0x7, 0x6, 0x8, 0x1, 0x6, 0x8, 0x3ff, 0x5, 0x3ba76026, 0x10000, 0x100, 0xfff, 0x3, 0x6, 0xfffffff8, 0xc0c, 0x40, 0x10, 0x7fffffff, 0xda0, 0x7, 0x5, 0x6, 0x78897009, 0x3, 0x8, 0x6, 0x81, 0x9, 0x100, 0xffffffc1, 0x7, 0x9, 0x4, 0x10001, 0x200, 0x5, 0xf8bd, 0x1, 0x3, 0x80000000, 0xfffffffb, 0x7fff, 0xa67f, 0x6, 0xfffffffe, 0xfffffc01, 0x7, 0x6, 0x2, 0xfc0, 0x3, 0xf2, 0x4, 0xfec, 0x8, 0x40, 0x2a, 0xdc, 0xcf3, 0x140000, 0xc79, 0x6, 0x401, 0x200, 0xc9a25c67, 0x200, 0x7, 0xffffffff, 0x26, 0x1ff, 0xffffffff, 0x7fff, 0xffffff7f, 0x3ff, 0x9, 0xe87, 0x1, 0x1, 0x98, 0xc, 0x6, 0xfff, 0x0, 0x1, 0x1, 0x40, 0x9, 0x5, 0x3, 0x7f, 0x9, 0x8, 0x7, 0x6, 0x7ff, 0xdc81, 0x4, 0x9, 0xa9ba, 0x2, 0x6, 0x4, 0x6, 0x9, 0x2de, 0x1, 0x8001, 0x9, 0x9, 0xf, 0x80000000, 0x4, 0x3, 0x1, 0x9, 0x6, 0x9, 0x9, 0x100, 0x2, 0x4, 0x0, 0x4, 0x160, 0x9, 0x8, 0x5, 0x3, 0x1000, 0x516, 0x9, 0x8000, 0x3, 0x8, 0x9, 0xe29, 0x4, 0x401, 0x5, 0xfffffff9, 0x9, 0x400, 0x8, 0xc, 0x5, 0xfffffff5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x1ff, 0x8, 0x7ff, 0x7, 0x10001, 0x81, 0x80000001, 0x7f, 0x4, 0x1, 0x4, 0x80, 0x7fffffff, 0x8000, 0xe85, 0xc8, 0xda1, 0x40f, 0x6, 0xffff, 0x8, 0x5, 0x0, 0x2, 0xa, 0x2, 0xfffff800, 0x1ff, 0x5, 0x8, 0x7, 0x7, 0x3e90, 0xb, 0xffff, 0x2, 0x9, 0x1, 0x5, 0xfffff095, 0x4, 0xff, 0x80000001, 0x1000, 0x1, 0x100, 0x6, 0x1c000, 0x1, 0x0, 0x7, 0x200, 0x200, 0x4, 0x6, 0x3e6b, 0xff, 0xffffffff, 0x3, 0x6, 0x5, 0x800, 0x8, 0x100, 0xf, 0x7fff, 0x6, 0x1, 0x4, 0x5, 0x1, 0x3126, 0x3, 0x81, 0x7, 0x2, 0x2a622bb4, 0x0, 0x9, 0x3, 0x80000000, 0x7, 0xa1d, 0x5, 0x6, 0x0, 0x0, 0x81, 0x1, 0x1000, 0xa34, 0x1, 0xa4d3, 0x8, 0xfffffff8, 0x5, 0x0, 0x4, 0x4, 0x4, 0x3, 0x7fffffff, 0x5, 0x3, 0x1, 0x3ff, 0xe, 0x1000, 0x7ff, 0x7ff, 0x6, 0x8, 0x22ac6fb4, 0x1ff, 0x7, 0x9499, 0x2, 0x8, 0x1, 0xf, 0xc, 0x0, 0x7, 0x5, 0x2, 0x1, 0x8000, 0x81, 0xfffffffd, 0x400, 0x5, 0x5, 0xfffffff6, 0x5, 0x2, 0x7, 0x9, 0x800, 0x9, 0x8, 0x1, 0x40, 0xfff, 0xca, 0x8, 0x9, 0xffff, 0x8, 0xfffff7f8, 0x0, 0x6, 0x3, 0x400, 0x4, 0x7, 0x4, 0xffffff81, 0x3, 0xac6b, 0x401, 0x401, 0xe, 0x480, 0xc4b4, 0x6, 0xce, 0x5, 0x7ff, 0x1ff, 0x7f, 0x1, 0xff, 0x3, 0xf, 0x4, 0x4, 0x0, 0x5, 0x8, 0x2, 0x81, 0x2, 0x3, 0x1, 0x8, 0x4, 0xffff8001, 0x6, 0x101, 0x8, 0x7, 0x6, 0x10001, 0xbfd3, 0xd6, 0xd, 0x8, 0x7, 0x6, 0xbd09, 0x4, 0x0, 0x4, 0xbb, 0x9, 0x8, 0x1, 0x1, 0x6, 0x7fff, 0x9, 0x4, 0x5, 0x2, 0xd, 0x4, 0x800, 0xb, 0x4, 0xb22, 0xfffffff7, 0xf, 0x3, 0x7, 0x1, 0x2, 0x0, 0x2, 0x8, 0x7, 0x3, 0x4, 0x3, 0xeed4, 0x951, 0x3, 0x11b, 0x5, 0xff, 0x9, 0x0, 0x3, 0xb789, 0x2, 0x9, 0x6, 0x7fff, 0x1000, 0x1, 0x2, 0x3, 0x100, 0x4, 0x80000000, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3b1a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]]}, {0x92, 0x6, "f1fc713d6e3a3fd53a925863c675804eed7e61c735981bcaa8fe48c40474d313bf55b45a707585c81658c1bdf890c19ebe9b8deea8c48d774f4896153020efdea92c472eb66b22f3ca161563da6566bc8cce6ac0470b24571cc56a1b5e118e5e7af35d743fcf647d0ad41f9414997540d1417e6d5e7401fda2c90cdbd002102b55ccd0911e1331a93e7c28e184d8"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x930}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x99, &(0x7f0000000c00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="2c09000000f8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x2f, 0x8b, 0x67, 0x0, 0x8, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}, "91bdc7037058610a8d7628226582ce7d84af37c62a941f2195cae997cda1a39d3b2402cd423a88b64749573dc82a465b809f336d1a6fd0b857bfafe9981f4d1f9ac197023670beda1a41d87418d523a5555a43e8fbf29bb73b3b50cd2dc0a4921b9e294d27498860e0026c3e14f1e00b80f0132d5fbb94"}}}}, 0x0) sendmsg$inet(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)='L', 0x1}], 0x1}, 0xc4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r10, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c0024000000000006", 0x14}, {&(0x7f00000022c0)="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", 0x30b}], 0x2}, 0x4041) 1.506495194s ago: executing program 1 (id=4425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x3}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e000b3c002400000000ff8400000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffff34, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x3c, r13, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 1.430454368s ago: executing program 0 (id=4426): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x394, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc889}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf02c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffbc27}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x260}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x229}]}, @TIPC_NLA_SOCK={0xdc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x280000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 1.429730767s ago: executing program 3 (id=4427): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r2, 0x0, 0x0, 0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xe}, 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1.278526886s ago: executing program 0 (id=4428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x114, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_USERDATA={0x45, 0xc, "610ba1db544b3900f4ebc4285888d4f94d6d24e7a5caa9d3d8ed6518c8c8f4bed76fd040146b7175f3e80b914d3737e311d671088e19135dbc0794ef0f3c2969fa"}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd8c}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x184, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x15c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x88, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4002}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BITWISE_MASK={0x58, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x54, 0x1, "c78b9f6290b0b53282f74a5de62b3f443556b9cd0c6220def14ab94ab61f5fd1ca4f4c75044400c1c6446e642d406f8663329422d80bbf4696957a7a4be3010193ae4766e4f822c752301faa54646eba"}]}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x4c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6b}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2e0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40408d0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x104011, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1401, 0x8, 0xffff8000, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x1) r3 = socket(0xa, 0x3, 0x4) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc038586b, &(0x7f00000009c0)={r1, &(0x7f00000007c0)=':]:{[$\xec{$-\x00\xc0z8iI\xf0\xb9\xe1/\xd4q\xb6\xd1\xa0j\xc8\x86\xd7$\xbc\xd4\fr\xc4rA\xe2\xdc\xbf\xfb\xf2\xd5^xv\xc2y5\xbf\a\xf9\xa3\xb7a\x01\xa3w\x99M\xf0\a\x00\xc0g\x05\xed\xc5\x12\xd5\x1b\xd0\xbc\xb3\xa4\xb1M\x91{\x90\xc0\xeb\xaf\x82\bB!\xbe\x1f[\xbc\xed\x99z\'H\xa0\xb7V&\x12\x0ez#3sF\xaa\xab\x05`\x1aA0VW9>\xdcg|n\xc0\x03%]\xf9_\x8c\x1a@@d\x11\x99f\xfa\x93T\x1d\xcf\x7f\xce\x8d\xd4!\xb5q>\xc8', 0xc4000, &(0x7f0000000640)={@align, {0x4, 0x8001, 0x1d3, 0x67b}}, 0x7ff, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0x7}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f00000004c0)) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r7, 0x35, 0xffffffffffffffff}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x4}}]}, 0x20}}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4082}, 0x8d0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000080)={@mcast2, r10}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a000000007ad9cccf74f469b71300010000000000080018004e234e20080017004e204e22"], 0x2c}}, 0x0) ioctl$sock_rose_SIOCDELRT(r8, 0x890c, 0x0) 1.257000806s ago: executing program 4 (id=4429): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) (async) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000010100800c00"], 0x114}], 0x1}, 0x0) 1.022823303s ago: executing program 3 (id=4430): r0 = socket$inet(0x2, 0x3, 0xf4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) socketpair(0x11, 0x6, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000140)="680e4916fef850170ef142f71cff21ba18d82cf286a8dc48d1c62489bd7e56f629643af6543231f5", 0x28, 0x10, &(0x7f00000001c0)={0xa, 0x4e22, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) socket$inet6(0xa, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000840)={'gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) r4 = socket$kcm(0xa, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)=ANY=[@ANYBLOB="00800000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c000480040003000000000008000200020000000800010000000000"], 0x30}}, 0x0) 1.011977334s ago: executing program 1 (id=4431): syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @random="15687efec3d2", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x3a, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, [@routing={0x3c}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @random="15687efec3d2", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x3a, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, [@routing={0x3c}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001200)={0x14, 0x69, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) 896.331721ms ago: executing program 2 (id=4432): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x400c080, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 806.344904ms ago: executing program 4 (id=4433): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'wlan1\x00', 0x1ff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000100)={0x9}, 0x1) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 804.94091ms ago: executing program 2 (id=4434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x108}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1401, 0x800, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x8050}, 0x20000080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x34004, 0x0, 0xffffffff, 0x0, 0x1}}]}}]}, 0x14c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x8, 0x700, 0x6, 0x6, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x68, 0x0, 0x58, 0x29, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x81, 0x1, 0x4, [{@broadcast, 0x87e}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x38}]}, @end, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x7fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @loopback, 0x1, 0x10, 0x0, 0x9}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r7, @ANYBLOB="8000260b0a0002000180c200"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000480)={@remote, 0x0}, &(0x7f00000004c0)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000500)={@remote, 0x0}, &(0x7f0000000540)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x8000, 0x40, 0x0, 0x3, {{0xa, 0x4, 0x1, 0x20, 0x28, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0xf, 0xb5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r14, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r15 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x344ed310d7f02239) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) r17 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=r19, @ANYBLOB="00000000a8880000200012800b00010013e9f19808e0cebb1865727370616e00001000028006000f00000000000400120073786427b9b29e2cc42b2fea8d1f4dce443fc469d11461c1eb45bc5a0b16e7fe1982db1cd8b63a3647a9582f707a0b67e2e42f0bb854af8206f0122523cf288b4d1454777db241f106bac2a33a564278796ce3421f5cb89a815b693e85d2148947419aaecd40158d01754b21a50e2c4cfef3d6309ec365609da0e01523898d4609fd0802a28a93afeb"], 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x10, 0xca8e, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x8001, 0x3}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001000)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001b80)=ANY=[@ANYBLOB='p\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="880202803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400010404ae050000000200aa0101000000b3007f09830200000900090301800000ec00007705000000050005010400000002000600070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="940102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="6802028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004004cf7000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f616463617374000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400af05000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400f849df2c40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="6c01028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="f4d4b10cc1e30988218dac5064bdbc2cf48c8f269a52fafa0e5fc9c39bce2e641f65f0403148e1ce43209d69015d465f1c0d37b32b134655fb829efbb99f7eae73205c077e52c19c1af307a4aeb8492536eb2fa4"], 0x870}, 0x1, 0x0, 0x0, 0x1}, 0xc040) 784.723315ms ago: executing program 0 (id=4435): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @broadcast, @private=0xa010100}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 754.203231ms ago: executing program 1 (id=4436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x3) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100003040000007efbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000010000001c0012800900010069706970000000000c0002800800140001000000"], 0x3c}}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0xffffffffffffff9c}}]}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1) sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000e3ff00a2f2b4b04afa8df932f5849c0143a19b15d2ef29d0cb27ced09adf1c057fc2fe53f3d7d844ee9a91df4daaefedd72f53e84170bffb3b561ba1c28041e1585b74bfc30e44682153c4f36ce1dcd607ae4e55c2b4b4b34f18dde80eba218436582426a7ec470bb968c775c484c02fcdafb8c06e83ef51a9005228e764b642b58cb9fa01155874f1fa109f7b59a03607b76b681d4494a07b7b768d1ac2b7fd2325c99cc185902b3da5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x26, 0x0, @void}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r10, r8, 0x4, r8}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = socket$caif_stream(0x25, 0x1, 0x5) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000001740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x50, r13, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6e}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe1}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) setsockopt$sock_int(r12, 0x1, 0x2c, &(0x7f0000000040), 0x4) 599.039831ms ago: executing program 3 (id=4437): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @local, 0xff}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000040)={&(0x7f0000000000)=[{0x7fff, 0x5, 0x7, 0x9, 0x60}], 0x1, 0x28, 0x7, 0x9}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 598.72ms ago: executing program 4 (id=4438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) r6 = socket(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) write(r6, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000100000008000b400000000024000480200001800e000100627974656f726465720000000c00028008006f00000000000900010073797a30"], 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xffffffffffffff35, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x84, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) 549.323797ms ago: executing program 0 (id=4439): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xfffffffffffffffc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in=@broadcast, @in=@dev}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) sendto$inet6(r0, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000580)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080)=0x3ff, 0x4) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000010000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRESHEX=r8], 0xe4}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r11, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}]}, 0x3c}}, 0x0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) sendmsg$L2TP_CMD_TUNNEL_DELETE(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28afd364", @ANYRES16=r12, @ANYBLOB="000329bd7000ffdbdf250200000014001f00fc0200"/34], 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x4004000) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r13) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x4c, 0x0, 0x4, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4000a}}, {0x91f5ea8808456ed, 0xb, 0x30ce}, {0x6, 0x11, 0x2}}, {{@pci, {0x0, 0x3, 0x2}}, {0x0, 0xb, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000011) 409.021149ms ago: executing program 3 (id=4440): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xb}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64000080}, 0x20000000) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xb}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64000080}, 0x20000000) (async) 290.54429ms ago: executing program 2 (id=4441): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) syz_80211_join_ibss(&(0x7f00000002c0)='wlan1\x00', &(0x7f0000000300), 0x0, 0x1) listen(r3, 0xfffffffc) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r4, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000000c0)=0x3ff, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10001) (async) write(r0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0xdb, 0x8, 0x4000, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1}, 0x50) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffd, 0xc0}}, 0x40001) 287.874678ms ago: executing program 0 (id=4442): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x4c}}, 0x4000000) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@default, @netrom, @null, @remote, @remote, @rose]}, &(0x7f0000000040)=0x40, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 277.585573ms ago: executing program 3 (id=4443): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c2000040042801c0001800600060088480000100015002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 254.642025ms ago: executing program 4 (id=4444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003400)={0x2fcc, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x2fb4, 0x142, 0x0, 0x1, [@nested={0x39a, 0x114, 0x0, 0x1, [@nested={0x11, 0x3, 0x0, 0x1, [@generic="6c1c5bc3bbf8ac352ba2c35516"]}, @nested={0x1e1, 0x129, 0x0, 0x1, [@generic="b3ed435afe9b91a4ba089ea8d0042771bfd9697a6648d03d1d69b57665b7ed76b0e2103d15a7f10e83e0d9e2bcaad7bbf5f78e7c2151ad04387e8e256f65476f69f95eae3a6413abf34a199f9fa17365a912e902ab177da209bb952e1ed9e3dafdea457e67b39e5a7e0983a944c2ccd2181c6e6d2acea4785e1b32c323d48481e072496b33667e08cfb38c951f2ff36b7b33abe71926ee3935bc5b5403e147a726331ed1718a8ecfda835d663a59a1c9863145b983f9c3d5d1a5fe9ea9d710bad3160f00ce96a6b10ca971ce21878295248406d1c679321400a2b26519546a93db", @generic="160ad62f5cd5d49d00a9e870e7b3334a99f7be34cc782093fbac3cc8212e7c7440feed137ed491d26e3e22cff22785f20739db068fcf1b9c47", @generic="0d3f0281d2b7caf4e76bffd213d9395dae28005f296116709bd513a84e975da3c210d9542deab04578169d77b9dcbfe5aa5712f7297e5a2bcb0aa0981781273f2cd19604b199f8114a2497f903f56afcd749eb972bd9cb15", @generic="fae573ad04f43ea4164e398501eeea99e3c8027909749190314ed2ec5d26b419468c87853ab85feabb56a5d703881de253c26d91498fb01515e112987224c320c2d52a5a86a5cdf3655f91fb1983aa53fa6f5ee2b1a8b97568846b1907f62a5c446cd60622a725c31f0ee4"]}, @typed={0x8, 0x79, 0x0, 0x0, @ipv4=@multicast1}, @generic="4b8ff5afb344c1074cc73744c8617ce48b7412a8b43cc6015d99abdb6fb8a787115d9d5009b233c99f6332ff6d23bcb23082a78e9523f61b7537630da21164e8b3a63282d8a22169c5cc4d4b4717", @nested={0x13e, 0xa3, 0x0, 0x1, [@generic="81b0d8551aa49304e8532363baf0fa83ed5e6daebfd8e174d7b8ea9f8b5c50362a6f155081176832fe3f900a9e248f599ed3d2368698abd97ec8d141c5bb5765775fd2ecb2c900c60e51b3f629d871241a0fc9b518b716bc5ba5679ae744e917526320748d54bc", @nested={0x4, 0x52}, @typed={0x8, 0x57, 0x0, 0x0, @pid=r1}, @nested={0x4, 0xcd}, @typed={0xc, 0x157, 0x0, 0x0, @u64=0x220}, @typed={0x8, 0x10f, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x113}, @generic="985c9c55d5fbdd00d65913116c1c65e9020473912140069ff0364602e5084e38c83ffe419dd52e4879019d4a409733ea9dced5fdf2c6c0540d63c927f3f6549662f1631b4bb75ce21a2ac1cc1adb7c05cfb7b1ff24b5855e5745f2674de581829f4e1da9965aec14817af017d17e562df1c0d7b1d14394a4f5584810f9b539cfda28417e9c134cc83f3ec31e58c5e112e23596f1e8e437dc2aedd7e9b75bc78167a279d5c0c3a245c2c4e3"]}, @typed={0x8, 0x2f, 0x0, 0x0, @u32=0x4b}]}, @nested={0x2579, 0x5f, 0x0, 0x1, [@generic="853ae372bb4bd65d34856452ce5d9b03a03bb97ac4f34b2f2f69f3d45e8175d24ed00911cbb99e0227c60e43bc388934c493c33073f11bd079f8510df9ec632a69389b2e2bd68a67708390ecf1eb21f42e2f50e1c857ff56c328c5d8cfa48322a603eb22c5739ed709b8998f2d6b41012093cdabf2d89377edb7f87daaca6bfb11c0f02b27a281c39895b8c8515896d7f723c0493e1fcbc4bcbb3978cb0525743145a00ba461254237f7f51c76f3d45bdc57bf999d79cda6d543", @typed={0xc, 0xcd, 0x0, 0x0, @u64=0x8001}, @generic="fa625edf31908bda0a62afbd7b4a91a5829e0c9df634bdf1d88160469408717430bda5d745525a06eea2df572e38ba93", @typed={0x8, 0xb4, 0x0, 0x0, @u32=0x4}, @generic="11cb93285e5c06dea1e6fe133117f98c682cd4ffedaf5fd20df1d74d01ce0343a07b9e73ee3f1a27b55fd8da1ab1a3b9c9e762726c447ddd5fe7cc2bcf8c752abfd17db6f59a991807036a9837996aa5eb583a8975c24aa68a60a49fa930a962a7f73af67102c1ef9fc892c5073cde88595ca2620e2422f58f86ce03f25563c8976695ec082778dbd7aa02d42e3a5b9b4b8945014fdd0f010bbea141c703ce647373e27539edda27e081388c4f6091a230d949865af1863170fd36527ad54f8c4fc1b6ce3636fd19a3b0c6af1d", @nested={0x10e4, 0x0, 0x0, 0x1, [@generic="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", @generic="0562f58b3be8532ed66d309e84096ccbd53de4aea3abe13c27b7dffaa13585646bad58d609d50ee04d5e30c5f5d276cb022fa88a6758c3956113959dfce100f6d1a8ab22d2345fb7d8aac595b796bfe439414dc7ae27fee9c9f5878a3c38d29f40fc8ce840253d1b500a4212578962cc9f4d53543925e04a10a60aaea339b968e1a5bb791e270664f4951749c7d8acecebe43e61a0b73e26f8b59b085631ddad904aa49e97d98040139779b5", @typed={0x8, 0x12e, 0x0, 0x0, @uid=r3}, @generic="b0ed3fa984d221cb", @nested={0x4, 0x149}, @typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xdb, 0x0, 0x0, @fd=r2}, @nested={0x0, 0xdf}, @nested={0x4, 0x147}, @typed={0x8, 0x57, 0x0, 0x0, @uid=r3}]}, @nested={0x1174, 0xed, 0x0, 0x1, [@typed={0x8, 0x155, 0x0, 0x0, @u32=0x1}, @generic="b3430601a95d840752f5ad2246d9732f39f365051a100e15725e1ae28877130cd40f2488642bb865697160a7bf7391fd5cad2d64d6f24ea7725cc840e0c502761d25ab6fd3cbf8ce613e48a651d0c3416d333d8d01", @nested={0x4, 0x74}, @typed={0x8, 0x15c, 0x0, 0x0, @uid=r3}, @generic="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", @generic="c198072aa0ed701f1ae7018dafcb899e4d1b23dc150eca11fa1d05693afcbb30d34e781a6249a244e8e7409f8109f50974de3d1f3e569860", @nested={0x4, 0x12}, @generic="fd4a8405216e997fb06ba788eb556c7d86dd3d7b206ee226c1947ce657fa212bd56c8b740aad1c90f0dc74519f970858e701a0eaa8cd862b683a5863e8eaff7d4095e4aa1b5c33b70578ec6a72d7a7a9846697548c6e690492d3540e8aa24f94e98a4e38e79738b1d462e9bb0e197cb64d1ef117d2b06f347bffbf0209d1cc4d9590b03bea9a392bbd2ec3cc3b070b88a496c8976cbd3464fabfb8729866464f34a1720f454c54232293e721b413a4dd5a5edbe49aadded235d6bf6cd99430", @typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x10}]}, @generic="39f2a080da1606356ce5faf510359733a35c8f58cf6d18e8fb0e2e", @generic="c0bf87d9c2534ad0794d7aa2ec8c86ad1c6f1da625bb345367df65c12282c8adf6417703f72a0a3dfe18ff87937b5618276161ca9596d73df25709502218a79e92e6aa1c024709d7fe983cc823a21452af16a9b32233baa3ca6fdd7b17630e1120144b5518aa61e1689a2e4564a930997a69e0ea380e7bcea5589905068e3a79b7d22bda3e9baf2b97d05acb", @generic="306cc80691f04b82d0528f78980a9c96e7face8644ffd65d6edd9d24d50545b0081e9b01187a0250a22755849ccfa7e00da3a50fb36ba483a47e210c379325fe88ae29666d929486537a0a3500457ab05fb5e6dee790e0e08880129d40c9ba6c96d72b624bcea281ad455c4a5e9f4320fd8a8b1ad95d88e01524bc5c69fe9aeb1372f0d019cbe9e3a6266a68031f9fcab5e5de0725d1c5a8a57281c6664fd24e514c435c9adf0c39d44ef8"]}, @generic="49faafdae5f8e07a82db3e4aefa4229da8", @nested={0x23f, 0x33, 0x0, 0x1, [@nested={0x4, 0x14b}, @nested={0x18, 0x8f, 0x0, 0x1, [@nested={0x4, 0x140}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x1800000}, @typed={0x8, 0x131, 0x0, 0x0, @pid=r1}]}, @typed={0xc, 0xa3, 0x0, 0x0, @u64=0xffff}, @typed={0x14, 0x120, 0x0, 0x0, @ipv6=@mcast2}, @generic="d5807c43f65eb3293022f1a29596f3bda7c7a1fe47b033373adf2917", @nested={0x1b5, 0xe5, 0x0, 0x1, [@nested={0x4, 0xd1}, @generic="911dd6231f54a196b3c265b4e5ac402e7e3be33ef008560a48d1d0c1d3deca6449eaa7c14e547d3cdb1b2169e045107f8b9a8b3b5e83888ebc2fbe116c8536fc1aba23400abbde31fa01030f45ec573f33b466f8637de96d4de430e25c2fe0873c861118eeb10a30a0096c86cd7cf8e8c23f3598e48c91b3cedd4409bb30abf7cbccd32f571e6b4e187ea39227772c5771e3a1d63f646a855fc93512fd9825750aeb6f8249084b9bca66c0acfb3282d3244b1155889278c238dad3c1231fbb5a074c8ac45e34778e", @generic="52ed3d175eb3e3de9133896542ab0ff934162238f1c5e04d8972f062365252f70dc64d412482bdb07ca67d4eff6cd05832ada8c521bc5087621475ed849f2536d3c750623ecbe1c0fe78a4f0703e93d00859f460acd302df6260fc40ea3046597feb394c5cf9cf3e21cb8354c2b78c7ad64fbf2da1606c230c4efbc3524828c5953ccfd0059f9c67689c54197d741bff8e9a5fc6b5c813c98ab5c0e7e70838f8a2d32c49", @generic="2d378256b529d06abf5165d4a1c9ae6ae5a71aabf3e1851c2f914d17cb8b03", @generic="288e235b1b8f90ec8cd652124f515e23b17eae59298167dd19c28161b5a98ca7e98d"]}, @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="c07df0388ba9a819d1a019a734bab4ae1723c196cb38ab96d087d92a26e73d88e51b89"]}, @generic="b4a44f3780dd773ed3920dd5647951521ac10ddf2c98ee06", @generic="138d943d082b8f77a994ffedf5ca4db6bdb15eb4c0c5f0", @nested={0x387, 0x20, 0x0, 0x1, [@nested={0x125, 0x82, 0x0, 0x1, [@nested={0x4, 0x115}, @generic="20bae5e37424cd563981fd5414de0097622375bf86bd3debcd40dacfe43adb8e45f0ab51ba930cca2fb9d8f9cb819d91929718e17b8bff939144f1d3a09775542d643aa6432aa339af11442e9c168414e5452744acde06bf1d5d1e9ed5d9e41685c6b64ac1a19bebfc3e5964c30dfa49bde8c7c17b59f3bdbcd8c7bb909df7a8fcceeaed35c6b8cdad6a9e5511bd141a8b4ac468e3c71367ea1fbc395b32e1058907636d0b", @typed={0x8, 0x122, 0x0, 0x0, @fd=r2}, @typed={0x67, 0x12c, 0x0, 0x0, @binary="1fa4635ef7f1148bf595cf034c53490efe54db71c20bcc449b34c996d2174ba8ae2c47f03bc3f76bd4eaeeede99ffee3711c4e16655b8a0c3aa9de0bee7143f244ec9f8ec025c0c0608d2118461e9261704147f7e91152f55eb8d01b65403f6243e373"}, @typed={0x8, 0xd5, 0x0, 0x0, @uid=r3}]}, @typed={0x5, 0x6a, 0x0, 0x0, @str='\x00'}, @nested={0x100, 0x53, 0x0, 0x1, [@generic="3feef682d8d6da6b6be789b382ac90e000f78433385cac3935a099df989040ff818983f33437fc38f056a6badd15fe43d20e1d8e27981921653fc15666b39208e0ba9953ca992fa329889f1e90ebe69071eb6f8279afa9c63285f354da65871f894b6e44b2b8ec56e502c4b399939fb4673f27e117dd86faf3edee01b870de8a78d57e6ed74a2138260cd039478afe838b93ace5eccfef7d44ea3b0d3f7964f2860c4bd096fbd12b76cfbb872c02365b017d0f2f5b722abb822d44d5001a5118e0133f82ce40b9b9074dcf5c7984cfdb35f13de16c074cd0095b0b8d190194d1ecea739ee438d84a34f82a5626ec44060571bca7", @nested={0x4, 0x5}, @nested={0x4, 0x63}]}, @generic="fb6bc19527777f2cebb86b0249ac2941324d1eebc5c40d0741e615c3e58a8ae94ad40b4bb83ccc2e037ed682e93ed3be918a43659f617ffb38b096ba6c26910cf7bcab1a69aa97f83646283d6ee445d597c4973108cca0188583aa490aba0a242629bb7448ad9e177cf9502fbfad7a5a0ff8a825fb00a8d26e23f29be9", @generic="a5a5424683e90d2d5cdf4d41981afdaf6dc697f27dcba1252b225e49734270ad840108a13c9ddfd31e528e73bfc280f7dd58b48760299457a6dd1bcd91637a64794809f49e34179d43060d505ccdb154f691e70136d815369e1ee85403b9b961f1d095e3564888d325c2e932db9b727402aa628f7df650aac5a2f947689a244cd7d9362e14d0845ba0a33e26675512e174e57d138b862f504851f9aa658d909d795cfbcb1525", @generic="1b809c242d5a989b02a801462e4e2413084dd10d4b140d6b906a06b0bd20471e9975ad6f06add80136aaa19c41817263"]}, @generic="d6b698bc1b6441294d51ba234428a24a4b23a7b23e677ce49b4f6c50f7e99dc3799ee107c5b32398c1f3d462b4f2506f7dae865fdb994d833dd08567ec5f2906e43fdfb10675f77a4beb5da7529e4da8f7cc0e4d76e6ef55cc2903545327585620ab4497db6977071a5299cb09ce49d458eef11e8863757f39d66a12de8aa357afd8812593e722a804b4e20923614332"]}, @nested={0x4, 0x1}]}, 0x2fcc}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) 74.149021ms ago: executing program 4 (id=4445): r0 = socket$key(0xf, 0x3, 0x2) getsockname(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000000c0)=0x80) (async) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x438, 0x0, "45ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42a870604b55907b7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db39"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) 69.233006ms ago: executing program 2 (id=4446): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000680)={{r1, &(0x7f0000000040)='\'\x00', 0x101000, &(0x7f0000000140)={@align=0x9, {0x4, 0xcd81, 0xfffffffb, 0x7}}, 0x1000, &(0x7f0000000240), &(0x7f0000000280)=0xfe}, 0x3, &(0x7f0000000600)=[{0x1, 0xd, &(0x7f00000002c0)=',:$,^&-{-\x00', &(0x7f0000000340)="114fbdf5ce7b83278332a7cfa702c2d1c9602f71e2d14ff77e3845379c7cf52523", 0x21, 0x8}, {0x2, 0xa, &(0x7f00000003c0)='\'&\x00', &(0x7f0000000400)="8198106b4a32bc08200db519f4cbfd4f6d1881b2acf119ea0b9fd9e4970fc640280279ae1df2aa82d9624f48fe093ef01143cb855601be15392a9616cb6146ea2d2e1cd10a796a66ced1bb86328efdf220080dd10693d9bea0177ad5f1b1c6a32de9b69edcf2508467e64c9f3b9e2f335cacddd214349c7110474c7f5bfbd213baaca347c8eb0bb584687be11eb3366370049d7abe8eb853fa523b9d3c0976462c66", 0xa2, 0xa}, {0x3, 0xa1ae, &(0x7f00000004c0)='@,[@%-[^#$\x00', &(0x7f0000000500)="37e69486c1536da727bedaec89730618c881560ea4fd276ec127b6ab6f1565b655972e2815e31ebfd160373bccc646d66d9effdb8773edfbfdcaad825d4955f9a364267ec528d8b20c238b92c839a6c22bd779d48404bcb309ee2a6a6d45ee0325fde0f1f6decda5972efd46fee7b30c0d9e48b56975808116126e521a10b9e6d6f1e3292aa4ac128ee324c9390737eec81634cb254146440bb63593577cd427b8c93ef8f6bbb39bc350d2a73ed811595584b036deccfb93d5cef27010853198d6562e4a1843b3dd3c8f1daa9090837ba0c8e3c438ba14212804cc9bb072", 0xde, 0x12}]}) socket$inet(0x2, 0x2, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000700)=0xfffffffd, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r5, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000740)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], &(0x7f0000000780)='GPL\x00', 0xb7, 0x0, 0x0, 0x41000, 0x10, '\x00', r2, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r4, r5, r4, r6], &(0x7f0000000800)=[{0x1, 0x3, 0x4, 0xc}, {0x5, 0x2, 0x9, 0x6}, {0x4, 0x2, 0x8, 0xb}, {0x4, 0x3, 0x3, 0x1}], 0x10, 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 64.578161ms ago: executing program 3 (id=4447): r0 = socket(0x10, 0x803, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x9, 0x1) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000d042fbd7000fcf2ff1f00000000", @ANYRES32=r1, @ANYBLOB="46000400000000002400128009000100626f6e64000000001400028005000100040000000500110001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) 61.846195ms ago: executing program 0 (id=4448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050300000000000000000700000008000380", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044080) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100009060000040000f8ffffffffffff", @ANYRES32=0x0, @ANYBLOB="adffa888100100001800128008000100677265000c0002800500130001000000"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050300000000000000000700000008000380", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044080) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100009060000040000f8ffffffffffff", @ANYRES32=0x0, @ANYBLOB="adffa888100100001800128008000100677265000c0002800500130001000000"], 0x38}}, 0x0) (async) 0s ago: executing program 4 (id=4449): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x194, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@TCA_STAB={0x170, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x8, 0x8, 0x0, 0x0, 0x4, 0x6}}, {0x10, 0x2, [0x1, 0x0, 0x3, 0x0, 0x2, 0x5c4]}}, {{0x1c, 0x1, {0x4, 0x6, 0x8, 0x5000000, 0x0, 0xa, 0x140, 0x6}}, {0x10, 0x2, [0xfffb, 0xbdc1, 0x800, 0x60ea, 0x0, 0x7]}}, {{0x1c, 0x1, {0x3, 0x5, 0x472, 0x5, 0x1, 0x3, 0xfffffff9, 0x1}}, {0x6, 0x2, [0x7cc9]}}, {{0x1c, 0x1, {0x2, 0x30, 0x6b, 0x7, 0x2, 0x8, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0x1, 0x9, 0x8001, 0x748, 0x2, 0x5, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x9, 0xa, 0xb, 0xb, 0x2, 0x81, 0xfffffff7, 0x5}}, {0xe, 0x2, [0xf, 0x0, 0x1000, 0x2, 0x1]}}, {{0x1c, 0x1, {0x80, 0x3, 0x0, 0x4729, 0x2, 0x719d, 0x1, 0x4}}, {0xc, 0x2, [0x6, 0x1000, 0x2, 0x6]}}, {{0x1c, 0x1, {0x2, 0x91, 0x5, 0x1, 0x0, 0x101, 0x6d8, 0x1}}, {0x6, 0x2, [0xa0e]}}, {{0x1c, 0x1, {0x9, 0x2, 0x8001, 0x80000000, 0x0, 0x4, 0x24dc, 0xa}}, {0x18, 0x2, [0x2db, 0x7, 0x1, 0x2, 0xb053, 0xfffa, 0x7, 0xc4, 0xffff, 0x1]}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r17, {0x4, 0xa}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8858}, 0x0) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r18, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="4ee0ffff00febabec91177fb86dd", 0x0, 0x6e980000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 0 [ 318.069287][T15707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.069323][T15707] ? __pfx_ksys_write+0x10/0x10 [ 318.069359][T15707] do_syscall_64+0x14d/0xf80 [ 318.069382][T15707] ? trace_irq_disable+0x3b/0x150 [ 318.069413][T15707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.069434][T15707] ? clear_bhb_loop+0x40/0x90 [ 318.069462][T15707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.069484][T15707] RIP: 0033:0x7fafebb9c799 [ 318.069504][T15707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.069522][T15707] RSP: 002b:00007fafe9df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.069545][T15707] RAX: ffffffffffffffda RBX: 00007fafebe15fa0 RCX: 00007fafebb9c799 [ 318.069561][T15707] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 318.069574][T15707] RBP: 00007fafe9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 318.069587][T15707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.069600][T15707] R13: 00007fafebe16038 R14: 00007fafebe15fa0 R15: 00007ffc0fc06688 [ 318.069635][T15707] [ 318.410112][T15717] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2707'. [ 318.605842][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 318.696698][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2710'. [ 318.791768][T15732] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2712'. [ 318.841512][T15732] syzkaller0: entered promiscuous mode [ 318.870757][T15732] syzkaller0: entered allmulticast mode [ 318.902380][T15741] netlink: 'syz.3.2713': attribute type 18 has an invalid length. [ 318.919594][T15732] netlink: 'syz.1.2712': attribute type 1 has an invalid length. [ 319.398920][T15775] xt_hashlimit: size too large, truncated to 1048576 [ 319.499916][T15776] syzkaller1: entered allmulticast mode [ 319.510285][T15782] netlink: 'syz.2.2726': attribute type 8 has an invalid length. [ 319.847921][T15799] netlink: 'syz.1.2732': attribute type 12 has an invalid length. [ 320.598991][T15843] xt_socket: unknown flags 0xe4 [ 320.613688][T15842] xt_socket: unknown flags 0xe4 [ 320.685982][T15851] __nla_validate_parse: 8 callbacks suppressed [ 320.686005][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'. [ 320.817911][T15859] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2752'. [ 321.260752][T15890] openvswitch: netlink: Message has 8 unknown bytes. [ 321.267885][T15890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.416640][T15892] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2763'. [ 321.438877][T15894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2763'. [ 321.470657][T15901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2764'. [ 321.518914][T15901] bond0: entered promiscuous mode [ 321.534513][T15901] gretap0: entered promiscuous mode [ 321.544624][T15901] debugfs: 'hsr1' already exists in 'hsr' [ 321.551017][T15901] Cannot create hsr debugfs directory [ 321.556933][T15901] hsr1: entered promiscuous mode [ 321.626220][T15904] bond7: option min_links: invalid value (18446744073709551614) [ 321.634115][T15904] bond7: option min_links: allowed values 0 - 2147483647 [ 321.644532][T15904] bond7 (unregistering): Released all slaves [ 321.680398][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'. [ 321.701697][T15910] syzkaller1: entered promiscuous mode [ 321.716531][T15910] syzkaller1: entered allmulticast mode [ 321.729702][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2768'. [ 321.758711][T15911] netlink: 'syz.2.2768': attribute type 6 has an invalid length. [ 321.786249][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2768'. [ 321.968260][T15925] netlink: 30 bytes leftover after parsing attributes in process `syz.3.2772'. [ 322.031006][T15930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2775'. [ 322.295602][T15948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.634829][T15976] FAULT_INJECTION: forcing a failure. [ 322.634829][T15976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.651405][T15976] CPU: 0 UID: 0 PID: 15976 Comm: syz.0.2788 Not tainted syzkaller #0 PREEMPT(full) [ 322.651434][T15976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.651447][T15976] Call Trace: [ 322.651456][T15976] [ 322.651465][T15976] dump_stack_lvl+0xe8/0x150 [ 322.651502][T15976] should_fail_ex+0x412/0x560 [ 322.651540][T15976] _copy_to_user+0x31/0xb0 [ 322.651567][T15976] simple_read_from_buffer+0xe1/0x170 [ 322.651605][T15976] proc_fail_nth_read+0x1bb/0x230 [ 322.651639][T15976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.651674][T15976] ? rw_verify_area+0x2a6/0x4d0 [ 322.651696][T15976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.651729][T15976] vfs_read+0x20c/0xa70 [ 322.651750][T15976] ? fdget_pos+0x246/0x320 [ 322.651786][T15976] ? __pfx___mutex_lock+0x10/0x10 [ 322.651813][T15976] ? __pfx_vfs_read+0x10/0x10 [ 322.651838][T15976] ? __fget_files+0x2a/0x420 [ 322.651874][T15976] ? __fget_files+0x3a0/0x420 [ 322.651913][T15976] ? __fget_files+0x2a/0x420 [ 322.651955][T15976] ksys_read+0x150/0x270 [ 322.651980][T15976] ? __pfx_ksys_read+0x10/0x10 [ 322.652017][T15976] do_syscall_64+0x14d/0xf80 [ 322.652040][T15976] ? trace_irq_disable+0x3b/0x150 [ 322.652070][T15976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.652093][T15976] ? clear_bhb_loop+0x40/0x90 [ 322.652119][T15976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.652140][T15976] RIP: 0033:0x7f5d59b5cfce [ 322.652161][T15976] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 322.652180][T15976] RSP: 002b:00007f5d5a9b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.652203][T15976] RAX: ffffffffffffffda RBX: 00007f5d5a9b56c0 RCX: 00007f5d59b5cfce [ 322.652219][T15976] RDX: 000000000000000f RSI: 00007f5d5a9b50a0 RDI: 0000000000000007 [ 322.652232][T15976] RBP: 00007f5d5a9b5090 R08: 0000000000000000 R09: 0000000000000000 [ 322.652246][T15976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.652258][T15976] R13: 00007f5d59e16038 R14: 00007f5d59e15fa0 R15: 00007ffc1461cf48 [ 322.652294][T15976] [ 323.121310][T15997] xt_cgroup: xt_cgroup: no path or classid specified [ 323.350802][T16009] pim6reg1: entered promiscuous mode [ 323.363199][T16009] pim6reg1: entered allmulticast mode [ 323.543066][T16007] wlan0 speed is unknown, defaulting to 1000 [ 323.791084][T16034] xt_limit: Overflow, try lower: 604147548/4200216962 [ 323.911313][T16039] netlink: 'syz.3.2806': attribute type 1 has an invalid length. [ 324.090237][T16039] bond8: (slave bridge4): making interface the new active one [ 324.112247][T16039] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 324.229653][T16054] xt_TPROXY: Can be used only with -p tcp or -p udp [ 324.314860][T16057] vlan2: entered promiscuous mode [ 324.326139][T16057] bridge0: entered promiscuous mode [ 324.519377][T16073] syzkaller1: entered promiscuous mode [ 324.524922][T16073] syzkaller1: entered allmulticast mode [ 324.924761][T16091] netlink: 'syz.2.2821': attribute type 23 has an invalid length. [ 325.442942][T16124] netdevsim netdevsim2: Direct firmware load for .. @ failed with error -2 [ 325.465922][T16124] netdevsim netdevsim2: Falling back to sysfs fallback for: .. @ [ 325.901072][T16141] netlink: 'syz.1.2836': attribute type 1 has an invalid length. [ 325.917122][T16141] netlink: 'syz.1.2836': attribute type 1 has an invalid length. [ 325.928517][T16141] __nla_validate_parse: 12 callbacks suppressed [ 325.928559][T16141] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.2836'. [ 326.564600][T16164] xt_hashlimit: size too large, truncated to 1048576 [ 326.587763][T16166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.684614][T16175] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 326.863306][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'. [ 327.018266][T16190] netlink: 'syz.2.2850': attribute type 3 has an invalid length. [ 327.028453][T16190] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2850'. [ 327.103960][T16193] wlan0 speed is unknown, defaulting to 1000 [ 327.233009][T16207] Cannot find add_set index 46338 as target [ 327.251051][T16207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2854'. [ 327.360959][T16214] netlink: 'syz.3.2855': attribute type 2 has an invalid length. [ 327.360959][T16213] netlink: 'syz.3.2855': attribute type 2 has an invalid length. [ 327.458950][T16216] openvswitch: netlink: Multiple metadata blocks provided [ 327.536095][T16220] netlink: 'syz.2.2858': attribute type 1 has an invalid length. [ 327.640464][T16220] 8021q: adding VLAN 0 to HW filter on device bond9 [ 327.885251][T16230] netlink: 'syz.1.2860': attribute type 3 has an invalid length. [ 328.031578][T16245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2862'. [ 328.501463][T16273] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2872'. [ 328.527150][T16273] netlink: ct family unspecified [ 328.634894][T16279] bridge8: entered promiscuous mode [ 328.642371][T16279] bridge8: entered allmulticast mode [ 331.425033][T16267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.784357][T16334] tipc: New replicast peer: 100.1.1.0 [ 331.793178][T16334] tipc: Enabled bearer , priority 10 [ 331.803099][T16336] tipc: Enabled bearer , priority 0 [ 331.817764][T16337] ksmbd: Unknown IPC event: 3, ignore. [ 332.055567][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 332.153736][T16336] syzkaller0: entered promiscuous mode [ 332.175484][T16336] syzkaller0: entered allmulticast mode [ 332.194627][T16336] tipc: Resetting bearer [ 332.206095][T16351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2894'. [ 332.255217][T16345] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2895'. [ 332.272763][T16345] netlink: 'syz.4.2895': attribute type 1 has an invalid length. [ 332.333904][T16346] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2895'. [ 332.368804][T16336] tipc: Resetting bearer [ 334.072826][T16336] tipc: Disabling bearer [ 334.285133][T16377] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 334.449243][T16384] syzkaller0: entered promiscuous mode [ 334.464550][T16384] syzkaller0: entered allmulticast mode [ 334.907399][T16396] syzkaller0: entered promiscuous mode [ 334.953646][T16396] syzkaller0: entered allmulticast mode [ 334.993013][T16396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2910'. [ 335.118341][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.128541][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.138882][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.153892][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.161917][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.283337][T16405] wlan0 speed is unknown, defaulting to 1000 [ 335.499281][T16416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2917'. [ 335.668127][ T5826] bond0: (slave syz_tun): Releasing backup interface [ 335.701870][T16430] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2918'. [ 335.716483][T16430] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 335.742123][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2920'. [ 335.813184][T16435] nft_compat: unsupported protocol 0 [ 335.831972][T16432] team1: entered promiscuous mode [ 335.837505][T16432] team1: entered allmulticast mode [ 335.866148][T16437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2922'. [ 335.884520][T16440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2921'. [ 336.165658][T16405] chnl_net:caif_netlink_parms(): no params data found [ 336.348831][T16460] syzkaller0: entered promiscuous mode [ 336.354496][T16460] syzkaller0: entered allmulticast mode [ 336.436844][T16448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2924'. [ 336.451706][T16458] syzkaller0: entered promiscuous mode [ 336.461423][T16458] syzkaller0: entered allmulticast mode [ 337.248199][ T5843] Bluetooth: hci5: command tx timeout [ 337.774544][T16480] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 337.881412][T16405] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.889117][T16405] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.899271][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2934'. [ 337.908985][T16405] bridge_slave_0: entered allmulticast mode [ 337.919418][T16405] bridge_slave_0: entered promiscuous mode [ 338.038962][T16493] netlink: 'syz.0.2936': attribute type 8 has an invalid length. [ 338.047908][T16485] bond10: entered promiscuous mode [ 338.053455][T16491] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 338.064694][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2936'. [ 338.126066][T16405] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.133384][T16405] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.141372][T16405] bridge_slave_1: entered allmulticast mode [ 338.149906][T16405] bridge_slave_1: entered promiscuous mode [ 338.297619][T16503] openvswitch: netlink: IP tunnel dst address not specified [ 338.360494][T16405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.461264][T16507] openvswitch: netlink: Missing valid actions attribute. [ 338.505714][T16507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.579366][T16513] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2943'. [ 338.588619][T16513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2943'. [ 338.598734][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 338.715770][ T12] dvmrp0 (unregistering): left allmulticast mode [ 338.728953][ T12] bond3 (unregistering): (slave geneve3): Releasing backup interface [ 338.743064][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 338.952014][ T12] bond8 (unregistering): (slave bridge4): Releasing active interface [ 338.991177][ T12] bond0 (unregistering): Released all slaves [ 339.002967][ T12] bond1 (unregistering): Released all slaves [ 339.021871][ T12] bond2 (unregistering): Released all slaves [ 339.037618][ T12] bond3 (unregistering): Released all slaves [ 339.058272][ T12] bond4 (unregistering): Released all slaves [ 339.077936][ T12] bond5 (unregistering): Released all slaves [ 339.101520][ T12] bond6 (unregistering): (slave lo): Releasing backup interface [ 339.112827][ T12] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 339.126035][ T12] bond6 (unregistering): Released all slaves [ 339.141973][ T12] bond7 (unregistering): (slave vcan1): Releasing backup interface [ 339.151767][ T12] bond7 (unregistering): Released all slaves [ 339.167444][ T12] bond8 (unregistering): Released all slaves [ 339.191708][T16405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.334972][ T5843] Bluetooth: hci5: command tx timeout [ 339.345359][ T12] tipc: Left network mode [ 339.561470][T16405] team0: Port device team_slave_0 added [ 339.584576][T16532] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 339.597825][T16532] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 339.608715][T16532] gretap1: entered promiscuous mode [ 339.614054][T16532] gretap1: entered allmulticast mode [ 339.628038][T16405] team0: Port device team_slave_1 added [ 339.841656][T16549] netlink: 'syz.1.2951': attribute type 19 has an invalid length. [ 339.866573][T16405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.890376][T16405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.926557][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2951'. [ 339.952829][T16405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.995893][T16549] netlink: 'syz.1.2951': attribute type 19 has an invalid length. [ 340.004144][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2951'. [ 340.018432][T16405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.051758][T16405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.086356][T16405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.371310][T16405] hsr_slave_0: entered promiscuous mode [ 340.396529][T16405] hsr_slave_1: entered promiscuous mode [ 340.413410][T16405] debugfs: 'hsr0' already exists in 'hsr' [ 340.437396][T16405] Cannot create hsr debugfs directory [ 340.501307][T16569] syzkaller1: entered promiscuous mode [ 340.509726][T16569] syzkaller1: entered allmulticast mode [ 340.537745][T16582] : entered promiscuous mode [ 340.804327][T16602] netlink: 'syz.0.2961': attribute type 1 has an invalid length. [ 340.824567][T16602] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2961'. [ 340.837750][T16602] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2961'. [ 340.900570][ T12] pimreg3 (unregistering): left allmulticast mode [ 341.077480][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 341.405524][ T5843] Bluetooth: hci5: command tx timeout [ 341.814560][ T12] IPVS: stop unused estimator thread 0... [ 342.518029][T16405] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.549787][T16683] pim6reg: entered allmulticast mode [ 342.577292][T16405] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.626818][T16405] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.708208][T16405] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.732825][T16696] netlink: 'syz.0.2981': attribute type 11 has an invalid length. [ 342.878814][T16708] netlink: 'syz.4.2982': attribute type 1 has an invalid length. [ 342.975891][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'. [ 343.025470][T16711] netlink: 'syz.2.2983': attribute type 30 has an invalid length. [ 343.038025][T16708] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.053217][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2983'. [ 343.111109][T16719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2985'. [ 343.136627][T16713] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.146807][T16713] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 343.158900][T16713] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 343.230351][T16714] veth13: entered promiscuous mode [ 343.230816][T16725] netlink: 'syz.0.2986': attribute type 1 has an invalid length. [ 343.246956][T16714] bond11: (slave veth13): Enslaving as an active interface with a down link [ 343.264760][T16708] vlan4: entered allmulticast mode [ 343.271173][T16708] bond11: entered allmulticast mode [ 343.296099][T16717] IPv6: sit4: Disabled Multicast RS [ 343.497233][ T5843] Bluetooth: hci5: command tx timeout [ 343.511227][T16405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.696081][T16405] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.755038][T15108] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.762288][T15108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.812841][T15108] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.820089][T15108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.047332][T16759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.066761][T16763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2994'. [ 344.121764][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2992'. [ 344.379188][T16779] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2995'. [ 344.739622][T16795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3000'. [ 344.760527][T16791] bond8: option resend_igmp: invalid value (32767) [ 344.786466][T16791] bond8: option resend_igmp: allowed values 0 - 255 [ 344.805835][T16791] bond8 (unregistering): Released all slaves [ 344.903724][T16797] : entered promiscuous mode [ 344.974384][T16405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.108809][T16405] veth0_vlan: entered promiscuous mode [ 345.135151][T16405] veth1_vlan: entered promiscuous mode [ 345.301817][T16405] veth0_macvtap: entered promiscuous mode [ 345.355209][T16405] veth1_macvtap: entered promiscuous mode [ 345.440466][T16405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.523626][T16405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.623173][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.685143][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.740175][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.794342][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.740454][T16858] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.3014'. [ 348.423409][T16825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.522878][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.561122][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.667959][ T7142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.687175][ T7142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.009813][T16881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3022'. [ 349.051213][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3024'. [ 349.062720][T16881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3022'. [ 349.086004][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3024'. [ 349.310286][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.327017][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.338716][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.350734][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.362760][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.412041][T16895] netlink: 'syz.3.3026': attribute type 32 has an invalid length. [ 349.458401][T16895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3026'. [ 349.499667][T16895] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 349.713890][T16911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3031'. [ 349.793801][T16916] netlink: 'syz.1.3033': attribute type 142 has an invalid length. [ 349.967030][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.979946][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.016831][T16893] chnl_net:caif_netlink_parms(): no params data found [ 350.069126][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.079631][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.276952][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.288577][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.419616][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.435413][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.512154][T16893] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.520495][T16893] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.528359][T16893] bridge_slave_0: entered allmulticast mode [ 350.536466][T16893] bridge_slave_0: entered promiscuous mode [ 350.622720][T16893] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.642254][T16893] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.670550][T16893] bridge_slave_1: entered allmulticast mode [ 350.689936][T16893] bridge_slave_1: entered promiscuous mode [ 350.703054][T16959] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3042'. [ 350.738888][T16960] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3042'. [ 350.878105][T16893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.903674][T16893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.977554][T16968] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 351.099582][T16893] team0: Port device team_slave_0 added [ 351.114760][T16978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3048'. [ 351.128118][T16893] team0: Port device team_slave_1 added [ 351.211978][T16978] netlink: 'syz.3.3048': attribute type 30 has an invalid length. [ 351.240506][T16983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3050'. [ 351.335137][T16989] openvswitch: netlink: Message has 4 unknown bytes. [ 351.367959][ T35] veth7: left allmulticast mode [ 351.372933][ T35] veth7: left promiscuous mode [ 351.388279][ T35] bridge3: port 1(veth7) entered disabled state [ 351.408079][ T5843] Bluetooth: hci1: command tx timeout [ 351.573428][ T35] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 351.676858][ T35] bond7 (unregistering): (slave vti0): Releasing backup interface [ 351.694077][ T35] vti0 (unregistering): left promiscuous mode [ 351.771924][ T35] gretap0 (unregistering): left promiscuous mode [ 351.824337][ T35] dvmrp0 (unregistering): left allmulticast mode [ 351.910637][ T35] bridge0 (unregistering): left allmulticast mode [ 351.990350][ T35] bond3 (unregistering): (slave bridge2): Releasing active interface [ 351.998676][ T35] bridge2 (unregistering): left promiscuous mode [ 352.005043][ T35] bridge2 (unregistering): left allmulticast mode [ 352.300919][ T35] bond0 (unregistering): left promiscuous mode [ 352.311617][ T35] bond0 (unregistering): Released all slaves [ 352.322794][ T35] bond1 (unregistering): Released all slaves [ 352.339454][ T35] bond2 (unregistering): Released all slaves [ 352.358762][ T35] bond3 (unregistering): Released all slaves [ 352.384910][ T35] bond4 (unregistering): Released all slaves [ 352.400090][ T35] bond5 (unregistering): Released all slaves [ 352.415718][ T35] bond6 (unregistering): (slave veth11): Releasing active interface [ 352.426208][ T35] bond6 (unregistering): Released all slaves [ 352.441241][ T35] bond7 (unregistering): Released all slaves [ 352.459765][ T35] bond8 (unregistering): Released all slaves [ 352.481236][ T35] bond9 (unregistering): Released all slaves [ 352.496690][ T35] bond10 (unregistering): Released all slaves [ 352.512325][ T35] bond11 (unregistering): (slave veth13): Releasing active interface [ 352.524646][ T35] bond11 (unregistering): Released all slaves [ 352.546861][T16893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.554439][T16893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.583914][T16893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.610073][T17005] netlink: 'syz.3.3055': attribute type 1 has an invalid length. [ 352.688843][T16893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.716220][T16893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.832046][T16893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.864160][T17011] netlink: 'syz.2.3057': attribute type 1 has an invalid length. [ 352.974684][T17014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.029983][T17014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.068231][T17014] bond0 (unregistering): Released all slaves [ 353.363767][T17034] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 353.397352][T16893] hsr_slave_0: entered promiscuous mode [ 353.407590][T16893] hsr_slave_1: entered promiscuous mode [ 353.414563][T16893] debugfs: 'hsr0' already exists in 'hsr' [ 353.430960][T16893] Cannot create hsr debugfs directory [ 353.486264][ T5843] Bluetooth: hci1: command tx timeout [ 353.708307][T17045] netlink: zone id is out of range [ 353.719647][T17045] netlink: zone id is out of range [ 353.735098][T17045] netlink: zone id is out of range [ 353.750770][T17045] netlink: zone id is out of range [ 353.771545][T17045] netlink: zone id is out of range [ 353.782878][T17045] netlink: zone id is out of range [ 353.797449][T17045] netlink: zone id is out of range [ 353.817523][T17045] netlink: zone id is out of range [ 354.372015][T17076] TCP: TCP_TX_DELAY enabled [ 354.411443][T17078] __nla_validate_parse: 5 callbacks suppressed [ 354.411467][T17078] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3075'. [ 354.506944][ T35] hsr_slave_1: left promiscuous mode [ 354.549542][ T35] veth1_macvtap: left promiscuous mode [ 354.569420][ T35] veth1_vlan: left promiscuous mode [ 354.574783][ T35] veth0_vlan: left promiscuous mode [ 355.570218][ T5843] Bluetooth: hci1: command tx timeout [ 356.031463][T17121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3083'. [ 356.187018][T17129] nbd: must specify an index to disconnect [ 356.275204][ T35] IPVS: stop unused estimator thread 0... [ 356.664168][T16893] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.752749][T16893] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.798643][T17154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3091'. [ 356.846435][T17156] netlink: 'syz.0.3090': attribute type 39 has an invalid length. [ 356.970732][T16893] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.014259][T17165] net_ratelimit: 4 callbacks suppressed [ 357.014280][T17165] openvswitch: netlink: Actions may not be safe on all matching packets [ 357.016661][T16893] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.095028][T17166] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 357.431920][T17193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3098'. [ 357.562780][T17192] syzkaller0: entered promiscuous mode [ 357.595744][T17192] syzkaller0: entered allmulticast mode [ 357.656040][ T5843] Bluetooth: hci1: command tx timeout [ 357.694358][T17206] netlink: 'syz.3.3101': attribute type 1 has an invalid length. [ 357.840372][T17192] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3097'. [ 358.002572][T17221] dummy0: entered promiscuous mode [ 358.033945][T17221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3105'. [ 358.141804][T17231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3105'. [ 358.171659][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3105'. [ 358.340287][T17231] bond0: Invalid ad_actor_system MAC address. [ 358.348554][T17231] bond0: option ad_actor_system: invalid value (1) [ 358.357508][T17231] bond0 (unregistering): Released all slaves [ 358.401333][T17246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'. [ 358.415369][T17246] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3108'. [ 358.471521][T16893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.615411][T16893] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.641591][T15108] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.648863][T15108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.714434][T15108] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.721670][T15108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.222990][T17287] IPv6: NLM_F_CREATE should be specified when creating new route [ 359.494853][T16893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.570813][T17297] netlink: 'syz.0.3119': attribute type 11 has an invalid length. [ 359.656509][T17318] netlink: 'syz.2.3122': attribute type 1 has an invalid length. [ 359.821272][T17318] 8021q: adding VLAN 0 to HW filter on device bond11 [ 359.869363][T17316] veth0_to_bond: left promiscuous mode [ 359.935681][T17301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3120'. [ 359.955235][T17316] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 360.094179][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3125'. [ 360.837738][T17369] syzkaller1: entered promiscuous mode [ 360.847839][T17369] syzkaller1: entered allmulticast mode [ 360.861283][T16893] veth0_vlan: entered promiscuous mode [ 360.869367][T17367] delete_channel: no stack [ 360.919397][T16893] veth1_vlan: entered promiscuous mode [ 360.984291][T16893] veth0_macvtap: entered promiscuous mode [ 360.999032][T16893] veth1_macvtap: entered promiscuous mode [ 361.030494][T16893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.045259][T16893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.081642][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.108605][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.143933][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.174344][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.520186][T15111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.557480][T15111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.701823][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.726393][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.125519][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 362.258935][T17435] erspan0: entered allmulticast mode [ 362.337607][T17435] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3146'. [ 362.623368][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.638278][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.647022][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.675429][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.704993][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.866020][T17466] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 363.068030][T17461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3150'. [ 363.218188][T17458] bond1 (unregistering): Released all slaves [ 363.531290][T17447] chnl_net:caif_netlink_parms(): no params data found [ 363.635363][T17498] netlink: 'syz.3.3161': attribute type 9 has an invalid length. [ 363.663584][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'. [ 363.698986][T15111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.710900][T15111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.722963][T15111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 363.964390][T15111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.991512][T15111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.002975][T15111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 364.144662][T15111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.165546][T15111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.176688][T15111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 364.380422][T15111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.408452][T15111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.436150][T15111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 364.462064][T17539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.765594][ T5845] Bluetooth: hci2: command tx timeout [ 365.257672][T17447] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.264888][T17447] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.272886][T17447] bridge_slave_0: entered allmulticast mode [ 365.285489][T17447] bridge_slave_0: entered promiscuous mode [ 365.300152][T17527] syzkaller0: entered promiscuous mode [ 365.306217][T17527] syzkaller0: entered allmulticast mode [ 365.389586][T17447] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.406408][T17447] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.414969][T17447] bridge_slave_1: entered allmulticast mode [ 365.431033][T17447] bridge_slave_1: entered promiscuous mode [ 365.504348][T17447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.535683][T17551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3173'. [ 365.586941][T17550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3173'. [ 365.621467][T17447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.654721][T17558] openvswitch: netlink: IPv6 tunnel dst address is zero [ 365.669379][T17561] openvswitch: netlink: IPv6 tunnel dst address is zero [ 365.837172][T17447] team0: Port device team_slave_0 added [ 365.990820][T17447] team0: Port device team_slave_1 added [ 366.024266][T17582] netlink: 'syz.4.3180': attribute type 1 has an invalid length. [ 366.057736][T15111] dummy0: left allmulticast mode [ 366.063333][T15111] bridge0: port 3(dummy0) entered disabled state [ 366.091723][T15111] bridge_slave_1: left allmulticast mode [ 366.108832][T15111] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.119335][T15111] bridge_slave_0: left promiscuous mode [ 366.125259][T15111] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.337610][T15111] tipc: Disabling bearer [ 366.376941][T15111] erspan0 (unregistering): left promiscuous mode [ 366.394536][T15111] gretap0 (unregistering): left promiscuous mode [ 366.431987][T15111] bond9 (unregistering): (slave gretap2): Releasing active interface [ 366.810621][T15111] bond1 (unregistering): Released all slaves [ 366.826155][T15111] bond2 (unregistering): Released all slaves [ 366.842403][T15111] bond3 (unregistering): (slave veth3): Releasing active interface [ 366.846686][ T5845] Bluetooth: hci2: command tx timeout [ 366.858633][T15111] bond3 (unregistering): Released all slaves [ 366.884661][T15111] bond4 (unregistering): Released all slaves [ 366.899844][T15111] bond5 (unregistering): Released all slaves [ 366.916466][T15111] bond6 (unregistering): (slave vlan0): Releasing backup interface [ 366.930664][T15111] bond6 (unregistering): Released all slaves [ 366.944735][T15111] bond7 (unregistering): Released all slaves [ 366.960588][T15111] bond8 (unregistering): Released all slaves [ 366.974918][T15111] bond0 (unregistering): Released all slaves [ 366.990066][T15111] bond9 (unregistering): (slave veth9): Releasing active interface [ 367.004674][T15111] bond9 (unregistering): Released all slaves [ 367.031156][T15111] bond10 (unregistering): Released all slaves [ 367.045170][T15111] bond11 (unregistering): Released all slaves [ 367.111295][T17589] kthread_run failed with err -4 [ 367.164151][T17447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.189152][T17447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.252367][T17447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.270857][T17447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.279740][T17447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.306927][T17447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.369615][T17599] netlink: 'syz.4.3185': attribute type 28 has an invalid length. [ 367.377686][T17599] netlink: 'syz.4.3185': attribute type 3 has an invalid length. [ 367.387108][T17599] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3185'. [ 367.397832][T15111] : left promiscuous mode [ 367.593250][T17447] hsr_slave_0: entered promiscuous mode [ 367.607165][T17447] hsr_slave_1: entered promiscuous mode [ 367.666719][T17447] debugfs: 'hsr0' already exists in 'hsr' [ 367.672550][T17447] Cannot create hsr debugfs directory [ 367.713374][T15111] tipc: Left network mode [ 367.835407][T17618] netlink: 'syz.2.3191': attribute type 1 has an invalid length. [ 367.859815][T17623] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3192'. [ 368.228419][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3196'. [ 368.414760][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3197'. [ 368.445236][T17649] netlink: 5108 bytes leftover after parsing attributes in process `syz.1.3197'. [ 368.481563][T17649] openvswitch: netlink: Flow key attr not present in new flow. [ 368.491018][T17654] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 368.527082][T17648] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3198'. [ 368.537119][T17648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3198'. [ 368.568468][T17648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3198'. [ 368.673876][T17654] bond1 (unregistering): Released all slaves [ 368.928999][ T5845] Bluetooth: hci2: command tx timeout [ 369.338431][T15111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.357905][T15111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.412019][T15111] veth1_macvtap: left promiscuous mode [ 369.429468][T15111] veth0_macvtap: left promiscuous mode [ 369.448591][T15111] veth1_vlan: left promiscuous mode [ 369.453887][T15111] veth0_vlan: left promiscuous mode [ 369.763352][T17711] netlink: 'syz.4.3210': attribute type 30 has an invalid length. [ 370.026536][T17718] netlink: 'syz.3.3212': attribute type 11 has an invalid length. [ 370.099858][T17723] ip6t_srh: unknown srh match flags 5F28 [ 370.121172][T15111] team0 (unregistering): Port device team_slave_1 removed [ 370.306481][ T7138] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.335497][ T7138] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.421116][T17730] netlink: 'syz.4.3216': attribute type 1 has an invalid length. [ 370.432301][ T7138] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.448963][ T7138] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.451601][T17730] netlink: 'syz.4.3216': attribute type 2 has an invalid length. [ 370.473511][T17447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 370.484701][T17738] netlink: 'syz.2.3215': attribute type 12 has an invalid length. [ 370.494140][T17730] netlink: 'syz.4.3216': attribute type 1 has an invalid length. [ 370.523767][T17447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 370.597387][T17738] bond12: option primary_reselect: invalid value (255) [ 370.616260][T17738] bond12 (unregistering): Released all slaves [ 370.693930][T17447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 370.756254][T17447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.860927][T15111] IPVS: stop unused estimator thread 0... [ 370.896541][T17772] __nla_validate_parse: 4 callbacks suppressed [ 370.896563][T17772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3222'. [ 371.002093][T17778] IPVS: length: 80 != 8 [ 371.006515][ T5845] Bluetooth: hci2: command tx timeout [ 371.048342][T17780] dvmrp0: entered allmulticast mode [ 371.154680][T17447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.219755][T17789] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3227'. [ 371.234213][T17447] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.259792][ T7138] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.267024][ T7138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.319580][ T7138] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.326805][ T7138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.403138][T17793] pim6reg: entered allmulticast mode [ 371.933981][T17447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.095670][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3242'. [ 372.298162][T17849] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3246'. [ 372.364241][T17851] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 373.085476][ T5845] Bluetooth: hci2: command tx timeout [ 373.345343][T17847] batman_adv: batadv0: Adding interface: dummy0 [ 373.351889][T17847] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.379796][T17847] batman_adv: batadv0: Interface activated: dummy0 [ 373.400298][T17850] batadv0: mtu less than device minimum [ 373.412407][T17850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.424482][T17850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.436330][T17850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.448152][T17850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.459970][T17850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.471810][T17850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.483576][T17850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.495444][T17850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.507353][T17850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.555046][T17855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 373.569103][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3247'. [ 373.718016][T17447] veth0_vlan: entered promiscuous mode [ 373.755176][T17863] netlink: 'syz.2.3250': attribute type 39 has an invalid length. [ 373.763903][T17866] netlink: 'syz.1.3252': attribute type 32 has an invalid length. [ 373.774876][T17868] netlink: 'syz.1.3252': attribute type 32 has an invalid length. [ 373.783446][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'. [ 373.787735][T17447] veth1_vlan: entered promiscuous mode [ 373.794821][T17868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'. [ 373.902621][T17866] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 373.904123][T17868] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 374.012502][T17447] veth0_macvtap: entered promiscuous mode [ 374.085000][T17447] veth1_macvtap: entered promiscuous mode [ 374.138983][T17447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.154349][T17447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.166905][T17889] netlink: 'syz.2.3259': attribute type 3 has an invalid length. [ 374.203633][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.249657][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.282883][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.325715][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.423647][T17897] netlink: 'syz.4.3261': attribute type 4 has an invalid length. [ 374.526731][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.550720][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.650745][ T7142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.689498][ T7142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.701174][T17910] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3265'. [ 375.227898][T17926] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3272'. [ 375.331784][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.341741][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.349757][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.358440][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.366340][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.550990][T17945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.558294][T17945] IPv6: NLM_F_CREATE should be set when creating new route [ 375.565591][T17945] IPv6: NLM_F_CREATE should be set when creating new route [ 376.154462][T17963] tipc: Started in network mode [ 376.159826][T17963] tipc: Node identity ac14142f, cluster identity 4711 [ 376.167854][T17963] tipc: New replicast peer: 0.0.0.0 [ 376.173903][T17963] tipc: Enabled bearer , priority 10 [ 376.209806][T17963] __nla_validate_parse: 2 callbacks suppressed [ 376.209827][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 376.276216][T17963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3281'. [ 376.386952][T17937] chnl_net:caif_netlink_parms(): no params data found [ 376.408665][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'. [ 376.483552][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'. [ 376.868554][T17937] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.883488][T17937] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.892514][T17937] bridge_slave_0: entered allmulticast mode [ 376.902403][T17937] bridge_slave_0: entered promiscuous mode [ 376.918544][T18003] netlink: 'syz.0.3291': attribute type 11 has an invalid length. [ 376.920920][T17937] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.944470][T17937] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.968103][T17937] bridge_slave_1: entered allmulticast mode [ 376.976242][T17937] bridge_slave_1: entered promiscuous mode [ 377.028009][T18008] netlink: 'syz.0.3291': attribute type 4 has an invalid length. [ 377.109180][T17937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.189657][T17937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.313103][T14637] tipc: Node number set to 2886997039 [ 377.329044][T17937] team0: Port device team_slave_0 added [ 377.329072][T18028] xt_connbytes: Forcing CT accounting to be enabled [ 377.347106][T17937] team0: Port device team_slave_1 added [ 377.406370][ T5843] Bluetooth: hci0: command tx timeout [ 377.433970][T17937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.441126][T17937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.469120][T17937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.483311][T17937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.499122][T17937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.526249][T17937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.673924][T17937] hsr_slave_0: entered promiscuous mode [ 377.681653][T17937] hsr_slave_1: entered promiscuous mode [ 377.697021][T17937] debugfs: 'hsr0' already exists in 'hsr' [ 377.706630][T17937] Cannot create hsr debugfs directory [ 377.716003][T18046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3300'. [ 377.750981][T18046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3300'. [ 378.055383][T18058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3303'. [ 378.098749][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3303'. [ 378.150950][T18065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3305'. [ 378.163355][T18065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3305'. [ 378.196795][T18068] syzkaller0: entered promiscuous mode [ 378.202510][T18068] syzkaller0: entered allmulticast mode [ 378.263718][T17937] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.315243][T18070] netlink: 'syz.0.3306': attribute type 3 has an invalid length. [ 378.344249][T18074] netlink: 'syz.4.3309': attribute type 1 has an invalid length. [ 378.396367][T17937] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.476442][T18074] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 378.513980][T18078] bond0: entered promiscuous mode [ 378.535073][T18078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.545330][ T67] net_ratelimit: 11 callbacks suppressed [ 378.545348][ T67] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 378.568283][T18080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.658887][T17937] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.707285][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 378.770773][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.815192][T17937] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.053237][T18113] xt_hashlimit: size too large, truncated to 1048576 [ 379.285650][T17937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 379.338354][T17937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 379.350796][T17937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 379.384442][T17937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 379.489469][ T5843] Bluetooth: hci0: command tx timeout [ 379.508428][T18132] sctp: [Deprecated]: syz.0.3322 (pid 18132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.508428][T18132] Use struct sctp_sack_info instead [ 379.659004][T14637] IPVS: starting estimator thread 0... [ 379.745523][T18145] IPVS: using max 27 ests per chain, 64800 per kthread [ 379.862190][T17937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.928051][T18154] xt_addrtype: ipv6 does not support BROADCAST matching [ 379.950616][T18157] syzkaller1: entered promiscuous mode [ 379.956629][T18157] syzkaller1: entered allmulticast mode [ 379.994235][T17937] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.017121][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.024353][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.065840][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.073086][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.210211][T17937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.561282][T17937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.622950][T17937] veth0_vlan: entered promiscuous mode [ 380.655771][T17937] veth1_vlan: entered promiscuous mode [ 380.703569][T17937] veth0_macvtap: entered promiscuous mode [ 380.720872][T17937] veth1_macvtap: entered promiscuous mode [ 380.758150][T17937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.758752][T18198] netlink: 'syz.2.3343': attribute type 3 has an invalid length. [ 380.784375][T17937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.803562][ T7140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.833559][ T7140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.844770][ T7140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.864148][ T7140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.013877][T15111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.055620][T15111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.124633][T18210] netlink: 'syz.0.3346': attribute type 1 has an invalid length. [ 381.154857][T15111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.175125][T15111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.305182][T18217] netlink: 'syz.0.3349': attribute type 21 has an invalid length. [ 381.324766][T18217] __nla_validate_parse: 5 callbacks suppressed [ 381.324784][T18217] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3349'. [ 381.348181][T18221] netlink: 'syz.3.3350': attribute type 1 has an invalid length. [ 381.357104][T18221] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3350'. [ 381.375225][T18221] pim6reg527: entered allmulticast mode [ 381.426276][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3271'. [ 381.566438][ T5843] Bluetooth: hci0: command tx timeout [ 381.644000][T18234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3354'. [ 381.890608][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.911423][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.920221][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.931332][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.940827][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.074136][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 382.256981][T18257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.284219][T18257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.319327][T18257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.327071][T18257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.358600][T18264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3361'. [ 382.479259][T18268] netlink: 'syz.0.3362': attribute type 10 has an invalid length. [ 382.536185][T18273] netlink: 'syz.3.3364': attribute type 10 has an invalid length. [ 382.544235][T18273] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.3364'. [ 382.627605][T18244] chnl_net:caif_netlink_parms(): no params data found [ 382.694655][T11962] IPVS: starting estimator thread 0... [ 382.702318][T18285] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 382.795813][T18286] IPVS: using max 26 ests per chain, 62400 per kthread [ 382.843581][T18244] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.862992][T18293] netlink: 'syz.3.3367': attribute type 8 has an invalid length. [ 382.866106][T18244] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.878879][T18244] bridge_slave_0: entered allmulticast mode [ 382.890144][T18244] bridge_slave_0: entered promiscuous mode [ 382.911709][T18244] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.919328][T18244] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.927627][T18244] bridge_slave_1: entered allmulticast mode [ 382.936216][T18244] bridge_slave_1: entered promiscuous mode [ 382.981670][T18244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.995913][T18244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.042643][T18244] team0: Port device team_slave_0 added [ 383.052333][T18244] team0: Port device team_slave_1 added [ 383.129589][T18244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.137240][T18244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.173838][T18244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.188397][T18244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.195027][T18306] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3370'. [ 383.219438][T18244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.268469][T18244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.296563][T18311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3372'. [ 383.341939][T18311] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 383.479019][T18244] hsr_slave_0: entered promiscuous mode [ 383.489576][T18244] hsr_slave_1: entered promiscuous mode [ 383.518127][T18244] debugfs: 'hsr0' already exists in 'hsr' [ 383.538260][T18244] Cannot create hsr debugfs directory [ 383.647908][ T5845] Bluetooth: hci0: command tx timeout [ 383.737924][T18326] netlink: zone id is out of range [ 383.743097][T18326] netlink: zone id is out of range [ 383.788720][T18326] netlink: zone id is out of range [ 383.793907][T18326] netlink: zone id is out of range [ 383.799313][T18326] netlink: zone id is out of range [ 383.816730][T18326] netlink: zone id is out of range [ 383.845143][T18326] netlink: zone id is out of range [ 383.850743][T18326] netlink: zone id is out of range [ 383.856082][T18326] netlink: zone id is out of range [ 383.861338][T18326] netlink: zone id is out of range [ 383.965988][ T5845] Bluetooth: hci3: command tx timeout [ 384.339732][T18352] xt_hashlimit: size too large, truncated to 1048576 [ 384.455833][T18353] SET target dimension over the limit! [ 384.510540][T18364] netlink: 'syz.1.3387': attribute type 2 has an invalid length. [ 384.681724][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3388'. [ 384.735182][T18244] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 384.765113][T18244] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 384.820490][T18244] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 384.838629][T18373] netlink: 'syz.4.3390': attribute type 21 has an invalid length. [ 384.860714][T18373] IPv6: NLM_F_CREATE should be specified when creating new route [ 384.870989][T18244] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 384.906003][T18373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.913385][T18373] IPv6: NLM_F_CREATE should be set when creating new route [ 384.920688][T18373] IPv6: NLM_F_CREATE should be set when creating new route [ 384.927997][T18373] IPv6: NLM_F_CREATE should be set when creating new route [ 385.257880][T18244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.287181][T18244] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.302654][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.309915][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.377946][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.385261][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.707031][T18401] syzkaller0: entered promiscuous mode [ 385.712955][T18401] syzkaller0: entered allmulticast mode [ 386.050796][ T5845] Bluetooth: hci3: command tx timeout [ 387.520175][T18438] netlink: 'syz.1.3406': attribute type 12 has an invalid length. [ 387.610065][T18244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.636202][T18442] __nla_validate_parse: 131 callbacks suppressed [ 387.636225][T18442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3407'. [ 387.756726][T18244] veth0_vlan: entered promiscuous mode [ 387.795046][T18244] veth1_vlan: entered promiscuous mode [ 387.939663][T18244] veth0_macvtap: entered promiscuous mode [ 388.004578][T18244] veth1_macvtap: entered promiscuous mode [ 388.074752][T18244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.080272][T18457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3412'. [ 388.117747][T18244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.125904][ T5845] Bluetooth: hci3: command tx timeout [ 388.168692][ T7140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.205175][ T7140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.245524][ T7140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.254450][ T7140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.480391][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.512429][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.582108][T15111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.596523][T15111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.653197][T18470] xt_ecn: cannot match TCP bits for non-tcp packets [ 389.179389][T18496] IPv6: sit1: Disabled Multicast RS [ 389.325050][T18507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3425'. [ 389.746204][T18532] netlink: 'syz.1.3428': attribute type 1 has an invalid length. [ 389.769916][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3430'. [ 389.804113][T18533] bridge_slave_1: left allmulticast mode [ 389.812826][T18533] bridge_slave_1: left promiscuous mode [ 389.819430][T18533] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.851347][T18533] bridge_slave_0: left allmulticast mode [ 389.860130][T18533] bridge_slave_0: left promiscuous mode [ 389.870802][T18533] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.927086][T18546] sctp: [Deprecated]: syz.1.3428 (pid 18546) Use of int in maxseg socket option. [ 389.927086][T18546] Use struct sctp_assoc_value instead [ 389.977754][T18527] bond1 (unregistering): Released all slaves [ 390.016381][T18538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3431'. [ 390.027196][T18538] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3431'. [ 390.038865][T18539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3432'. [ 390.086766][T18545] gre1: entered promiscuous mode [ 390.091881][T18545] gre1: entered allmulticast mode [ 390.191427][T18551] tipc: Failed to remove unknown binding: 66,0,0/0:2081290809/2081290810 [ 390.205775][ T5845] Bluetooth: hci3: command tx timeout [ 390.211785][T18551] tipc: Failed to remove unknown binding: 66,0,0/0:2081290809/2081290810 [ 390.383038][T18562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3440'. [ 390.458551][T18567] netlink: 'syz.3.3441': attribute type 2 has an invalid length. [ 390.479026][T18567] 9: entered promiscuous mode [ 390.551591][T18570] syzkaller0: entered promiscuous mode [ 390.558082][T18570] syzkaller0: entered allmulticast mode [ 390.620809][T18576] netlink: 'syz.3.3444': attribute type 10 has an invalid length. [ 390.681341][T18580] net_ratelimit: 134 callbacks suppressed [ 390.681371][T18580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.708447][T18581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.818771][T18591] netlink: 'syz.4.3448': attribute type 2 has an invalid length. [ 390.834451][T18591] netlink: 'syz.4.3448': attribute type 11 has an invalid length. [ 390.849261][T18591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3448'. [ 390.950058][T18596] netlink: 'syz.3.3449': attribute type 1 has an invalid length. [ 390.962883][T18596] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3449'. [ 390.975227][T18596] x_tables: duplicate underflow at hook 3 [ 391.166771][T18609] sctp: [Deprecated]: syz.3.3454 (pid 18609) Use of int in max_burst socket option deprecated. [ 391.166771][T18609] Use struct sctp_assoc_value instead [ 391.284053][T18613] hsr_slave_0: left promiscuous mode [ 391.305949][T18613] hsr_slave_1: left promiscuous mode [ 391.447430][T18627] openvswitch: netlink: Unknown nsh attribute 0 [ 391.454952][T18625] netlink: 'syz.2.3456': attribute type 10 has an invalid length. [ 391.562315][T18625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.623622][T18625] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 391.859694][T18651] netlink: 'syz.0.3464': attribute type 8 has an invalid length. [ 392.097772][T18657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.428972][T18686] netlink: 'syz.2.3475': attribute type 1 has an invalid length. [ 392.602999][T18693] netlink: 'syz.2.3480': attribute type 10 has an invalid length. [ 392.689767][T18700] __nla_validate_parse: 13 callbacks suppressed [ 392.689788][T18700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3482'. [ 392.707483][T18693] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.718276][T18693] bridge_slave_1: left allmulticast mode [ 392.723973][T18693] bridge_slave_1: left promiscuous mode [ 392.757071][T18693] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.784267][T18693] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 392.961266][T18707] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 392.986132][T18707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.140107][T18718] syzkaller1: entered promiscuous mode [ 393.151466][T18718] syzkaller1: entered allmulticast mode [ 393.282797][T18730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3491'. [ 393.305802][T18730] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3491'. [ 393.658636][T18748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3497'. [ 393.820783][T18757] sctp: [Deprecated]: syz.3.3501 (pid 18757) Use of int in maxseg socket option. [ 393.820783][T18757] Use struct sctp_assoc_value instead [ 393.869511][T18758] netlink: 'syz.2.3502': attribute type 10 has an invalid length. [ 393.983323][T18765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.012313][T18765] xt_recent: Unsupported userspace flags (000000b1) [ 394.316983][T18785] xt_socket: unknown flags 0x50 [ 394.471172][T18798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3515'. [ 394.842619][T18799] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 394.869573][T18799] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 395.131190][T18810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3517'. [ 395.227694][T18815] dvmrp0: entered allmulticast mode [ 395.441182][T18824] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 395.704094][T18838] netlink: 'syz.0.3528': attribute type 1 has an invalid length. [ 395.865998][T18851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3531'. [ 395.890761][T18851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3531'. [ 395.919324][T18849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3532'. [ 395.970760][T18856] Bluetooth: MGMT ver 1.23 [ 395.987136][T18855] x_tables: unsorted underflow at hook 4 [ 396.242425][T18870] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 396.255907][T18870] syz_tun: entered allmulticast mode [ 396.273998][T18870] dvmrp8: entered allmulticast mode [ 396.284090][T18868] syz_tun: left allmulticast mode [ 396.310894][T18873] syzkaller0: entered promiscuous mode [ 396.323696][T18873] syzkaller0: entered allmulticast mode [ 396.487218][T18880] netlink: 'syz.1.3542': attribute type 1 has an invalid length. [ 396.546894][T18880] bond1: entered promiscuous mode [ 396.552422][T18880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.648991][T18887] netlink: 'syz.4.3545': attribute type 11 has an invalid length. [ 396.776262][T18893] Cannot find add_set index 0 as target [ 396.812108][T18892] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 396.829741][T18892] bond2 (unregistering): Released all slaves [ 397.067373][T18904] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3549'. [ 397.161541][T18904] syzkaller0: entered promiscuous mode [ 397.168415][T18904] syzkaller0: entered allmulticast mode [ 397.202032][T18913] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 397.351954][T18917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.600336][T18922] netlink: 'syz.3.3554': attribute type 1 has an invalid length. [ 398.666645][T18889] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 398.672922][T18889] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 398.728995][ T120] tipc: Subscription rejected, illegal request [ 398.807192][T18889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.813172][T18889] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 398.912180][T18941] __nla_validate_parse: 1 callbacks suppressed [ 398.912199][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3560'. [ 398.931297][T18941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3560'. [ 398.988516][T18944] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 399.012037][T18889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 399.045661][T18889] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 399.338519][T18966] sock: sock_timestamping_bind_phc: sock not bind to device [ 399.389655][T18889] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 399.402452][T18889] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 399.535826][T18889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.541808][T18889] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 399.553100][T18982] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3570'. [ 399.730032][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3571'. [ 399.744440][T18993] netlink: 'syz.1.3574': attribute type 21 has an invalid length. [ 399.757472][T18989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3571'. [ 399.821394][T18993] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 399.852828][T19002] netlink: 'syz.3.3573': attribute type 1 has an invalid length. [ 399.874904][T18993] bond2 (unregistering): Released all slaves [ 399.912259][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3575'. [ 399.947848][T19002] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 400.107522][T19016] s5: renamed from vlan1 (while UP) [ 400.385488][T19036] Only authenc() type AEADs are supported by ESSIV [ 401.093933][T19058] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20004 [ 401.134234][T19059] geneve2: entered promiscuous mode [ 401.143627][T19061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3592'. [ 401.452571][T19080] xt_socket: unknown flags 0xe4 [ 401.531448][T19091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3601'. [ 401.982903][T19116] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3609'. [ 402.253733][T19133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3614'. [ 402.287297][T19133] netlink: 'syz.1.3614': attribute type 1 has an invalid length. [ 402.311764][T19133] netlink: 'syz.1.3614': attribute type 1 has an invalid length. [ 402.358370][T19133] netlink: 'syz.1.3614': attribute type 2 has an invalid length. [ 402.867813][T19162] syzkaller1: entered promiscuous mode [ 402.875445][T19162] syzkaller1: entered allmulticast mode [ 403.212662][T19181] netlink: 'syz.4.3632': attribute type 19 has an invalid length. [ 403.261139][T19181] vlan2: entered allmulticast mode [ 403.267115][T19181] bridge4: entered allmulticast mode [ 403.274530][T19181] bridge4: port 1(erspan0) entered blocking state [ 403.281856][T19181] bridge4: port 1(erspan0) entered disabled state [ 403.291091][T19181] erspan0: entered allmulticast mode [ 403.299388][T19181] erspan0: entered promiscuous mode [ 403.306378][T19181] bridge4: port 1(erspan0) entered blocking state [ 403.312998][T19181] bridge4: port 1(erspan0) entered forwarding state [ 403.405184][T19184] hsr_slave_1 (unregistering): left promiscuous mode [ 403.746395][T19202] netlink: 'syz.4.3641': attribute type 51 has an invalid length. [ 403.767521][T19202] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 403.794949][T19202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.802945][T19202] batadv0: mtu less than device minimum [ 403.811109][T19202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.823242][T19202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.835032][T19202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.846813][T19202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.858650][T19202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.870414][T19202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.882310][T19202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.894074][T19202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.926170][T19202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.951207][T19202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.988612][T19202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.028627][T19202] batman_adv: batadv0: Interface deactivated: dummy0 [ 404.046779][T19202] batman_adv: batadv0: Removing interface: dummy0 [ 404.165256][T19220] __nla_validate_parse: 11 callbacks suppressed [ 404.172310][T19220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3647'. [ 404.181378][T19220] netlink: 'syz.2.3647': attribute type 7 has an invalid length. [ 404.190030][T19220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3647'. [ 404.312540][T19225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3648'. [ 404.474015][T19238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3652'. [ 404.486769][T19236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3652'. [ 404.823360][T19255] netlink: 'syz.4.3657': attribute type 61 has an invalid length. [ 404.839691][T19253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3656'. [ 405.146962][T19271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3661'. [ 405.173521][T19271] netlink: 'syz.3.3661': attribute type 10 has an invalid length. [ 405.218873][T19271] team0: Device ipvlan1 failed to register rx_handler [ 405.455225][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3666'. [ 405.494306][T19292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3666'. [ 405.670012][T19297] netlink: 'syz.2.3669': attribute type 5 has an invalid length. [ 405.723815][T19299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3670'. [ 405.908206][T19308] netlink: 'syz.2.3673': attribute type 83 has an invalid length. [ 406.072972][ T24] IPVS: starting estimator thread 0... [ 406.176867][T19319] IPVS: using max 24 ests per chain, 57600 per kthread [ 406.404416][T19329] netlink: 'syz.3.3680': attribute type 1 has an invalid length. [ 406.413184][T19329] netlink: 'syz.3.3680': attribute type 4 has an invalid length. [ 406.512154][T19340] tipc: Started in network mode [ 406.522102][T19340] tipc: Node identity 7f000001, cluster identity 4711 [ 406.546424][T19340] tipc: Enabling of bearer rejected, failed to enable media [ 406.734087][T19348] x_tables: unsorted entry at hook 2 [ 406.788491][T19355] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20002 [ 407.234828][T19385] x_tables: unsorted underflow at hook 3 [ 407.311635][T19394] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 407.347789][T19394] team0: Device macvlan2 is already an upper device of the team interface [ 407.392211][T19392] netlink: 'syz.4.3698': attribute type 7 has an invalid length. [ 407.857910][T19425] netlink: 'syz.4.3708': attribute type 1 has an invalid length. [ 407.882325][T19419] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.890147][T19419] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.129190][T19438] netlink: 'syz.3.3713': attribute type 11 has an invalid length. [ 408.230430][T19438] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 408.257812][T19438] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.265574][T19438] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.337207][T19443] ip6tnl1: entered promiscuous mode [ 408.438827][T19458] siw: device registration error -23 [ 408.676370][T19468] veth0_to_bridge: entered promiscuous mode [ 408.685097][T19467] veth0_to_bridge: left promiscuous mode [ 409.080704][T19487] xt_hashlimit: size too large, truncated to 1048576 [ 409.096253][T19486] syzkaller0: entered promiscuous mode [ 409.101864][T19486] syzkaller0: entered allmulticast mode [ 409.227342][T19483] tipc: Started in network mode [ 409.257665][T19483] tipc: Node identity , cluster identity 4711 [ 409.313378][T19501] __nla_validate_parse: 28 callbacks suppressed [ 409.313400][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3735'. [ 409.480994][T19505] validate_nla: 2 callbacks suppressed [ 409.481016][T19505] netlink: 'syz.3.3737': attribute type 9 has an invalid length. [ 409.524468][T19505] netlink: 'syz.3.3737': attribute type 11 has an invalid length. [ 409.543986][T19505] netlink: 'syz.3.3737': attribute type 12 has an invalid length. [ 409.560085][T19510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3737'. [ 409.562678][T19505] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3737'. [ 409.719699][T19517] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 409.746343][T19519] syzkaller0: entered promiscuous mode [ 409.769066][T19519] syzkaller0: entered allmulticast mode [ 410.281367][T19546] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3748'. [ 410.350272][T19546] tipc: Failed to remove unknown binding: 66,0,0/0:3289770985/3289770986 [ 410.417643][T19546] tipc: Failed to remove unknown binding: 66,0,0/0:3289770985/3289770986 [ 410.660649][T19577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3758'. [ 410.823476][T19588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3761'. [ 410.971879][T19595] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3763'. [ 411.089016][T19604] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3766'. [ 411.091747][T19602] net veth1_virt_wifi : renamed from virt_wifi0 [ 411.107948][T19606] netlink: 'syz.0.3767': attribute type 7 has an invalid length. [ 411.128009][T19602] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3765'. [ 411.200260][T19612] netlink: 'syz.0.3767': attribute type 7 has an invalid length. [ 411.340907][T19615] netlink: 'syz.3.3769': attribute type 4 has an invalid length. [ 411.414797][T19614] netlink: 'syz.3.3769': attribute type 4 has an invalid length. [ 411.430998][T19622] net_ratelimit: 42 callbacks suppressed [ 411.431018][T19622] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 411.487695][T19623] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20002 [ 411.680165][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3775'. [ 411.792314][T19636] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 411.845586][T19636] bond2: (slave lo): Enslaving as an active interface with an up link [ 411.857398][T19636] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 412.113961][T19665] netlink: 'syz.1.3781': attribute type 2 has an invalid length. [ 412.122927][T19662] syzkaller0: entered promiscuous mode [ 412.143077][T19662] atomic_op ffff88807fa36998 conn xmit_atomic 0000000000000000 [ 413.281819][T19738] syzkaller0: entered promiscuous mode [ 413.287519][T19738] syzkaller0: entered allmulticast mode [ 415.688106][T19816] Cannot find add_set index 0 as target [ 416.100087][T19843] __nla_validate_parse: 6 callbacks suppressed [ 416.100109][T19843] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3820'. [ 416.244204][T19851] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3824'. [ 416.297066][T19856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3825'. [ 416.613926][T19874] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3829'. [ 416.676507][T19874] openvswitch: netlink: Duplicate or invalid key (type 0). [ 416.683801][T19874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.740239][T19876] bond2: entered promiscuous mode [ 416.856548][T19876] macvlan2: entered promiscuous mode [ 416.862213][T19876] macvlan2: entered allmulticast mode [ 416.890229][T19876] bond2: (slave macvlan2): Opening slave failed [ 416.992954][T19900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3833'. [ 417.231474][T19910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3839'. [ 418.070821][T19911] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3838'. [ 418.090080][T19911] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3838'. [ 418.103674][T19911] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3838'. [ 418.362486][T19968] sctp: [Deprecated]: syz.3.3852 (pid 19968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.362486][T19968] Use struct sctp_sack_info instead [ 418.449106][T11962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.518779][T19970] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3857'. [ 418.708446][T19984] netlink: 'syz.2.3861': attribute type 33 has an invalid length. [ 418.724591][T19982] netlink: 'syz.0.3859': attribute type 1 has an invalid length. [ 418.745098][T19982] netlink: 'syz.0.3859': attribute type 2 has an invalid length. [ 418.873328][T19989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.940075][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.979355][T19994] bond3 (unregistering): Released all slaves [ 419.473093][T20019] ip6_vti0: entered promiscuous mode [ 419.486058][T11956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.494549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.737617][T14637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.746365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.174064][T20056] syzkaller1: entered promiscuous mode [ 420.180445][T20056] syzkaller1: entered allmulticast mode [ 420.286018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.463736][T20066] ip6t_srh: unknown srh match flags 5F28 [ 421.545831][T20112] syzkaller1: entered promiscuous mode [ 421.551475][T20112] syzkaller1: entered allmulticast mode [ 421.833776][T20136] __nla_validate_parse: 76 callbacks suppressed [ 421.833797][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3904'. [ 421.994232][T20140] SET target dimension over the limit! [ 422.315708][T20159] ipvlan2: entered allmulticast mode [ 422.321075][T20159] batadv_slave_1: entered allmulticast mode [ 422.359178][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3908'. [ 422.368621][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3908'. [ 422.386000][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3908'. [ 422.406049][T20159] batman_adv: batadv0: Adding interface: ipvlan2 [ 422.416319][T20155] netlink: 'syz.4.3907': attribute type 13 has an invalid length. [ 422.417926][T20159] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.473936][T20159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.496030][T20159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.507866][T20159] batman_adv: batadv0: Interface activated: ipvlan2 [ 422.571172][T20155] net_ratelimit: 7 callbacks suppressed [ 422.571184][T20155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.606280][T11956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.774759][T20172] vlan1: entered allmulticast mode [ 422.780819][T20172] bridge0: entered allmulticast mode [ 422.791621][T20172] bridge0: port 2(vlan1) entered blocking state [ 422.822817][T20172] bridge0: port 2(vlan1) entered disabled state [ 422.936795][ T7140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.946386][T14637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.957434][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.970997][ T5845] block nbd0: Receive control failed (result -32) [ 423.191643][T15111] bond0: (slave bond_slave_0): interface is now down [ 423.211307][T15111] bond0: (slave bond_slave_1): interface is now down [ 423.243463][T15111] bond0: now running without any active interface! [ 423.416548][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3917'. [ 423.485793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.621084][T20210] netlink: 'syz.1.3920': attribute type 1 has an invalid length. [ 423.647724][T11956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.660612][T20210] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3920'. [ 423.710057][T20210] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3920'. [ 423.751171][T20210] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3920'. [ 423.927952][T20220] Unsupported ieee802154 address type: 0 [ 423.949282][T20220] vlan2: entered promiscuous mode [ 424.049824][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.151488][T20240] netlink: 'syz.1.3927': attribute type 1 has an invalid length. [ 424.160771][T20240] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3927'. [ 424.258726][T20244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.267624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.443611][T20250] netlink: 'syz.3.3930': attribute type 6 has an invalid length. [ 424.474169][T20252] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3931'. [ 424.589454][ T24] IPVS: starting estimator thread 0... [ 424.715727][T20261] IPVS: using max 25 ests per chain, 60000 per kthread [ 425.025996][T20282] netlink: 'syz.0.3937': attribute type 1 has an invalid length. [ 425.232781][T20291] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 425.284654][T20291] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 425.308815][T20291] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 425.341438][T20294] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 425.355359][T20294] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 425.607384][T20313] netlink: 'syz.0.3944': attribute type 2 has an invalid length. [ 426.087384][T20317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.131594][T20317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.189556][T20317] bond0 (unregistering): Released all slaves [ 426.270545][T20324] netlink: 'syz.1.3948': attribute type 10 has an invalid length. [ 426.289729][T20324] bridge_slave_1: left allmulticast mode [ 426.305419][T20324] bridge_slave_1: left promiscuous mode [ 426.311292][T20324] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.333005][T20327] netlink: 'syz.3.3949': attribute type 62 has an invalid length. [ 426.370950][T20324] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 426.571259][T20342] netlink: 'syz.3.3953': attribute type 1 has an invalid length. [ 426.595415][T20342] netlink: 'syz.3.3953': attribute type 1 has an invalid length. [ 426.724330][T20353] syzkaller1: entered promiscuous mode [ 426.730147][T20353] syzkaller1: entered allmulticast mode [ 426.874018][T20359] netlink: 'syz.1.3959': attribute type 11 has an invalid length. [ 426.939107][T20363] netlink: 'syz.2.3961': attribute type 1 has an invalid length. [ 426.961158][T20361] __nla_validate_parse: 5 callbacks suppressed [ 426.961178][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3960'. [ 427.018316][T20363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3961'. [ 427.029036][T20363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3961'. [ 427.209334][T20372] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 427.247211][T20372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3960'. [ 427.616549][T20361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.643081][T20361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.825847][T11942] net_ratelimit: 11 callbacks suppressed [ 427.825866][T11942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.876185][ T7140] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.904819][ T7140] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.936902][ T7140] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.975417][ T7140] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.052511][ T7140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.070701][T11948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.092717][T20390] veth0: entered promiscuous mode [ 428.100515][T20391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3966'. [ 428.111062][T20391] lo: Caught tx_queue_len zero misconfig [ 428.147004][T20390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3967'. [ 428.203420][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.353285][T20388] veth0: left promiscuous mode [ 428.621955][T20420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3975'. [ 428.721477][T20422] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3976'. [ 428.758924][T20422] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 428.845866][T11942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.046982][T20431] netlink: 'syz.4.3978': attribute type 11 has an invalid length. [ 429.054850][T20431] netlink: 'syz.4.3978': attribute type 11 has an invalid length. [ 429.065394][T20431] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3978'. [ 429.319914][T20430] wg1 speed is unknown, defaulting to 1000 [ 429.339756][T20430] wg1 speed is unknown, defaulting to 1000 [ 429.378106][T20430] wg1 speed is unknown, defaulting to 1000 [ 429.453932][T20430] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 429.587211][T20430] wg1 speed is unknown, defaulting to 1000 [ 429.632359][T20430] wg1 speed is unknown, defaulting to 1000 [ 429.643031][T20442] pimreg: entered allmulticast mode [ 429.676553][T20442] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3984'. [ 429.686099][T20430] wg1 speed is unknown, defaulting to 1000 [ 429.699011][T20430] wg1 speed is unknown, defaulting to 1000 [ 429.720935][T20442] block nbd1: Unsupported socket: should be TCP or UNIX. [ 429.734159][T20430] wg1 speed is unknown, defaulting to 1000 [ 429.749464][T20430] wg1 speed is unknown, defaulting to 1000 [ 429.797245][T20430] wg1 speed is unknown, defaulting to 1000 [ 429.896447][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.145750][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.182592][T20480] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 430.230868][T20486] bridge: RTM_NEWNEIGH with invalid ether address [ 430.253085][T20479] netlink: 'syz.0.3995': attribute type 1 has an invalid length. [ 430.296101][T20479] netlink: 'syz.0.3995': attribute type 2 has an invalid length. [ 430.304110][T20479] netlink: 'syz.0.3995': attribute type 1 has an invalid length. [ 430.865033][T20522] netlink: 'syz.1.4004': attribute type 16 has an invalid length. [ 430.888429][T20522] netlink: 'syz.1.4004': attribute type 3 has an invalid length. [ 430.928219][T11942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.766441][T20570] macvtap1: entered allmulticast mode [ 431.783009][T20570] veth0_macvtap: entered allmulticast mode [ 431.809548][T20576] netlink: 'syz.0.4020': attribute type 1 has an invalid length. [ 431.820777][T20568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.922511][T20576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.967005][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.035867][T20584] bond0: (slave veth3): Enslaving as an active interface with a down link [ 432.085150][T20595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.103210][T20589] tipc: Enabled bearer , priority 0 [ 432.146061][T20589] syzkaller0: entered promiscuous mode [ 432.151621][T20589] syzkaller0: entered allmulticast mode [ 432.163099][T20591] __nla_validate_parse: 8 callbacks suppressed [ 432.163118][T20591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4024'. [ 432.236106][T20589] tipc: Resetting bearer [ 432.271653][T20588] tipc: Resetting bearer [ 432.302748][T20588] tipc: Disabling bearer [ 432.463483][T20605] lo: entered promiscuous mode [ 432.478911][T20605] tunl0: entered promiscuous mode [ 432.497431][T20605] gre0: entered promiscuous mode [ 432.513197][T20605] gretap0: entered promiscuous mode [ 432.539983][T20605] bridge4: port 1(erspan0) entered disabled state [ 432.557449][T20605] ip_vti0: entered promiscuous mode [ 432.756718][T20621] netlink: 408 bytes leftover after parsing attributes in process `syz.3.4034'. [ 432.776901][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4034'. [ 432.878791][T20627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4035'. [ 433.009045][T11942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.168379][T20384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.179461][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.188489][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.206296][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.240789][T20650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4043'. [ 433.501185][T20655] tipc: Enabling of bearer rejected, media not registered [ 433.718041][T20674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4050'. [ 433.829559][T20678] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4051'. [ 434.026837][T20688] netlink: 'syz.4.4053': attribute type 1 has an invalid length. [ 434.049824][T11942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.075453][T20688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4053'. [ 434.084461][T20688] netlink: 658 bytes leftover after parsing attributes in process `syz.4.4053'. [ 434.113117][T20688] netlink: 'syz.4.4053': attribute type 1 has an invalid length. [ 434.163173][T20694] netlink: 'syz.3.4055': attribute type 26 has an invalid length. [ 434.196359][T20694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4055'. [ 434.257202][T20697] netlink: 'syz.1.4057': attribute type 27 has an invalid length. [ 434.591082][T20716] syzkaller0: entered promiscuous mode [ 434.606297][T20716] syzkaller0: entered allmulticast mode [ 435.097111][T11942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.181563][T20750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.538253][T20773] netlink: 'syz.1.4078': attribute type 23 has an invalid length. [ 435.619914][T20784] netlink: 'syz.3.4080': attribute type 1 has an invalid length. [ 435.677371][T20784] bond2: entered promiscuous mode [ 435.682946][T20784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.707369][T20784] macvtap1: entered allmulticast mode [ 435.804430][T20784] bond2: (slave bridge6): making interface the new active one [ 435.812416][T20784] bridge6: entered promiscuous mode [ 435.820761][T20784] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 436.129608][T11942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.209773][T20384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.246512][T20822] wg1 speed is unknown, defaulting to 1000 [ 437.392143][ T5845] block nbd1: Receive control failed (result -32) [ 437.668461][T20899] netlink: 'syz.3.4110': attribute type 9 has an invalid length. [ 437.676953][T20899] netlink: 'syz.3.4110': attribute type 11 has an invalid length. [ 437.696632][T20899] netlink: 'syz.3.4110': attribute type 12 has an invalid length. [ 437.704583][T20899] __nla_validate_parse: 6 callbacks suppressed [ 437.704598][T20899] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.4110'. [ 437.721324][T20899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4110'. [ 437.786485][T20904] bond0: (slave rose0): Error: Device can not be enslaved while up [ 437.803400][T20907] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4113'. [ 437.813367][T20907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4113'. [ 437.826880][T20907] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4113'. [ 437.838427][T20907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4113'. [ 437.848109][T20907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4113'. [ 438.205706][T11942] net_ratelimit: 3 callbacks suppressed [ 438.205727][T11942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.224908][T20926] sctp: [Deprecated]: syz.2.4119 (pid 20926) Use of int in max_burst socket option deprecated. [ 438.224908][T20926] Use struct sctp_assoc_value instead [ 438.264833][T20928] sctp: [Deprecated]: syz.0.4120 (pid 20928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.264833][T20928] Use struct sctp_sack_info instead [ 438.285116][T20925] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 438.287408][T15111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.317608][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.328895][T20384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.354945][T11942] wg1 speed is unknown, defaulting to 1000 [ 438.509894][T20937] netlink: 'syz.3.4122': attribute type 1 has an invalid length. [ 438.740446][T20952] netlink: 'syz.4.4127': attribute type 1 has an invalid length. [ 439.172026][T20977] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4136'. [ 439.247789][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.256007][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.546188][T20994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4143'. [ 439.640054][T20994] macvtap1: entered promiscuous mode [ 439.656355][T20994] vlan0: entered promiscuous mode [ 439.667146][T20994] macvtap1: entered allmulticast mode [ 439.683138][T20994] vlan0: entered allmulticast mode [ 439.696453][T20994] veth0_vlan: entered allmulticast mode [ 439.749072][T21013] delete_channel: no stack [ 439.924092][T21026] tipc: Failed to remove unknown binding: 66,0,0/0:348301261/348301262 [ 440.059030][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4149'. [ 440.323430][T11942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.789880][T21051] netlink: 'syz.2.4158': attribute type 1 has an invalid length. [ 441.366721][T11937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.377224][T21019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.405643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.440354][T21019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.934667][T21019] vlan0: left allmulticast mode [ 441.941863][T21019] veth0_vlan: left allmulticast mode [ 441.947978][T21019] vlan0: left promiscuous mode [ 441.964573][T21028] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 441.974289][T20381] wg1 speed is unknown, defaulting to 1000 [ 441.976368][T21051] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 441.996525][T20381] syz2: Port: 1 Link DOWN [ 442.073501][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.102822][T21070] netlink: 'syz.3.4161': attribute type 2 has an invalid length. [ 442.118165][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.136682][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.174068][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.294149][T21082] netlink: 'syz.3.4165': attribute type 1 has an invalid length. [ 442.794344][T21104] __nla_validate_parse: 10 callbacks suppressed [ 442.794364][T21104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4172'. [ 442.877733][T21108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4173'. [ 443.253444][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4180'. [ 443.322203][T21135] net_ratelimit: 7 callbacks suppressed [ 443.322222][T21135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.402697][T21141] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 443.495451][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.563690][T21145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4188'. [ 443.568158][T21147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4187'. [ 443.616605][T21151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4190'. [ 443.629032][T21156] netlink: 'syz.4.4186': attribute type 1 has an invalid length. [ 443.639415][T21156] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4186'. [ 443.649354][T21156] netlink: 'syz.4.4186': attribute type 1 has an invalid length. [ 443.656292][T21151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4190'. [ 443.680168][T21156] netlink: 'syz.4.4186': attribute type 8 has an invalid length. [ 443.690252][T21147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.694118][T21156] netlink: 606 bytes leftover after parsing attributes in process `syz.4.4186'. [ 443.788044][T21161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4188'. [ 443.810157][T21152] ip6tnl3: entered allmulticast mode [ 444.011224][T21172] syzkaller0: entered promiscuous mode [ 444.016970][T21172] syzkaller0: entered allmulticast mode [ 444.055922][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.084092][T20383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.093204][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.113779][T21178] : entered promiscuous mode [ 444.528602][T11937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.612343][T21225] netlink: 'syz.0.4210': attribute type 6 has an invalid length. [ 444.857585][T21248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.090218][T21257] syzkaller0: entered promiscuous mode [ 445.097383][T21257] syzkaller0: entered allmulticast mode [ 445.224045][T21263] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 445.333642][T20383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.516708][T21282] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 445.565617][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.727056][T21298] netlink: 'syz.4.4233': attribute type 1 has an invalid length. [ 445.780068][T21296] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 445.790056][T21305] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 445.801602][T21296] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 445.828571][T21298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.880861][T21298] vlan4: entered allmulticast mode [ 445.886367][T21298] veth0_to_bond: entered allmulticast mode [ 445.894310][T21298] bond3: (slave vlan4): Opening slave failed [ 445.966810][T20383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.986602][T21317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.064589][T21322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.115211][T21329] netlink: 'syz.0.4239': attribute type 3 has an invalid length. [ 446.305466][T21343] netlink: 'syz.4.4240': attribute type 29 has an invalid length. [ 446.313852][T21337] netlink: 'syz.4.4240': attribute type 29 has an invalid length. [ 446.606408][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.475621][T21400] netlink: 'syz.4.4260': attribute type 1 has an invalid length. [ 448.606395][T21389] __nla_validate_parse: 15 callbacks suppressed [ 448.606410][T21389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4257'. [ 448.629436][T21390] pim6reg: entered allmulticast mode [ 448.635186][T21394] pim6reg: left allmulticast mode [ 448.688295][T11939] net_ratelimit: 1 callbacks suppressed [ 448.688314][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.730220][T21403] tunl0: entered promiscuous mode [ 448.749354][T21403] netlink: 'syz.2.4261': attribute type 3 has an invalid length. [ 448.784013][T21403] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4261'. [ 448.948556][T21425] x_tables: duplicate underflow at hook 1 [ 449.005932][T20383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.096955][T21432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.142902][T21439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4270'. [ 449.167702][T20384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.291480][T21443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4272'. [ 449.384706][T21451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4273'. [ 449.401516][T21453] bond0: Caught tx_queue_len zero misconfig [ 449.459789][T21458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4275'. [ 449.552754][T21460] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 449.700411][T21474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4281'. [ 449.725650][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.807158][T15111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.816230][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.827898][T20383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.907852][T21487] syzkaller0: entered promiscuous mode [ 449.913555][T21487] syzkaller0: entered allmulticast mode [ 450.012282][T21490] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4287'. [ 450.127616][T21499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4289'. [ 450.151784][T21499] netlink: 'syz.1.4289': attribute type 30 has an invalid length. [ 450.209620][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4289'. [ 450.233580][T21506] netlink: 'syz.1.4289': attribute type 30 has an invalid length. [ 450.651428][T15111] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.660905][T15111] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.769356][T11948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.794040][T15111] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.843092][T15111] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.951677][T21526] bond4: option all_slaves_active: invalid value (222) [ 450.980827][T21526] bond4 (unregistering): Released all slaves [ 451.257688][T21531] wg1 speed is unknown, defaulting to 1000 [ 451.485188][T21556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 451.612094][T21561] x_tables: duplicate underflow at hook 2 [ 451.645745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.807051][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.204399][T21593] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 452.261466][T21592] netlink: 'syz.0.4315': attribute type 2 has an invalid length. [ 452.480445][T21607] xt_hashlimit: size too large, truncated to 1048576 [ 452.496673][T21603] netlink: 'syz.1.4318': attribute type 1 has an invalid length. [ 453.142327][T21643] tap0: tun_chr_ioctl cmd 1074025676 [ 453.152268][T21643] tap0: owner set to 0 [ 453.162610][T21641] netlink: 'syz.3.4328': attribute type 1 has an invalid length. [ 453.259801][T21649] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 453.483086][T21659] : entered promiscuous mode [ 453.730425][T21672] bond2: option mode: unable to set because the bond device has slaves [ 453.743547][T21672] net_ratelimit: 3 callbacks suppressed [ 453.743569][T21672] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 453.790512][T21676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.798876][T21676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.896305][T11948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.096016][T21691] __nla_validate_parse: 6 callbacks suppressed [ 454.096037][T21691] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4347'. [ 454.257468][T21704] netlink: 'syz.3.4350': attribute type 1 has an invalid length. [ 454.291950][T20383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.309962][T21704] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4350'. [ 454.426392][T21716] netlink: 'syz.1.4352': attribute type 4 has an invalid length. [ 454.752751][T21735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4360'. [ 454.764591][T21735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4360'. [ 454.846723][T21739] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.4361'. [ 454.925619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.935619][T11948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.085650][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.409202][T21747] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4365'. [ 455.428125][T21747] netlink: 'syz.3.4365': attribute type 3 has an invalid length. [ 455.461157][T21747] netlink: 'syz.3.4365': attribute type 3 has an invalid length. [ 455.490517][T21750] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4365'. [ 455.611009][T21754] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4368'. [ 455.647945][T21754] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4368'. [ 455.685404][T21754] netlink: 'syz.2.4368': attribute type 6 has an invalid length. [ 455.693210][T21754] netlink: 'syz.2.4368': attribute type 5 has an invalid length. [ 455.750382][T21759] syzkaller1: entered promiscuous mode [ 455.769581][T21759] syzkaller1: entered allmulticast mode [ 455.780450][T21754] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4368'. [ 455.834843][ T29] audit: type=1107 audit(1774284604.961:3): pid=21773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 455.965570][T11948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.273997][T11939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.474678][T21800] netlink: 'syz.1.4382': attribute type 1 has an invalid length. [ 456.530309][T21802] bond4: entered promiscuous mode [ 456.535932][T21802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.557043][T21802] ipvlan2: entered allmulticast mode [ 456.562417][T21802] bond4: entered allmulticast mode [ 456.589938][T21802] bond4: (slave bridge7): making interface the new active one [ 456.597811][T21802] bridge7: entered promiscuous mode [ 456.603312][T21802] bridge7: entered allmulticast mode [ 456.611562][T21802] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 457.015314][T21841] "syz.1.4393" (21841) uses obsolete ecb(arc4) skcipher [ 457.337232][T21860] validate_nla: 6 callbacks suppressed [ 457.337254][T21860] netlink: 'syz.1.4397': attribute type 2 has an invalid length. [ 457.408951][T21860] 9: entered promiscuous mode [ 457.604430][T21866] tls_set_device_offload: netdev not found [ 457.944111][T21842] lec:lec_atm_close: lec0: Shut down! [ 458.414473][T21908] bond4 (unregistering): Released all slaves [ 458.583232][T21919] netlink: 'syz.3.4409': attribute type 1 has an invalid length. [ 459.016451][T21946] netlink: 'syz.4.4418': attribute type 3 has an invalid length. [ 459.056134][T21946] geneve2: entered promiscuous mode [ 459.061416][T21946] geneve2: entered allmulticast mode [ 459.086922][T11949] net_ratelimit: 4 callbacks suppressed [ 459.086942][T11949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.210344][T21967] __nla_validate_parse: 15 callbacks suppressed [ 459.210366][T21967] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4423'. [ 459.323289][T21972] tipc: Failed to remove unknown binding: 66,0,0/0:493224315/493224316 [ 459.334324][T20383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.360553][T21972] tipc: Failed to remove unknown binding: 66,0,0/0:493224315/493224316 [ 459.444797][T21969] syzkaller0: entered promiscuous mode [ 459.451824][T21969] syzkaller0: entered allmulticast mode [ 459.579928][T21984] netlink: 'syz.4.4429': attribute type 1 has an invalid length. [ 459.589483][T21981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4428'. [ 459.618630][T21967] syzkaller0: entered promiscuous mode [ 459.624228][T21967] syzkaller0: entered allmulticast mode [ 459.626729][T21984] netlink: 'syz.4.4429': attribute type 3 has an invalid length. [ 459.646442][T11949] lec:lec_start_xmit: lec0:No lecd attached [ 459.666994][T21984] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4429'. [ 459.677376][T21984] NCSI netlink: No device for ifindex 813332851 [ 459.762330][T21993] macsec1: entered promiscuous mode [ 459.826886][T21998] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4431'. [ 459.935620][T22002] mac80211_hwsim hwsim45 : renamed from wlan1 [ 460.059687][T22006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4434'. [ 460.069139][T22006] veth0_virt_wifi: entered promiscuous mode [ 460.090435][T22006] netlink: 'syz.2.4434': attribute type 1 has an invalid length. [ 460.099659][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4436'. [ 460.127949][T11949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.141376][T22006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4434'. [ 460.196603][T22015] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.4438'. [ 460.243758][T22015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4438'. [ 460.247337][T22021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4439'. [ 460.272256][T22015] ip6tnl0: Caught tx_queue_len zero misconfig [ 460.445634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.454149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.498268][T22035] openvswitch: netlink: Flow key attr not present in new flow. [ 460.685493][ C0] ================================================================== [ 460.693645][ C0] BUG: KASAN: slab-use-after-free in rose_t0timer_expiry+0x1ea/0x560 [ 460.702073][ C0] Read of size 8 at addr ffff88802b1ee418 by task syz.3.4447/22049 [ 460.710016][ C0] [ 460.712417][ C0] CPU: 0 UID: 0 PID: 22049 Comm: syz.3.4447 Not tainted syzkaller #0 PREEMPT(full) [ 460.712445][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 460.712465][ C0] Call Trace: [ 460.712474][ C0] [ 460.712483][ C0] dump_stack_lvl+0xe8/0x150 [ 460.712578][ C0] print_report+0xba/0x230 [ 460.712618][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 460.712642][ C0] kasan_report+0x117/0x150 [ 460.712699][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 460.712727][ C0] rose_t0timer_expiry+0x1ea/0x560 [ 460.712754][ C0] call_timer_fn+0x192/0x640 [ 460.712808][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 460.712830][ C0] ? call_timer_fn+0xd4/0x640 [ 460.712858][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 460.712893][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.712999][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 460.713023][ C0] __run_timer_base+0x652/0x8b0 [ 460.713056][ C0] ? ktime_get+0x45/0x200 [ 460.713086][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 460.713116][ C0] ? sched_clock_cpu+0x74/0x440 [ 460.713166][ C0] run_timer_softirq+0xb7/0x170 [ 460.713193][ C0] handle_softirqs+0x22a/0x870 [ 460.713236][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 460.713269][ C0] __irq_exit_rcu+0x5f/0x150 [ 460.713298][ C0] irq_exit_rcu+0x9/0x30 [ 460.713324][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 460.713381][ C0] [ 460.713389][ C0] [ 460.713399][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 460.713447][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 460.713488][ C0] Code: e9 30 ff ff ff e8 75 f6 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 f1 a3 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 56 dc 0f 0a cc 48 8d 3d 2e 6b 73 [ 460.713508][ C0] RSP: 0018:ffffc9000483e780 EFLAGS: 00000292 [ 460.713530][ C0] RAX: 4183e6415a1a3900 RBX: 0000000000000246 RCX: 0000000000000046 [ 460.713546][ C0] RDX: 00000000b3273500 RSI: ffffffff8e16803f RDI: ffffffff8c27c200 [ 460.713563][ C0] RBP: 0000000000000000 R08: ffffffff826f633c R09: ffff88801b6dda20 [ 460.713579][ C0] R10: ffff8880b1b03138 R11: ffffed1016360629 R12: 0000000000000000 [ 460.713595][ C0] R13: ffff88801b6dda20 R14: 0000000000000000 R15: 0000000000000001 [ 460.713615][ C0] ? kernfs_link_sibling+0x46c/0x540 [ 460.713676][ C0] down_write+0x96/0x200 [ 460.713703][ C0] ? kernfs_link_sibling+0x46c/0x540 [ 460.713737][ C0] ? __pfx_down_write+0x10/0x10 [ 460.713764][ C0] ? kernfs_root+0x1c/0x230 [ 460.713795][ C0] ? kernfs_root+0x1c/0x230 [ 460.713823][ C0] ? kernfs_root+0x1c/0x230 [ 460.713855][ C0] ? kernfs_root+0x1ea/0x230 [ 460.713887][ C0] kernfs_link_sibling+0x46c/0x540 [ 460.713927][ C0] kernfs_add_one+0x1ca/0x5c0 [ 460.713963][ C0] __kernfs_create_file+0x22b/0x2e0 [ 460.713991][ C0] sysfs_add_file_mode_ns+0x238/0x300 [ 460.714023][ C0] internal_create_group+0x673/0x1180 [ 460.714075][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 460.714110][ C0] ? up_write+0x1ab/0x410 [ 460.714134][ C0] sysfs_create_groups+0x59/0x120 [ 460.714168][ C0] device_add_attrs+0xdd/0x5b0 [ 460.714305][ C0] ? __pfx_device_add_attrs+0x10/0x10 [ 460.714335][ C0] ? device_add_class_symlinks+0x21f/0x240 [ 460.714362][ C0] device_add+0x496/0xb70 [ 460.714386][ C0] ? device_initialize+0x24b/0x440 [ 460.714412][ C0] netdev_register_kobject+0x178/0x310 [ 460.714513][ C0] register_netdevice+0x12c0/0x1cf0 [ 460.714595][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 460.714634][ C0] bond_newlink+0x48/0xd0 [ 460.714701][ C0] ? __pfx_bond_newlink+0x10/0x10 [ 460.714722][ C0] rtnl_newlink_create+0x329/0xb70 [ 460.714770][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 460.714849][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 460.714875][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 460.714907][ C0] ? ns_capable+0x89/0xe0 [ 460.714939][ C0] rtnl_newlink+0x1666/0x1be0 [ 460.715007][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 460.715054][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 460.715088][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 460.715117][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 460.715152][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 460.715207][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 460.715238][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 460.715269][ C0] ? kernel_text_address+0xa5/0xe0 [ 460.715309][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 460.715340][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 460.715375][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 460.715408][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 460.715443][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 460.715476][ C0] netlink_rcv_skb+0x232/0x4b0 [ 460.715595][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 460.715630][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.715669][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.715708][ C0] netlink_unicast+0x80f/0x9b0 [ 460.715744][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 460.715774][ C0] ? netlink_sendmsg+0x650/0xb40 [ 460.715805][ C0] ? skb_put+0x11b/0x210 [ 460.715867][ C0] netlink_sendmsg+0x813/0xb40 [ 460.715906][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.715941][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 460.716060][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.716104][ C0] ____sys_sendmsg+0x972/0x9f0 [ 460.716152][ C0] ? futex_unqueue+0x211/0x240 [ 460.716183][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.716213][ C0] ? import_iovec+0x73/0xa0 [ 460.716293][ C0] ___sys_sendmsg+0x2a5/0x360 [ 460.716320][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.716349][ C0] ? futex_wait+0x29a/0x380 [ 460.716395][ C0] ? __fget_files+0x2a/0x420 [ 460.716443][ C0] ? __fget_files+0x3a0/0x420 [ 460.716480][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 460.716507][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.716537][ C0] ? rcu_is_watching+0x15/0xb0 [ 460.716576][ C0] do_syscall_64+0x14d/0xf80 [ 460.716630][ C0] ? trace_irq_disable+0x3b/0x150 [ 460.716662][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.716686][ C0] ? clear_bhb_loop+0x40/0x90 [ 460.716711][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.716734][ C0] RIP: 0033:0x7f6e87b9c799 [ 460.716756][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.716778][ C0] RSP: 002b:00007f6e889c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.716804][ C0] RAX: ffffffffffffffda RBX: 00007f6e87e15fa0 RCX: 00007f6e87b9c799 [ 460.716822][ C0] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 460.716837][ C0] RBP: 00007f6e87c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 460.716852][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.716866][ C0] R13: 00007f6e87e16038 R14: 00007f6e87e15fa0 R15: 00007fffb354c4f8 [ 460.716892][ C0] [ 460.716900][ C0] [ 460.717165][T22053] netlink: 'syz.2.4446': attribute type 1 has an invalid length. [ 460.726298][ C0] Allocated by task 11122: [ 460.726323][ C0] kasan_save_track+0x3e/0x80 [ 460.726350][ C0] __kasan_kmalloc+0x93/0xb0 [ 460.726371][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 460.726410][ C0] rose_add_node+0x23c/0xf00 [ 460.726430][ C0] rose_rt_ioctl+0xd35/0x12a0 [ 460.726451][ C0] rose_ioctl+0x3fb/0x8f0 [ 460.726481][ C0] sock_do_ioctl+0x101/0x320 [ 460.726509][ C0] sock_ioctl+0x5c6/0x7f0 [ 460.726535][ C0] __se_sys_ioctl+0xfc/0x170 [ 460.726566][ C0] do_syscall_64+0x14d/0xf80 [ 460.726589][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.726611][ C0] [ 460.726617][ C0] Freed by task 16893: [ 460.726629][ C0] kasan_save_track+0x3e/0x80 [ 460.726651][ C0] kasan_save_free_info+0x46/0x50 [ 460.726684][ C0] __kasan_slab_free+0x5c/0x80 [ 460.726707][ C0] kfree+0x1c1/0x630 [ 460.726725][ C0] rose_timer_expiry+0x4cb/0x600 [ 460.726751][ C0] call_timer_fn+0x192/0x640 [ 460.726778][ C0] __run_timer_base+0x652/0x8b0 [ 460.726802][ C0] run_timer_softirq+0xb7/0x170 [ 460.726826][ C0] handle_softirqs+0x22a/0x870 [ 460.726854][ C0] __irq_exit_rcu+0x5f/0x150 [ 460.726881][ C0] irq_exit_rcu+0x9/0x30 [ 460.726907][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 460.726930][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 460.726954][ C0] [ 460.726960][ C0] The buggy address belongs to the object at ffff88802b1ee400 [ 460.726960][ C0] which belongs to the cache kmalloc-512 of size 512 [ 460.726981][ C0] The buggy address is located 24 bytes inside of [ 460.726981][ C0] freed 512-byte region [ffff88802b1ee400, ffff88802b1ee600) [ 460.727006][ C0] [ 460.727012][ C0] The buggy address belongs to the physical page: [ 460.727035][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b1ef400 pfn:0x2b1ec [ 460.727068][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 460.727087][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 460.727118][ C0] page_type: f5(slab) [ 460.727139][ C0] raw: 00fff00000000240 ffff88813fea5c80 ffffea0000d77710 ffffea0000d95710 [ 460.727160][ C0] raw: ffff88802b1ef400 000000080010000e 00000000f5000000 0000000000000000 [ 460.727182][ C0] head: 00fff00000000240 ffff88813fea5c80 ffffea0000d77710 ffffea0000d95710 [ 460.727203][ C0] head: ffff88802b1ef400 000000080010000e 00000000f5000000 0000000000000000 [ 460.727224][ C0] head: 00fff00000000002 ffffea0000ac7b01 00000000ffffffff 00000000ffffffff [ 460.727244][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 460.727257][ C0] page dumped because: kasan: bad access detected [ 460.727273][ C0] page_owner tracks the page as allocated [ 460.727281][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5211, tgid 5211 (v4l_id), ts 37456342210, free_ts 37408446586 [ 460.727322][ C0] post_alloc_hook+0x231/0x280 [ 460.727352][ C0] get_page_from_freelist+0x24dc/0x2580 [ 460.727379][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 460.727404][ C0] allocate_slab+0x77/0x660 [ 460.727432][ C0] refill_objects+0x331/0x3c0 [ 460.727459][ C0] __pcs_replace_empty_main+0x2e6/0x730 [ 460.727488][ C0] __kmalloc_noprof+0x474/0x760 [ 460.869377][ C0] kmem_cache_prefill_sheaf+0x27c/0x540 [ 460.869409][ C0] mas_alloc_nodes+0x1c2/0x350 [ 460.869510][ C0] mas_preallocate+0x2d6/0x640 [ 460.869528][ C0] __split_vma+0x318/0xa40 [ 460.869560][ C0] vms_gather_munmap_vmas+0x4fa/0x1370 [ 461.246812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.251686][ C0] mmap_region+0x85b/0x2240 [ 461.746852][ C0] do_mmap+0xc39/0x10c0 [ 461.751062][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 461.755725][ C0] ksys_mmap_pgoff+0x51e/0x760 [ 461.760536][ C0] page last free pid 5220 tgid 5220 stack trace: [ 461.766882][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 461.772060][ C0] __slab_free+0x263/0x2b0 [ 461.776524][ C0] qlist_free_all+0x97/0x100 [ 461.781158][ C0] kasan_quarantine_reduce+0x148/0x160 [ 461.786647][ C0] __kasan_slab_alloc+0x22/0x80 [ 461.791529][ C0] __kmalloc_noprof+0x316/0x760 [ 461.796421][ C0] load_elf_binary+0x30f/0x2980 [ 461.801342][ C0] bprm_execve+0x93d/0x1460 [ 461.805878][ C0] do_execveat_common+0x50d/0x690 [ 461.810941][ C0] __x64_sys_execve+0x97/0xc0 [ 461.815654][ C0] do_syscall_64+0x14d/0xf80 [ 461.820291][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.826222][ C0] [ 461.828571][ C0] Memory state around the buggy address: [ 461.834222][ C0] ffff88802b1ee300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 461.842312][ C0] ffff88802b1ee380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 461.850403][ C0] >ffff88802b1ee400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.858590][ C0] ^ [ 461.863510][ C0] ffff88802b1ee480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.871604][ C0] ffff88802b1ee500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 461.879692][ C0] ================================================================== [ 461.888009][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 461.895255][ C0] CPU: 0 UID: 0 PID: 22049 Comm: syz.3.4447 Not tainted syzkaller #0 PREEMPT(full) [ 461.904660][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.914751][ C0] Call Trace: [ 461.918059][ C0] [ 461.920940][ C0] vpanic+0x56c/0xa60 [ 461.924988][ C0] ? __pfx_vpanic+0x10/0x10 [ 461.929538][ C0] ? irqentry_exit+0x59e/0x620 [ 461.934344][ C0] panic+0xc5/0xd0 [ 461.938103][ C0] ? __pfx_panic+0x10/0x10 [ 461.942561][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 461.947893][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 461.953209][ C0] check_panic_on_warn+0x89/0xb0 [ 461.958208][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 461.963504][ C0] end_report+0x73/0x180 [ 461.967765][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 461.973086][ C0] kasan_report+0x128/0x150 [ 461.977624][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 461.982942][ C0] rose_t0timer_expiry+0x1ea/0x560 [ 461.988128][ C0] call_timer_fn+0x192/0x640 [ 461.992757][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 461.998418][ C0] ? call_timer_fn+0xd4/0x640 [ 462.003119][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 462.009465][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.014675][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 462.020315][ C0] __run_timer_base+0x652/0x8b0 [ 462.025186][ C0] ? ktime_get+0x45/0x200 [ 462.029548][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 462.034993][ C0] ? sched_clock_cpu+0x74/0x440 [ 462.039876][ C0] run_timer_softirq+0xb7/0x170 [ 462.044759][ C0] handle_softirqs+0x22a/0x870 [ 462.049582][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 462.054399][ C0] __irq_exit_rcu+0x5f/0x150 [ 462.059073][ C0] irq_exit_rcu+0x9/0x30 [ 462.063360][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 462.069030][ C0] [ 462.071970][ C0] [ 462.074905][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 462.080897][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 462.086206][ C0] Code: e9 30 ff ff ff e8 75 f6 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 f1 a3 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 56 dc 0f 0a cc 48 8d 3d 2e 6b 73 [ 462.105822][ C0] RSP: 0018:ffffc9000483e780 EFLAGS: 00000292 [ 462.111907][ C0] RAX: 4183e6415a1a3900 RBX: 0000000000000246 RCX: 0000000000000046 [ 462.119898][ C0] RDX: 00000000b3273500 RSI: ffffffff8e16803f RDI: ffffffff8c27c200 [ 462.127913][ C0] RBP: 0000000000000000 R08: ffffffff826f633c R09: ffff88801b6dda20 [ 462.135917][ C0] R10: ffff8880b1b03138 R11: ffffed1016360629 R12: 0000000000000000 [ 462.143927][ C0] R13: ffff88801b6dda20 R14: 0000000000000000 R15: 0000000000000001 [ 462.151933][ C0] ? kernfs_link_sibling+0x46c/0x540 [ 462.157264][ C0] down_write+0x96/0x200 [ 462.161579][ C0] ? kernfs_link_sibling+0x46c/0x540 [ 462.166927][ C0] ? __pfx_down_write+0x10/0x10 [ 462.171806][ C0] ? kernfs_root+0x1c/0x230 [ 462.176352][ C0] ? kernfs_root+0x1c/0x230 [ 462.180873][ C0] ? kernfs_root+0x1c/0x230 [ 462.185401][ C0] ? kernfs_root+0x1ea/0x230 [ 462.190045][ C0] kernfs_link_sibling+0x46c/0x540 [ 462.195178][ C0] kernfs_add_one+0x1ca/0x5c0 [ 462.199872][ C0] __kernfs_create_file+0x22b/0x2e0 [ 462.205082][ C0] sysfs_add_file_mode_ns+0x238/0x300 [ 462.210474][ C0] internal_create_group+0x673/0x1180 [ 462.215885][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 462.221732][ C0] ? up_write+0x1ab/0x410 [ 462.226073][ C0] sysfs_create_groups+0x59/0x120 [ 462.231118][ C0] device_add_attrs+0xdd/0x5b0 [ 462.235897][ C0] ? __pfx_device_add_attrs+0x10/0x10 [ 462.241319][ C0] ? device_add_class_symlinks+0x21f/0x240 [ 462.247144][ C0] device_add+0x496/0xb70 [ 462.251510][ C0] ? device_initialize+0x24b/0x440 [ 462.256638][ C0] netdev_register_kobject+0x178/0x310 [ 462.262123][ C0] register_netdevice+0x12c0/0x1cf0 [ 462.267359][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 462.272929][ C0] bond_newlink+0x48/0xd0 [ 462.277276][ C0] ? __pfx_bond_newlink+0x10/0x10 [ 462.282371][ C0] rtnl_newlink_create+0x329/0xb70 [ 462.287515][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 462.293270][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 462.298948][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 462.303998][ C0] ? ns_capable+0x89/0xe0 [ 462.308374][ C0] rtnl_newlink+0x1666/0x1be0 [ 462.313107][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 462.318160][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 462.323128][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 462.328088][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 462.333060][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 462.338218][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 462.343204][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 462.348443][ C0] ? kernel_text_address+0xa5/0xe0 [ 462.353609][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 462.358753][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 462.363832][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 462.368968][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 462.374550][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 462.379546][ C0] netlink_rcv_skb+0x232/0x4b0 [ 462.384331][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 462.389815][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.395122][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.400344][ C0] netlink_unicast+0x80f/0x9b0 [ 462.405130][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 462.410432][ C0] ? netlink_sendmsg+0x650/0xb40 [ 462.415394][ C0] ? skb_put+0x11b/0x210 [ 462.419674][ C0] netlink_sendmsg+0x813/0xb40 [ 462.424461][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.429769][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 462.434726][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.440023][ C0] ____sys_sendmsg+0x972/0x9f0 [ 462.444800][ C0] ? futex_unqueue+0x211/0x240 [ 462.449583][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.454919][ C0] ? import_iovec+0x73/0xa0 [ 462.459435][ C0] ___sys_sendmsg+0x2a5/0x360 [ 462.464131][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.469414][ C0] ? futex_wait+0x29a/0x380 [ 462.473976][ C0] ? __fget_files+0x2a/0x420 [ 462.478585][ C0] ? __fget_files+0x3a0/0x420 [ 462.483286][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 462.488251][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.493738][ C0] ? rcu_is_watching+0x15/0xb0 [ 462.498534][ C0] do_syscall_64+0x14d/0xf80 [ 462.503148][ C0] ? trace_irq_disable+0x3b/0x150 [ 462.508326][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.514430][ C0] ? clear_bhb_loop+0x40/0x90 [ 462.519136][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.525074][ C0] RIP: 0033:0x7f6e87b9c799 [ 462.529511][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.549226][ C0] RSP: 002b:00007f6e889c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.557669][ C0] RAX: ffffffffffffffda RBX: 00007f6e87e15fa0 RCX: 00007f6e87b9c799 [ 462.565660][ C0] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 462.573732][ C0] RBP: 00007f6e87c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 462.581721][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.589730][ C0] R13: 00007f6e87e16038 R14: 00007f6e87e15fa0 R15: 00007fffb354c4f8 [ 462.597760][ C0] [ 462.601433][ C0] Kernel Offset: disabled [ 462.605763][ C0] Rebooting in 86400 seconds..