last executing test programs: 3.133572993s ago: executing program 3 (id=4780): syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000380), 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000cc0)={'broute\x00', 0x0, 0x3, 0x0, [0xfffffffffffffc00, 0x9, 0x8, 0x3, 0x5, 0xae2], 0x0, 0x0, 0x0}, &(0x7f0000000d80)=0x78) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_a, @random="8ff4a91c40b3", {0x0, 0x3}}, @mesh_hwmp_psel={0xd, 0x1, {@val={0x82, 0x25, {{}, 0x10, 0x3, 0x7fffffff, @broadcast, 0x6, @void, 0x5, 0x642, 0x1, [{{}, @device_a, 0xffff}]}}, @val={0x83, 0x1f, {{}, 0x0, 0xff, @device_a, 0x5, @void, 0xeb6, 0x8, @broadcast, 0x7}}, @void, @void}}}, 0x62) 2.004585371s ago: executing program 1 (id=4798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r7], 0x44}}, 0x40848c0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) bind$rxrpc(r4, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4e21, @local}}, 0x24) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x8000) 1.892903214s ago: executing program 4 (id=4799): r0 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) sendfile(r2, r1, 0x0, 0xf03a0005) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xfffffffffffffc8a, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0xe, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x8000) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x4040010) 1.664630618s ago: executing program 2 (id=4800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r5 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @multicast1}, {0x1, @local}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}) 1.597191192s ago: executing program 0 (id=4801): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7800, 0x49be3039cbc1ec21, 0x3, 0x8, {{0x11, 0x4, 0x0, 0x9, 0x44, 0x66, 0x0, 0x16, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@ssrr={0x89, 0x23, 0xb0, [@remote, @loopback, @multicast1, @private=0xa010101, @empty, @empty, @multicast2, @empty]}, @rr={0x7, 0xb, 0x71, [@remote, @private=0xa010100]}]}}}}}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/mnt\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f0000000880)=r5, 0x12) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, 0x0) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000240)="43d32c2d2aff439b392de99b264310247730d9cfd6ee7f64fcd1c4e84b1aba0743fd4e410f39cfc81a9e924ec4a40d9891c5901784271af82961cbabf03de5166a9d8f01b6ca7e56e5888f420bc7dd856cbed8790cc08544ccecdb4f89a3967ce37fd0dfadee871de02dc3b8833dc0e80effcfc4e0f929d3724083", &(0x7f0000000300)=""/143, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000005a00000028bd7000fddbdf250000000200", @ANYRES32=r1, @ANYBLOB="00000200", @ANYRES32=r2, @ANYBLOB="00000300", @ANYBLOB="e3bef4f4b0446d13ba70fe645b91f592535ca73a5e91649fc59df71684a14931d7a923ea5777032d122243031114d75fa9bef4b8b17fd356e2c82e6691cb62c21c869f84ee9236606e4bda2f2710f0afbad71768f276b17f9eb08da1bfb407487ddcccdacc4dac4c67855ca0d7a519b9c466c199c796eac67038bad91e0b71d979a8ab69295100ab70cd0de75958d0d6cbb0549272f665c9d242554013f775962cddd7f2fde4b2472ef4b79674", @ANYBLOB="000001000000000000000200", @ANYRES64=r4, @ANYBLOB="00000300", @ANYRES32=r7, @ANYBLOB="020000ea59e0dee02b5bc31c4c1acbe3f0133ae0bf17809f5b943dc883eca8956ee10b38765caa6a8b2582ddfb3dd6ad5d4c9e9d16dc1570eab90b46ac8feb9d740d2153f8e6dbf1eab170e4e718530348fbcde6a760f3bd3d0676e320f8c44c1501394883f28d260fce5a28d74e878f23a68265fb51d70d36b4e9940900519950e3"], 0x40}, 0x1, 0x0, 0x0, 0xd040}, 0x0) 1.514951004s ago: executing program 3 (id=4802): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0x0, r2, 0x12}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x0, 0x2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0xa8, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x65}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008400}, 0x20004000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f00001500000000000000000000000800120000000100000000000000000006000000000000000000000000000000000000000000000000000000000000002001000000000000000000000000000205000600000000000a00000300000000fe8000000000000000000000000000bb000000000000000001001800000001"], 0xa8}}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0xfffffff8, 0x1}, 0xc) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) 1.429486586s ago: executing program 1 (id=4803): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, &(0x7f000000a500)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000100000000000006000300000000000800010000000000240002"], 0x4c}}, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map, 0x20, 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) 1.376840737s ago: executing program 0 (id=4804): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x6dcd}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020200000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000180)={r5, &(0x7f0000000000)='}\x00', 0xc0, &(0x7f0000000040)={@align=0x9, {0x0, 0xf, 0x6, 0x8000}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x7}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e25, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a06000000"}}, @tfcpad={0x8, 0x16, 0x2}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$kcm(r6, &(0x7f0000000a00)={&(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[{0xd0, 0x10b, 0x6, "dc00298c6043cd280f198eb571ab141b99fefeff389d9649fb9ceb221e1de4d87411d1dc0ea224d2f2488e2e3e13628b4551653411feacab9357db6305b55b7a01ac9e66f37928b9485d07bb9d6285786cd33292458a2b8e9335746663046febb2f93ef7712c8b3c0853520cc2cf3bed6745ad207aad4d1b58781ed585ed6fe18f293d9aa5d0f3817e1b850e95842aac340ce13547a8b557d83ff8594da14a2fef201aa99eb95ea9d05a89f3ed375609ff8e78d01f5585b32cbeb508c7d0cd"}, {0x110, 0x10b, 0x8, "9a956ce7d6c02f4a8067404efb544325b7175ff2412779ae6300e77e3f8e6be3f2fbd695f21ef4397a6d34d6584b8591333ddfe9a5f134a9cbfa804e031740945ccd060a728fdab2c0924294b856f0bbbfb50bfbbffa82a28ddd613f1e7e51eb709ce82140bacfce776a967c5fca12a54a2172778016f174e193d0c4e420c203e87df5d3725a5467180457c7feb68e42f1777d1bcc5f97caf48f22e2b9c9518e1a8ef36c9bf79de834333e4655c0e38a3f3a7d780e47820b884f5b1a351095d7c2391cf295fdd931bf9b434d59611482182cdbf39194923157f46b733ceb79ca8058cbc4857f9324eb2e53c0eccafefab93c27b54b7d1aeb6fa414aa"}, {0x100, 0x10d, 0x9, "c00bf9f1a183ef8aed254aee63d98b4b1f1b9697a1992c2f485f3bca9e54d6bcbef4293e6ebb1ead8a659373c3225abcf65a6b593a0bf23d2e2312752a32e39a4703fad90e48168added2b4e09b20218c18a247851fe9ba783e627730deccb641ca482d40911c074f407fe86c7e1f8d0743247e340710697bc3b2c5ee799f58da1e715a10df57a520f63cbd183912332375490a4659a9426c5a7d0a7e9282fe8f995c8f4c8bf7802c5ee793dad1050746bafba1142e16b28b22b196e7890db998cd371bc6159c6e0a3ecb2263fd14d10fe85cf258fbc7512a97189d4ca3e7809006664ea39f59eca7f"}, {0x78, 0x10e, 0x3, "e3a07f4b29d3524cc5fff6f139e45f98901ec1f75f3bcd339372733fc978ea4894967276700909ab5983e70437802bfdccdf4a4e8307885794183f9e05abdf0ed3dc2719c87ee4ef8661fb7864bb84d23b798f91a66aedd81a3cfaff80008ef0c82d"}, {0x88, 0x88, 0x3, "316241f264c64c52dfcd3afd86664f1345137fa56a53499f2c57e602d51cb900ed09ee9f7bb999bd8c29f0780c478d8a29366de196f0100dbae66c31d2dbf521fde4f7e7d2391df084e1845ddca2a823b28a87732933e73ec9ed368b615eeecb1f42e21a508ea1ab7dcdfc4c8be5f9a7cc0e"}, {0xc8, 0x84, 0xfffffe01, "2ca277178a27ec8d7203549be906f0979e0fd3f4f586ccf2bff058993d325357c6d05966c1a12af6402eb3138cc93e0e3e74456caff3aa53d28c37fd074f85087018fa38858ce1efd38af22135874c157c9668d71f683f1b35c84d88e022589dbf3229970e6293c9f117c23721173cac78924f2b28e6e6bd72e6ba28da5eea25e3c08bf97f924b1c763b65d266e671c02b914df8d993fef27b9b3e09059cda3c0cd1393cbe132671f72991ea5ac5f77676"}, {0x50, 0x88, 0xffffffff, "65a33e2b28d12d3147efde079beba712ba3b84de0ee288086f38d1d5c5746a09f86bc86e0c3f570d5b7c3bf45b32d1ecbc524357be40528ac55ac294"}, {0x60, 0x10e, 0x7, "b323107537fb9789edb05ded3a1de363f708bcefc181b438ab2543d22f207f97a59ce9be4645f485dfd2d6eb43a4cc327f13770382951ef25acc81045a19a8cb48b628104d71347679"}, {0xb0, 0x249, 0x7, "f28c0ef1bf8c7baee2dff2c5690efd210e2de65cf1e7bb47a8dd1cadb4eebb4dd129ee5caad48d1604c28d7f44112beace75f7abbd4ac5b8dd4c768323959d1ddc7942b8b148109a3a3f39750e8170bbc170da317b1ab0c06a185240d88856a29e3eab28601ef974db2c4722632baaf01af61070247a6c368524b492ae68905ebadbb320bffc78aec6db20b219d3c1d90c4444c82ef2057ff37f21"}, {0xc8, 0x102, 0x2, "95b9008644b57ef51f8239e35c1bc75bdedaf50db20596bd0801e67a52d30a1f18c61da5840fe2bc6a3434da0ec40f14996406a52e13ecefa75866fd02e6b63aaff7a955c6fa1902e4921ef74d758f8628f14aa3ba595718e582e79763d4f271f2548e4b1ecf3e4db5bec2f3b95d6858802da5a4220ea5d8f6d83b2f4ca12bc8a0db669b7b6a54abbb3d40554242e99430606e05d74d80a17a9878ff4a0c6083dcb305d31215c40b03b8f6bb9bab6b50bfaaa4642c57fb"}], 0x6d0}, 0x44040800) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000cc0)={&(0x7f00000001c0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, 0x1411, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x4000) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x6dcd}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020200000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x20) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000180)={r5, &(0x7f0000000000)='}\x00', 0xc0, &(0x7f0000000040)={@align=0x9, {0x0, 0xf, 0x6, 0x8000}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x7}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e25, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a06000000"}}, @tfcpad={0x8, 0x16, 0x2}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000a00)={&(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[{0xd0, 0x10b, 0x6, "dc00298c6043cd280f198eb571ab141b99fefeff389d9649fb9ceb221e1de4d87411d1dc0ea224d2f2488e2e3e13628b4551653411feacab9357db6305b55b7a01ac9e66f37928b9485d07bb9d6285786cd33292458a2b8e9335746663046febb2f93ef7712c8b3c0853520cc2cf3bed6745ad207aad4d1b58781ed585ed6fe18f293d9aa5d0f3817e1b850e95842aac340ce13547a8b557d83ff8594da14a2fef201aa99eb95ea9d05a89f3ed375609ff8e78d01f5585b32cbeb508c7d0cd"}, {0x110, 0x10b, 0x8, "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"}, {0x100, 0x10d, 0x9, "c00bf9f1a183ef8aed254aee63d98b4b1f1b9697a1992c2f485f3bca9e54d6bcbef4293e6ebb1ead8a659373c3225abcf65a6b593a0bf23d2e2312752a32e39a4703fad90e48168added2b4e09b20218c18a247851fe9ba783e627730deccb641ca482d40911c074f407fe86c7e1f8d0743247e340710697bc3b2c5ee799f58da1e715a10df57a520f63cbd183912332375490a4659a9426c5a7d0a7e9282fe8f995c8f4c8bf7802c5ee793dad1050746bafba1142e16b28b22b196e7890db998cd371bc6159c6e0a3ecb2263fd14d10fe85cf258fbc7512a97189d4ca3e7809006664ea39f59eca7f"}, {0x78, 0x10e, 0x3, "e3a07f4b29d3524cc5fff6f139e45f98901ec1f75f3bcd339372733fc978ea4894967276700909ab5983e70437802bfdccdf4a4e8307885794183f9e05abdf0ed3dc2719c87ee4ef8661fb7864bb84d23b798f91a66aedd81a3cfaff80008ef0c82d"}, {0x88, 0x88, 0x3, "316241f264c64c52dfcd3afd86664f1345137fa56a53499f2c57e602d51cb900ed09ee9f7bb999bd8c29f0780c478d8a29366de196f0100dbae66c31d2dbf521fde4f7e7d2391df084e1845ddca2a823b28a87732933e73ec9ed368b615eeecb1f42e21a508ea1ab7dcdfc4c8be5f9a7cc0e"}, {0xc8, 0x84, 0xfffffe01, "2ca277178a27ec8d7203549be906f0979e0fd3f4f586ccf2bff058993d325357c6d05966c1a12af6402eb3138cc93e0e3e74456caff3aa53d28c37fd074f85087018fa38858ce1efd38af22135874c157c9668d71f683f1b35c84d88e022589dbf3229970e6293c9f117c23721173cac78924f2b28e6e6bd72e6ba28da5eea25e3c08bf97f924b1c763b65d266e671c02b914df8d993fef27b9b3e09059cda3c0cd1393cbe132671f72991ea5ac5f77676"}, {0x50, 0x88, 0xffffffff, "65a33e2b28d12d3147efde079beba712ba3b84de0ee288086f38d1d5c5746a09f86bc86e0c3f570d5b7c3bf45b32d1ecbc524357be40528ac55ac294"}, {0x60, 0x10e, 0x7, "b323107537fb9789edb05ded3a1de363f708bcefc181b438ab2543d22f207f97a59ce9be4645f485dfd2d6eb43a4cc327f13770382951ef25acc81045a19a8cb48b628104d71347679"}, {0xb0, 0x249, 0x7, "f28c0ef1bf8c7baee2dff2c5690efd210e2de65cf1e7bb47a8dd1cadb4eebb4dd129ee5caad48d1604c28d7f44112beace75f7abbd4ac5b8dd4c768323959d1ddc7942b8b148109a3a3f39750e8170bbc170da317b1ab0c06a185240d88856a29e3eab28601ef974db2c4722632baaf01af61070247a6c368524b492ae68905ebadbb320bffc78aec6db20b219d3c1d90c4444c82ef2057ff37f21"}, {0xc8, 0x102, 0x2, "95b9008644b57ef51f8239e35c1bc75bdedaf50db20596bd0801e67a52d30a1f18c61da5840fe2bc6a3434da0ec40f14996406a52e13ecefa75866fd02e6b63aaff7a955c6fa1902e4921ef74d758f8628f14aa3ba595718e582e79763d4f271f2548e4b1ecf3e4db5bec2f3b95d6858802da5a4220ea5d8f6d83b2f4ca12bc8a0db669b7b6a54abbb3d40554242e99430606e05d74d80a17a9878ff4a0c6083dcb305d31215c40b03b8f6bb9bab6b50bfaaa4642c57fb"}], 0x6d0}, 0x44040800) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000cc0)={&(0x7f00000001c0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, 0x1411, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x4000) (async) 1.307050665s ago: executing program 2 (id=4805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x4) 1.276763178s ago: executing program 1 (id=4806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0800450000780000000000019078ac1e0001ac1414aa04009078030000004700000000000000002f0000ac141400ac1414bb0144440001ac1414bb00000000ac1414bb00000000ac141420000000200000000000000000e000000200000000ac1414aa00000000ac1414aa00000000e000800100000000000000"], 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140009000000766c616e30000000000000000000"], 0x50}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1194, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.103323637s ago: executing program 2 (id=4807): r0 = socket$kcm(0x29, 0x7, 0x0) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000080)={0x77359400}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000002740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002700)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x17c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14}]}]}, @NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x242c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x23f8, 0x3, 0x0, 0x1, [{0x1e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffff0a}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x158, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "f2e9017843feb58272b0dced7c353d3c44807ea469001fdac90e2fa0ce14a53a590c74ea84595e666691085a95a44cd8fdd04768dd902727d68c919d9df6dd86a8fdce9c62e56908753d2c78531bf3c6c36ac91a5d6b178b3eec1e2523f64d245fce0d069ad47c50ddc4ba0ec40f961d31ebbec849e954fccf38aa05a67fbf1cf3df1a175c293ac5006a40f2cfe2b45c453dc541855d18ce2f552d20c751e8552ffd504197311a1fbc9aeea239b63b01fd5ce54e34abae1df79aaff4e3d7ba06409c1aad0ad7885e65c355cb61e40003dc32f4192db2477d29fc6efe9b3024a4"}]}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}]}, {0x234, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x18, 0x1, "95951982b9543165f7e82a593e2a8f6d7b468285"}, @NFTA_DATA_VALUE={0x2a, 0x1, "d452d25725e36cf9311ff96bfc5b85e044502a9b49bc116403e510cf76798287162312ed6d72"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb, 0x1, "663f0e1237d698"}, @NFTA_DATA_VALUE={0xcf, 0x1, "bf18ef7b907df4742ba75deef44d14bc6f9c91dc510984efdc157394e428fa0378890b92c5ad62d2f81ea7e10626ee19897bb8aafb6e2bb9df220a1592fc33f4436bd0275a7ce5c43f86f9abff1ed18e25e9203978058a1512dfea063b503709b39f22de949ce9dd20c6cf0bc40233af6e811eb08d315280e607ce2ebc64dc2828e19db5aabdef6bef461835bc0d582ede500eeaadef32d52c4cab3d2f5666ac4e4c15e48cf4fbfe71bfbdb10f3757fea488b61165dc8260497b593c837ac7f63408151679151fe74fe957"}]}, @NFTA_SET_ELEM_USERDATA={0xae, 0x6, 0x1, 0x0, "c34c7d6583889972ff6a7420e86e1cdf71097fe54cc757474225e722838aa3972c99d061260873233f4f907f488bfa4659266f61115dd82c188df2ad747535b855be7ad243768d43226ddb0e57f2c0d9a24b1b20f7352f2fd3cb33b9b38b09efaafc967da63b9f7bb61ad1f14481f947151c3691678070d9e7c794d9436ead594e951376860422a76e1d6cbe498de9a61db66b0cfae26255b13050c825431934eb7bcc0457921a5fb9b4"}]}, {0x1460, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x58, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x1168, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "06b07e13f587cd52fc5e7993795c3441ef794ed9a4af5f5039114fab68ed2d59896ad730caf653b04361c5361820bd1ae5ed02c61df19d7c7d7920ecc3d27dcbc4a6bd4d7584ad7feae41791e06e66d84f2a762dc957d1944c0925cb6956c4beb21b929979bd4652e5b8a02b60f8d97622cea22190d0e866b6a240f9aac107594df2ce6929580afbb287adc9bfff2a4ec3c0bad474f970bc2b8c094f25dff32a0d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "47afff44cc00a16575e3dcbbacd7b80bb49f30da0d9eb04914214c98786851ad748f7d0cf5f79748b1942681daae877e264b66171bc5f917d405c6fc875d648ff4e12958fa2a94e1d92daaafe8ea7c487efd3f7a2e695c03a16b6473b28235033ce79cb3149015b015d7f926d7300237b732b356b5adffc73c573b096df193e748c8cd3e986759f1c1006c3a073c2bcff725724683f5ab95b41037f735eaccf4f11b2dc8ae042c42567097ee60fc22fe7855e9c895033161b81bdd9839e4fc10fe813f462e8ab7afbf9a56836d5c64dda7b2c32d3a19274ab44f5b1fc581d494286cf2c3c61d1c8eb038eae8b1695e7a1425f108273d9cf29c6d85a86c1b5d58e04aa4291136387a1b9521a7a1a6e3bcda322acc492392bcc52e97b39de3321f6e2f76a9edd05cd669f703d0940ce431bd60078ee33ef6e0b2d0410cd0db626fb11574dc44da6e9a36a4d3c87c4e1077a65b8d632a55da758ae56bff484311e926d824d65c4ac2197211bcec27aa4c0791dded4c3228859c7e68d3589f6ba95f6cf9212ca58f52ae278c904d58185a8115a1513815c8314f447143ceff3e554c8d110a60494a129c33308db11722ae9e71bde0d486fc79b0efd55a7c05f1dd916551a5143fc3cc89334d68e6bd054d53d4bd345ad8c80374f611800e2499bc5db71dd592d05caaf7331b06fe60be2c969c82bae4922f477499aceb72967a285ea563e9b2c3fcb29562589812b2bb403c4b0b5737aa91c6ff056b49ca81765fec8471ef9db8f45c2cfd1302d40738c489f4fb642c450ca7acf9bdcf28c061c7ba8cb311be26b333f548ed7d13db3e158e5d6e1aaf315ca0528b8e7d53681ff45826a6a05a63ccba505866a017d7004ec58957b332740d93d73abeaa34547857c0970feae343c9713631a4eaae0726ead0abd2103df29fa627b3ee8818aabda84e633ff94c62aaaa0b7dee202bb87c86d349cd8c39caa54db40897a340334d26ea860d70f5649bad8f87e8fb32ad082994c419a75ac23e8b08e06f57d5d851ec951ba2fcccc132b9c574624b874b5069b4822a6458877bf15e086b123be92db21db1c94b69e9be719de4309a4b6eb879a0b48f2b7fb5f55e6bb140f0d2f6aecc3fbd8b5185c16241859a5beeb727e654069e479e2ab7df3f107c5933c756dbcdecf6e6bf2a4a619a58e4e3a580921fdbdbdf7dbc39fbc2a6cf62cd96e92e3997f6d902972be66ad6bbe8ad351ffa4cdbce8a5172e97ef689807fef1a3efa0a1fbcf5ff01a002d1e4fdce3e8f3f4038a915219f9ece223aaa230773b1ba8969969be61fae54186139ddcc87b60467bb344eaaf0a224a13d2035f0e8ee696ec966adac6ea4e8838cbec0c6c483caea7f54b7c8745aa31dea382bf75a419a9e5668958de5464de914edb29571bcafee33d202376dda1295f382fd36b7304bc5a09cf7c68d8aada39a18248f961c2a5e98cc23db929ed166626e60733eada03c4c4adff259a36b42827e91b81927add74401a1fdf2e52a4dc5d637971a6a1350e4440b2474da6f8761d7732b825894858372696fb1cb515991d63404d0553bfbba7e803ec92f7f36ae580928fae048a56f75e301313a42bcac69db263177b79559385f3f7aee2bdeda22869481c42177be9414b85a2c46aca97dddbb9e674fa008f336c8335dc482562ff21185878cf99ff8f30a00cfe0b0b8b4c46b49da1e245b135bf44b4b05f05c8e789c91ffc56abc8fef045fa018f61763f97e70f9d8434140ecc7b3589e6d8e216ad0e20848c1882613679e2338ec8f3ca1a01d89676c9682354131b93dbc40feffec57e3e9c74c73e6c452c65553f14f21bc33d65077848252314c87036d13f1f6496f715aa966e10ef89ab365aace8b5e000fee00fec3da1d43fabfa75d068a4b99e3a2b563ba98c63588cc62ea78c0dfde3ebe42c137a12433ba1ab410cb2fba659f1bc4f4745b320f6a48e5749419094918ccd7f772af336e53b6fba4fd31043715e89e9de960d7a7dea5a60a1eeb9ee0c8481bfd44ab8afb778476a8470262c1611ff96f7ce3d3b4846d5987282592c0a76fb5c69096d2f6a22bb54a87749c72a169d56bff299eac6735c9fb79dc0d68b7d0f9d08a7984ef0500a2eadb1532370daf3a10ed57628b65827ad817b128de819c92b257240d3216f23b99256d08285621f022a1e52c26e4555a7add75eee7dac051b22df92054683b4ae112b115e640fdc0d0cc3c4bc78befa4eda63fe9508a090fb111fb6ff43ee79d7a978020cfbdbfdc33d1c6118a1e0c559adf04c103ca2e685500b15e53c03670fd039c4f75fb681cda8d5b7cb6d18b80177f2ba3f9124058113f544e8bb3d68a68f325d22371c6a41bf813ac25537e04c17b35c81fa1293982e1f5844b824d2c08e1911720385dce9e70ad1a3bc7c9de087e7b0632169d1ab4edfd229ce404a307df314d8da0f014253b73980330e4e862b4629bcde958fe2fa35f68189b9214a31d00718f2dd947b8649e31de1b4cad4c67b9d0d09e5d504203241f95e92a04d00809c3ad650e9532aa4b2f0d02f7a3f44eead8520375454b36fcda7871ea46b709551180e7a02a0e421dfd80f4813161450b2f86df18410211b803ff1f295c320f100fcb59d3cb97d824630d1777d32db638213d59252c73b5070843435cc99598def019e6b3f6b4c9e676b01a158a614c2459824b4bdfa15de08dc83dd5f994087575126b6de9bef24d4de83f198158f45126e21171c567f51557a6e5fadb0b4cc7ceabc2578df41ba82a0d18e438a5c8c17055de7a1e064094e1d5567cdaaa3839e0a64edb918f10200d8de4ca793720e97b665a77e787d46fe2ebba2c89e593b99ab1b688f6e88f7b0746be419d328fbce13ad848d68b64ee9aa96392f5f44eca7a31ef98cccd26d6d8a40243b12df69aca6b1c1ad425c87c41d138b8422b69ea5c79bbd8e04574d4a941ae3ae5c09416bec850e170b487c70c0380976b0d7777433d351a292f59734469819a0273e437ef9168ec8523bce5577a005311f99abf60775f4948cd58e22eec999ed7a60b87c6cbd9376624adea3bdfeb64f79c12610a99800b1cacdda9a718b7e1c39fd3f2c5001c7a1efab962428bcfdc9318d91421e3a1eea4962e07a075b23a94ba0f0eca99da2aac8da679fceb4488e23b4218366bbefb55ac62bc4ab360d79359d6db33f3e6a6ecd0e35eacc0646e336c5df30dec2cfe93e09a8095356abeed051a5cd93bdaef0bd8de13c68993eb497fc4a6dc1997a6e747397f2a6173429b737055fd91ce0a4cbaca4972bda8a64a915f44276a5b31401099608071b6201af68e04b846d2ba0784a5dded44d4c2de03c105a6eba1979ad453b9a6284f2ee3d3c64748e29a865c2d5379082d93866a0a7da8e5549ffd1e306eebf25a71a4485fe4721264eda5957eca335b9fd6e055e0fb1d07ae6b0445a841ab6a30601dc63ca842e7eab2c10d2d65e1a8c6421314d2b0e3be1fd3e712f71f1d6f5a03a30a4a51fa527a09cd615a9e364be3d17cd02d990027b14dd0de76741c2a1700ceea2e609b9a81b79e9db28def8487885a6b9cce4bed9e60cf65df1e3146ebd9e5c727bd83d51f5ef16688f6f1277a3045ca3acde9079b9368e326810821df6ecb90124034fbbb94b5ad27db1b5480dd4decd3ad51fb4b6c60995cdad7d6568821de6b7bdaaa82e242b8147f7b4c3a9e4006adb028b66ecfc9a297ffac24ac8671f56dbfa23f7e347823ffc3ed6309bb4423319e4179387a675383032c1e0b7045b361a54713026f7423e7adb0bc2b12b3cfb14941eccd3cceeb0a52747409dabca1eaf6bae65790dcb8cd704eaeebc7cc2b3db4eb801d04dbf167a0a94b2a604487f90a9f74260b580acedc779770ad149da40ab272b2c4519bba3dcc22e482a822dbb460cb00e8b3f58b60affb167bf76afd906b351b8dd34a7b5b34073c694cfa3e8e944b09187fca1f4160bd16c86dfda13cdf67760d038894909667dab4c500d9489783e2c540f589a07df465675007d22a769fbab7e9620fe425ceb55771a7c2afe145e1f259317dba86983ac5bb8e3b5e88c7d6807523539515b1b7f88b4521098963915ddaa180aac636b897d0f1b9139cbcd6251cbf5d7eed4fd64c56b893869bd24843c6221dcc76eac6b2bbd713a5ccb26e33af84bc482d22734b2caa5db60287bf87445290e840b949ccb9c062ef9ca588ef2ab10c861676fe19ab9ff185fdce1ba4610844e0a9d7dfb0cb4f04a1eff314232a8879bacfd10814f67381171c16605859cf66ed986cf9c5d8881ef8bb0f36042e5c3637cbe05c33423412407856e8dd9b01af5c03fb4a507e1eaa224db31ef12b77e93cb1bac0b9d2b74f9b8f5971446f5d26cadb7a395684f29ad96f48d0b3a4b66aa6cb94f433527f686ec5f85758549beffe68ad570fc30d750d9d7fa6b1583850ae0172711f8de24bbf33a725c8e6fe1945bc90e1fcc3c6130a1125f7f941012389cca5a58427e331ed0f58508cd2439b78d36e2c24382a66e582e73ea9dd23fcf5a2cd72e8902752ee4f4e94b1ecc304389567c0b352da5a856c7057882adb523d0cec40bbc12780052f1bda00122974f9e92032433cdc3d33fe354882f8e40c71feb54824642df44cb4f163894712352977fae3bce4a7bdc203ea532e436422da62a146b566c27fd8de139f13bdfbcc85e5b6a7285e7fe8fec0965ac4ce02a259a82e5c8fd778284a9773bf77fbfa5361d42168d45677c2010e411ec2e02a9af3edc0fce17960a6fba5703183a830171aa2e110ec9e4f0fd3a3e0862ba2cff72406a517a309029c0a59a698257b777ab16b173bdf1d2e1e2b27aab529517b8eafac9744a7fd9c0eaa8df3eb37efcaa2a07d310df58bfa0da88dc90f3aefe228c14788c69dcbfbd9472a63d997da5ade838ddd932d76cc86dbb526cf0ad440581ae94c604bf973e4e4e9fdcd312aab861974c48310ac7a3b1cc10640f6c070a86249c06c88fbd063d90547790fa416b0835bc56703fb78d2c1fe2325120d035a624bea461066425dbf4ac3719781d44c6394ac6d0075c9b21c7e6602c9c4c982e2fce4d052c85004e5ccdb3bbccc12e34b3087df28dedc1a183dab97e9ff74b42232dc365e48d88ede186e9978924718325fe685d46a9759620adc7560e0df67e2fafe145220b19088298bbd212c522cfa1f51f596c2b424e9be7898c39d65b42b6c2cd10e966dcaad8598ef258678466a29e6edc99997767ef35ea68fed59716d3572655f75f368d3a0e52264d6dfe1916e9f9889ab410976c7d01531d02b09dff6fffd200fc28cb983dbefb608ed8515aacb4923120c7ef609e0f70f324d3552be1948abf4de684a751293133a5ce97bd175e4a5b262b6e5c044f05633a10b5350cdaef72b4e66221093d411d6123cf0ca0b9d98eac0c8ca2fa14b9c73d412584fd4672f27f5cee237586715f338c36c022e270c2f0683031b155e33a0d984e20078ab4355d328cf09a134defb359e2b1d15981b06059a92c86b9cdddcb4217bd4a69ceb97ea703776a9ef335cad644d98a22773d209af501e844f8b24ceabd4287ce0cd0eeafebb5d7def93bdf0c6884dd4002785596ed9efa35bcf4f216b342b25c8662a40931cee25e24fbf0474134e465f03af84c70bb32710c533cd03e8368642a28c474c621d5ff691a94adc75f732de1b4f2eedb46438044031979c32acef7246c020b70ce9f418e6dad4eeb384cc0fd4a50286f614844d82f5621d31039813b0a08caae04999dbcbb111259831e3"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x30, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x71b5}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xc4, 0x6, 0x1, 0x0, "f6baf01b982e040be8506badf83996a696d843d7f1864e69a389c5ae93bf0c06c27d4daca0667ed9f212ad87a37b8b88846f166c821014698593799fcd3beb57a455a5adad565fa7f6224ba5bac64189551e4662f5b3fb10c0262ef487a1d776f2c382678a8f71cd07832b3e46068e66ecc04a928f587525f647d90b928a8ce1f622ea1a55074bfa92d2f70ddd9cd36323a79d300ffe9f394f9aa700f2e466f8a238e32870b79c921d6ebb1946e897e26f93747f1138d66b8964902b76e6fc6e"}, @NFTA_SET_ELEM_USERDATA={0x93, 0x6, 0x1, 0x0, "2bef556c8e88c949e084bde6c21ca2efc6cef7f3cb16a823adac24ac2dece100e34c71538dd04cdf430ab45e906a85eddb098f18884eecfc1cf165be2912123eae063e0c21d0a7ef75f6d230e84d764a5339d604cfe5fd79c73d320bf0c664cc0e8a5a95afa3aba6e6dbb130d178b03a23db7908c20cf0fe81eaa1a11a0496c0b5f62f74c239a8069c69c9edd691a8"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0x52, 0x6, 0x1, 0x0, "245c5992ba9c94c1fff4a6e806289a4278e1bc84b7039a76269f8ff944d9a254f292d383efb8525297b74b4650ebefdb067e3a5432953a1500efc7dde613ff66f00f4bf1560e0e6bf12370f30404"}]}, {0x20c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8c, 0x1, "f8542f17955e3748e6d7f43be6d26c1ad1b08eebd26e164951234388333f3ff9248a7f70ab452805ff4027b0e7321dd556baa4350330b0a0e4f9f5146057dd2d71b72655b25ef9a125210555fc575ae5860595b46374c3cd36cd1bfe056bfc593609dab6ee90a5146bb6ff61d99cbe8beb06b948962ddea1b790421db28418f4508716af02e63275"}, @NFTA_DATA_VALUE={0x2f, 0x1, "d801b0e8e178a52a6dccb4b17d1b34d3001d85679046be23cc09079e126cf4dba321789adce5d1d50762a3"}, @NFTA_DATA_VALUE={0x10, 0x1, "9283ff5e2b1ee21b84734611"}, @NFTA_DATA_VALUE={0xf8, 0x1, "97453e6b754c006f6f5653dbf9f0c8c649e6893a8a8206711fba2a3873f8295f7e7a78306d2109563388397ea1df7035a9ca6f8e06ab41f796f50636d7b0aa28114d5b07ebcac6d0b020d4bfa4b92f3774a054baca61e25ffa46f13557ec6de5058b63bd1d99b5d64c206bbb9c90ad40dba77f3e924938efd0f51106c516074084f6d45cf06b1a72cd117a4bcf874233fc4fe9ee3a7993b33447e23b3876ec209ad6e940492655b7165de63c8acd8f039b41dc230f36a0ada88fc308542533f9e648cca6315bf4af46652878fa19ae92596305d1c66802510c2010d3b71883aad2b2972623fbc3fb62b531ddd426435ce83ef715"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x1b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd8, 0x6, 0x1, 0x0, "49c0687327575b047587608f2fc0489c36918f81063646b34acc188ac9ae2ce5a72c5a2ed6acbf01a144e0499a5514f93187fa098ec04e0e5c6f9b8b33933951f16608f84db7e959f2c1e822580483cbb6f7bc7a227b319b769f0b812f694e2695dec74418595f244aa7d0440dd4b01a9aa3bdef1be68296ea203bfb2b9fd38016b49b627fd2df9fb3280dc77a94949fcf6c0a267cd0104e8c8588a028cb376679fbc38ece9c5f11491530d425f48ca1ac5c5641b93b06720aab797d98166a509fb0390513a54e6fdaa53fec77ce5f23e7b91c82"}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x92, 0x6, 0x1, 0x0, "9f13446d1820224d5c109a1ab2c6b9bbf1bbc7f4fe5fa631c54549f8ebb882192f65d9d0b61df4aa6bb36e5046960b90268d30e13f6b7720aacaa377fe5a0902123bc79c06e621cd9216a2ecb9e6e2c5fde8f2d20ee817a00202c89fc81f2472b54982e0a907a000f2270ed7560d9fea90b5c3b532edc21be0f598ec96ba454e272fe7310614139c0311fb01f427"}]}, {0x420, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0x50, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x16, 0x6, 0x1, 0x0, "8a79d1a769f2536a9389a4e300684ae4fa0d"}, @NFTA_SET_ELEM_KEY_END={0x108, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "ccadc651cde41f2ea0aaa9e4e03bc264eb503e26e499438304404931b76c292b25e8acab561f7c9e1b5f07d584256a0085bfde3f909272c1908e33d0f4e49d323875b6cd441bfa5979c0750b7dceff2994752fde072b3b4417765820944ea2bf827421ce32675883dfcc0809d50626a5467fa01e3a2f"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_USERDATA={0x9e, 0x6, 0x1, 0x0, "0aadda4af81af00adf8a2d9007c86a5e9a462a4238505af4f373f6ce319e63799231f656314211c341bd66667fc12e976c183201945e3602bf03e62cc457f88f62007697e1ab42ddaff37b3e1a58b8b9c83df828ee120f301d73ed87bff3f8280285b82e4fc6f5b7a7b4d64c955415984f8b08fbf6e065b3157a82ee7c61f3fc5ae327852feabfe61ebc83853c2c9aeb261123e66785db288264"}, @NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x3a, 0x1, "3360bf93cae06d31d99139152c3b397ac7c249fd1a995f98f2680b1bd1081acd8e52b86d818e3a7d7b2f80523449fb544fe70631397b"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY_END={0xbc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb6, 0x1, "397187010f1144e9b482bd8caafb2923bafb1981beefea87efc6c349e196ad24dfa5de47293ff47acbec97bc6f27d9ac0416ac50f00a63c297e2511340b11ae1f718a10fb68ff6752e9b4dd5a8cdd007edfd8aeb38bc38edf8f1b1622b300eefd337d7c9ef7add6d89c2a1482083e2af4117fd1a12c3c5d1e6fdc5c4b758b10b1cbca3d302fd606d8e76f7d8c429f95545493cb58ee1e55abd3289467a04dbda5a17aa7d43dd8be7c2a033501317aeb64f36"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x75b1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}]}, {0x330, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x97, 0x1, "8ea52071a2b5782cd7342fb4f18d5a352335ebf8f6f5935e0387e5e03d39dff75c258930984e739a17172001206bd6c1aa3f30bf424df55ef7a232973ca18cb56c213c6f8daf0840a14b4af2cce2e3cf494ceb3e682093f7e678d600f9e90adc88155d4b89fd8a489f6aa7c18e57e6ef08aa439777281f530f98bc9d4f6e6ffd97893e8e11717873f886cc6c2f595f8ecf248c"}, @NFTA_DATA_VALUE={0x7b, 0x1, "59d58f24fc3708d59390d45d56e2427ce843cf97f3ad1aa45f758c9079e582894e7c5a1e1f05f5740694b6f3b5443992f7c9fda75b3bc27cfd7e99622b078a612ca274db8c1fd646f7e59c8823bdd13ae20d102da4ca52e0a9c1133a68ce8d0fc56be9b81eff0c10f9e08c0c741cb70443139653a34d3c"}, @NFTA_DATA_VALUE={0xc8, 0x1, "dcea4541aee869b02d222254bbbd86d0a162414d6828ff06eb2c1ac215efb1095890c53943b4f6cf5a8fd17fb7a1e8a0779fdc842ad2ef3ef71ca8a38b781ff63d3f56bcde3f5999f9fde939281243736bad5b387a9364c1c5de316fb1576f3c0e7130269d9aeabdfcacd7320395c060be752a674961baa5f3c9bdd821812f705f8b4d62519f3ebab9f7f750ff02b532581a665ed000aa17fd5e9f5dd2adc8f8d26d45602f727693818b71a41a2e840bdc7a277a4dfabfb9f4f752b204c57d4ccbd3ed5d"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x25d0}}, 0x4000040) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000002780)=0x8, 0x4) readv(r2, &(0x7f0000002b40)=[{&(0x7f00000027c0)=""/137, 0x89}, {&(0x7f0000002880)=""/226, 0xe2}, {&(0x7f0000002980)=""/35, 0x23}, {&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/94, 0x5e}, {&(0x7f0000002a80)=""/181, 0xb5}], 0x6) sendmsg$NFT_BATCH(r2, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0xd01, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x400c020}, 0x4000) connect$inet6(r2, &(0x7f0000002d00)={0xa, 0x4e21, 0x6d19, @loopback, 0x9}, 0x1c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000002e40)={r1, &(0x7f0000002d40)='xfrm\x00', 0x2, &(0x7f0000002d80)={@_ha_fsid={[0x10, 0x1]}, {0x4, 0x3, 0x3, 0x41}}, 0x1a, &(0x7f0000002dc0)={@_ha_fsid}, &(0x7f0000002e00)=0xb}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002ec0), r2) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000003180)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003140)={&(0x7f0000002f00)={0x234, r4, 0x10d, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x13c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x200, @private2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x46}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x21c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f00000031c0)={0x5, 0xe}) bpf$TOKEN_CREATE(0x24, &(0x7f0000003200)={0x0, r2}, 0x8) r5 = socket(0x32, 0x800, 0x5) recvmsg$kcm(r0, &(0x7f0000003600)={&(0x7f0000003240)=@hci, 0x80, &(0x7f0000003580)=[{&(0x7f00000032c0)=""/254, 0xfe}, {&(0x7f00000033c0)=""/155, 0x9b}, {&(0x7f0000003480)=""/244, 0xf4}], 0x3, &(0x7f00000035c0)=""/64, 0x40}, 0x40000100) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000003700)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x38, 0x13, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x20044814) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000003740)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000003780)=0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000037c0)={r6, 0x1, 0xe9, "6e90622bc315b7de6c1e7f0a6a9f770f73b4bba6495779481498dd8f3c1e02e1a11194e45e9979737c7333ad8642e035e34734dcc87bc6a65ff7f977029001e90ab8bf00a9ab443b0e30d6e7503fc5a16cd6fe8113be370acb8293218808f09c47305e99de48f28b989f06b79a369f7f9b71919d6181f76abc0322488a1b93d21c7c67241253e3cd59022af84bf3e9933c299e1941006107dac25cace9d6c4e3373aaa116fa61d983c65a4db8014f78b42ece6bfe56f196651a44b3eed3e1915bd514a44616988a20d8708bce640e3d3cc3e5b1a6a8350a59c249d0ba048a375040deac04db999690b"}, 0xf1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000038c0)) syz_genetlink_get_family_id$devlink(&(0x7f0000003900), r5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000003940)={0x2, 'syzkaller1\x00', {0x8}, 0x57}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000003a80)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x2400008}, 0xc, &(0x7f0000003a40)={&(0x7f00000039c0)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x101}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000003ac0)={'batadv_slave_0\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000003b00)={'vlan0\x00'}) r8 = socket(0x29, 0x2, 0x4) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b80), r8) sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, &(0x7f0000003c80)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x48, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe0c, 0xa}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.090342112s ago: executing program 3 (id=4808): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x100000000000, 0x80, 0x3}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e27, 0xcc, @remote, 0x7}, 0x1c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d000000000000915b9bb7971aa5adf7f8ccc39f2ff6bba28737c24c236bc93d24222952d3cb2dd7818093fd5f5db8a0e818e511d492b5d2f109c59f84ef781f3248c7944787ebba401e7168dcf89cbcd83f7fc0fa7b2862f08af92d748ab8d2d3a4622081c8dd1dbfd4329e5c0b01b8f82879615276e2be8ae8a82f43915406ea1ea4bd18b300fd632dd5084db3e5d68d60000000000000000000000000fe5da05ccb79c6bd6d30f5ac623f1ec7679cf3110525d75805d77ae09797e7473c026ca813a3c66e73e95cab598436625c1a05c2126ab804a81c4f94a57ce00edce66676e40ce9c2ce2bf70aa22e35b9c0988f7193e9d9fd3d1b82b164f0b14e09c5cdc639e2aaede0288a84f8fbfc74e2f5a5a797e0815cf71c5eb31a575ddda365763769564797a61635ec022dc42ea90ccb79fc6c543ed71ef58e0089f85ce76fdf380a1a20c3a5ec448504db3701bf49fc69131ac27ee703b2c7b92bd8f9b0e2c86318a473aefc5f128dca52c85c18aaebe203fd59d24be3f3889f390e9e8e8d418e5ba8fd6d8b"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0xf85, 0x12) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000001000000400000000500000041800600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100f3ff005131220600000000f361ca2479b9e03a000f0000ba0000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r6, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000700), 0x5003, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r5, &(0x7f0000000380), &(0x7f00000004c0)=""/172}, 0x20) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'sit0\x00'}) 990.772283ms ago: executing program 0 (id=4809): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fc0803ff0000000000200000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020039010000000000000086000000956f8424aa3ad0e891098b0641d4b795b43687627f445502055093a34b48f4ca9263e7cb679e97a73b6e2327117ddb351c3ece54a38ec2c143fc5543fae3adb59f493f1e8dab578a94b11e822f0122b3072cbe50434477e920aff5"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="b5e379a5389bcfd05ad9ca72d507", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fc0803ff0000000000200000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020039010000000000000086000000956f8424aa3ad0e891098b0641d4b795b43687627f445502055093a34b48f4ca9263e7cb679e97a73b6e2327117ddb351c3ece54a38ec2c143fc5543fae3adb59f493f1e8dab578a94b11e822f0122b3072cbe50434477e920aff5"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="b5e379a5389bcfd05ad9ca72d507", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) 880.588776ms ago: executing program 4 (id=4810): socket$inet6_udp(0xa, 0x2, 0x0) epoll_create1(0x80000) 879.767777ms ago: executing program 2 (id=4811): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'wlc\x00', 0x23, 0x6, 0x3c}, 0x2c) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r10}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x43}]}}}]}, 0x70}}, 0x0) (async) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x7, 0x7, 0x6, 0x8, {{0x16, 0x4, 0x3, 0x2, 0x58, 0x66, 0x0, 0x8f, 0x29, 0x0, @remote, @empty, {[@generic={0x83, 0x7, "b5bd75e30c"}, @timestamp_prespec={0x44, 0x3c, 0x89, 0x3, 0x2, [{@local, 0x99a8}, {@multicast2, 0xfffffffc}, {@private=0xa010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x7}, {@local, 0x3}, {@empty, 0x7f}]}]}}}}}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r14, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r15, 0x900, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0xf4, 0xa2, 0x7fffffff, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x20, 0x10, 0x81, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x40, 0x6, 0xa, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x89557957b8bc7249, 0x10, 0xc, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1e8, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x16ff3626269227cb}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1e8}}, 0x1) socket$inet6(0xa, 0x80001, 0x0) (async) r19 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r19, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 818.33592ms ago: executing program 0 (id=4812): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000014002101000000000000000023000000", @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) (async) ioctl$FIBMAP(r1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x2, 'pimreg\x00', {0x6}}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="1ac628dc828927d10397f290a58b848c695ecf5ede5a5c9446a13d1c9c937a47e1b03a2885799720774271f836946ae0cf084278d93b0379b5373b76709c5be0427da5a3fc94b3f69fbd8b5f7ebaa6650bca66d5b1902ad52ec1678962eda77923ebe4da2c39429e5dea62ef0bde74f7391952dd0b23cf7305a7f94a9bd107b64655cb845812e9b24bd21b27eabf435e3b69270494d22c2db0ee45a172c0a2f0b0931a0f4c04d5a9848a3e03aeb2c33051c15fe24e67ea29f061fa3ace431da21135412e44c4a91c03140a38621d335ddf08c4793a5d286f22be5d23db14d0d236d2b454ee2c9c567c034a7551560835ae30936d6bcb4a", 0xf7) (async) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000200)={0x7, 0xff}) 806.783735ms ago: executing program 3 (id=4813): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="ffff2abd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="580000001000390427bd7000e9ffffff000003e4", @ANYRES32=r4, @ANYBLOB="00500600c31006003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="08000300e00000020500090008"], 0x58}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x9e9c6482de834993, r5, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x0, 0x0}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x44, r11, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5c}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r7], 0x28}}, 0x802) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r13], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 632.183097ms ago: executing program 1 (id=4814): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x9, 0x2}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x6, 0x0}, 0x8) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x21, 0x6, 0xb, 0x8, 0x52362, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x4, 0xa, 0x7, 0x10, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x2d, &(0x7f0000000140)=""/45, 0x41000, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0xd, 0x1, 0x6}, 0x10, r1, r2, 0x4, &(0x7f00000002c0)=[r3], &(0x7f0000000300)=[{0x3, 0x1, 0x10, 0xc}, {0x5, 0x2, 0x6, 0x6}, {0x4, 0x4, 0x8}, {0x2, 0x3, 0xa, 0x2}], 0x10, 0x6}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x20, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xef}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @printk={@d}, @generic={0xe2, 0x8, 0x5, 0xda4, 0x7fff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x1, 0x3, 0x5, 0xb, 0x2, 0x1, 0x1}, @alu={0x7, 0x1, 0x6, 0x3, 0x1, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000500)='syzkaller\x00', 0x8, 0x21, &(0x7f0000000540)=""/33, 0x41100, 0x47, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x5, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[r5, r3, r3, 0x1], &(0x7f0000000700)=[{0x0, 0x1, 0x7, 0x1}, {0x5, 0x5, 0xb, 0x1}, {0x3, 0x5, 0x5, 0x1}, {0x1, 0x2, 0x0, 0x1}, {0x0, 0x2, 0xa, 0x1}]}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000880)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(r3, &(0x7f0000000c00)={&(0x7f00000008c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000a00)=""/194, 0xc2}, {&(0x7f0000000b00)=""/128, 0x80}, {&(0x7f0000000b80)=""/4, 0x4}], 0x4, 0x0, 0x0, 0x805}, 0x20000) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='cgroup.events\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x80, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x6b}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1ff}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7f}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "7df0f2395c30eebe49751f485f0e5d7e"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9d9085ef9907"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x1) getpid() ioctl$NILFS_IOCTL_CHANGE_CPMODE(r6, 0x40106e80, &(0x7f0000000e00)={0xffffffffffffffff, 0x1}) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000000f40)={r7, &(0x7f0000000e40)='cgroup.events\x00', 0x206182, &(0x7f0000000e80)={@_ha_fsid={[0x87, 0x8]}, {0xe0d, 0x101, 0x800, 0x31}}, 0x10000, &(0x7f0000000ec0), &(0x7f0000000f00)}) sendmsg$kcm(r11, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000f80)="8fc764832c71bd7a1e5c286164aff7cdab40ca1a33cd44769b6bf48eec2b67cdcc51d2e80cca57e1a124932393f4f1fde1f1c75fdee32646818aa9eb8a4d75b3d1bbcac6758ed33facfb87b127e2d33446b1297a4c1c38cc4852309e7614a43022566494d0a8757f32e68162b8db86c9e2", 0x71}, {&(0x7f0000001000)="a2e2751b95ae46fe3db1d658c99391a5aa8d28d2ee3a1686f39b1f98d018db6c14b71f4b58628e9f92696b6557c6567d2623c18dc3d8e2b7d2dc7411a4cb2b328271ac5c6db9462dc04a7b79b5b8e182c037a508d3101879b7d6b4203c8810a6a63c5b4fa542ccf0e315da39945a206096ea9613e0b5ed3d7e26affc32a727227bbb6333d98bdbeff651bf1f", 0x8c}, {&(0x7f00000010c0)="47ffff60", 0x4}, {&(0x7f0000001100)="500c7be5fd57767bd015186a4e148f4e0bab452c84dd73defb28e8a77dbc8056e51fbe8ad243c820a098e45ea43c8cd40c18d8bc321ac4ec2c22a3582e646d5d4ee7940e5abaef11655d5576010d6f07b7f57ffa52189b748a801c00f9", 0x5d}, {&(0x7f0000001180)="962ec892bb3f3595c7b4fd4fb647e63862080d2b8591188ca5e5ab28f07b2d3458ea9539c848231f0cde2999c93a2caeb80678", 0x33}, {&(0x7f00000011c0)="878f61518c5c162ea8d63b650f176430feecde3c68ca42b6eeff76723dc2757cc8e8e85722ac27c30c1461a86a2d647b15f936c77c1cc1d9771e6d0e5a0ae0512e64d252b983f391990c3273d750eff7", 0x50}, {&(0x7f0000001240)="ac4a840e4710eabfcc2e5a009b7ce38de8c3cfb71de7914b2da0fe1131c0c490dbae5d1080955dbd8d72ce0fae217fe03580b361feb365ad779441907684efcb0d52c7c42e153d2d65cadad1526266417ff31c30b4448db327e4193d5d60a127b2121715abe2e0632aa85f80ea81539491cf12f11f", 0x75}, {&(0x7f00000012c0)="1ba477c7fd58658fbe4d60779417a5c182592f608891087dd37f5531576c7a5cf5fcff286683e0ec83c8d26e7106d720e3380bec9903eee6816cfcd87636b360dfe84b603e02b009ae6ec5295e80d875b279b34887876381aee5de49759c70612e4ec38c571e93748b", 0x69}, {&(0x7f0000001340)="bd7152129e5a40862e0fa69fe055a4eeb0138da460aa7aa3b06909d1e709d8ce4bf327abc5dc42b546bd58219bcf0c11d120f2a192a9a36ca466a8160f5a6f2c25d62dbf0b771b78c7eaa14651125365e390aed7756327ef4b3732258772dc0207417f56918c6f7b24d1a55062f8e8daa4e4027bac8b7ad604f98a88bc3b564f09401f7ca979a4398dd664e826b272b6000833ecdf10a5b7f7655269adfb1e27806d7543af4829553adb548d7765ca1cf7ebfcc5800d2c7328a932a061312491bd2b789235b22e", 0xc7}, {&(0x7f0000001440)="af0290dcf636dbce54beb5f293c6dcaa684b3bf86d09477eeda9dfda3b64fcb28c3025af6771db9116073e4435f37d1c4e187ffe9b2630aeff796f5ad355a4e4c37820b32913f4f2ca3da8d72288a94e1c85c8", 0x53}], 0xa, &(0x7f0000001580)=[{0x50, 0x0, 0x1, "cb5b5d441f0676212f8cbadd4173b4339b958a6511c200d19765de541e1f348c4fff39bc8132383938d62939dc978dc02069c36dd42cdd01fdbd318043781db0"}, {0x28, 0x0, 0x0, "74f32de17b667dc946519be70730ea8fa4cfaa"}, {0x108, 0x114, 0x8, "73369a8c4d1ca78bd6fa5166409683c2f24b5dc6c15fad1f53d8764687e9605d1ddae61becd8f0d8a0d92aa762e03e29f931351962905ade7ed68eeab1937d62d8d54adea0774fef8c798e7a6214a7f2a119bb327f6614727d482f3ffa1b4ee98d73dfe8094d57a139bd62414a7e8626fc88805399616da4be8586992297d42ff393aa0af4766e833ad884d04741f2219b19cb12ad75b3c4bb8c97349df1c4529515cebfab7c68ede0ccdb4a7aca226d7d874f96e1066e25c8fb17b54a7a69af875e7132c6b4a2e1763ec801da38d1833fa48b4bd6306abf0ba7346001be685c84406aa65e67ab24f4e22781f18eb7d9b161c3"}, {0x110, 0x102, 0xfd5, "d951dd3136784e73317cfbfe96ccbbb8184a645a97c5382052c09b98b752eae9a683fa353c25869d6b8a0b9ccdfac563655e5a3cad79476bfd717e7a0a5bc919cede34b1c5ee0a30e3786017a7ece9cd6b19f5c6871a1c897d62de77a014875df2aa4ca8118f0bcb69e39a98ecf639756afbe923975177acdc1511f0b9b049a21de88546d3a68de1cd67b726fb54bb65ed1e0b3d40a7a587708d888760243729fd696e8ac79f097aa065f4e370965fce9a1403779f85b8cdea93590b6f293293490f9d57d5263c62a3e4492f3449168fdf355eeaa12087f7855a0141218e62e478316ec9f3ae52f26959c3b9287bde4777e40cfec2eb09764f"}, {0xa0, 0x119, 0x2, "50791711e44bf5c06b75483169faaae8430f8b966da7bdccfa37524eedf151823b83d1a1cfae13e1055c252716c6a781b766bc68ffbb1b95907bd86033ff78d34d6a8ef4aee8c6b7d015f162f9045d82035bcc7a2083caffd36233e05d0306a542e32fa5f383cec91e0d24d67aa950700e08bfaf5fa4e02922824c5456505117d5fb8829178506bc73d0f8d943d45201"}, {0xa8, 0x1b, 0x19de, "3101ff07ea9c0816d943b99ceef0db1286c3d0a5effebe80ed427afc0cc5f627f18a4cd5a48af54f2e1cca6236b843cbfae7297e6cc6097809228a40526110a3c1d00a2b498214affefe43431c3fa7720e7e008e61abedce735d46a3b87b2bd8ea422a7f274d01a32a459f697257e83cdadf63ab0be6def7b9c86bddaef7b26c0cac6fbea73308d68d917d9d596ced91ad77e273e2c3"}], 0x3d8}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x18, 0x1000, 0x3, 0x7, 0x10000, r0, 0x5, '\x00', r4, r11, 0x0, 0x0, 0x5, 0x0, @void, @value, @value=r9}, 0x50) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f0000001a40)={0x0, @in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x64}}}, &(0x7f0000001b00)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000001b40)={r12, 0x10000000}, &(0x7f0000001b80)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001bc0)) sendmmsg$inet_sctp(r11, &(0x7f0000001f40)=[{&(0x7f0000001c00)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000001c40)="8f667bbccbf101e42513b0242fbf71ac942927e22226e5e633259e441317e669697900e9ee0bdd4929a3e40fa9ebfe0a9524c3a6980fd5247f5bec699c8e18357f40f7cf7e7baf3188f9f95343f0ddee40d496b831931605a30d5f924f01e33384ead52d36004a295373e2b46cc59de25dfe84ccd59d1059f49d6a6d2c5c4b5c9381ecde398e853bff01991c8754290ac30f", 0x92}, {&(0x7f0000001d00)="166dc01888e6646250dbf3b50809f37716aa9d25db7d109038991456442e9584928066045bbfe7cecee5e31962", 0x2d}, {&(0x7f0000001d40)="f8ffe3846c84396524830f5440c0e4a0aeb0b69c19ae81638e31093e9559e8cd0690622e79b78f72407afd92f733f4e594ec92021d86387acd5ffa959b48892b156a40331caa3ca313cb5a12b6b47c60f636a14d976a9860099fd5579f1006d9dbef50c3e11c50b11fc3562811ad08bf7b9d5ae7820fd2", 0x77}], 0x3, &(0x7f0000001e00)=[@sndrcv={0x30, 0x84, 0x1, {0x65, 0xf, 0x8, 0x2, 0x8, 0x800, 0x5, 0x3, r12}}, @sndrcv={0x30, 0x84, 0x1, {0xb6, 0x5, 0x0, 0xd, 0x7, 0x6, 0x1, 0x7, r12}}, @sndrcv={0x30, 0x84, 0x1, {0xca9, 0x3, 0x8209, 0x1, 0x1c40c18d, 0x4a, 0x1, 0x4000, r13}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x686b}}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x39, 0x0, 0xfb, 0x2, 0x8f8, 0x9, 0xfffffe01}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x118, 0x4000000}], 0x1, 0x4) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r14, 0x84, 0x18, &(0x7f0000001f80)={r13, 0x8}, &(0x7f0000001fc0)=0x8) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r11, 0x84, 0xd, &(0x7f0000002000)=@assoc_value={r15, 0x3e}, 0x8) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000002040)={r14, 0x0, 0x575, 0x16, 0x4}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000002080)=@id, &(0x7f00000020c0)=0x10) 569.559477ms ago: executing program 2 (id=4815): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80000) (async, rerun: 32) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async, rerun: 64) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="01000000c00800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000400d3238e"], 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x50) (rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40005200060010"], 0x24}}, 0x0) (async, rerun: 64) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) 502.148248ms ago: executing program 0 (id=4816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r3) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r6 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x8080) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) (async, rerun: 32) r10 = socket$inet6(0xa, 0x0, 0x8) (rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000200)={0x4, 0x6, 0x0, 0x8001, 0xb92f}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24030004}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 499.036243ms ago: executing program 3 (id=4817): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x20000011) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) pread64(r4, 0x0, 0x0, 0x100008) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x0, 0xfffffffffffffffa}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x1000, "0dfa2c1443e5028ed943488394d55033891ba7614e1a6d1a6fd4748eb2b9dccc8674c6d789da0d8213e777d91fe874649df2795f9ba06d9845ae00880aa0a6c6925bb41e4fe567c1e6280bd42d3ca2426998a0260c56c7ca865a574c814e3dcee8976bc1aa63813c3d70675c61dc6beb8cee6a3adfe1b8a220aade40ad683eae9a1d0e177e6489296e051f32b36b0f64bd9e43b689589723ada8c0d39f60e5c73a71dc87c50840a3bf3632afc0e9a3abea6926089c6066a32b342ba3c05f1df7c42ba9a1e60412d01869c70ceef8770fce282ecbf69a9281f931d56f0afaa73430e66586a5b60c2f2ab54b9794e6b92362bcce2c455aa1d1a0ccb86978c729346d4c1831064ef7054e0e157eaecf7f2c6e4eccf0703cb2d21a6fa4e524cd47049b83234c2113e7b98cac8c85c78731a83488df19041dcf3944533696093dc19baad75f39fe1f538099e7163e8de2ba9c5bc70ee8ad62dd3ad839a037113a2edd9d6e81474bf3dfb68cf7a254c616ab96dcea4da5d938ab5cfc286dd74183acf31c0cbc87fcaa89ec463bf986b5a72281e48782d02df714553ca810e00abacef27864ff8470e82c5a92f84698c3c874f96c6f0e13c100acec971e3e98ce29d7f467291df5a8160512978e74e791657dd2bd87ea6f50309ef2fcd83758af2da8622b5e9412f2a72ea1f4f0e4b6cae3f5fcb9c89fc342b7acdf452d80bdda55cc70c38fe10ed78aa2cf0b897c460a9a4760b89596bebdb87d497ff1404f502786effb755a672f094296282b2f8f02f49f751ed1bf14668a403c9f0e1b9301736d3677a28a15c2be01b40f7449211701284509ecaebd7fc2e5f94952445f79d46fc79788dc51ceb0f1b67d21bd350c626eb7f844d0cf62b80d4e8a0186540da2e2320ba3c1d780e6babf4374028cbfb6e74ae5956b57276943cf9b47c404275c6eb4dc98a5d1b694b9fb7e477d3e1dadfd378a198b0cda38b2b3b4ea45c8e701975c90d830b877423dea5dff7b9f74391563e3d164fcd761b826bd75cf224fcf1317efcc9f68d3da5a0cf81b0aeac3be9166016f151e6b8acadc4ab5c38416afab2f6d954f64cb825a6c1678dc41a77d01b6daea977d6e3d2dcd03372c3ca627920c8b61377dc2cf8996b347fe2e48c836551729415001c28a3bc8fd9a3a8aa928cf5b835865cb72b96bf2eaa5af79ba96cff246ced06f648fa180c8dec2e940359591211eb40b76c733085ed1f22ff901de1664794d8e80820b262107e1025467093b1c91f1e3497299fa17864ddc3e4a16baeabdc5f4501fff127a0a0bca8152912145cf6a777ae9dcb6b18651e6e1f9ca7cea80533493ce92351e7f8f794b8b9ba60c60d6ffb9ee3fab573e0bde92987446dd7d09f0239f3a13cad6bd23202c31709f5860a7604dff62b6fb85c97151f89f729ccc60e82f97b509fc15a492b10acb01f3860697e55dd5904e874d8ba8179e7ca91065776ff28b5510ab6b7e7268e0f7e03f947450c45c781ebea223fa4f9475d087ae61c2856eea9fad5cf02b61b3ac3c34f830647f2badb4641d7fa6e197fa469a1c7852ff9972a77f04462b5a5fd454a55a12339a2bfd0ee85d30a0ee2b28e0db6d88c0472548ae2119b5e9fc5370cba956d017aa3656b009d6a2c985dbfb31f87b248611a716aa88c14a74c2b844ff7f84f5042f745c9c210df2c65b7ecf024e2c5c74322ffa11ff2656a89053583c4f03254a4bb4f2538cf1e70384e076dbc28f0d08794031ac4cadc0c4a31708b5fdf0abe3e3ae155696730a6a12c6dcf77fc9ea30e84626ba22e138262e90444353601ae3addf33471ac2a2ca3c23560dcebeb94b99471a593588e4e738f0cf352153a262ccf106f485e580e1553944f3b7a04c9a0d392c9a6e8db63bea1c33dea461086ebaa178d4636cee572cd1c8caa7bec30cae34ee32ca14c8af1377e75f121d77e5687775b34efd05fd0544f652c3e288e036d2583ab410ef3d2b4f62a6a3abf61f738e2377f6ea4f0a002695c1cc6be10be0a8d1903bb3fe7225083360fd6b358f78fb4dc52443581a670986146fe3139785f8521f86624388587c9c840dc5f48f7d9100ed40f92734bff5cca6cacf8530706dbcd456e159f13ea07168be0c01a60390c77f898bf8d77f8dd5cea94e0fabf65eb9212018c69c8c5796466efab3c7e79acc78a103da02a219119777e62fad19cc5ec2c0664d3d7048832c0c88acf9f6f1862537c821582e166dd92644f2dd7596c8c418a612b152f591a59a18ee4bfcc335b164dfdeaeda5cb9ff3f8c919f23c39e8d79f51df8222dc54ed13fa320e13f82767f56bce04d9020f7c48a8d6970bd87211fcc6f6ddefc2436e637324c3caff016dcd80a3fd1a120ea54046d7c8d5d2ed0d3e715b1bdad62c9b9fccf60378d5c36aebb59e00a1f4fce7c75bd3429eba3ccca6a6eb2793c5e2b6f8117aec282073b7cb70331b3805d78f296853bb4c6402206f5e2248830c076fc9ae73067c61dc5aaf8abdecc39d26ae4e292124e193a5040d300ba90c38d55529f523f1f53fbda2e13de211b5c5ae573cb6fe6f6e1abcc9ef7ac6b55fb55609a9d317a620b20ebb4a769d11ee72346bb1991253a279ed2d2f88dc47037cb6bc9d127d68b8aed5f38231025782eec116e8548d692237e58929c050c3e1f9f0c605a703e7e570bb8501cbf591b783a940d8b8b3d68fb98b8fe633ef5d01dc5414a67ec595b77b20d069faec4a722f0dcd733d13f8669495ea39214f55b0480c44c5c72281d0532923dc13e428286780a887c097e9426c0274a766a6d57f17f61ebf35a25ab9e9ff2cacf6774f6708e210ef7624e801abdbb4c6cf42f8116260023e8b5f9cad83d370d56ffe34a1df18de1dda6c7d939575978a86ad0e7ff99cfd519720b0d9cde5f9398ee67c316d8fc386637d8377272813d719b379eb7e167aa675bec77f7ceecc6c62b6c6122a11f3020cda1e71edf76cc0d99a8728f50e253bcc094b602a6275ecad00c52450675b9d97d1d3444ac0e77febf9d7c0e755b0c224c2f705f9b205c6d9fa82550b617f38f07890add19cc1e9d5930a19fa4471cba85812fee20d08020bc6d0b3ef6eb863d4461f0243bcab3195001b939c88af4c57ece03bc1aad3e8241ef511504bf51ddfc96ecbb93ab875aba606f47d54a492c9deabd179c3f7d0757b8fd77e843eb785dcbe233c0bebf393d45701ba6755840449ffd7130999457abc5d0a1017b0491644256f8a8111e2207bd90ade7ab8ab13edd55366f0514d28874f036ce1645924d9bf7b168a8ca014a67a32142487e5014f95b3eaeef3941a24fb7fb2fd3fe30a30fb2b819d5e2a8ebb49c21989dba1751356805e38a6f77eb65e245f934c5e6ce0fadf152e7fb5e8560d0df9a59150c189d712f1fda21561fdaf9d6f3e9277b0842111c2b3a1709d9f4a37bb051b4240a69942ac8ce73876f7717c5e65f61ade0c0a9cdc1f3c80ee42ca4d7aabfbdad13d0ecde8373edc33ec830a64b370f3c9c11f18214ad4a448f800ef1226519c11b7aedf774e3c747b4d5d9aadce2d5d46905e656cf9ba3bcfc28d5c3b933abd8d2b8429540c75d6dfde56860f77da8297fcb0846cfd42ca84c07ca51664dd777b98248888be6d35d648a4408b76f28932fd303155eb97b7e3fe0666f98ba0aa0b8f93a96a33378327541d73242503fe09e951418fafa5b2d702366defb52bcb42a6ee7f0ef262be18c36d18eaf797b60df2a6ebf5e5c32d947d3657b15cf4e38f2dcab8c50e57fe9c54877a8dcd3bf4ce4500fe3b15d4cbd8dbe92db3e9e5082688039e008f20143753a17449ae17282c6f18774a194db0c30e20768a8391c224296c250f41fbd981a3771ab4d64993acb481599ecfb71ad61bbd6a50257595b6c0c708da2701ae9ecb4d0c50815f4214a265707c39281217856757df1f89d5b5699f3072650bb5f290866cbae3f71ef3ac2dc7e5ff3e0ae6fb71e31ebeb4327f7838722f40e566d979d1cce10b72ad30ea53edc3412418dbed4d21952019bc57eedea9f54dcc1d3363c574fb38433676b9b2cfb55636cb678e65d7ea79b90847f9b0645b18f5107f341c5685a00e421f7806790010e49339f1ce3b8393a2bba3e3461ddc4732ebb4e380933925a619cd3e98e14351be7ca51696ab9f15a23d4463f8ebdd3ea9eef0d45b9c2ae3dcff4921b3853b5ea9aecf7115cafe255f9c3b72ff76bfe100bc7721227019c6d20ea31ef871537f07d42f8ea170c046271b1d73d7835740e5191885b91ca8e29d3619e7e299cc7b97af4dd902f8117bd3aff8bdf511fd5371af199901b5bdd53a67d1bff66b5faee5e9f8bcde0118b6ced85bf27a160f24db71e769f5d6968fb28df38e9059ccf3e52e5eda68f3e332a78464efc9db3bffc5af563977eaefc28d605ca6543ba3af898bdfb0c0011825e5c0520ae306cc2b3d16a9be14754fc4fc4104f87e1d61ade379d0ebd922cb531779da34009f277d46baebde3259b2861ce5a8d414abf9740f16e9bb4a7a1ee9cfb1a950e803147ad4d5d0b299bad0a303bc1695b5889b72f180e137424b5156af1f9627a0b287ae1cc2622c9a00b295eb5d8ee26ee55c831ea539ad88e3dd0eba512c7dd7bd8fab7d9438b6f93f3dfc4ae5601e7212992c0ccde4f1b36d069dfab3be2d85e328ec8fdef2ef4d5ca62893f01f01253f2b4b1444ad3a1f8c395f975e813de4f5bd4b88779d7fd792d7525a7b9cdd4c08d5b64fb18d94d4560c1c15795eca876a70dea273f9abe6b9854284bc36da5036145411dd24cd81470a799842c9ebe6d690bf557c1c662d8ae50f44e96c8fd2d9060a2614021ba1232403f77bc94d6aad5e4704ccf3b2a8ca3e3e0058543e21c3e05b861298390fd789cc4274c4778e19f9c591328abf3035b25210466b5c209d595b364c54468a743489bb5ba5c70a00a1808360b50d8dc7eb5f98be97ac90b0c36c4146c430682da455418f40d5004b3c9f6ec388ba40b2098328779fb55f1b0f3e2812bacf629844e0299f49590a5f41431afd92309dde50e38d43d561a2b141c29b5f5018aa4b71f5b4df730e77e5203bf78b75cfba29431b5e4a7d89bf3874b51fb8064ee097e8fe7d67ff64609349cadf683746b18d3899522f51315443d6187de05cfca3f82558e27d7a2bec5d9996033b7626734f2c34e179f2c057367586a95e38fa673641b3e790dbe695d1fdd17c0d8df7f247a2e691fafa59972791437563a76ca69c0ce5c275481e195dc3a5faec4c1023ef9a072c9f1b28b331c9734160f34ab0486ba82262415e52ecb88661e00a68bbda3930dac04423e46bae84fa645c9e20492af2d962f2984bb82e1a272d15068a2ab3b13afa636570f9cf3ba6588ed3346f9bd934c1d887b87395e41408d5448a433b589c4034fee195c242c40c24e47bef24f003236b86242a5f5e94fd8bea196cd16d5343c1e1e3d4683ed13138feb397380d6c8ac845474ee3e259586f0f7e1e9423e3dd86617709cf4688b459eaa3c81b335d005cd7247d2065f760dfaa495a20c958f18eaf5b17a8adeab07585b2bc9ec39372b7e7b604720e0e36de108d3e989c2f747e27ef7b984d830992524e0e63b85fe0b581c417f643b76f1f8e162bde9191f95f98542db1d5732fa9dd672e693259f68af1ff43f12eff5dd710d5a557b0819ef2242768e6ee9a640bab8befee30aca40dbec132b2b351fe16f5686e873b5b2da1245c2c03b43ccf6624de03f6f6260f71e17f7acf507e3107cf18f6b1ac2f901df91511cedc20684f6fb8b"}, &(0x7f0000001380)=0x1008) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x34}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000013c0)={r6, 0x53de, 0x10000, 0xf}, &(0x7f0000001400)=0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x50bd29, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 497.39074ms ago: executing program 4 (id=4818): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000003200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair(0x3b, 0x80806, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{0x3, 0x0, {0x2, 0x0, 0x4}, {0x2, 0xf0, 0x2}, 0xfe, 0x2}, {0x1, 0x1, {0x0, 0xf0, 0x1}, {0x1, 0xf0, 0x3}, 0xff, 0xff}], 0x40) 418.637667ms ago: executing program 4 (id=4819): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 356.536661ms ago: executing program 1 (id=4820): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b330000000001dcdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00345c4000000003cacca14ddc03cb9d559b000000"], 0x28}}, 0x44000) 274.305287ms ago: executing program 4 (id=4821): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'pimreg0\x00', {0x2}, 0x1}) (async) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x12, 0x7f, 0x5, 0x12, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x8, 0x4e21}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xfffffffc}, @in6={0xa, 0x4e24, 0xc0000000, @loopback, 0x7}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d4}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb, 0x10, 0x10}]}, 0x90}}, 0x18000) (async) r1 = accept4(r0, &(0x7f0000000180)=@tipc, &(0x7f0000000200)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x4, 0x20, 0xfffffffffffffffe, 0xe}, &(0x7f0000000280)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x8000, 0xe583, 0x0, r2}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000300)={r2, 0x800, 0xff01}, 0x8) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)={0x3d0, r3, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7c}}}}, [@NL80211_ATTR_IE={0x58, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x5, @val=0x7, @void, @val="4208836b13579bb07f16b2e344926819"}}, @dsss={0x3, 0x1, 0xa5}, @ssid={0x0, 0x6, @default_ap_ssid}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x8, 0x10, @device_a, 0x456, 0x9, 0x1ff}}, @mic={0x8c, 0x18, {0x1ae, "5a2cde5edcc4", @long="c4ae921ce81bc2df4d00792eeee0edd3"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x401}, @NL80211_ATTR_IE={0x184, 0x2a, [@random_vendor={0xdd, 0xca, "aa0e82044213fea6a6ee26e3b133f1854945f183190cf251637d48439691f9476c0b53036619ff87e9f2ff40338adc0f9dc8c5d9aa4b51f2cb34b6a12e1fbd702609f341c42b53612ddbb9119b8e0e60c09fa9d9a46e8fbd84ca0a3656dd18092693c713498221fcf18173cc8241727a48ad2df6e723cb1dc0591d835247edf190083b142afc69eb1a9abbae4e7311e712df846768d5f33fc001247329bfeb5f1443127b91edf1e73ad6a3b7aeda19a79fb39759195f89fce1dc808d29c46b917e13e7d7522f7615f24e"}, @chsw_timing={0x68, 0x4, {0x6, 0x1}}, @mic={0x8c, 0x10, {0xebb, "d348809a2de3", @short="76b2ee6536a5e036"}}, @perr={0x84, 0x95, {0x7, 0x9, [{{0x0, 0x1}, @device_a, 0x200, @value, 0x5}, {{}, @device_b, 0x2, @void, 0x9}, {{}, @device_a, 0x3, @void, 0xfff7}, {{0x0, 0x1}, @device_b, 0xf, @value=@broadcast, 0x8}, {{}, @broadcast, 0x8, @void, 0x1}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x9}, {{}, @device_b, 0x40, @void, 0xd}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x4}, {{0x0, 0x1}, @device_b, 0x8, @value=@broadcast, 0x35}]}}, @measure_req={0x26, 0x3, {0x7, 0x7, 0x21}}]}, @NL80211_ATTR_IE={0x1c1, 0x2a, [@tim={0x5, 0xa9, {0x9, 0x1f, 0x1, "f1a42c1ea854d5cca8272e45818e6e222422c3152b63eac4a3cacf039fe606f252a4c63618dbe8b4dfbd3f633718ac75abd617ae88723492273af92fb6b2469403c3c16b31df86e02d08e78576a63642a07267295b26311fcde4f78f7de0d72e1077ea0793fcf03ab8b9654909e6e49d1a3342e30d2ac3539f5933230b7ceae36df2e8fbb775c808522cdb0e91d6a0cf475c96327f54735c98ca5771926c267baec04f308e68"}}, @perr={0x84, 0x95, {0x5, 0x9, [{{}, @broadcast, 0x6, @void, 0x2d}, {{}, @broadcast, 0x0, @void, 0x3e}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0xb}, {{}, @device_b, 0x5, @void, 0x2b}, {{}, @broadcast, 0x10, @void, 0x2d}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @device_a, 0x80000001, @value=@device_b, 0xe}, {{0x0, 0x1}, @broadcast, 0xfff, @value=@broadcast, 0x2b}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x14}]}}, @tim={0x5, 0x33, {0xe, 0x82, 0x0, "6542634b33872e29d301965a0cbfbcd549d4bf137933aa160ad52c386e6f4a949f3e5c3b0df3153137612e89072973f3"}}, @ht={0x2d, 0x1a, {0x8, 0x2, 0x0, 0x0, {0x0, 0x1, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x8, 0xf9}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd}}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0x2c38f9e7d0f39b58, 0x6}}, @cf={0x4, 0x6, {0x0, 0x5, 0x6, 0x7ff}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x4084000}, 0x8050) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1f, 0x13, [{0xb, 0x1}, {0x60}, {0x6c}, {0x36, 0x1}, {0x6c}, {0x4}, {0x18, 0x1}, {0x2}, {0x48, 0x1}, {0x47}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x6}, {0x36, 0x1}, {0x1, 0x1}, {0x48, 0x1}, {0x16, 0x1}, {0x3}, {0x9, 0x1}, {0xb}, {0x16, 0x1}, {0x12}, {0x8, 0x1}, {0x1, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000009c0)={r2, 0x10}, &(0x7f0000000a00)=0x8) (async) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000a40)="303cb3f474ac41ec9058a3cc7519c8af5b7bd120c32f51bd423924cf06939f67877af67f206dc9983dbc686f96d9cc1df978efa03b8f3caddb08d9616091d18d449bd8e43c6a55af2ff9e6343a6a59634e1cecb192ffa81f1d05339aa54e864f2a7651294ecd7033a896977b86a7123a87249e3e369dffc28780df9dee3d75f47be413afe535cef881cfdd3333c1f3eb9ce7695e2dd96a182ded2870e8cca3b2d15b74c478f164") getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) r5 = accept4$inet(r1, 0x0, &(0x7f0000000b80), 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000bc0)={'wg0\x00'}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000c00), 0x4) socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000c40)={0xa, 0x4e21, 0x7e, @mcast2, 0x7fff}, 0x1c) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0x3fa, 0x2, 0x70bd28, 0x25dfdbfb, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x24000800) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000d80)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000dc0)=r2, 0x4) (async) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000e40), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000f00)={&(0x7f0000000e00), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x1c}}, 0x800) (async) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000840}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24000000) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001140)={0x4, 0x494, 0x8200, 0x5, 0x9e, 0x80000001, 0x9, 0x5, r2}, &(0x7f0000001180)=0x20) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 240.534968ms ago: executing program 1 (id=4822): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0x4a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000e6280000500000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000001000004000000000000af5522459383e8308997f0666ae02d8d6800d9bc80f3761ad857021c46bee45878f88e4b92ab6899fc82803dceda354bb0b08800004000da7f90"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x7, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4, 0x4, r4}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x3, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @generic={0x7f, 0x8, 0xd, 0x800, 0x8001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x2c, &(0x7f00000001c0)=""/44, 0x41000, 0x5f1859f179ba0f69, '\x00', 0x0, @cgroup_skb, r7, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x1, 0xf6, 0x2}, 0x10, 0xffffffffffffffff, r9, 0x6, &(0x7f0000000400)=[r1, r1, r2, r2, r1, r2, r2], &(0x7f0000000480)=[{0x2, 0x1, 0x9, 0x7}, {0x4, 0x5, 0x5, 0x8}, {0x3, 0x4, 0x2, 0x1}, {0x3, 0x2, 0x5, 0xa}, {0x1, 0x3, 0xf, 0x4}, {0x3, 0x3, 0x1, 0x6}], 0x10, 0x8}, 0x94) (async) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r12, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x81, @empty, 0x4}], 0x1c) sendto$inet6(r12, &(0x7f0000000040)='l', 0x1, 0x24004881, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback, 0xf0}, 0x1c) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x5c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x81}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x200}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x5d}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x884}, 0x40) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010200000000000000000000000005000500000000000900020073797a3000000000100003006269746d61702a704f7274001c0007800600054000000000060004400000000008000800000000000500010007000000050004000000000015adbe1901a52b5a7aad"], 0x64}}, 0x0) 80.578433ms ago: executing program 4 (id=4823): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2b, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42005}, 0x20040004) 79.073416ms ago: executing program 0 (id=4824): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000340)=""/109, 0x6b}], 0x3, 0x0, 0xfffffffffffffff3}}], 0x4000000000000a1, 0x102, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!G', 0x3}], 0x1, 0x73a, 0x1) socket$kcm(0x29, 0x75f3c07565737685, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r7, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x34, 0x29, 0x4, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x3, 0x1}, {0xfff1, 0xfff3}, {0x4, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xd4}}, @TCA_RATE={0x6, 0x5, {0x96, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r2, 0x6895000) listen(r3, 0x596) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r11, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xe}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7}]}}]}, 0x48}}, 0x0) 78.503869ms ago: executing program 2 (id=4825): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000030c0), 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) (async) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r5, 0x0) (async) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="240000002c000100000000000000000008000000212094a00fda1ee325cbc9c4ce3f2f2ade92b6a923ccccd09be56ded5051e23e19fad6a05a441b02fb0932393ed2f5013999355be50eda1ea7daa742ebaa21fc7a1cb3b2c500000000000000080688aba71886e43d2a4798184446008404047e2690b119a7d24117300287ec3a127f62dd7273964973876a6e86bfd43463683244975bc20fd31dce05f747bea8a3411ec59ba645ded0e8d7", @ANYRES32=r9, @ANYBLOB="0b000080976b64087c603000"], 0x24}], 0x1}, 0x84) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x4e20, 0xd0d5, 0x2, 0x100, 0x0, 0x2e, r6, r9}, {0x100000000, 0xff, 0xa, 0x1, 0xffffffff, 0x2, 0x8, 0x7}, {0x800, 0x9, 0x1ff, 0xfffffffffffff1be}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x3, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0xa, @in6=@remote, 0x34ff, 0x3, 0x3, 0x9, 0x1, 0xf, 0xfffffffc}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x4e20, 0xd0d5, 0x2, 0x100, 0x0, 0x2e, r6, r9}, {0x100000000, 0xff, 0xa, 0x1, 0xffffffff, 0x2, 0x8, 0x7}, {0x800, 0x9, 0x1ff, 0xfffffffffffff1be}, 0x1, 0x6e6bb8, 0x0, 0x0, 0x3, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0xa, @in6=@remote, 0x34ff, 0x3, 0x3, 0x9, 0x1, 0xf, 0xfffffffc}}, 0xe8) 0s ago: executing program 3 (id=4826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf255f"], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x52}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x193}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x20) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='veno', 0x4) shutdown(r4, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb9}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) kernel console output (not intermixed with test programs): ][ T5862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.507482][ T5862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.542129][ T5862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 510.792658][ T5862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.836966][ T5862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.881131][ T5862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 510.932616][ T5632] Bluetooth: hci0: command tx timeout [ 510.945837][T17522] netlink: 'syz.1.3131': attribute type 7 has an invalid length. [ 510.954250][T17432] lo speed is unknown, defaulting to 1000 [ 511.401761][ T70] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.467065][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.490367][T17546] __nla_validate_parse: 9 callbacks suppressed [ 511.490394][T17546] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3138'. [ 511.501147][ T70] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.870689][T17534] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 512.426929][T17575] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3146'. [ 512.469199][ T5862] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 512.484601][T17579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3146'. [ 512.711880][ T5862] bond2 (unregistering): (slave geneve3): Releasing active interface [ 512.817021][ T5862] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 512.825527][ T5862] bridge1 (unregistering): left promiscuous mode [ 512.843530][ T5862] bond5 (unregistering): (slave bridge2): Releasing active interface [ 512.866346][ T5862] bond12 (unregistering): (slave bridge5): Releasing backup interface [ 512.875398][ T5862] bond12 (unregistering): (slave bridge5): the permanent HWaddr of slave - 7e:8b:9d:f8:7b:4e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 512.893995][ T5862] bridge5 (unregistering): left promiscuous mode [ 512.900489][ T5862] bridge5 (unregistering): left allmulticast mode [ 512.907019][ T5862] bond12 (unregistering): (slave bridge6): making interface the new active one [ 512.916033][ T5862] bridge6 (unregistering): entered promiscuous mode [ 512.922861][ T5862] bridge6 (unregistering): entered allmulticast mode [ 512.937119][ T5862] bond12 (unregistering): (slave bridge6): Releasing backup interface [ 512.949053][ T5862] bridge6 (unregistering): left promiscuous mode [ 512.955595][ T5862] bridge6 (unregistering): left allmulticast mode [ 512.983582][ T5862] bond0 (unregistering): left promiscuous mode [ 512.990445][ T5862] bond0 (unregistering): Released all slaves [ 513.006762][ T5862] bond1 (unregistering): Released all slaves [ 513.021410][ T5632] Bluetooth: hci0: command tx timeout [ 513.033331][ T5862] bond2 (unregistering): Released all slaves [ 513.050327][ T5862] bond3 (unregistering): Released all slaves [ 513.068555][ T5862] bond4 (unregistering): Released all slaves [ 513.089413][ T5862] bond5 (unregistering): Released all slaves [ 513.107390][ T5862] bond6 (unregistering): Released all slaves [ 513.123060][ T5862] bond7 (unregistering): Released all slaves [ 513.143188][ T5862] bond8 (unregistering): Released all slaves [ 513.165583][ T5862] bond9 (unregistering): Released all slaves [ 513.188253][ T5862] bond10 (unregistering): Released all slaves [ 513.203659][ T5862] bond11 (unregistering): Released all slaves [ 513.226918][ T5862] bond12 (unregistering): Released all slaves [ 513.250268][ T5862] bond13 (unregistering): Released all slaves [ 513.273780][ T5862] bond14 (unregistering): Released all slaves [ 513.288789][ T5862] bond15 (unregistering): Released all slaves [ 513.309867][ T5862] bond16 (unregistering): Released all slaves [ 513.335718][ T5862] bond17 (unregistering): Released all slaves [ 513.398732][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 513.463141][ T3321] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.513095][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.700539][ T5862] : left promiscuous mode [ 513.828060][T17594] syzkaller0: entered promiscuous mode [ 513.857806][T17594] syzkaller0: entered allmulticast mode [ 513.981992][ T5862] tipc: Left network mode [ 513.982516][T17607] C: Caught tx_queue_len zero misconfig [ 514.058661][T17611] netlink: 'syz.0.3152': attribute type 83 has an invalid length. [ 514.199100][T17614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3154'. [ 514.636072][T17627] netlink: 'syz.2.3155': attribute type 9 has an invalid length. [ 514.699592][T17432] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.724365][T17432] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.739640][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3157'. [ 514.751237][T17432] bridge_slave_0: entered allmulticast mode [ 514.758812][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3157'. [ 514.774705][T17432] bridge_slave_0: entered promiscuous mode [ 514.797124][T17432] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.820754][T17432] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.848846][T17432] bridge_slave_1: entered allmulticast mode [ 514.873299][T17432] bridge_slave_1: entered promiscuous mode [ 515.014132][T17630] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3157'. [ 515.091496][ T5632] Bluetooth: hci0: command tx timeout [ 515.206550][T17655] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3161'. [ 515.304132][T17650] nbd: couldn't find a device at index 0 [ 515.330238][T17432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.363706][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 515.496595][T17432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.542250][T17666] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3163'. [ 515.566216][T17663] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3162'. [ 515.895957][T17432] team0: Port device team_slave_0 added [ 515.914484][T17432] team0: Port device team_slave_1 added [ 516.157483][T17432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.169793][T17432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.233178][T17432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.333966][T17432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.352787][T17432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.447441][T17432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.615853][T17702] __nla_validate_parse: 4 callbacks suppressed [ 516.615877][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3171'. [ 516.663614][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3171'. [ 516.775008][T17709] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 516.894203][T17432] hsr_slave_0: entered promiscuous mode [ 516.922043][T17719] netlink: 'syz.1.3174': attribute type 1 has an invalid length. [ 516.932275][T17432] hsr_slave_1: entered promiscuous mode [ 516.963236][T17432] debugfs: 'hsr0' already exists in 'hsr' [ 516.981128][T17432] Cannot create hsr debugfs directory [ 517.025768][T17711] syzkaller1: entered promiscuous mode [ 517.038479][T17711] syzkaller1: entered allmulticast mode [ 517.041766][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3174'. [ 517.175206][ T5632] Bluetooth: hci0: command tx timeout [ 517.264108][T17734] netlink: 'syz.0.3177': attribute type 1 has an invalid length. [ 517.316680][T17733] bond0: Error: CAN devices cannot be enslaved [ 517.501881][T17734] 8021q: adding VLAN 0 to HW filter on device bond14 [ 517.536421][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 517.606692][T17736] bond14: (slave geneve6): making interface the new active one [ 517.641875][T17736] bond14: (slave geneve6): Enslaving as an active interface with an up link [ 517.714438][ T5862] team0: left promiscuous mode [ 517.773088][ T5862] hsr_slave_0: left promiscuous mode [ 517.796113][ T5862] hsr_slave_1: left promiscuous mode [ 517.849868][T17763] netlink: 'syz.1.3180': attribute type 3 has an invalid length. [ 517.882379][T17763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3180'. [ 517.905611][ T5862] veth0_macvtap: left promiscuous mode [ 518.329419][T17775] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3184'. [ 518.467737][T17749] netlink: 'syz.2.3179': attribute type 3 has an invalid length. [ 518.699870][T17780] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3186'. [ 518.722200][T17780] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3186'. [ 518.906370][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3187'. [ 519.012480][T17791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3187'. [ 519.049162][T17791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3187'. [ 519.223035][ T5862] IPVS: stop unused estimator thread 0... [ 519.394513][T17432] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.753593][T17432] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.169147][T17432] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.339730][T17852] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 520.524132][T17432] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.933626][T17868] 8021q: adding VLAN 0 to HW filter on device bond15 [ 520.980296][T17873] : renamed from bond_slave_1 (while UP) [ 521.253300][T17889] xt_hashlimit: size too large, truncated to 1048576 [ 521.306127][T17893] netlink: 'syz.0.3208': attribute type 1 has an invalid length. [ 522.443769][T17878] __nla_validate_parse: 5 callbacks suppressed [ 522.443793][T17878] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3206'. [ 522.895854][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3211'. [ 523.756063][T17941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3214'. [ 523.828606][T17432] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 523.899299][T17432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.945825][T17432] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 524.018488][T17949] SET target dimension over the limit! [ 524.049603][T17432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 524.088472][T17958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3217'. [ 524.093481][T17432] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 524.189709][T17432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 524.244408][T17432] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 524.287086][T17955] xt_CT: No such helper "pptp" [ 524.306091][T17432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 524.513571][T17981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3222'. [ 524.788693][T17994] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3223'. [ 524.940614][T17994] netlink: NAT attribute has 5 unknown bytes [ 524.989437][T17432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.993136][T18007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3226'. [ 525.007821][T17994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.076593][T17432] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.122424][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.129704][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.204917][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.212281][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.430527][T18022] netlink: 'syz.2.3229': attribute type 2 has an invalid length. [ 525.476484][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 525.487790][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3228'. [ 525.680066][T18033] netlink: 'syz.0.3230': attribute type 83 has an invalid length. [ 526.468466][T18066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.965329][T18086] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3241'. [ 527.244082][T17432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.472092][T18109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3244'. [ 527.493754][T18108] netlink: 'syz.1.3243': attribute type 1 has an invalid length. [ 527.639958][T18119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3243'. [ 527.668428][T18108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.693950][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3246'. [ 527.748502][T18125] xt_CT: No such helper "snmp" [ 527.792715][T18117] bond1: (slave ip6erspan0): making interface the new active one [ 527.827842][T18117] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 527.952147][T17432] veth0_vlan: entered promiscuous mode [ 527.977581][T18137] netlink: 'syz.0.3249': attribute type 1 has an invalid length. [ 528.054426][T18137] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 528.110942][T17432] veth1_vlan: entered promiscuous mode [ 528.258564][T17432] veth0_macvtap: entered promiscuous mode [ 528.276860][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 528.317869][T17432] veth1_macvtap: entered promiscuous mode [ 528.414382][T17432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.473215][T18156] ip6gre3: entered allmulticast mode [ 528.517941][ T5862] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 528.570107][T17432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.638282][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3255'. [ 528.681173][ T5866] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.704327][ T5866] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.781109][ T5862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.898600][T18145] dvmrp8: entered allmulticast mode [ 529.087862][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.102757][ T5866] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.128484][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.294485][ T7008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.329796][ T7008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.418361][T18186] netlink: 'syz.4.3261': attribute type 4 has an invalid length. [ 529.452816][T18187] netlink: 'syz.4.3261': attribute type 4 has an invalid length. [ 529.938092][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 529.969812][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 529.983256][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 530.010466][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 530.025392][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.505006][T18215] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3270'. [ 530.646293][T18215] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3270'. [ 530.763808][T18220] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3270'. [ 531.037457][T18236] syzkaller0: entered promiscuous mode [ 531.062819][T18236] syzkaller0: entered allmulticast mode [ 531.129195][T18230] vlan2: entered promiscuous mode [ 531.145295][T18230] bridge0: entered promiscuous mode [ 531.186905][T18215] tipc: Started in network mode [ 531.194260][T18215] tipc: Node identity 6aa43d16f448, cluster identity 4711 [ 531.205145][T18215] tipc: Enabled bearer , priority 0 [ 531.212241][T18239] syzkaller1: entered promiscuous mode [ 531.218950][T18239] syzkaller1: entered allmulticast mode [ 531.237716][T18213] tipc: Resetting bearer [ 531.299079][T18213] tipc: Disabling bearer [ 531.416642][T18222] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 531.431127][T18222] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 531.480816][T18203] lo speed is unknown, defaulting to 1000 [ 531.505253][T18253] netlink: 'syz.4.3278': attribute type 1 has an invalid length. [ 531.561311][T18253] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 531.761198][T18222] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 531.791093][T18222] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 531.800527][T18270] openvswitch: netlink: Tunnel attr 9 has unexpected len 4 expected 2 [ 531.946996][T18222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 531.975365][T18222] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 532.335113][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3289'. [ 532.684187][T18314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3294'. [ 532.771146][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 532.948610][T18324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3298'. [ 533.016439][T18203] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.037274][T18203] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.052841][T18203] bridge_slave_0: entered allmulticast mode [ 533.079182][T18203] bridge_slave_0: entered promiscuous mode [ 533.121149][T18203] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.145209][T18203] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.161283][T18203] bridge_slave_1: entered allmulticast mode [ 533.208125][T18335] netlink: 'syz.1.3299': attribute type 9 has an invalid length. [ 533.229918][T18203] bridge_slave_1: entered promiscuous mode [ 533.857479][T18203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.905650][T18203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.942483][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3298'. [ 533.957516][T18367] batadv_slave_0: entered allmulticast mode [ 534.039302][T18203] team0: Port device team_slave_0 added [ 534.067515][T18203] team0: Port device team_slave_1 added [ 534.255380][T18375] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 534.310441][T18375] bond8 (unregistering): Released all slaves [ 534.416389][T18203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.425414][T18203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.459215][T18203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.536122][T18380] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 534.550180][T18380] bond8 (unregistering): Released all slaves [ 534.606224][T18203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.620485][T18203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.673277][T18203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.848005][T18203] hsr_slave_0: entered promiscuous mode [ 534.868943][T18203] hsr_slave_1: entered promiscuous mode [ 534.886198][T18203] debugfs: 'hsr0' already exists in 'hsr' [ 534.899165][T18203] Cannot create hsr debugfs directory [ 534.992077][T18412] Bluetooth: MGMT ver 1.23 [ 535.067327][T18414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3315'. [ 535.082873][T18412] veth1_macvtap: left promiscuous mode [ 535.099364][T18412] macsec0: entered promiscuous mode [ 535.150252][T18417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.388002][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3319'. [ 535.427337][T18426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3319'. [ 535.565733][T16477] udevd[16477]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 535.587499][T15857] udevd[15857]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 535.696479][T18430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.815824][T18444] netlink: 'syz.1.3324': attribute type 16 has an invalid length. [ 535.841441][T18444] netlink: 'syz.1.3324': attribute type 17 has an invalid length. [ 536.029545][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'. [ 536.032313][T18451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3325'. [ 536.113521][T18453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3327'. [ 536.186165][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3328'. [ 536.383501][T18462] blkio.reset_stats is deprecated [ 536.420449][T18203] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 536.445460][T18203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 536.468081][T18203] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 536.487072][T18203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 536.499339][T18203] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 536.553787][T18203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 536.567816][T18470] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 536.602064][T18203] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 536.627963][T18470] netlink: 'syz.3.3332': attribute type 11 has an invalid length. [ 536.628527][T18203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 536.721117][ T3366] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.741660][ T3366] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.751198][T18484] netlink: 'syz.4.3335': attribute type 1 has an invalid length. [ 536.811231][ T3366] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.969698][T18487] bond8: (slave geneve3): making interface the new active one [ 536.990874][T18487] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 537.022193][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.102014][ T3366] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 537.261180][ T5862] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 537.319990][T18496] syzkaller0: entered promiscuous mode [ 537.343050][T18496] syzkaller0: entered allmulticast mode [ 537.444386][T18203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.564592][T18510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.575419][ T5862] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 537.588792][ T5862] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 537.656247][T18510] hsr_slave_1 (unregistering): left promiscuous mode [ 537.716294][T18203] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.732685][T18512] syzkaller0: entered promiscuous mode [ 537.739203][T18512] syzkaller0: entered allmulticast mode [ 537.769939][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.777329][ T7008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.928324][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.935631][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.138498][T18531] __nla_validate_parse: 6 callbacks suppressed [ 538.138520][T18531] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3347'. [ 538.701250][T18556] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 538.709260][T18554] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 538.794938][T18556] 8021q: adding VLAN 0 to HW filter on device bond15 [ 538.835432][T18559] bond15: (slave veth7): Enslaving as an active interface with a down link [ 539.128482][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3357'. [ 539.271013][T18585] openvswitch: netlink: IP tunnel dst address not specified [ 539.280733][T18585] netlink: 'syz.1.3359': attribute type 3 has an invalid length. [ 539.400243][T18590] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3360'. [ 539.417678][T18588] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 539.450260][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3360'. [ 539.599911][T18596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'. [ 539.624917][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3361'. [ 539.675875][T18203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.853734][T18203] veth0_vlan: entered promiscuous mode [ 539.899284][T18203] veth1_vlan: entered promiscuous mode [ 539.985928][T18203] veth0_macvtap: entered promiscuous mode [ 539.995595][ T5637] block nbd1: Receive control failed (result -1) [ 540.010549][T18203] veth1_macvtap: entered promiscuous mode [ 540.109291][T18203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.173090][T18203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.189248][ T30] audit: type=1804 audit(1785783029.840:9): pid=18617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3367" name="/newroot/696/cgroup.controllers" dev="tmpfs" ino=3564 res=1 errno=0 [ 540.271893][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.288495][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.300561][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 540.300819][ T30] audit: type=1800 audit(1785783029.840:10): pid=18617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3367" name="cgroup.controllers" dev="tmpfs" ino=3564 res=0 errno=0 [ 540.329046][T18625] ip6t_rpfilter: unknown options [ 540.342605][T18622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 540.481633][ T3366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.524082][ T3366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.735265][ T5860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.769613][ T5860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.909501][ T7008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.950689][ T7008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.214696][ T5637] block nbd4: Receive control failed (result -32) [ 541.315748][T18655] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 541.351709][T18655] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 541.370752][T18657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 541.411918][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 541.676403][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3383'. [ 541.746517][T18675] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 542.036770][T18689] openvswitch: netlink: Flow actions attr not present in new flow. [ 542.038605][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.067242][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.078358][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.092948][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.103087][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 542.116666][T18684] ovs-system: entered promiscuous mode [ 542.999626][T18708] 8021q: adding VLAN 0 to HW filter on device bond9 [ 543.281009][T18734] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 543.546300][T18749] netlink: 'syz.3.3401': attribute type 1 has an invalid length. [ 543.666438][T18763] netlink: 'syz.3.3401': attribute type 2 has an invalid length. [ 543.729933][T18763] netlink: 'syz.3.3401': attribute type 1 has an invalid length. [ 543.746343][T18749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.981185][T18687] lo speed is unknown, defaulting to 1000 [ 544.211122][ T5637] Bluetooth: hci2: command tx timeout [ 544.490063][T18805] __nla_validate_parse: 3 callbacks suppressed [ 544.490085][T18805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3408'. [ 545.268481][T18835] dvmrp0: entered allmulticast mode [ 545.304992][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3415'. [ 545.725421][T18846] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 545.826777][T18846] bond2: (slave lo): Enslaving as an active interface with an up link [ 545.876670][T18846] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 546.092905][T18879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3423'. [ 546.110281][T18879] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3423'. [ 546.117580][T18687] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.135942][T18879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3423'. [ 546.154111][T18687] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.179040][T18687] bridge_slave_0: entered allmulticast mode [ 546.208660][T18687] bridge_slave_0: entered promiscuous mode [ 546.242659][T18687] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.273689][T18687] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.291415][ T5637] Bluetooth: hci2: command tx timeout [ 546.295314][T18687] bridge_slave_1: entered allmulticast mode [ 546.320503][T18687] bridge_slave_1: entered promiscuous mode [ 546.479920][T18687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.558865][T18687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.644870][T18687] team0: Port device team_slave_0 added [ 546.665450][T18687] team0: Port device team_slave_1 added [ 546.761479][T18687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.780783][T18687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.838759][T18687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.872945][T18687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.889051][T18687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.986694][T18687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.042853][T18908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3430'. [ 547.202101][T18912] Cannot find set identified by id 0 to match [ 547.215756][T18687] hsr_slave_0: entered promiscuous mode [ 547.232708][T18687] hsr_slave_1: entered promiscuous mode [ 547.239350][T18687] debugfs: 'hsr0' already exists in 'hsr' [ 547.242803][T18908] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 547.263477][T18919] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3431'. [ 547.274762][T18687] Cannot create hsr debugfs directory [ 547.295147][T18914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3431'. [ 547.478551][T18926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3433'. [ 547.665363][T18936] ieee802154 phy1 wpan1: encryption failed: -22 [ 547.684433][T18931] ieee802154 phy1 wpan1: encryption failed: -22 [ 547.714843][T18930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3435'. [ 548.228468][T18942] syzkaller0: entered promiscuous mode [ 548.244818][T18942] syzkaller0: entered allmulticast mode [ 548.375923][ T5637] Bluetooth: hci2: command tx timeout [ 550.461162][ T5637] Bluetooth: hci2: command tx timeout [ 551.842656][T18984] netlink: 'syz.3.3446': attribute type 1 has an invalid length. [ 551.906049][T18687] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.923159][T18687] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.957950][T18687] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 552.012894][T18995] __nla_validate_parse: 4 callbacks suppressed [ 552.012910][T18995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3447'. [ 552.064166][T18989] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 552.074545][T18987] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3444'. [ 552.100796][T18992] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3444'. [ 552.214064][T19001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.274848][T18687] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.338738][T18687] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.353792][T19005] netlink: 'syz.1.3450': attribute type 1 has an invalid length. [ 552.373443][T18687] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 552.436908][T19014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3450'. [ 552.494063][T19017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 552.541373][T19014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 552.653760][T19017] bridge3: entered promiscuous mode [ 552.670508][T19017] bond2: (slave bridge3): making interface the new active one [ 552.679869][T19017] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 552.744555][T18687] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.763292][T18687] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.774087][T18687] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 552.904694][T19027] netlink: 'syz.2.3456': attribute type 1 has an invalid length. [ 553.043018][T18687] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.069673][T18687] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.092509][T18687] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 553.750642][T19059] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3466'. [ 553.764875][T19062] Cannot find del_set index 2 as target [ 553.810742][T19063] ip6t_rpfilter: unknown options [ 553.914215][T19068] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3469'. [ 554.043082][T18687] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 554.075447][T18687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.093607][T18687] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 554.115041][T19077] ieee802154 phy1 wpan1: encryption failed: -22 [ 554.130783][T18687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.148087][T19076] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 554.166708][T18687] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 554.195068][T18687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.288165][T18687] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 554.309152][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3472'. [ 554.310243][T18687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.398124][T19083] syzkaller1: entered promiscuous mode [ 554.411473][T19083] syzkaller1: entered allmulticast mode [ 554.560264][T19095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3477'. [ 554.749510][T18687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.758456][T19101] sctp: [Deprecated]: syz.1.3478 (pid 19101) Use of int in max_burst socket option. [ 554.758456][T19101] Use struct sctp_assoc_value instead [ 554.804917][T19101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3478'. [ 554.807059][T18687] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.872111][T19108] v: renamed from veth0_vlan (while UP) [ 554.929084][T18790] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.936505][T18790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.946235][T19080] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 554.966036][T19080] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 555.126538][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.133789][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.425456][T19130] bridge4: entered promiscuous mode [ 555.435328][T19130] bridge4: entered allmulticast mode [ 556.375911][T18687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.539775][T18687] veth0_vlan: entered promiscuous mode [ 556.581323][T18687] veth1_vlan: entered promiscuous mode [ 556.646760][T18687] veth0_macvtap: entered promiscuous mode [ 556.676499][T18687] veth1_macvtap: entered promiscuous mode [ 556.707709][T18687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.734477][T18687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.843910][T18791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.881345][ T5860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.931579][ T5868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.962446][ T5868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.989100][T18791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.998227][T18791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.036461][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.045783][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.217132][T19193] netlink: 'syz.0.3382': attribute type 58 has an invalid length. [ 557.231584][T19193] __nla_validate_parse: 4 callbacks suppressed [ 557.231607][T19193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3382'. [ 557.345868][T19196] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 557.845751][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 557.856002][T19209] netlink: 'syz.2.3504': attribute type 1 has an invalid length. [ 557.880623][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 557.889390][T19209] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3504'. [ 557.912764][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 557.923597][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.940621][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 557.962800][T19209] netlink: 'syz.2.3504': attribute type 1 has an invalid length. [ 558.052119][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 558.083923][T19218] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3505'. [ 560.064445][ T5637] Bluetooth: hci3: command tx timeout [ 561.015971][T19219] syzkaller0: entered promiscuous mode [ 561.029552][T19219] syzkaller0: entered allmulticast mode [ 561.054725][T19224] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 561.081341][T19224] batman_adv: batadv0: Adding interface: wlan0 [ 561.118309][T19224] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.163923][T19224] batman_adv: batadv0: Interface activated: wlan0 [ 561.409872][T19249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3510'. [ 561.666147][T19258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3511'. [ 561.721708][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3513'. [ 561.995247][T19262] bond3: entered promiscuous mode [ 562.023760][T19262] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.131292][ T5637] Bluetooth: hci3: command tx timeout [ 562.326765][T19280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.345538][T19280] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 562.357472][T19280] bond3: (slave ip6gre1): Error -95 calling set_mac_address [ 562.375623][T19292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3516'. [ 562.633084][T19207] lo speed is unknown, defaulting to 1000 [ 563.174520][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.008109][T19349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3527'. [ 564.043269][T19207] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.074299][T19207] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.100458][T19207] bridge_slave_0: entered allmulticast mode [ 564.139652][T19207] bridge_slave_0: entered promiscuous mode [ 564.173924][T19207] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.183852][T19207] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.208449][T19359] netlink: 'syz.0.3529': attribute type 1 has an invalid length. [ 564.216650][ T5637] Bluetooth: hci3: command tx timeout [ 564.223809][T19207] bridge_slave_1: entered allmulticast mode [ 564.236364][T19207] bridge_slave_1: entered promiscuous mode [ 564.333291][T19207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.380797][T19207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.555222][T19207] team0: Port device team_slave_0 added [ 564.588872][T19207] team0: Port device team_slave_1 added [ 564.741774][T19207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.776700][T19207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.872844][T19207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.926199][T19207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.957703][T19207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.061148][T19207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.398216][T19407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3539'. [ 565.468437][T19207] hsr_slave_0: entered promiscuous mode [ 565.497578][T19207] hsr_slave_1: entered promiscuous mode [ 565.518787][T19207] debugfs: 'hsr0' already exists in 'hsr' [ 565.535484][T19207] Cannot create hsr debugfs directory [ 565.886552][T19434] sock: sock_set_timeout: `syz.3.3546' (pid 19434) tries to set negative timeout [ 566.303006][ T5637] Bluetooth: hci3: command tx timeout [ 566.346338][T19207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.359693][T19207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.419898][T19207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 566.506414][T19451] vlan2: entered allmulticast mode [ 566.521847][T19451] bond0: entered allmulticast mode [ 566.532929][T19451] bond_slave_0: entered allmulticast mode [ 566.540701][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3554'. [ 566.555590][T19451] bond_slave_1: entered allmulticast mode [ 566.561765][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'. [ 566.597405][T19466] netlink: 'syz.2.3555': attribute type 1 has an invalid length. [ 566.602712][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3554'. [ 566.606311][T18791] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.614742][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'. [ 566.683822][T19470] netlink: 'syz.3.3556': attribute type 1 has an invalid length. [ 566.692337][T19470] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3556'. [ 566.788195][T19475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3555'. [ 566.804074][T19466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.858121][T19479] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 566.890031][T19468] bond1: (slave veth3): Enslaving as an active interface with a down link [ 566.926006][T19481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3558'. [ 566.953438][T19207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.964097][T19207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.975005][T19207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 567.016985][ T5868] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.032572][ T5868] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.092770][ T5868] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.256157][T19207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.285238][T19207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.308899][T19207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 567.508659][T19207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.518373][T19499] netlink: 'syz.0.3562': attribute type 1 has an invalid length. [ 567.531736][T19207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.542496][T19207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 567.579294][T19502] __nla_validate_parse: 1 callbacks suppressed [ 567.579314][T19502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3562'. [ 567.748486][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3562'. [ 567.837086][T19499] hsr_slave_0: left promiscuous mode [ 567.862562][T19499] hsr_slave_1: left promiscuous mode [ 568.410277][T19531] syzkaller0: entered promiscuous mode [ 568.437695][T19531] syzkaller0: entered allmulticast mode [ 568.799344][T19552] syzkaller0: entered promiscuous mode [ 568.821719][T19552] syzkaller0: entered allmulticast mode [ 568.861241][T19207] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 568.889047][T19207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 568.921830][T19556] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3574'. [ 568.922996][T19207] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 568.955694][T19207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.971294][T19556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3574'. [ 568.984172][T19207] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 569.004447][T19207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.015433][T19207] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 569.029502][T19207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.308844][T19568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3577'. [ 569.345964][T19568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3577'. [ 569.373409][T19568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3577'. [ 569.386327][T19207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.395069][ T30] audit: type=1107 audit(1785783059.040:11): pid=19570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' ӑxlKmVn?>Z|O4R2MEJS, priority 0 [ 594.562312][T20634] tipc: Resetting bearer [ 594.635918][T20645] netlink: 'syz.2.3851': attribute type 1 has an invalid length. [ 594.986580][T20645] bond3: entered promiscuous mode [ 595.002005][T20645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 595.095801][T20669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3854'. [ 595.126037][T20673] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3857'. [ 595.138205][T20645] bond3: (slave bridge1): making interface the new active one [ 595.138413][T20669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.153242][T20669] IPv6: NLM_F_CREATE should be set when creating new route [ 595.162663][T20645] bridge1: entered promiscuous mode [ 595.176989][T20671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3856'. [ 595.186534][T20645] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 595.238742][T20660] macvtap1: entered allmulticast mode [ 595.282265][T20665] macvtap2: entered allmulticast mode [ 595.478327][T20694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3860'. [ 595.516584][T20691] netlink: 'syz.1.3862': attribute type 13 has an invalid length. [ 595.700112][T20706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.707482][T20706] IPv6: NLM_F_CREATE should be set when creating new route [ 595.714807][T20706] IPv6: NLM_F_CREATE should be set when creating new route [ 595.773686][T20706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.828904][T20716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3867'. [ 595.858423][ T8360] tipc: Node number set to 134418688 [ 595.858606][T20717] netlink: 416 bytes leftover after parsing attributes in process `syz.0.3864'. [ 595.943042][T20716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3867'. [ 596.274804][T20733] netlink: 'syz.0.3872': attribute type 5 has an invalid length. [ 597.098585][T20772] mac80211_hwsim hwsim35 syzkaller0: Caught tx_queue_len zero misconfig [ 597.226172][T20785] syzkaller0: entered promiscuous mode [ 597.242635][T20785] syzkaller0: entered allmulticast mode [ 597.345042][T20791] netlink: 'syz.1.3891': attribute type 21 has an invalid length. [ 597.373142][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b9cc000: rx timeout, send abort [ 597.411538][T20789] netlink: 'syz.1.3891': attribute type 4 has an invalid length. [ 597.546027][T20796] bond1: option all_slaves_active: invalid value (222) [ 597.556790][T20796] bond1 (unregistering): Released all slaves [ 597.865700][T20811] netlink: 'syz.0.3895': attribute type 10 has an invalid length. [ 597.873383][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b9cec00: rx timeout, send abort [ 597.874014][T20811] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 597.882490][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b9cc000: abort rx timeout. Force session deactivation [ 597.987442][T20824] netlink: 'syz.3.3899': attribute type 1 has an invalid length. [ 598.117091][T20824] 8021q: adding VLAN 0 to HW filter on device bond5 [ 598.333331][T20830] bond5: (slave veth0_to_bond): making interface the new active one [ 598.381359][T20830] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 598.381919][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b9cec00: abort rx timeout. Force session deactivation [ 598.437747][T20808] FAULT_INJECTION: forcing a failure. [ 598.437747][T20808] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 598.460947][T20845] netlink: 'syz.2.3902': attribute type 10 has an invalid length. [ 598.462643][T20808] CPU: 0 UID: 0 PID: 20808 Comm: syz.1.3896 Not tainted syzkaller #0 PREEMPT(full) [ 598.462668][T20808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.462680][T20808] Call Trace: [ 598.462688][T20808] [ 598.462696][T20808] dump_stack_lvl+0xe8/0x150 [ 598.462803][T20808] should_fail_ex+0x40c/0x560 [ 598.462910][T20808] _copy_from_user+0x2d/0xb0 [ 598.462962][T20808] __sys_sendto+0x2a9/0x5a0 [ 598.463042][T20808] ? ksys_write+0x1e6/0x270 [ 598.463097][T20808] ? __pfx___sys_sendto+0x10/0x10 [ 598.463114][T20808] ? __mutex_unlock_slowpath+0x731/0x900 [ 598.463224][T20808] ? __pfx_ksys_write+0x10/0x10 [ 598.463248][T20808] __x64_sys_sendto+0xde/0x100 [ 598.463268][T20808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.463305][T20808] do_syscall_64+0x174/0x580 [ 598.463364][T20808] ? trace_irq_disable+0x3b/0x140 [ 598.463415][T20808] ? clear_bhb_loop+0x40/0x90 [ 598.463438][T20808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.463456][T20808] RIP: 0033:0x7fa28799e019 [ 598.463474][T20808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.463489][T20808] RSP: 002b:00007fa28891b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 598.463517][T20808] RAX: ffffffffffffffda RBX: 00007fa287c25fa0 RCX: 00007fa28799e019 [ 598.463531][T20808] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 598.463542][T20808] RBP: 00007fa28891b090 R08: 000020000005ffe4 R09: 000000000000001c [ 598.463553][T20808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.463564][T20808] R13: 00007fa287c26038 R14: 00007fa287c25fa0 R15: 00007ffe69430b48 [ 598.463593][T20808] [ 598.733618][T20849] vlan3: entered promiscuous mode [ 598.745434][T20849] hsr0: entered promiscuous mode [ 598.766240][T20849] vlan3: entered allmulticast mode [ 598.779647][T20849] hsr0: entered allmulticast mode [ 598.797284][T20849] hsr_slave_0: entered allmulticast mode [ 598.815317][T20849] hsr_slave_1: entered allmulticast mode [ 598.833740][T20858] can: request_module (can-proto-0) failed. [ 598.841898][T20845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.865988][T20845] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 599.258776][ T8361] IPVS: starting estimator thread 0... [ 599.382348][T20877] IPVS: using max 28 ests per chain, 67200 per kthread [ 599.910265][T20907] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 600.211915][T20919] __nla_validate_parse: 2 callbacks suppressed [ 600.211939][T20919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3922'. [ 600.680044][T20900] FAULT_INJECTION: forcing a failure. [ 600.680044][T20900] name failslab, interval 1, probability 0, space 0, times 1 [ 600.694812][T20900] CPU: 1 UID: 0 PID: 20900 Comm: syz.2.3918 Not tainted syzkaller #0 PREEMPT(full) [ 600.694841][T20900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.694853][T20900] Call Trace: [ 600.694861][T20900] [ 600.694868][T20900] dump_stack_lvl+0xe8/0x150 [ 600.694906][T20900] should_fail_ex+0x40c/0x560 [ 600.694938][T20900] should_failslab+0xa8/0x100 [ 600.694972][T20900] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 600.695029][T20900] ? sctp_get_port_local+0x6bd/0x1700 [ 600.695135][T20900] ? sctp_get_port_local+0x6bd/0x1700 [ 600.695169][T20900] sctp_get_port_local+0x6bd/0x1700 [ 600.695210][T20900] ? __pfx_sctp_get_port_local+0x10/0x10 [ 600.695237][T20900] ? sctp_bind_addr_match+0x30/0x2b0 [ 600.695258][T20900] ? sctp_bind_addr_match+0x28b/0x2b0 [ 600.695285][T20900] sctp_do_bind+0x4d9/0x9a0 [ 600.695322][T20900] sctp_connect_new_asoc+0x270/0x6b0 [ 600.695352][T20900] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 600.695386][T20900] ? __local_bh_enable_ip+0xd0/0x130 [ 600.695430][T20900] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 600.695472][T20900] ? security_sctp_bind_connect+0x7e/0x2c0 [ 600.695585][T20900] sctp_sendmsg+0x159b/0x2d00 [ 600.695628][T20900] ? __pfx_sctp_sendmsg+0x10/0x10 [ 600.695660][T20900] ? aa_sk_perm+0x6d5/0x900 [ 600.695716][T20900] ? __might_fault+0xaf/0x130 [ 600.695745][T20900] ? sock_rps_record_flow+0x19/0x350 [ 600.695827][T20900] ? inet_sendmsg+0x298/0x320 [ 600.695849][T20900] ? __pfx_inet_sendmsg+0x10/0x10 [ 600.695868][T20900] sock_sendmsg_nosec+0x10e/0x180 [ 600.695925][T20900] __sys_sendto+0x408/0x5a0 [ 600.695947][T20900] ? ksys_write+0x1e6/0x270 [ 600.695971][T20900] ? __pfx___sys_sendto+0x10/0x10 [ 600.695989][T20900] ? __mutex_unlock_slowpath+0x731/0x900 [ 600.696044][T20900] ? __pfx_ksys_write+0x10/0x10 [ 600.696072][T20900] __x64_sys_sendto+0xde/0x100 [ 600.696094][T20900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.696116][T20900] do_syscall_64+0x174/0x580 [ 600.696139][T20900] ? trace_irq_disable+0x3b/0x140 [ 600.696166][T20900] ? clear_bhb_loop+0x40/0x90 [ 600.696191][T20900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.696212][T20900] RIP: 0033:0x7f6419f9e019 [ 600.696233][T20900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.696250][T20900] RSP: 002b:00007f641ae22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 600.696273][T20900] RAX: ffffffffffffffda RBX: 00007f641a225fa0 RCX: 00007f6419f9e019 [ 600.696288][T20900] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 600.696301][T20900] RBP: 00007f641ae22090 R08: 000020000005ffe4 R09: 000000000000001c [ 600.696314][T20900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.696326][T20900] R13: 00007f641a226038 R14: 00007f641a225fa0 R15: 00007ffdabbb6e98 [ 600.696360][T20900] [ 601.350522][T20956] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3928'. [ 601.373613][T20956] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3928'. [ 601.388968][T20960] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3927'. [ 601.619994][T20967] netlink: 'syz.0.3930': attribute type 21 has an invalid length. [ 602.103922][T20995] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3938'. [ 602.378721][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3943'. [ 602.389856][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3943'. [ 602.665391][T20986] FAULT_INJECTION: forcing a failure. [ 602.665391][T20986] name failslab, interval 1, probability 0, space 0, times 0 [ 602.724347][T21014] xt_CT: No such helper "snmp" [ 602.744865][T20986] CPU: 0 UID: 0 PID: 20986 Comm: syz.4.3937 Not tainted syzkaller #0 PREEMPT(full) [ 602.744895][T20986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.744907][T20986] Call Trace: [ 602.744915][T20986] [ 602.744924][T20986] dump_stack_lvl+0xe8/0x150 [ 602.744963][T20986] should_fail_ex+0x40c/0x560 [ 602.744995][T20986] should_failslab+0xa8/0x100 [ 602.745028][T20986] __kmalloc_cache_noprof+0xa8/0x660 [ 602.745057][T20986] ? sctp_add_bind_addr+0x8c/0x370 [ 602.745077][T20986] ? sctp_add_bind_addr+0x8c/0x370 [ 602.745096][T20986] ? __pfx_sctp_get_port_local+0x10/0x10 [ 602.745125][T20986] sctp_add_bind_addr+0x8c/0x370 [ 602.745144][T20986] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 602.745173][T20986] sctp_do_bind+0x597/0x9a0 [ 602.745209][T20986] sctp_connect_new_asoc+0x270/0x6b0 [ 602.745239][T20986] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 602.745277][T20986] ? __local_bh_enable_ip+0xd0/0x130 [ 602.745300][T20986] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 602.745322][T20986] ? security_sctp_bind_connect+0x7e/0x2c0 [ 602.745358][T20986] sctp_sendmsg+0x159b/0x2d00 [ 602.745401][T20986] ? __pfx_sctp_sendmsg+0x10/0x10 [ 602.745433][T20986] ? aa_sk_perm+0x6d5/0x900 [ 602.745462][T20986] ? __might_fault+0xaf/0x130 [ 602.745489][T20986] ? sock_rps_record_flow+0x19/0x350 [ 602.745523][T20986] ? inet_sendmsg+0x298/0x320 [ 602.745547][T20986] ? __pfx_inet_sendmsg+0x10/0x10 [ 602.745566][T20986] sock_sendmsg_nosec+0x10e/0x180 [ 602.745598][T20986] __sys_sendto+0x408/0x5a0 [ 602.745619][T20986] ? ksys_write+0x1e6/0x270 [ 602.745644][T20986] ? __pfx___sys_sendto+0x10/0x10 [ 602.745663][T20986] ? __mutex_unlock_slowpath+0x731/0x900 [ 602.745721][T20986] ? __pfx_ksys_write+0x10/0x10 [ 602.745748][T20986] __x64_sys_sendto+0xde/0x100 [ 602.745770][T20986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.745793][T20986] do_syscall_64+0x174/0x580 [ 602.745816][T20986] ? trace_irq_disable+0x3b/0x140 [ 602.745843][T20986] ? clear_bhb_loop+0x40/0x90 [ 602.745869][T20986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.745890][T20986] RIP: 0033:0x7f088919e019 [ 602.745910][T20986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.745927][T20986] RSP: 002b:00007f088a087028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 602.745951][T20986] RAX: ffffffffffffffda RBX: 00007f0889425fa0 RCX: 00007f088919e019 [ 602.745965][T20986] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 602.745979][T20986] RBP: 00007f088a087090 R08: 000020000005ffe4 R09: 000000000000001c [ 602.745992][T20986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.746005][T20986] R13: 00007f0889426038 R14: 00007f0889425fa0 R15: 00007ffcf7349e38 [ 602.746038][T20986] [ 603.067124][T21024] netlink: 'syz.1.3947': attribute type 27 has an invalid length. [ 603.113625][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3947'. [ 603.148821][T21024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3947'. [ 603.160374][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3947'. [ 603.266072][T21027] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 603.285946][T21026] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 603.302519][T21032] sctp: [Deprecated]: syz.0.3948 (pid 21032) Use of int in max_burst socket option deprecated. [ 603.302519][T21032] Use struct sctp_assoc_value instead [ 603.713450][T21057] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 603.728908][T21059] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 603.742438][T21057] netlink: 'syz.1.3953': attribute type 5 has an invalid length. [ 603.973810][T21064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.011602][T21064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.033289][T21064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.047156][T21064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.079544][T21064] bond0: (slave batadv0): Releasing backup interface [ 604.488138][T21086] xt_policy: output policy not valid in PREROUTING and INPUT [ 605.147240][T21117] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 605.206534][T21121] netlink: 'syz.0.3977': attribute type 1 has an invalid length. [ 605.239631][T21119] geneve2: entered promiscuous mode [ 605.260458][T21121] netlink: 'syz.0.3977': attribute type 2 has an invalid length. [ 605.414755][T21136] sctp: [Deprecated]: syz.3.3981 (pid 21136) Use of int in maxseg socket option. [ 605.414755][T21136] Use struct sctp_assoc_value instead [ 605.440786][T21138] netlink: 'syz.4.3980': attribute type 13 has an invalid length. [ 605.459887][T21136] sctp: [Deprecated]: syz.3.3981 (pid 21136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 605.459887][T21136] Use struct sctp_sack_info instead [ 605.467515][T21125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 605.955387][T21160] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 605.975764][T21160] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 606.177753][T21168] __nla_validate_parse: 5 callbacks suppressed [ 606.177772][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3987'. [ 606.246051][T21176] Cannot find set identified by id 65534 to match [ 606.275891][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3987'. [ 606.513668][T21186] syzkaller0: entered promiscuous mode [ 606.523683][T21186] syzkaller0: entered allmulticast mode [ 606.544611][T21188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3994'. [ 606.558079][T21186] tipc: Started in network mode [ 606.567508][T21186] tipc: Node identity c2445e43281, cluster identity 4711 [ 606.575166][T21186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.586972][T21186] tipc: Enabled bearer , priority 0 [ 606.659281][T21185] tipc: Resetting bearer [ 606.733117][T21185] tipc: Disabling bearer [ 606.748619][T21194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3996'. [ 606.775292][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 606.794438][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 606.817185][T21194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3996'. [ 606.975871][T21199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 607.010076][T21206] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3999'. [ 607.189508][T21216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4002'. [ 607.588151][T21236] netlink: 'syz.4.4008': attribute type 1 has an invalid length. [ 607.613831][T21236] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 608.158446][T21267] netlink: 'syz.2.4018': attribute type 1 has an invalid length. [ 608.657935][T21290] FAULT_INJECTION: forcing a failure. [ 608.657935][T21290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.695645][T21290] CPU: 1 UID: 0 PID: 21290 Comm: syz.1.4026 Not tainted syzkaller #0 PREEMPT(full) [ 608.695674][T21290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.695686][T21290] Call Trace: [ 608.695694][T21290] [ 608.695702][T21290] dump_stack_lvl+0xe8/0x150 [ 608.695737][T21290] should_fail_ex+0x40c/0x560 [ 608.695766][T21290] _copy_from_user+0x2d/0xb0 [ 608.695787][T21290] hidp_sock_ioctl+0x1dc/0x650 [ 608.695919][T21290] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 608.695995][T21290] ? do_vfs_ioctl+0x116f/0x1530 [ 608.696049][T21290] sock_do_ioctl+0x101/0x320 [ 608.696080][T21290] ? __pfx_sock_do_ioctl+0x10/0x10 [ 608.696104][T21290] ? hook_file_ioctl+0x1f0/0x5f0 [ 608.696168][T21290] sock_ioctl+0x57a/0x7e0 [ 608.696197][T21290] ? __pfx_sock_ioctl+0x10/0x10 [ 608.696224][T21290] ? __fget_files+0x2a/0x420 [ 608.696250][T21290] ? __fget_files+0x3a2/0x420 [ 608.696273][T21290] ? __fget_files+0x2a/0x420 [ 608.696302][T21290] ? bpf_lsm_file_ioctl+0x9/0x20 [ 608.696325][T21290] ? __pfx_sock_ioctl+0x10/0x10 [ 608.696350][T21290] __se_sys_ioctl+0xfc/0x170 [ 608.696370][T21290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.696393][T21290] do_syscall_64+0x174/0x580 [ 608.696415][T21290] ? trace_irq_disable+0x3b/0x140 [ 608.696443][T21290] ? clear_bhb_loop+0x40/0x90 [ 608.696468][T21290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.696487][T21290] RIP: 0033:0x7fa28799e019 [ 608.696508][T21290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.696525][T21290] RSP: 002b:00007fa28891b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.696547][T21290] RAX: ffffffffffffffda RBX: 00007fa287c25fa0 RCX: 00007fa28799e019 [ 608.696562][T21290] RDX: 0000200000000540 RSI: 00000000800448d3 RDI: 0000000000000004 [ 608.696575][T21290] RBP: 00007fa28891b090 R08: 0000000000000000 R09: 0000000000000000 [ 608.696588][T21290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.696600][T21290] R13: 00007fa287c26038 R14: 00007fa287c25fa0 R15: 00007ffe69430b48 [ 608.696632][T21290] [ 608.939002][T21292] bond5: Unable to set up delay as MII monitoring is disabled [ 608.960853][T21292] bond5 (unregistering): Released all slaves [ 609.160485][T21303] netlink: 'syz.1.4030': attribute type 2 has an invalid length. [ 609.493813][T21316] x_tables: duplicate underflow at hook 4 [ 609.504910][T21318] x_tables: duplicate underflow at hook 1 [ 609.515364][T21316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4034'. [ 609.707736][T21325] bridge2: entered promiscuous mode [ 609.720158][T21325] bridge2: entered allmulticast mode [ 609.738677][T21325] team0: No ports can be present during mode change [ 609.865788][T21335] netlink: 'syz.3.4041': attribute type 1 has an invalid length. [ 610.262470][T21354] veth0_macvtap: Caught tx_queue_len zero misconfig [ 610.404984][T21362] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 610.452728][T21358] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 610.759070][T21358] bond5 (unregistering): Released all slaves [ 610.962918][T21367] lo: entered promiscuous mode [ 611.011933][T21367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.274418][T21397] __nla_validate_parse: 2 callbacks suppressed [ 611.274439][T21397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4054'. [ 611.355896][T21397] bridge0: port 3(vlan2) entered blocking state [ 611.363482][T21397] bridge0: port 3(vlan2) entered disabled state [ 611.370566][T21397] vlan2: entered allmulticast mode [ 611.376811][T21397] geneve0: entered allmulticast mode [ 611.385220][T21397] vlan2: entered promiscuous mode [ 611.402902][T21397] geneve0: entered promiscuous mode [ 611.668721][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4063'. [ 611.849663][T21427] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4064'. [ 611.866560][T21430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4065'. [ 611.876020][T21430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 611.883341][T21430] IPv6: NLM_F_CREATE should be set when creating new route [ 612.371803][T21460] netlink: 'syz.4.4075': attribute type 2 has an invalid length. [ 612.394192][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4076'. [ 612.411557][T21460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4075'. [ 612.428334][T21459] netlink: 'syz.1.4076': attribute type 39 has an invalid length. [ 612.636627][T21472] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 612.666106][T21473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4080'. [ 612.679398][ T5764] lo speed is unknown, defaulting to 1000 [ 612.880299][T21478] netlink: 'syz.2.4081': attribute type 29 has an invalid length. [ 612.913253][T21480] netlink: 'syz.3.4082': attribute type 1 has an invalid length. [ 612.968197][T21486] ip6tnl0: Caught tx_queue_len zero misconfig [ 613.010617][T21489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4083'. [ 613.077304][T21480] veth3: entered allmulticast mode [ 613.197824][T21480] bond6: (slave veth3): Enslaving as an active interface with a down link [ 613.289820][T21491] bond5: (slave veth0_to_bond): Releasing active interface [ 613.338928][T21491] bond6: (slave veth0_to_bond): making interface the new active one [ 613.380014][T21491] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 613.589299][T21513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4089'. [ 613.628602][T21513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4089'. [ 614.026569][T21524] syzkaller0: entered promiscuous mode [ 614.073079][T21524] syzkaller0: entered allmulticast mode [ 614.082320][T21533] netlink: 'syz.1.4095': attribute type 64 has an invalid length. [ 614.132165][T21532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.150464][T21525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.662620][T21550] netlink: 'syz.0.4101': attribute type 10 has an invalid length. [ 614.726828][T21556] netlink: 'syz.1.4099': attribute type 1 has an invalid length. [ 615.151304][T21579] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 615.399440][T21588] openvswitch: netlink: Multiple metadata blocks provided [ 615.881646][T21615] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 615.949889][T21618] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 615.985546][T21618] netlink: 'syz.3.4121': attribute type 1 has an invalid length. [ 616.203322][T21618] 8021q: adding VLAN 0 to HW filter on device bond7 [ 616.347592][T21626] bond7: (slave gretap2): making interface the new active one [ 616.379149][T21626] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 616.924431][T21654] __nla_validate_parse: 4 callbacks suppressed [ 616.924451][T21654] netlink: 576 bytes leftover after parsing attributes in process `syz.3.4130'. [ 617.467960][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4134'. [ 617.594026][T21682] netlink: 'syz.3.4137': attribute type 1 has an invalid length. [ 617.807720][T21684] bond8: (slave veth5): Enslaving as an active interface with a down link [ 617.825198][T21689] 8021q: adding VLAN 0 to HW filter on device bond8 [ 617.945646][T21687] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 617.957862][T21687] syzkaller1: Refused to change device type [ 618.048237][T21702] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4143'. [ 618.126053][T21710] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.617510][T21752] xt_addrtype: ipv6 does not support BROADCAST matching [ 619.098981][T21762] xt_cgroup: invalid path, errno=-2 [ 619.277092][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4153'. [ 619.410454][T21779] netlink: 'syz.1.4158': attribute type 13 has an invalid length. [ 619.447911][T21779] netlink: 'syz.1.4158': attribute type 58 has an invalid length. [ 619.462722][T21779] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4158'. [ 619.754954][T21801] netlink: 'syz.4.4162': attribute type 12 has an invalid length. [ 619.768562][T21801] netlink: 'syz.4.4162': attribute type 29 has an invalid length. [ 619.773967][T21806] netlink: 'syz.1.4163': attribute type 1 has an invalid length. [ 619.781396][T21801] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4162'. [ 619.789852][T21806] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4163'. [ 619.802516][T21801] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4162'. [ 619.826645][T21806] NCSI netlink: No device for ifindex 0 [ 619.836692][T21809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4164'. [ 619.888228][T21807] veth3: entered allmulticast mode [ 620.249237][T21827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4170'. [ 620.414917][T21829] syzkaller0: entered promiscuous mode [ 620.422280][T21829] syzkaller0: entered allmulticast mode [ 620.547565][T21829] syz_tun: refused to change device tx_queue_len [ 620.568411][T21835] only policy match revision 0 supported [ 620.568433][T21835] unable to load match [ 620.858387][T21853] ip6gre0: Master is either lo or non-ether device [ 621.156877][T21851] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.231180][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.263151][ T7008] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.289076][ T7008] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.332038][ T7008] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.543316][T21851] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.715182][T21851] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.042841][T21851] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.343643][T21899] __nla_validate_parse: 8 callbacks suppressed [ 622.343664][T21899] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4191'. [ 622.410270][ T5862] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.513116][ T5862] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.661136][ T5862] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.666570][T21905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4193'. [ 622.695942][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.921870][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4196'. [ 622.948709][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4196'. [ 622.951479][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4197'. [ 622.960176][T21916] netlink: 'syz.2.4196': attribute type 12 has an invalid length. [ 622.999009][T21916] netlink: 'syz.2.4196': attribute type 11 has an invalid length. [ 623.259354][T21936] tunl0: entered promiscuous mode [ 623.292131][T21936] netlink: 'syz.1.4203': attribute type 4 has an invalid length. [ 623.317136][T21936] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4203'. [ 623.579792][T21947] tap0: tun_chr_ioctl cmd 2148553947 [ 623.619822][T21953] syzkaller0: entered promiscuous mode [ 623.625838][T21953] syzkaller0: entered allmulticast mode [ 624.027606][T21974] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4211'. [ 624.049326][ T8361] IPVS: starting estimator thread 0... [ 624.072472][T21973] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4211'. [ 624.154922][T21983] IPVS: using max 25 ests per chain, 60000 per kthread [ 624.247653][T21995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4217'. [ 624.387678][T21999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4218'. [ 624.563559][T22009] lo: Caught tx_queue_len zero misconfig [ 624.572610][T22009] netlink: 'syz.4.4222': attribute type 3 has an invalid length. [ 624.620537][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.677779][T22017] tipc: Can't bind to reserved service type 0 [ 624.840147][T22023] netlink: 'syz.0.4224': attribute type 10 has an invalid length. [ 624.926503][T22023] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.955709][T22023] bond0: (slave team0): Enslaving as an active interface with an up link [ 625.308684][T22040] xt_TPROXY: Can be used only with -p tcp or -p udp [ 626.035634][T22087] netlink: 'syz.4.4243': attribute type 83 has an invalid length. [ 626.087000][T22090] netlink: 'syz.0.4242': attribute type 10 has an invalid length. [ 626.125279][T22090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.167689][T22090] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 626.357322][T22103] batadv_slave_0: Caught tx_queue_len zero misconfig [ 627.499309][T22168] __nla_validate_parse: 15 callbacks suppressed [ 627.499332][T22168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4265'. [ 627.857523][T22178] syzkaller0: entered promiscuous mode [ 627.873588][T22178] syzkaller0: entered allmulticast mode [ 628.602426][T22210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4278'. [ 628.762999][T22216] block nbd4: NBD_DISCONNECT [ 628.791628][T22216] block nbd4: Send disconnect failed -32 [ 628.817661][T22216] block nbd4: shutting down sockets [ 628.845002][T22223] Cannot find map_set index 135 as target [ 628.869630][T22213] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4280'. [ 628.888470][T22222] openvswitch: netlink: Duplicate key (type 6). [ 628.908860][T22213] gretap0: entered promiscuous mode [ 629.789158][ T5866] bond14 (unregistering): (slave geneve6): Releasing active interface [ 629.806652][ T5866] bond6 (unregistering): (slave geneve5): Releasing active interface [ 629.850745][ T5866] bond2 (unregistering): (slave bridge1): Releasing active interface [ 629.901750][ T5866] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 629.910171][ T5866] bridge5 (unregistering): left promiscuous mode [ 629.928829][ T5866] bond12 (unregistering): (slave bridge7): Releasing backup interface [ 629.942135][ T5866] bridge7 (unregistering): left promiscuous mode [ 629.956514][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.967945][ T5866] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 629.979289][ T5866] bond0 (unregistering): Released all slaves [ 629.990840][ T5866] bond1 (unregistering): Released all slaves [ 630.056201][ T5866] bond2 (unregistering): Released all slaves [ 630.072023][ T5866] bond3 (unregistering): Released all slaves [ 630.092132][ T5866] bond4 (unregistering): Released all slaves [ 630.108023][ T5866] bond5 (unregistering): Released all slaves [ 630.125638][ T5866] bond6 (unregistering): Released all slaves [ 630.154243][ T5866] bond7 (unregistering): Released all slaves [ 630.171426][ T5866] bond8 (unregistering): Released all slaves [ 630.192576][ T5866] bond9 (unregistering): Released all slaves [ 630.207984][ T5866] bond10 (unregistering): Released all slaves [ 630.238544][ T5866] bond11 (unregistering): (slave veth1): Releasing active interface [ 630.248472][ T5866] bond11 (unregistering): Released all slaves [ 630.266040][ T5866] bond12 (unregistering): Released all slaves [ 630.282280][ T5866] bond13 (unregistering): Released all slaves [ 630.299403][ T5866] bond14 (unregistering): Released all slaves [ 630.326558][ T5866] bond15 (unregistering): (slave veth7): Releasing active interface [ 630.336557][ T5866] bond15 (unregistering): Released all slaves [ 630.679060][T22247] bond4: (slave dummy0): Releasing backup interface [ 630.762285][T22247] x9: left allmulticast mode [ 630.801710][T22247] x9: left promiscuous mode [ 630.818470][T22247] bridge0: port 1(1x9) entered disabled state [ 630.898853][T22247] bridge_slave_1: left promiscuous mode [ 630.911313][T22247] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.943034][T22247] vlan2: left promiscuous mode [ 630.950547][T22247] geneve0: left promiscuous mode [ 630.963235][T22259] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 630.982160][T22259] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4293'. [ 631.034762][T22247] bond0: (slave bond_slave_0): Releasing backup interface [ 631.092415][T22247] bond0: (slave c): Releasing backup interface [ 631.199833][T22247] team0: Port device team_slave_0 removed [ 631.262927][T22247] team0: Port device team_slave_1 removed [ 631.283906][T22247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.296792][T22247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.313657][T22247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.322329][T22247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.335610][T22247] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 631.357336][ T5866] tipc: Disabling bearer [ 631.369030][ T5866] tipc: Left network mode [ 631.466581][ T8361] IPVS: starting estimator thread 0... [ 631.472514][T22276] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 631.500486][T22276] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 631.550284][T22276] netlink: 'syz.4.4297': attribute type 1 has an invalid length. [ 631.575432][T22276] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4297'. [ 631.581008][T22277] IPVS: using max 27 ests per chain, 64800 per kthread [ 631.746816][T22288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.262769][T22306] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.4308'. [ 632.272672][T22306] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.4308'. [ 632.310843][T22307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4307'. [ 632.314352][T22306] syzkaller0: entered promiscuous mode [ 632.334053][T22306] syzkaller0: entered allmulticast mode [ 632.399304][T22309] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4309'. [ 632.486725][T22313] openvswitch: netlink: Key type 31 is not supported [ 632.540215][T22310] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 632.560102][T22316] IPv6: NLM_F_CREATE should be specified when creating new route [ 632.569529][T22310] bond1 (unregistering): Released all slaves [ 632.576836][T22316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 632.584103][T22316] IPv6: NLM_F_CREATE should be set when creating new route [ 632.591491][T22316] IPv6: NLM_F_CREATE should be set when creating new route [ 633.217397][T22338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4318'. [ 633.330836][T22341] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.436758][T22344] x_tables: duplicate underflow at hook 1 [ 633.440197][T22345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4321'. [ 633.469203][T22345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4321'. [ 633.517542][ T5866] hsr_slave_0: left promiscuous mode [ 633.533606][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4321'. [ 633.551099][T22354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4321'. [ 633.564932][ T5866] hsr_slave_1: left promiscuous mode [ 633.591839][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.618473][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4321'. [ 633.629558][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.640195][T22354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4321'. [ 633.652595][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.660148][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.676337][ T5866] veth1_macvtap: left promiscuous mode [ 633.684397][ T5866] veth0_macvtap: left promiscuous mode [ 633.907867][T22367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4326'. [ 634.024523][T22369] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4326'. [ 634.115430][ T5866] team0 (unregistering): Port device team_slave_1 removed [ 634.142054][ T5866] team0 (unregistering): Port device team_slave_0 removed [ 634.695668][T22375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4329'. [ 634.736962][T22376] syzkaller0: left promiscuous mode [ 634.762706][T22376] syzkaller0: left allmulticast mode [ 634.830090][T22382] netlink: 'syz.2.4328': attribute type 11 has an invalid length. [ 635.221683][T22392] siw: device registration error -23 [ 635.390526][T22392] smbdirect: ib_dev[syz2] removed [ 635.605620][T22376] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.613856][T22376] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.288687][T22376] veth0_vlan: left promiscuous mode [ 636.669982][ T5862] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.691202][ T5862] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.931344][ T7008] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.965232][ T7008] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.992582][ T7008] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.034872][ T7008] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.060512][T22432] netlink: 'syz.0.4341': attribute type 2 has an invalid length. [ 637.083285][T22426] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 637.113435][T22426] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 637.254589][ T5862] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.269074][ T5866] IPVS: stop unused estimator thread 0... [ 637.308948][ T5862] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.693694][T22460] openvswitch: netlink: Duplicate key (type 6). [ 638.390520][T22451] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.791924][T22501] __nla_validate_parse: 6 callbacks suppressed [ 638.791945][T22501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4358'. [ 638.884430][T22501] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 639.276005][T22532] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 639.377149][T22535] netlink: 'syz.3.4363': attribute type 1 has an invalid length. [ 639.393534][T22530] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 639.402771][T22530] bond1: option packets_per_slave: allowed values 0 - 65535 [ 639.421371][T22530] bond1 (unregistering): Released all slaves [ 639.426817][T22535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4363'. [ 639.466904][T22542] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.721750][T22551] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 639.766406][T22550] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 639.776930][T22553] netlink: 'syz.2.4367': attribute type 39 has an invalid length. [ 639.885377][T22550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4366'. [ 639.962538][T22560] team0: Cannot enslave team device to itself [ 640.277608][T22577] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 640.298382][T22579] netlink: 'syz.2.4371': attribute type 1 has an invalid length. [ 640.735004][T22595] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 [ 641.107405][T22605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4379'. [ 641.134407][T22605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.295901][T22605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.331598][T22621] Cannot find del_set index 1 as target [ 641.344523][T22620] Cannot find del_set index 1 as target [ 641.365229][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4384'. [ 641.385499][T22617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4383'. [ 641.398200][T22621] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.4384'. [ 641.410584][T22616] tc_dump_action: action bad kind [ 641.417480][T22627] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.4384'. [ 641.701854][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4386'. [ 641.790911][T22631] bond5 (unregistering): Released all slaves [ 641.850629][T22629] team_slave_0 (unregistering): left promiscuous mode [ 641.863378][T22629] team0: Port device team_slave_0 removed [ 642.382616][T22661] vcan1: entered promiscuous mode [ 642.396806][T22661] vcan1: entered allmulticast mode [ 642.453144][T22641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4390'. [ 642.735251][T22674] syzkaller1: entered promiscuous mode [ 642.744239][T22676] IPv6: addrconf: prefix option has invalid lifetime [ 642.754342][T22674] syzkaller1: entered allmulticast mode [ 642.834827][T22677] netlink: 'syz.0.4398': attribute type 2 has an invalid length. [ 643.319638][T22705] netlink: 'syz.4.4407': attribute type 1 has an invalid length. [ 643.627401][T22718] 8021q: adding VLAN 0 to HW filter on device bond5 [ 643.735657][T22723] xt_hashlimit: size too large, truncated to 1048576 [ 643.999349][T22743] team0: Port device syz_tun added [ 644.410718][T22760] syzkaller1: entered promiscuous mode [ 644.427928][T22760] syzkaller1: entered allmulticast mode [ 644.502966][T22770] netlink: 'syz.0.4424': attribute type 2 has an invalid length. [ 644.534398][T22771] __nla_validate_parse: 5 callbacks suppressed [ 644.534418][T22771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4429'. [ 644.937311][T22791] Bluetooth: MGMT ver 1.23 [ 645.136709][T22801] ip6t_REJECT: ECHOREPLY is not supported [ 645.206177][T22797] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 645.278977][T22805] netlink: 'syz.3.4441': attribute type 1 has an invalid length. [ 645.322026][T22805] 8021q: adding VLAN 0 to HW filter on device bond9 [ 645.415333][T22808] bond9: (slave veth7): Enslaving as an active interface with a down link [ 645.470740][T22805] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 645.491397][T22805] bond9: (slave batadv1): making interface the new active one [ 645.519564][T22805] batadv1: entered promiscuous mode [ 645.525730][T22805] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 645.986720][T22833] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 646.050527][T22833] bond10 (unregistering): Released all slaves [ 646.235871][T22861] syzkaller1: entered promiscuous mode [ 646.277132][T22861] syzkaller1: entered allmulticast mode [ 646.399985][T22861] netlink: 'syz.0.4453': attribute type 2 has an invalid length. [ 646.774226][T22883] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4462'. [ 646.786673][T22880] syzkaller1: entered promiscuous mode [ 646.798191][T22880] syzkaller1: entered allmulticast mode [ 647.048836][T22893] team0: Device vcan1 is of different type [ 647.648863][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4473'. [ 647.949917][T22942] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4475'. [ 648.325867][T22960] sctp: [Deprecated]: syz.4.4479 (pid 22960) Use of int in maxseg socket option. [ 648.325867][T22960] Use struct sctp_assoc_value instead [ 648.573380][ T5637] block nbd4: Receive control failed (result -32) [ 648.581852][ T5632] block nbd4: Receive control failed (result -32) [ 648.587238][T22966] tunl0: Caught tx_queue_len zero misconfig [ 648.724262][T22973] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4487'. [ 648.760223][T22975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4488'. [ 648.797297][T22976] gre0: entered promiscuous mode [ 648.815626][T22976] gre0: entered allmulticast mode [ 649.103243][T22991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4492'. [ 649.368377][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4496'. [ 649.663566][T23019] xt_hl: Unknown TTL match mode: 255 [ 649.748651][T23021] xt_socket: unknown flags 0x50 [ 649.757630][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4502'. [ 649.990665][T23037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 650.368340][T23060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4514'. [ 650.578580][T23064] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 650.626085][ T8356] IPVS: starting estimator thread 0... [ 650.644163][T23074] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4518'. [ 650.715973][T23077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4519'. [ 650.763449][T23075] IPVS: using max 25 ests per chain, 60000 per kthread [ 651.016883][T23092] tipc: Started in network mode [ 651.041304][T23092] tipc: Node identity 9e52cb4315d8, cluster identity 4711 [ 651.075136][T23092] tipc: Enabled bearer , priority 0 [ 651.084767][T23097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4525'. [ 651.434932][T23112] netlink: 'syz.1.4528': attribute type 1 has an invalid length. [ 651.452964][T23112] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4528'. [ 651.502432][T23113] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 651.584412][T23089] tipc: Disabling bearer [ 651.846920][T23123] netlink: 'syz.4.4529': attribute type 2 has an invalid length. [ 651.961493][T23118] syzkaller1: entered promiscuous mode [ 651.972530][T23118] syzkaller1: entered allmulticast mode [ 651.994659][T23129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.254756][T23137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.666996][T23150] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4537'. [ 652.710236][T23150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4537'. [ 652.739504][T23155] netlink: 'syz.2.4537': attribute type 1 has an invalid length. [ 652.933764][T23160] sctp: [Deprecated]: syz.1.4542 (pid 23160) Use of int in max_burst socket option deprecated. [ 652.933764][T23160] Use struct sctp_assoc_value instead [ 652.946790][T23155] bond6: entered promiscuous mode [ 652.971415][T23155] 8021q: adding VLAN 0 to HW filter on device bond6 [ 652.988205][T23167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4543'. [ 653.209925][T23169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4544'. [ 653.657402][T23189] syzkaller1: entered promiscuous mode [ 653.671014][T23189] syzkaller1: entered allmulticast mode [ 653.744865][T23194] netlink: 'syz.3.4549': attribute type 2 has an invalid length. [ 653.887980][T23201] netlink: 'syz.4.4554': attribute type 4 has an invalid length. [ 654.664550][T23234] tipc: Cannot configure node identity twice [ 654.935899][T23246] __nla_validate_parse: 5 callbacks suppressed [ 654.935931][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4569'. [ 655.018445][T23251] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4571'. [ 655.056318][T23251] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4571'. [ 655.259125][T23263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4574'. [ 655.337247][T23268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4576'. [ 655.535860][T23278] netlink: 'syz.2.4578': attribute type 1 has an invalid length. [ 655.553767][T23273] syzkaller1: entered promiscuous mode [ 655.559491][T23273] syzkaller1: entered allmulticast mode [ 655.626338][T23276] netlink: 'syz.0.4575': attribute type 2 has an invalid length. [ 655.836572][T23297] netlink: 'syz.4.4584': attribute type 19 has an invalid length. [ 655.941745][T23302] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4585'. [ 655.951274][T23302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4585'. [ 656.561738][T23307] netlink: 'syz.3.4587': attribute type 21 has an invalid length. [ 656.569972][T23307] IPv6: NLM_F_CREATE should be specified when creating new route [ 656.774807][T23309] xt_hashlimit: invalid interval [ 657.102862][ T5866] batadv1: left promiscuous mode [ 657.684238][T23350] syzkaller1: entered promiscuous mode [ 657.694714][T23350] syzkaller1: entered allmulticast mode [ 657.759079][T23358] netlink: 'syz.2.4604': attribute type 2 has an invalid length. [ 658.105434][T23372] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.274876][T23383] "syz.1.4614" (23383) uses obsolete ecb(arc4) skcipher [ 658.308424][T23391] veth1_to_team: Caught tx_queue_len zero misconfig [ 658.326163][T23381] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4614'. [ 658.357446][T23383] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4614'. [ 658.707886][T23409] netlink: 'syz.3.4619': attribute type 1 has an invalid length. [ 658.942855][T23420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4623'. [ 659.186683][T23424] tipc: Enabling not permitted [ 659.203877][T23424] tipc: Enabling of bearer rejected, failed to enable media [ 659.900154][T23458] syzkaller1: entered promiscuous mode [ 659.915473][T23458] syzkaller1: entered allmulticast mode [ 659.999762][T23464] netlink: 'syz.2.4631': attribute type 2 has an invalid length. [ 660.107912][T23471] ip6tnl0: Caught tx_queue_len zero misconfig [ 660.145564][T23471] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 660.271789][T23487] netlink: 'syz.1.4638': attribute type 21 has an invalid length. [ 660.274363][T23482] __nla_validate_parse: 1 callbacks suppressed [ 660.274382][T23482] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4636'. [ 660.451780][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 660.637996][T23503] geneve3: entered promiscuous mode [ 661.116985][T23529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.250066][T23536] netlink: 'syz.4.4651': attribute type 2 has an invalid length. [ 661.281451][T23536] netlink: 'syz.4.4651': attribute type 2 has an invalid length. [ 661.302145][T23536] netlink: 'syz.4.4651': attribute type 2 has an invalid length. [ 661.342237][T23536] netlink: 'syz.4.4651': attribute type 1 has an invalid length. [ 661.357070][T23545] netlink: 'syz.4.4651': attribute type 5 has an invalid length. [ 661.391102][T23545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4651'. [ 661.479531][T23549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4654'. [ 661.661596][T23552] xt_CT: No such helper "pptp" [ 661.818960][T23572] Bluetooth: MGMT ver 1.23 [ 661.898632][T23573] syz_tun: entered promiscuous mode [ 662.077997][T23585] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4665'. [ 662.223067][T23596] sctp: [Deprecated]: syz.0.4669 (pid 23596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 662.223067][T23596] Use struct sctp_sack_info instead [ 662.259340][T23598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4670'. [ 662.322677][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4671'. [ 662.399898][T23606] netlink: 'syz.4.4674': attribute type 1 has an invalid length. [ 662.524762][T23606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 662.587012][T23613] bond10: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 662.599862][T23613] bond10 (unregistering): Released all slaves [ 662.630030][T23610] netlink: 'syz.4.4674': attribute type 10 has an invalid length. [ 662.670763][T23610] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4674'. [ 662.716128][T23615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4674'. [ 662.803873][T23606] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 662.835336][T23610] dummy0: entered promiscuous mode [ 662.854160][T21040] bond2: (slave dummy0): link status up again after 0 ms [ 662.869606][T23610] bond2: (slave dummy0): Releasing backup interface [ 663.001946][T23626] bridge_slave_1 (unregistering): left allmulticast mode [ 663.029736][T23626] bridge_slave_1 (unregistering): left promiscuous mode [ 663.045522][T23626] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.383778][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4686'. [ 663.403286][T23657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4686'. [ 663.519552][T23660] netlink: 'syz.1.4689': attribute type 83 has an invalid length. [ 663.851072][T23683] dvmrp0: entered allmulticast mode [ 664.548600][T23717] netlink: 'syz.0.4703': attribute type 6 has an invalid length. [ 665.249394][T23759] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 665.249582][T23753] tipc: Enabling of bearer rejected, failed to enable media [ 665.370068][T23766] __nla_validate_parse: 5 callbacks suppressed [ 665.370088][T23766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4716'. [ 665.395584][T23770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4717'. [ 665.421389][T23766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4716'. [ 665.434509][T23770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4717'. [ 665.447893][T23766] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 665.640037][T23779] netlink: 'syz.1.4720': attribute type 2 has an invalid length. [ 665.669619][T23779] netlink: 'syz.1.4720': attribute type 2 has an invalid length. [ 665.688028][T23779] netlink: 'syz.1.4720': attribute type 2 has an invalid length. [ 665.715227][T23779] netlink: 'syz.1.4720': attribute type 1 has an invalid length. [ 665.730529][T23784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4722'. [ 666.038087][T23800] syz.3.4723 (23800) used obsolete PPPIOCDETACH ioctl [ 666.081860][T23804] netlink: 'syz.4.4727': attribute type 12 has an invalid length. [ 666.109476][T23804] netlink: 'syz.4.4727': attribute type 29 has an invalid length. [ 666.124442][T23804] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4727'. [ 666.541634][T23831] IPVS: length: 239 != 24 [ 666.814383][T23849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4742'. [ 666.929610][T23851] syzkaller0: entered promiscuous mode [ 666.969378][T23851] syzkaller0: entered allmulticast mode [ 667.035281][T23867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4745'. [ 667.075935][T23857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4744'. [ 667.178243][T23856] tipc: Enabled bearer , priority 0 [ 667.215051][T23851] tipc: Enabling of bearer rejected, already enabled [ 667.335370][T23850] tipc: Resetting bearer [ 667.428729][T23887] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4750'. [ 667.441782][T23889] validate_nla: 4 callbacks suppressed [ 667.441800][T23889] netlink: 'syz.2.4750': attribute type 9 has an invalid length. [ 667.442695][T23850] tipc: Disabling bearer [ 667.718633][T23898] bond2: (slave lo): Releasing backup interface [ 667.739343][T23898] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 667.805637][T23898] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 667.830027][T23898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.867504][T23905] netlink: 'syz.2.4755': attribute type 11 has an invalid length. [ 668.093393][T23919] openvswitch: netlink: Message has 8 unknown bytes. [ 668.228811][T23926] veth1_to_bond: entered allmulticast mode [ 668.284631][T23926] tipc: Enabling of bearer rejected, already enabled [ 668.332844][T23925] veth1_to_bond: left allmulticast mode [ 668.500389][T23938] netlink: 'syz.0.4768': attribute type 1 has an invalid length. [ 669.016475][T23969] ip6erspan0: entered allmulticast mode [ 669.320330][T23991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.404135][T23995] openvswitch: netlink: Flow key attr not present in new flow. [ 669.858179][T24011] bond5: entered promiscuous mode [ 669.863756][T24011] bond5: entered allmulticast mode [ 669.872998][T23991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.983949][T24021] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 670.229138][T24045] netlink: 'syz.4.4795': attribute type 1 has an invalid length. [ 670.334523][T24052] netlink: 'syz.2.4796': attribute type 21 has an invalid length. [ 670.359996][T24052] IPv6: NLM_F_CREATE should be specified when creating new route [ 670.387652][T24052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 670.395029][T24052] IPv6: NLM_F_CREATE should be set when creating new route [ 670.402354][T24052] IPv6: NLM_F_CREATE should be set when creating new route [ 670.409618][T24052] IPv6: NLM_F_CREATE should be set when creating new route [ 670.456383][T24056] __nla_validate_parse: 19 callbacks suppressed [ 670.456404][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4798'. [ 670.581421][T24056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4798'. [ 670.634177][T24056] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4798'. [ 670.749978][T24067] veth0_macvtap: Caught tx_queue_len zero misconfig [ 670.788975][T24069] syzkaller0: entered promiscuous mode [ 670.804076][T24069] syzkaller0: entered allmulticast mode [ 671.329043][T24093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4808'. [ 671.484170][ T8352] IPVS: starting estimator thread 0... [ 671.583995][T24100] IPVS: using max 26 ests per chain, 62400 per kthread [ 671.615679][T24108] netlink: 'syz.0.4812': attribute type 2 has an invalid length. [ 671.635431][T24099] nbd5: detected capacity change from 0 to 63 [ 671.724932][ T5632] block nbd5: Receive control failed (result -104) [ 671.972089][T24129] netlink: 'syz.3.4817': attribute type 17 has an invalid length. [ 671.991879][T24129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4817'. [ 672.012807][T24129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4817'. [ 672.059376][T24129] erspan0: entered promiscuous mode [ 672.073600][T24129] gretap0: entered promiscuous mode [ 672.336128][T24154] [ 672.338515][T24154] ====================================================== [ 672.345551][T24154] WARNING: possible circular locking dependency detected [ 672.352591][T24154] syzkaller #0 Not tainted [ 672.357028][T24154] ------------------------------------------------------ [ 672.364105][T24154] syz.2.4825/24154 is trying to acquire lock: [ 672.370185][T24154] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 672.379337][T24154] [ 672.379337][T24154] but task is already holding lock: [ 672.386707][T24154] ffff88807fd51d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 672.396212][T24154] [ 672.396212][T24154] which lock already depends on the new lock. [ 672.396212][T24154] [ 672.406713][T24154] [ 672.406713][T24154] the existing dependency chain (in reverse order) is: [ 672.415745][T24154] [ 672.415745][T24154] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 672.423324][T24154] __might_fault+0xcb/0x130 [ 672.428360][T24154] _copy_from_user+0x28/0xb0 [ 672.433474][T24154] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 672.440062][T24154] ip_generic_getfrag+0x149/0x2d0 [ 672.445633][T24154] __ip6_append_data+0x3b26/0x40c0 [ 672.451384][T24154] ip6_append_data+0x108/0x270 [ 672.456675][T24154] rawv6_sendmsg+0x1298/0x18c0 [ 672.462079][T24154] sock_sendmsg_nosec+0x10e/0x180 [ 672.467634][T24154] ____sys_sendmsg+0x54e/0x850 [ 672.472925][T24154] ___sys_sendmsg+0x2a5/0x360 [ 672.478123][T24154] __x64_sys_sendmsg+0x1b1/0x290 [ 672.483582][T24154] do_syscall_64+0x174/0x580 [ 672.488728][T24154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.495144][T24154] [ 672.495144][T24154] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 672.502900][T24154] lock_sock_nested+0x41/0x100 [ 672.508216][T24154] inet_shutdown+0x6a/0x390 [ 672.513246][T24154] nbd_mark_nsock_dead+0x2cb/0x550 [ 672.518960][T24154] recv_work+0x1cee/0x1e10 [ 672.523899][T24154] process_scheduled_works+0xa8e/0x14e0 [ 672.530064][T24154] worker_thread+0xa47/0xfb0 [ 672.535176][T24154] kthread+0x388/0x470 [ 672.539772][T24154] ret_from_fork+0x514/0xb70 [ 672.544919][T24154] ret_from_fork_asm+0x1a/0x30 [ 672.550379][T24154] [ 672.550379][T24154] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 672.558374][T24154] __mutex_lock+0x19d/0x1550 [ 672.563526][T24154] nbd_queue_rq+0x373/0x1150 [ 672.568638][T24154] blk_mq_dispatch_rq_list+0x499/0x1990 [ 672.574769][T24154] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 672.581672][T24154] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 672.588191][T24154] blk_mq_run_work_fn+0x16c/0x300 [ 672.593739][T24154] process_scheduled_works+0xa8e/0x14e0 [ 672.599816][T24154] worker_thread+0xa47/0xfb0 [ 672.604938][T24154] kthread+0x388/0x470 [ 672.609535][T24154] ret_from_fork+0x514/0xb70 [ 672.614652][T24154] ret_from_fork_asm+0x1a/0x30 [ 672.619936][T24154] [ 672.619936][T24154] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 672.627151][T24154] __mutex_lock+0x19d/0x1550 [ 672.632267][T24154] nbd_queue_rq+0xc1/0x1150 [ 672.637295][T24154] blk_mq_dispatch_rq_list+0x499/0x1990 [ 672.643368][T24154] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 672.650232][T24154] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 672.656756][T24154] blk_mq_run_work_fn+0x16c/0x300 [ 672.662420][T24154] process_scheduled_works+0xa8e/0x14e0 [ 672.668529][T24154] worker_thread+0xa47/0xfb0 [ 672.673678][T24154] kthread+0x388/0x470 [ 672.678281][T24154] ret_from_fork+0x514/0xb70 [ 672.683500][T24154] ret_from_fork_asm+0x1a/0x30 [ 672.688786][T24154] [ 672.688786][T24154] -> #3 (set->srcu){.+.+}-{0:0}: [ 672.695917][T24154] __synchronize_srcu+0xc9/0x2f0 [ 672.701418][T24154] elevator_switch+0x1e8/0x7b0 [ 672.706781][T24154] elevator_change+0x2fa/0x480 [ 672.712070][T24154] elevator_set_default+0x375/0x440 [ 672.717795][T24154] blk_register_queue+0x3f3/0x4e0 [ 672.723383][T24154] __add_disk+0x6cb/0xe30 [ 672.728314][T24154] add_disk_fwnode+0x100/0x3a0 [ 672.733606][T24154] nbd_dev_add+0x733/0xb60 [ 672.738550][T24154] nbd_init+0x15f/0x1e0 [ 672.743307][T24154] do_one_initcall+0x250/0x870 [ 672.748602][T24154] do_initcall_level+0x10a/0x1a0 [ 672.754109][T24154] do_initcalls+0x59/0xa0 [ 672.758958][T24154] kernel_init_freeable+0x29d/0x3e0 [ 672.764690][T24154] kernel_init+0x1d/0x1d0 [ 672.769546][T24154] ret_from_fork+0x514/0xb70 [ 672.774668][T24154] ret_from_fork_asm+0x1a/0x30 [ 672.779951][T24154] [ 672.779951][T24154] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 672.787777][T24154] __mutex_lock+0x19d/0x1550 [ 672.792891][T24154] elevator_change+0x1af/0x480 [ 672.798178][T24154] elevator_set_none+0xb5/0x140 [ 672.803552][T24154] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 672.809879][T24154] nbd_start_device+0x189/0xb30 [ 672.815249][T24154] nbd_genl_connect+0x1597/0x1c10 [ 672.820803][T24154] genl_family_rcv_msg_doit+0x233/0x340 [ 672.826969][T24154] genl_rcv_msg+0x614/0x7a0 [ 672.832000][T24154] netlink_rcv_skb+0x226/0x4a0 [ 672.837308][T24154] genl_rcv+0x28/0x40 [ 672.841839][T24154] netlink_unicast+0x7bb/0x940 [ 672.847122][T24154] netlink_sendmsg+0x813/0xb40 [ 672.852420][T24154] sock_sendmsg_nosec+0x13a/0x180 [ 672.857994][T24154] ____sys_sendmsg+0x54e/0x850 [ 672.863292][T24154] ___sys_sendmsg+0x2a5/0x360 [ 672.868502][T24154] __x64_sys_sendmsg+0x1b1/0x290 [ 672.873973][T24154] do_syscall_64+0x174/0x580 [ 672.879093][T24154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.885507][T24154] [ 672.885507][T24154] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 672.894217][T24154] blk_alloc_queue+0x544/0x690 [ 672.899545][T24154] __blk_mq_alloc_disk+0x194/0x390 [ 672.905179][T24154] nbd_dev_add+0x494/0xb60 [ 672.910118][T24154] nbd_init+0x15f/0x1e0 [ 672.914828][T24154] do_one_initcall+0x250/0x870 [ 672.920144][T24154] do_initcall_level+0x10a/0x1a0 [ 672.925621][T24154] do_initcalls+0x59/0xa0 [ 672.930483][T24154] kernel_init_freeable+0x29d/0x3e0 [ 672.936207][T24154] kernel_init+0x1d/0x1d0 [ 672.941111][T24154] ret_from_fork+0x514/0xb70 [ 672.947099][T24154] ret_from_fork_asm+0x1a/0x30 [ 672.952383][T24154] [ 672.952383][T24154] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 672.959597][T24154] __lock_acquire+0x1520/0x2cf0 [ 672.965003][T24154] lock_acquire+0x106/0x350 [ 672.970030][T24154] fs_reclaim_acquire+0x71/0x100 [ 672.975494][T24154] prepare_alloc_pages+0x15b/0x650 [ 672.981131][T24154] __alloc_frozen_pages_noprof+0x12f/0x380 [ 672.987465][T24154] alloc_pages_mpol+0x212/0x380 [ 672.992846][T24154] alloc_pages_noprof+0xac/0x2a0 [ 672.998302][T24154] pte_alloc_one+0x22/0x370 [ 673.003355][T24154] do_pte_missing+0x13c8/0x34b0 [ 673.008730][T24154] handle_mm_fault+0x1b36/0x3080 [ 673.014279][T24154] do_user_addr_fault+0x744/0x1340 [ 673.019926][T24154] exc_page_fault+0x6a/0xc0 [ 673.024964][T24154] asm_exc_page_fault+0x26/0x30 [ 673.030338][T24154] rep_movs_alternative+0xf/0xa0 [ 673.035802][T24154] _copy_from_user+0x7a/0xb0 [ 673.040919][T24154] sco_sock_setsockopt+0x67d/0x1100 [ 673.046693][T24154] do_sock_setsockopt+0x17c/0x1b0 [ 673.052252][T24154] __x64_sys_setsockopt+0x13d/0x1b0 [ 673.057970][T24154] do_syscall_64+0x174/0x580 [ 673.063095][T24154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.069620][T24154] [ 673.069620][T24154] other info that might help us debug this: [ 673.069620][T24154] [ 673.079847][T24154] Chain exists of: [ 673.079847][T24154] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 673.079847][T24154] [ 673.092453][T24154] Possible unsafe locking scenario: [ 673.092453][T24154] [ 673.099899][T24154] CPU0 CPU1 [ 673.105281][T24154] ---- ---- [ 673.110658][T24154] rlock(&mm->mmap_lock); [ 673.115089][T24154] lock(sk_lock-AF_INET6); [ 673.122112][T24154] lock(&mm->mmap_lock); [ 673.128961][T24154] lock(fs_reclaim); [ 673.132943][T24154] [ 673.132943][T24154] *** DEADLOCK *** [ 673.132943][T24154] [ 673.141183][T24154] 2 locks held by syz.2.4825/24154: [ 673.146378][T24154] #0: ffff88802c7cf260 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_sock_setsockopt+0x151/0x1100 [ 673.157952][T24154] #1: ffff88807fd51d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 673.167877][T24154] [ 673.167877][T24154] stack backtrace: [ 673.173767][T24154] CPU: 0 UID: 0 PID: 24154 Comm: syz.2.4825 Not tainted syzkaller #0 PREEMPT(full) [ 673.173786][T24154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.173795][T24154] Call Trace: [ 673.173801][T24154] [ 673.173807][T24154] dump_stack_lvl+0xe8/0x150 [ 673.173832][T24154] print_circular_bug+0x2e1/0x300 [ 673.173851][T24154] check_noncircular+0x12e/0x150 [ 673.173868][T24154] __lock_acquire+0x1520/0x2cf0 [ 673.173890][T24154] ? ima_match_policy+0x106/0x21c0 [ 673.173957][T24154] ? ima_match_policy+0x106/0x21c0 [ 673.173980][T24154] ? prepare_alloc_pages+0x15b/0x650 [ 673.174000][T24154] lock_acquire+0x106/0x350 [ 673.174019][T24154] ? prepare_alloc_pages+0x15b/0x650 [ 673.174042][T24154] ? __lock_acquire+0x683/0x2cf0 [ 673.174063][T24154] fs_reclaim_acquire+0x71/0x100 [ 673.174083][T24154] ? prepare_alloc_pages+0x15b/0x650 [ 673.174102][T24154] prepare_alloc_pages+0x15b/0x650 [ 673.174125][T24154] __alloc_frozen_pages_noprof+0x12f/0x380 [ 673.174149][T24154] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 673.174172][T24154] ? __pfx_policy_nodemask+0x10/0x10 [ 673.174193][T24154] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 673.174217][T24154] alloc_pages_mpol+0x212/0x380 [ 673.174242][T24154] alloc_pages_noprof+0xac/0x2a0 [ 673.174256][T24154] pte_alloc_one+0x22/0x370 [ 673.174274][T24154] do_pte_missing+0x13c8/0x34b0 [ 673.174296][T24154] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 673.174320][T24154] handle_mm_fault+0x1b36/0x3080 [ 673.174348][T24154] ? handle_mm_fault+0xec/0x3080 [ 673.174368][T24154] ? __pfx_handle_mm_fault+0x10/0x10 [ 673.174389][T24154] ? __lock_acquire+0x683/0x2cf0 [ 673.174410][T24154] ? lock_mm_and_find_vma+0xa7/0x340 [ 673.174430][T24154] do_user_addr_fault+0x744/0x1340 [ 673.174458][T24154] exc_page_fault+0x6a/0xc0 [ 673.174476][T24154] asm_exc_page_fault+0x26/0x30 [ 673.174491][T24154] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 673.174515][T24154] Code: c4 10 e9 84 63 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 63 04 00 66 2e [ 673.174529][T24154] RSP: 0018:ffffc9000ebbfc18 EFLAGS: 00050202 [ 673.174542][T24154] RAX: 00007ffffffff001 RBX: 0000000000000002 RCX: 0000000000000002 [ 673.174553][T24154] RDX: 0000000000000001 RSI: 00002000000030c0 RDI: ffffc9000ebbfca0 [ 673.174563][T24154] RBP: ffffc9000ebbfe48 R08: 0000000000000001 R09: 0000000000000002 [ 673.174573][T24154] R10: dffffc0000000000 R11: fffff52001d77f94 R12: 1ffff110058f9ebf [ 673.174584][T24154] R13: ffff88802c7cf5f8 R14: ffffc9000ebbfca0 R15: 00002000000030c0 [ 673.174602][T24154] _copy_from_user+0x7a/0xb0 [ 673.174617][T24154] sco_sock_setsockopt+0x67d/0x1100 [ 673.174635][T24154] ? __pfx_sco_sock_setsockopt+0x10/0x10 [ 673.174659][T24154] ? __fget_files+0x2a/0x420 [ 673.174678][T24154] ? aa_sock_opt_perm+0xff/0x1a0 [ 673.174718][T24154] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 673.174735][T24154] ? __pfx_sco_sock_setsockopt+0x10/0x10 [ 673.174751][T24154] do_sock_setsockopt+0x17c/0x1b0 [ 673.174771][T24154] __x64_sys_setsockopt+0x13d/0x1b0 [ 673.174788][T24154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.174804][T24154] do_syscall_64+0x174/0x580 [ 673.174821][T24154] ? trace_irq_disable+0x3b/0x140 [ 673.174842][T24154] ? clear_bhb_loop+0x40/0x90 [ 673.174859][T24154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.174873][T24154] RIP: 0033:0x7f6419f9e019 [ 673.174888][T24154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.174900][T24154] RSP: 002b:00007f641ae01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 673.174915][T24154] RAX: ffffffffffffffda RBX: 00007f641a226090 RCX: 00007f6419f9e019 [ 673.174926][T24154] RDX: 000000000000000b RSI: 0000000000000112 RDI: 0000000000000006 [ 673.174936][T24154] RBP: 00007f641a03500c R08: 0000000000000002 R09: 0000000000000000 [ 673.174945][T24154] R10: 00002000000030c0 R11: 0000000000000246 R12: 0000000000000000 [ 673.174954][T24154] R13: 00007f641a226128 R14: 00007f641a226090 R15: 00007ffdabbb6e98 [ 673.174972][T24154] [ 673.617824][T24156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4826'.