last executing test programs: 1.953392223s ago: executing program 1 (id=4278): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x20, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xadf, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @ldst={0x2, 0x3, 0x2, 0xf, 0x4, 0x20}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @ldst={0x1, 0x3, 0x2, 0x6, 0x1, 0xfffffffffffffffe, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x2b}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0xffff, 0x75, &(0x7f0000000180)=""/117, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/18, 0x12}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/128, 0x80}], 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="a0000000090601040000000000000000000000000800094000000001500007800c00028008000140ac1414aa0c0019400000000000000001060004404e2000000500030003000000140017006d61637365633000000000000000000008000a400000000808000a40000000400c00078008000940000000090900020073797a31000000000500010007"], 0xa0}, 0x1, 0x0, 0x0, 0x34004057}, 0x240008c4) 1.866474932s ago: executing program 3 (id=4282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060ae904000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd0900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000340)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d0012"], 0x184}}, 0x0) 1.741295387s ago: executing program 1 (id=4283): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='dummy0\x00', 0x10) 1.670150746s ago: executing program 1 (id=4286): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) 1.510435076s ago: executing program 2 (id=4289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000100)=@default_ibss_ssid, 0x6, 0x0) 1.507338258s ago: executing program 0 (id=4290): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f00)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000a700244c2a706301f468542f3c5a3073bd00000024000000060000000000001001000005000000000300000002000000000000000000000000000004000000000100002e2e00227106d3df3496d6968e94c5f80d69f9ba085f2ee2ba705cc93eb52bd6da22ef9fbcdee7c1d807d639b8d2fb129eabaeb95d1e35f46a9a1346cfa2d8d303b6df102abb31fdf57d4440cb2050253d1afe96ff36f2"], 0x0, 0x42}, 0x20) 1.343906462s ago: executing program 4 (id=4291): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x44002, 0x0) write$tun(r5, &(0x7f0000000480)={@void, @val={0x1, 0x1, 0x7, 0xfffc, 0x8, 0x3}, @x25={0x0, 0x7, 0x13, "c802163ee1edbedd2281ec8dec10411876422d81e17e2f4e9f33db0aefa10f61e98da0bf70c0430477130e2730a5bea3188e942cc97cd7652e132ce4c0c178c060ec9541b9f23d6760012ff0c4cb93d6e091cb4adf102da21f001b69e69c9cb607739d1444cbff656e33a5332ef0ce61579b1e"}}, 0x80) (async) write$tun(r5, &(0x7f0000000480)={@void, @val={0x1, 0x1, 0x7, 0xfffc, 0x8, 0x3}, @x25={0x0, 0x7, 0x13, "c802163ee1edbedd2281ec8dec10411876422d81e17e2f4e9f33db0aefa10f61e98da0bf70c0430477130e2730a5bea3188e942cc97cd7652e132ce4c0c178c060ec9541b9f23d6760012ff0c4cb93d6e091cb4adf102da21f001b69e69c9cb607739d1444cbff656e33a5332ef0ce61579b1e"}}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0xfcb8) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0xfcb8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000010a03ddff"], 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x400c080) sendmsg$nl_route(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@bridge_setlink={0x30, 0x13, 0x400, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x92, 0x40}, [@IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5f3a33db4ad67b26) (async) sendmsg$nl_route(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@bridge_setlink={0x30, 0x13, 0x400, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x92, 0x40}, [@IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5f3a33db4ad67b26) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) (async) sendmsg$nl_xfrm(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r11, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x28080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1.340700568s ago: executing program 0 (id=4292): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x4400, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "b8ae41960767d425e369932d0705045af284d0b63da55f0e", "6ca625794480161968ffd55c5e7779dc8ec7ee54f2b1fa4ba461e1478e245ab4"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x523, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 1.148082062s ago: executing program 3 (id=4293): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) (async) sendmmsg$unix(r2, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000001c00)="11b8e2e95f", 0x5}, {&(0x7f0000001c40)="b65ede783a15f51188f244407b54032c8de25afb0afe506046e064644f2466c938a010a17fcb02b152f6fafc6a07c80e1748758b76ab0c765cc835d6bc3143018f56accc7455f32a5ded552d125de404258cf9a07cb2bb9df4cfc7a4878fae90f0f2add904f5f9fd5e2f0943af860ab4f794d3e60998d45fb240e3618e98cb897c73aef2860f4a3854cf598c9d23c56ed4923b56dd2484bcd17db02fb475ae043f50d95d527a8151ce0d49dad5978796e94f56deeee4a613358d170e0c1574fe0be3b4", 0xc3}, {&(0x7f0000001d40)="be5173b5faac7a921e735f22e37b4c89c5b395256ef33d740561b860ac4d892da8c4f613ad50893212b37a34bd18", 0x2e}, {&(0x7f0000002f40)="edcb47e6a89a35448916ef8ebe79d0feb594b2acdb1d1ef934dbaf81338fc0195bea3a23d4957a5a35512ce1d891f82850b09da2702856be8e8493ee649b57aeb62b3d9c03cd312e3f0fe654c9825f8da087d346a7f65037783aec233b320c9b6ffeecb6e30e6cc7ece99e6c4e19f0f034de1a2a46de008038fbc586e4d78da4739e657cd5f78bf057564063d60f0ef831d1db86e539c39743d54c6e3c3c8d8b1f513da969dbcee48499cf22b08d527c8bc0232084916e8522d5334eb93683fe5e57e9c9ebb7ca0b17d805fd7e6c04543b1d1964e4e56337", 0xd8}, {&(0x7f0000003040)="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", 0xe12}], 0x5}}], 0x1, 0x20000800) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x9}}], 0x1, 0x2080, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) r3 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x80000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req={0xce, 0xff, 0x2, 0xff}, 0x10) (async) getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000080)=""/126, &(0x7f0000000140)=0x7e) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) (async) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f00000003c0)) (async, rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000600)=0xe8) (rerun: 64) sendmsg$netlink(r2, &(0x7f0000000500)={&(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000e80)={0x250, 0x21, 0x2, 0x70bd2c, 0x25dfdbff, "", [@typed={0x14, 0x59, 0x0, 0x0, @str='ecb-serpent-avx\x00'}, @generic="06fe65f0eda4faa7ec637095a77fd766135a06e9ef1f4d5887c85a85399f2f8488b1ea5d7b83ddcb1d98a3c2630b6d41a46a1ea769d422a330de9e9b75896f45ed902cfdf783827df99e0ae8097423ecaa4e5e842e6289398039a8cc8878598f305c85ac5aaa7381e05b403684a9f58eebc1d5b347df388af6414bd17214a6c64441486197dd2ea9d0f30dbcd4bb3a3d366e6b7c77509dfc5f2a168cdbb92f6ed729ba4fa93eecef7dbc6ed7361e5c4378925cb4775380c52bfc44d67ac185a9712d3c1ef0895ce6947457c7c0bc66ffb49af7827befc964c3caf885752dfe6e26d45ef248294bef4cbe2aca2f531413", @nested={0xb8, 0x154, 0x0, 0x1, [@nested={0x4, 0xe2}, @nested={0x4, 0x1a}, @nested={0x4, 0x3f}, @typed={0x9, 0x135, 0x0, 0x0, @str='[:\'#\x00'}, @generic="f82bdb2f458563bc6bd4e76dc85ced033aac992c0db505a0573ade5d64b3b7350175f39ecff1af06ecbdd9df972a1cd27a13addefc879b30e5169fd8b3b13b59edbbcff49ec1dc977cc69a02b01481e1a5d3bb009ab2c790bca3c1e901bfd14702d563bef00d4d23e693e33382f6c5d56b9caf9c7db29aed01ec4155371aa0e8", @nested={0x4, 0xf6}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x131, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xda, 0x0, 0x0, @ipv4=@loopback}]}, @generic="2ea54a0b51e141f76f423bdc1fc046d7a86751", @typed={0xd, 0xd4, 0x0, 0x0, @str='skcipher\x00'}, @nested={0x5d, 0x158, 0x0, 0x1, [@typed={0x4, 0x28}, @typed={0x14, 0x5f, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x8}, @generic="fa1cd564202a9b737ba8598d297afbb307252fd9d49465cebbffdc7c7a00d34cde43f6b99f32d168dae4bac88ac20d5c5d86eddced2b4c40d3", @nested={0x4, 0x4d6}]}]}, 0x250}], 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.067652916s ago: executing program 4 (id=4294): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ff}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xe, 0x1, 0x60}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x10, 0x8000, 0x9, 0x2, r3}, 0x10) sendto$inet(r2, &(0x7f0000000240)="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", 0x1000, 0x8000, &(0x7f0000001240)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$kcm(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="6b2f3388fb3dbd7db1d21aeb89b3b2e69e0a7cfadbad69a8e14c33bb2ab4f6a3089531c3dd6852e151156d108bf79804cc5a9bd9ee67193c0bbf01df8854fdd66f46", 0x42}], 0x1, &(0x7f0000001340)=[{0x58, 0x10c, 0x200, "288c971418d36bb60baac26c4d62a6774fc93c779ad071315d241384aa48d5ba15bb9266be2dd312f0d689ccf1d2bb2fa62c8d7a0380b84ef477b7de732be61c2ce3b26b0a"}, {0x28, 0x108, 0x8, "91fb65f2b13f156a7b2360f4c4c32ddcb26d30fb09"}], 0x80}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x44, r5, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8045}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001700), r1) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xe4, r7, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xe4}, 0x1, 0x0, 0x0, 0x400}, 0x28000) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000018c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001900)={'wpan4\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r9) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001c00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001bc0)={&(0x7f00000019c0)={0x1ec, r10, 0x24, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6c}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1000}, {0x8, 0x0, 0xa}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0xc8a}, {0x8, 0x0, 0x7642a536}, {0x8, 0x0, 0xd0a}, {0x8, 0x0, 0xff}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xffff}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xfff}, @NL80211_ATTR_IE={0x16b, 0x2a, [@ibss={0x6, 0x2, 0xfc01}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x2, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0x2, 0x7, 0x40}}, @mic={0x8c, 0x18, {0xfcf, "ba2e3f0d3bfe", @long="c79bfb6356b774b211484a85e568b526"}}, @challenge={0x10, 0x1, 0xd7}, @cf={0x4, 0x6, {0x2, 0x5, 0x97bf, 0xf22}}, @supported_rates={0x1, 0x7, [{0xb, 0x1}, {0x30, 0x1}, {0x60}, {0x12}, {0x60, 0x1}, {0x24, 0x1}, {0x36}]}, @fast_bss_trans={0x37, 0x119, {0x3, 0x8, "c71b63281b170ae09ccd007a2d29a4d6", "38d0e46aa55868ab33ad0ed80580b247c8fe8e8cb8cbcab9a2eee62a3b727daf", "2fd87ff3d864c57a31e71b32a249c24a11c9b05445d70a1d07a3cf64fd516244", [{0x2, 0xa, "b908e2b0ab0ca9800594"}, {0x2, 0x27, "c347b38a76c7fa68ffc0a245e1048179aecd71a48f32996bde48a67768e7e5688f70e060d8e617"}, {0x3, 0x1, "9e"}, {0x3, 0x17, "a99e801fa69ea977c6734f415520732757b5e9b8c60ca2"}, {0x1, 0x1a, "706052929760931343ddb6574927f4706770218fdf083d1d79fb"}, {0x1, 0x14, "9b13282f7d044a58a7a0be1fcbe5b91373c95c2e"}, {0x3, 0x26, "157e22d3845e65875b36744d247c7406ca7ea8be18fd86130f94a5437a07621ffb18f92e15e2"}, {0x3, 0x1a, "4c7425d267788bb1b4b5d459e884a0683500bb08f3289d260ecd"}]}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4010}, 0x5) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001c80), r9) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r11, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xfffffffb]}]}, 0x24}}, 0x20000840) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x74, r10, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x79}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0xc0) socket$caif_seqpacket(0x25, 0x5, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001f00), r6) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000002400)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000001f40)={0x468, r12, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f88}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb60}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb888}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd55}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x84}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4c}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8f99}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x883}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x240, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "a4d8a53981ad7ba079e23bd917475068fc2093dcf1929808f20db2050b01b684da4becd7aea4460869b438e8861e106c0744661f8a82b7f8bdf86942081c10c1601ffe7633eb7bb1eb06d879e738fffbbd9c9325da6f67af9f8f07abef16c173e3d13c3c7c8ba824f316402b00179c5e1e27b571ab75dd54c5c7a3c920391383634dfb7acc973899baf83fb5cb39791bff8cba99ba8b5ab839be315a975d029ca338644ded1d6ac4c72eab"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xce, 0x3, "ebfff9b2d050f10368f51aba0206de13021bf88d2de89bffd9289cc47b93c8d6abf382df6c6901af04999e336c2a79b29fc4073944bd5a1deefea9069df6630b058e97f7ac4b3b64b4d1ada0265693161a09f6daf8199a422466cf45a4d622290c4a27695440c5250989b0da029bb355823b839aec261c89b81897ad9ea24586e9f08ed51cf5722184f9d242c42564075ffd392e617cd4ad41c9606073e6986318f09460157a8d4a5be7ae602e6efa8d2fbf1e372af2ed71b471ad14c600d30b1bdea35750d1a259b417"}, @TIPC_NLA_NODE_ID={0xad, 0x3, "087f024ab56a93121bf5c86824f94788e21ed9d140eec1515741a5065375bc0f453b0459f0691a2e0210389abcb84c02bb31c1e46a15fd58ea86cad15c0725478aa384e25a974eb04450774f73b9378aebf0437e1236af509f8db89fcaf08dcf9bfa0f861069a405ded73e46647da8b49e22dbcefd1cc61c38216123e4a7f256f8c24d6d067c4f502b306ae8c0c5c4c7ffe4e801d52a6fd3ee70b63fbe629c2e2087d945ed3d7c5c02"}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x468}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000002800)=@nat={'nat\x00', 0x19, 0x3, 0x362, [0x200000002480, 0x0, 0x0, 0x2000000025be, 0x2000000025ee], 0x0, &(0x7f0000002440), &(0x7f0000002480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0xe, 0x892f, 'dvmrp0\x00', 'wlan0\x00', 'erspan0\x00', 'wg0\x00', @remote, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xd6, 0x10e, [], [@arpreply={'arpreply\x00', 0x10, {{@local, 0x1}}}, @common=@AUDIT={'AUDIT\x00', 0x8}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x11, 0x5a, 0x800, 'dummy0\x00', 'ip6_vti0\x00', 'veth1_to_team\x00', 'pim6reg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3326e4832ff9365e}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @multicast, [0xff, 0xff, 0x0, 0x0, 0xff], 0xae, 0xae, 0xe6, [@time={{'time\x00', 0x0, 0x18}, {{0x1, 0xf, 0x70ce, 0x131cf, 0xf, 0x5, 0x1}}}], [], @arpreply={'arpreply\x00', 0x10, {{@link_local, 0xffffffffffffffff}}}}, {0x9, 0x40, 0x0, 'ip6tnl0\x00', 'pimreg1\x00', 'geneve1\x00', 'veth0_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0xff, 0x0, 0x95a5db2892ca2952], @empty, [0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}}]}]}, 0x3da) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002880), r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002bc0)={0x6, 0x0, &(0x7f00000028c0), &(0x7f0000002900)='syzkaller\x00', 0x40, 0x75, &(0x7f0000002940)=""/117, 0x40f00, 0x5e, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000002a80)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002ac0)={0x0, 0x9, 0x1ff, 0xb8516e5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002b00)=[r2], &(0x7f0000002b40)=[{0x0, 0x1, 0x6, 0xc}, {0x2, 0x2, 0x3, 0xa}, {0x0, 0x2, 0x10, 0xc}, {0x4, 0x3, 0x0, 0x3}, {0x2, 0x4, 0x10, 0x3}, {0x1, 0x5, 0x0, 0xc}, {0x3, 0x3, 0xe, 0x1}]}, 0x94) 913.548132ms ago: executing program 0 (id=4295): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) close(0x3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x200, 0x15}}}}}, 0x30}}, 0x240048c4) close(0x3) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4801, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000003140)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x40000000015, 0x5, 0x0) (async) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) close(0x3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x200, 0x15}}}}}, 0x30}}, 0x240048c4) (async) close(0x3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4801, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000003140)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) 911.146875ms ago: executing program 2 (id=4296): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x21dfdbfe, 0x1}, 0xc) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "88bfa726667b14f6", "bf517469f9a9722f10d423f939d1d7ff", "c5a9d6b8", "a8fd226b039646ed"}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000090a05000000000000000000020000021400000011000000000700000a"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) 910.605753ms ago: executing program 3 (id=4297): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa0}, 0x1c, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000a00)="d2750b45d08d68ed9de9ff15b4cb3b927c454d7ab1f4aff7936750925140f80a0dde45dadf1962e73af966148f976cb98af8ccc0b9a4994ecd3b68bf6d0e1b4043dcf16d98b281220498467c17ffcd87a302026c3c3e4ce23e5938e1dee7a1e86a588aa11af2f8645f40ea7182a1ec15b6d0d1db20362c1d272c4c8f37b05a396b466e495c313ed3265343c387d99294f655eafef10110a3a75f74f4efca4a09e6ef0853ae9b687dfcef00d5f5a4189d58262dc84b7df08c759ef6f1782ff309aa39fe921a1d3492c49d75c09c51db18d1e67fc3b743c1715a7f520915ffb23cba005efe31c1fcc563de87652acd27105df89facbd28dae4795e32a5ab9f905f2318c002eb20f3ffd8d492cfd1c885d34c3a6c1a8e9e81bb4961eea7fd5b507aacfde5d8671326ddc8a1f4887f94a8d8bce3776f6b59dd16686e61e81089c74800da7b8d3f20cb6e939fa83b3aa6cb375e4f11df59ff1b19b9a78123cbc270fbc92b4fb7dfcf4189b5c2317705aa9fa7f08dd6705e99cdf77c574dd476c85447822263ac18c8c080be6d56f3ad557723ca9b24485847d43fd013666ccbc0a7986caf55e63714951759c6ca3d0d8214c71e45da72994fa387bcf698ebe27e2afdf6bb45a7376180b4446066255482881f2a5e132bf08b713a19460a0bb1b9c9c40257028fd48527d770221871b213eefd426414b3893257d01668dd0658947744bedfc5bb23aeb88fb96a11ec453dc1076289efb584ac0fe61a555cc794ad4f7319de613742fcd4fde8286e25838f38b1d955bb32c2d662bbdd72faa5d8455bee47a1031d981d3b2b3656c55a8dfde0846eea6c244b02f395b8e0d43afa86009dac6a94e26dc1ecb803b9bd35ee0654ec4017a501ac8ec6d4f0065483b7feb5ac863667b689c08007f0e36cdd6be282df3f4ee21d51b1178dbb262dc402c995ba00bb09bdfada6ad9d7168f7d6b98484a9b6f1b912583f6d47191a8a925af6b7e20a8e7f56591b403c8a7671a8dce94e0cec79666dd637ea8e090ef9ed5afbcf36698a8705c2e5e988e5c0a91e4444dc019ec56f491e428ce37e416073cfd1cd4ec4ab8c24ef2b054bf163ed3ab7131cf6beca71038133b2d2eb05c8a1c38466c41611b0ad2b83fd3839016f91870c6205a99a2187a046d2e7d3b31832536ccf2b13754ecf3bf9bc59a64d72472ff55b9e6e74dc1457302b58968fb70fa1d5c049d2eed57453e01cb6a4ab0a602805a4dd818842281ee7d361af161bb913e8100e926ef0c15d26c8f75e58ed41760d6718ffda6d30f67d6e97652cb7c66332b82b9bbdc223d1d1faa2d6362676ace00f30a129b62bd16f3248059395b40db941176eb26fb61660dac96a209ad53c4575b0cf718458e3288305b157bdee3e11616023174af2e9de33d1537849df34dd2868f8be101b7316e2facf4c8d6528bddba6f6ed38d0926fc81950222248950c53a1ac7bd5111f27a6c4a57022051d56f288bb194df72b8c87f8e95d6b00da55871cb548d0c9544f3581a8d9bc8b2e234c9785c29769da2dcdd5195ade39613330e57c5eade1e4b8fb12e776b30b9ea431498aca2716ffd03bb209b5541aebb24bf8d8ce4710454241c21c611445451f4732b3950c71f55ec655e8817e54bc9ef5a56a458b2e2778d49026f8b6619734e1d13931b3ef14b920d3f3bac587a46b79a6d25df272431b2d88b019d5dee6b6cad5e9ef40923aacef6de3e8f286194c7d5291becd289273afeb2ea26c1ab0871dd9274ada2060f397913c7f2e7c165c15665e54ec561452b9e6442fb87668907d3419848dcdc220a46453c72336f9ad678298b00f81100fa6d133eab47d4f5cfe5e302bd22e2c6f54213b2728fefe6b63df021177142f161a90f7e33ab5fc999bf0a73c5e93bf4dc81b5251f800d00a24db6ce51ba5ac57113c2679ce9e1b3e820590f8739d0cea04fc86c4a16a2ebbaaf0140bdda84ab2b316c7d26717af5286521a996b72a4428a8ad37c02ab41a724e0dce51cacc8c8469a1900c3c1b17bca192aa914c717e3d28aeda94fd666f2c3504605460b2f3001c753baca775d64b54c95a7d256526fd1c223ca8a0dd48b844c6e2c175f8a0e0e9e83ff92166e395b1fb182802a5f6b7b0e341be3d21827a01da3847bd09ddf9b0cbde44581aece87b1141078ce381f05802c6aa6655677c11e5ddfa06f2d0468a9f7e97b20f04ac4c635086615f1fac91101cecff0c2b50dbdcfb484c556bf651588f90567105fdb96f64d1460f262e76e0931b27f9324f284aeb757c1ba92389757dfb710beabb12bb895c5ae157470615e48c2639a6ee03e81760992b4a3beaa6cb8c9cec11144560951f2f934d2ab9c7422d3317d266f3baaeb52cfc1d9c42364800730ce9e4ebaa3644ef6ca86ad5fe4e73a3504f2613667d89b098002f6b9f190b4ee8aa84c4e2a6d1c45eb5af21b8cb7c5a629a96d8e0adcc827a8a431ee33480fcf2d1bce37e16aae0cbe4063e71002445eb563eec5654cb0a7a333fb91f6ea8d8b070a08e94f67738089cea38eb7837be9fd28656a1f1682cbe95597c5aa02398d1c214dbb0dae61eb0c1c724c92fa6f947d6d9d56850231089991d5f7b36dd97087d08e34f8a9d4f5b8fe40a194b7651bc335b629ebd2a328b3bc493b9db1a82b0010691c093c7519f25ef69c5e7b16b0ce262e59dbc826e5adcc45a45c12c601b098bd106a539425f218d4f9c195a7b82a24e046678076120f4f63a38faee8dfcb09170677f98f021d99f516755c80d74af369ab9fcf19fb4debc2c3d9b375556396f8022eeb6597e384ff7d8e930ad39a25985049f81566f8ae61b9ede3df74f8a00b8827665f7c6a233f056a35f3516651fc9b1d0e1766d504da8cf7e3d3f5ca7f8d097e7a03c88b75bed94b46c0e47dda5a4eee957292b09b86074971fad95eb264fb01e16ce52bbb27cb8024101e08906dbbd7150debe90aaaf63c2500ddcdc88d5ee9053c906414a01a03a74fe1a837ee31b9747a62c553fb0e95da4913ea4ae6ca3a64a0db37c94c759634170e92d12eb6ebb99ba21e5b08fe75c9ac06fb82ec636241ee18d076dd57631c1388b6ce468cd4ef18fad5672e6de2d6fcc817f5bbd6838be17874f6bd6ce5322e7c04cd8dc5cddfcb399456214cf63c7d4f72fc1f2241656d3f6fce5d111cac271fb453d58978288e2a4ba22f6c264851dbe4de7b91b24cf15a49a44ad5dcc1254c9b67ebb6637a3621563e5693956176b1efa50ca00f6bf4e1fd7254cf643218d8f83ba5e4d2097383db823fa079f0255b8cca1884bc0aeb5dedb2b702bf1f282472cc307fd7ca1915896d995b038fe34d29c6c85f267521bc2c5cf1cb088073b641ac9de29b99acdfc46fa69704912246fba1113d993cf5043178d2a29201c4463c5fa4f5d0bd208a30df8ee687dfb1232fe08c3c654d94a7be80a79be8e56e197498e96175a35a77baa66e90b53c9cab6934f34f26a9e4d1e92618b31557e2bffdce1fa7b936a4a524ce225b2e9d6d2e8c6dd996f242e9bd889ae27fc80ced4b65a145faea684b1b0bb562a933d2add7a861743fdd1c5e8033209bf101de008c00c524e322285f00a9ad57ca84b590e045b27e63aff27c43bb4b44cbf02638b1b54950ac6f295742cdb0463e72e9878c7ff03dc4d037a16708db0fce4384c3cf71151a628cd171d3fc5f6c94f69e8410d48e4457e637467338b862f390f6e1599f2651e55d3dec06b106d9e9aedc864e25ceb60c6caf6238558348e1edc585a02145f00fd30bdfb5afb7802c248ceb22f8a14ab6d74da25c45589b0f1a97fdc9c39dac535163397da25986e3b0f9b32be1f1e7c266a233ce8c5ab07237f52e34d35766bcb3911cba25d434ae9d5e7bcd0ad4985a0c6a01ec6e6143c88f459c0fffbb24b5409de50818918968496413e8de5214a84cd8811b81e90cc5b5576b64a5feee492ef60723f7618e7ec7fea62871bcabb86f0390d407571a4d0cb321a5bdd3883c337b2c1099dc984b086d75bbadd47b9201dc58b7012ad152da9a093bd04579b5ed6e61fd09384736169550a8adecb6dcaf7e2bcb88373539561bdb2f88c034a7d21c589ca19f5c086517b8d10e9bc66151522fd97915c64e1bb7a57e79dbb38815e0234dca9523b2e20311026a39cabc1abe69bd6856ca4f3b4cb16def39212280e0532bb9deb3ae9f0de517809becc2d8732f65daa4148f6434a004d87fe4836c1382083e32f1c5135a4c19d5f4950ff9a8a54e230886c6b", 0xbc9}], 0x2}}], 0x1, 0xc4) 759.827264ms ago: executing program 3 (id=4298): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="4b0003000000", 0x6) r1 = socket(0x2, 0x80003, 0xab) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 707.479801ms ago: executing program 0 (id=4299): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140d, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x4000095) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4040080) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x401, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000090}, 0x24000100) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x70}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8090}, 0x20000814) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4051}, 0x4000000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000840)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000880)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a00), r1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x9104f684e0fa114f}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r14, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8a54908596b5e6df}, 0x40040) (async) r16 = accept$ax25(0xffffffffffffffff, &(0x7f0000000c40)={{0x3, @rose}, [@default, @rose, @bcast, @remote, @rose, @default, @null, @rose]}, &(0x7f0000000cc0)=0x48) recvfrom(r16, &(0x7f0000000d00)=""/103, 0x67, 0x40002103, &(0x7f0000000d80)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x80) (async) bind$ax25(r16, &(0x7f0000000e00)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) (async) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)=@newlinkprop={0x48, 0x6c, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x840}, [@IFLA_PROMISCUITY={0x8}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x4000000) 573.212004ms ago: executing program 3 (id=4300): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) connect$inet6(r1, &(0x7f0000000840)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c) (async) r2 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000080)) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 570.694751ms ago: executing program 1 (id=4301): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0)=r1, 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'vlan1\x00', {'veth1_virt_wifi\x00'}, 0x5}) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r2, 0x0) ioctl$FIBMAP(r2, 0x1, 0x0) 562.822397ms ago: executing program 4 (id=4302): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x9, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4000800) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r7, 0x0, r0, 0x0, 0x406f413, 0x0) (async) splice(r7, 0x0, r0, 0x0, 0x406f413, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 500.246247ms ago: executing program 2 (id=4303): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x4, 0xfffffffffffffffb, 0x4, 0x2, 0x7f, 0x3, 0xb0d, 0xfffffffffffffffa}, &(0x7f0000000080)={0x3, 0x35, 0x8, 0x80, 0x6, 0x5, 0x10001, 0x3}, &(0x7f00000000c0)={0x5, 0x8000, 0x5549063e, 0x1, 0x7, 0x4, 0x7f, 0x8000000000000000}, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000140)={[0x1]}, 0x8}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, 0x0, 0x8001) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="28000001", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf25250000000a0001007770616e3000000005002b0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x4008004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x4, 0xfffffffffffffffb, 0x4, 0x2, 0x7f, 0x3, 0xb0d, 0xfffffffffffffffa}, &(0x7f0000000080)={0x3, 0x35, 0x8, 0x80, 0x6, 0x5, 0x10001, 0x3}, &(0x7f00000000c0)={0x5, 0x8000, 0x5549063e, 0x1, 0x7, 0x4, 0x7f, 0x8000000000000000}, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000140)={[0x1]}, 0x8}) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, 0x0, 0x8001) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="28000001", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf25250000000a0001007770616e3000000005002b0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x4008004) (async) 461.186259ms ago: executing program 0 (id=4304): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local}}}}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x2, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r4 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r5, 0x29, 0x1a, 0x0, 0xfdb7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xd, 0x5}, {}, {0x7, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}}, 0x0) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r7) (async, rerun: 64) r8 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r9 = socket$kcm(0x11, 0x6, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r8}, 0x8) ioctl$sock_ifreq(r11, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r11, 0x89f3, &(0x7f0000000000)) 349.050769ms ago: executing program 3 (id=4305): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x48094) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}, {0x0, 0x18}], 0x2}}], 0x1, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) (async) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@private2}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x2c, 0x17, {0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa, 0x0, 0x0, 0x0]}}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x164}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d0001000000000004086aa42d"], 0x30}}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000140)=""/112, &(0x7f00000000c0)=0x70) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/255, 0xff}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f00000003c0)=""/261, 0x105}, {&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f0000000080)=""/32, 0x20}, {&(0x7f0000000000)=""/116, 0x74}], 0xa}, 0xfff}], 0x1, 0x10002, 0x0) 342.177514ms ago: executing program 2 (id=4306): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 312.767195ms ago: executing program 4 (id=4307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x0, 0x0, 0x40, 0x0, [{@private}, {@local}, {@local}, {@multicast1}]}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 270.230646ms ago: executing program 1 (id=4308): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r2, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x40, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x18}, 0x40080) socket$kcm(0x2, 0x922000000001, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000080)=0x1) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xb}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) connect$bt_sco(r1, &(0x7f0000000000), 0x8) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000f4778b9571d648ffa5f063511b67d4000000000000000000000000000000e2ffffff00"/144]}, 0x108) 173.08991ms ago: executing program 4 (id=4309): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44040) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES16=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0xe, 0x7ff, 0xfffffffe}, 0x10}, 0x94) 171.404732ms ago: executing program 0 (id=4310): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, 0x42, 0x1, 0x70bd25, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x38, 0x0, 0x1, [@nested={0x4, 0x6}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x8c8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0175de31562ee4cbcf19670d69f036c8a11c46eca735f77bf525ebc0b780d8f419f47a3d4f427f83bc239e6ce6f658a3892361594a52f2645570e2f570b6cba26e9d69c9ca151efebea654739daff38a"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000002800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x3084, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3048, 0x3, 0x0, 0x1, [{0x200, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "439e54dc9ef66c701802e30cad5bf42465ad38e35ad843460aee6617ef69051463a4524b81e460803a371a2644bb52ec8d5646b28247a4e7d15744d87811aab4bbdc6e299960fef7c1867f1875846f0e7303933918c4f992b7927790889abd4ed1c14ba5240d6be078b773f3e6f02d4e01d27c7228f03e4afa603f16be0e8c3cf25869259cf1750489893efcd843c6c7c4f81bb971c12a7b259f715a2dddc05ed47cbc247f395a147c9d88bc1d68efc83fb9ac84ad314695ddde0c50b661484c107e7370ead4df11d21192ed0dde44068a87fdbe24a8af6e78f7c6d6230162b5f27335f6197382e239944c6c39813b889beb4b2d7d"}, @NFTA_DATA_VALUE={0xa2, 0x1, "52a34f7e75c095f31d158cebfacef02d5cb75dc30f9dbfdcea5fefb2cc3bb386318419060b40fea0f207383e42f1e7aa10fa85755d1e1a1e8c3320f72d990e844e2e22da9467651fca373f4bf524b1d7c99ab5affbd7f4c2978e766a28448b4f5aaa31ca15e9dd424c89f48a560c4f34efe36c30ae7f33cb8ca75ce30e3c444a89ffcc6fd586d18eddd29a69d84d479ad464fe7738dc3488acc654f91dd7"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000001}]}, {0x2b0c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5e, 0x1, "41b5873661028731f11016fac89501739ba1b9770faa382b063d77973811b143e1653abf3448fbe603198fe78f2c0b4c7da298d95fa5dff45cd7bec50b708296aa0e8138b18414c101faf443e703c5dd1ff993859a629ab2d6d0"}]}, @NFTA_SET_ELEM_KEY={0x1364, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x82, 0x1, "bce5061a78474756c0aca590838218f5a7ec3e7e6d0f3ad38500b7b8c5dd4fa0309fc78d4bbab656abf29a2cd0618efae7822b2897fdb69e552fc322c09c25cd3a944572672458e9819353d27e4d7007dd1e45576a8f4452b8fd2bcd84112576813a30921f12e50fb332144a5e210cc54bbaa457d835cebe03c3b65bbe42"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x16, 0x1, "7aa28bd0d79c616a545796e62eff06e57419"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "01ad8d1f0e578100091bf85518c2562653ef08d387ed8e4cdade1e3b3409db9178adf3b317d405e864ec84da7b60f5795386b2c882de5b98f1bd008947e41e44ddd1105fb8484695aad5db693a9bff8ff5ea03187a6548b27616305140c72335b1591b16bda9962e6314c8d5630f2c7cef8361a9ce46a0ad715eb26d6835772dcaa599b21ee620634b97bb50706ca6eb085bbac8950b8b27d7e2ec9876ed9045f4b2836799d4eca0f8a747368ce9a4341060917a418f55440747fc966e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "849553d85132f8ad10df16254cdf90c14a75517f1c5858fb47b57ea355139d0e7cef483f1c23bba113e064ac818967f218cd62b8ed3035d22d3aec679a3426a355d083ca465dbe7b96ec79ffda1e5fdb7c27d60a1be9a5f2d1f2ac3f688d221c8194f7447dd64c0f4c046e995c69e5717d44d7ff5fe4f508e1a5f03ed6a0013eca16f4ba876cdfc688379d4f89c41c5b9aaff91bda9a896ab8e3e0175a5d50b1197ba168444e0d5a142602a15213cdc8a9d19a34b5714d9804977a8b45f91cf533"}, @NFTA_DATA_VALUE={0x81, 0x1, "6f3562d421951f04c150cf407ae18c5a582ae9a5226066064db88873d3a9c2be201c0af57d4a214caa441e0513f4bb4afdc8b2c83469832d17995b4de022837a2f177765318fbe75be8692e4403099b4cb6b12800666fd7e7c34c8df59f731ae66dd913456053e226ba799b1dffef1940e5b52fa61cc808a3df48bf266"}]}, @NFTA_SET_ELEM_KEY={0x210, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "dc2cc36e6cb8dfec2b43a9401856d57484005d714d5bca9413f99fc9977ae239679b0db2ee2c8fe24943164d3b5498c1c10412057c3fa3c051fa88b68083de0f667b"}, @NFTA_DATA_VALUE={0xa6, 0x1, "05f51f37464e593d323fb3a182efa8ea0d1ff426c431141c87569ad76799eca355e6e4c1df9e43b853415f443bb150a11d72893d8b9f9a5723fdc22febe7023a070b286c675e61fc6781c19fe68024ee761e91ce7ff88e83a9607eea4289a7d9cae06fb7bd3336514f1683761726899872a042424b8e1a3392c37b471c16620a2f56afb69c5b4afd56fcc5c78dc630b6e5f20c0a1462b4a95d32e7c55773b71db29b"}, @NFTA_DATA_VALUE={0x63, 0x1, "11f01a72fe1711de251026df68b5ce456abdb0b215b1e181ee11b11fd002b7bdc671809bbf9fb18cfd0b5acf8cf7e697bff951dd8ea6b4c6dcc877431eab18f0b656e44ccf11e831f529a7c2cfc4bc8bda8e67caf2ad7575ed8be7f051b5a9"}, @NFTA_DATA_VALUE={0x3f, 0x1, "64e57538f16f1f1265ad34b95915bebc6b959abc00cc338e5253309e1b4ede543de5fbf05a557e1e4983b53697195ea320a75982c362c7132ba0d8"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x25, 0x1, "72ae7e94d13f912ad14cbb5f0b4e253d40a91a2089e1ce982e6b7b690162e5a6ba"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1a4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8}]}}}, {0xbc, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xac, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x79, 0x3, "63cb88d9aad4c0551aa36dfdce485cce83984f08c34ac1a5f78d4823088f504ff97f6581cd1d0ff25d42e44e53994df886af28a46a831a5111b8e2328775e7da313517ca63198700a8935cc964ad718cbaccabce3c0be4202e3f06a791d3b60b44b9489d969e46e0f8530b79e34af23b0653222ff8"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xfc, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x68, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}, {0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}, @NFTA_MATCH_REV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}]}}}, @NFTA_SET_ELEM_KEY={0x1238, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "195fe8f24a6edae844de49fb911975425ef4eba35e7bef58c6a588c14a55ee30a03671ffb2d38f9518917a23cae1bc7186ae9ade15f0b575702fa5b93ad17522fc690a5085e1df7d81a2e73a44b9202035c794552beecf24861776bc0789ef5850ed0929b7ceda374c0d154ce137f74a875eed395c5176a543275766999604ba6110e20b4b716af503f040d0d133ce4719aec600b59d5c68cba8639aa75a3c484fbf5aa515257124c2046281b085d7276f5ed8e64aea234916866590ebbad30a97063e2e63a51f5a80"}, @NFTA_DATA_VALUE={0x28, 0x1, "b1d3404a1ac13896eac72c5b4d88b678361714101a2fbc03f8d49815eecf8fe76824d305"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x5e, 0x1, "5d7fc5b91678365d30bb2a646d0a28611ae17f5b71b62be310479effb792ebb68671b34d116eb736911c413c3df95062e531f41ed168136c0ac25299dea1626acfc6f1ecab080031f7cef682a60e8c504554509f12eb114a85b0"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x61, 0x1, "b82a9cdf8923e67230f3ea57898adde0ba0826a8c3adedba7436d5dce78179148cb3b31b5e0b96bb5e55c8ac6dd8068692ae712533b0796d77e85c82ea3451944ea01774be4d647efef455c5e339a1185c36c7ad413893596a0f984795"}]}]}, {0x4}, {0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_NUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x20c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "725b184c"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x75, 0x1, "b2d7def9a9b30612a7b654bc526764bb172b5eb4c768f7ca0df3c529f7fb95cb5f6c5827e2d4f8d471c878aeeb2c378620ee38242724fb24dc2411e4c8ca5b77a41b7b5efe80935a28674e5b37f1b3f167b8313426545edafa08e6a0b443fb557d6e8cad9139f345e845ad17c33bc8eea4"}, @NFTA_DATA_VALUE={0xe5, 0x1, "39136f4c7555c29a97a492df74c97579015bca125eace1a8a25937a7219c9d6a69bb5aa202aa42aeb46ba3a35fc880c920cc6a0b69ea50ecf975e19f77235b3da09a836de65a725a6594c95787eec8c28218e021d44773c8d5ebb871ca3e8152e5fe778fea13946babf6c974da18d986827b6932590517b1e6dfd3d40f22cd2129c2f47d2d7bf8a467c53f011369904b62bd7dcda829e4616dc93c62bcda64bc2cbb6b644276c79d3998ffacd7c8531cabe66cff5be455505d77cc445ead748369faa579f11c621493080b2389b975c413999b717562c6bfb03d88551d765ab65a"}]}]}, {0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x7c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x13, 0x1, "9b01404bdcb88ef66078d95632d772"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x30ac}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r5], 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7d6a461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x7, "ccb3e82d2e"}, {0x0, 0x8, "a33b7a6b9500"}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) 142.155749ms ago: executing program 2 (id=4311): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0x7fffffff, 0x4) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000800)="de", 0x63) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) (async) close(r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab", 0x80}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYRESDEC=r6, @ANYBLOB="2e7d69570951f8134b9579367a5b9a314892607d2b2be8e39b0cf92d03de33c68c5145af1667ee9a8bec3d3a2734715369b0c2dea78db4e0bd2cec5bd876fdf7e4ae6b994fde7339e3eb0cf8cbe376bac54c493d52c7eaa524f4dc3c3eaa13a38e1cab7c503e5a6525dbbc8d", @ANYRES8, @ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000890}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="080027bd700001dcdf250a00000005002a000100000008000300", @ANYRES32=r8, @ANYBLOB="0500370001000000050038000100000008003900faffffff08003b00010000000500380000000000050037000100000008003a00b1ea0000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x240100c4) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000d0a01f9ffffff00000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}) socket$inet(0x2, 0x3, 0x5) (async) setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000000080)=0x13, 0x53) (async) ioctl$SIOCAX25DELFWD(r3, 0x89eb, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000007c0)={0x20004011}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0}, 0x94) (async) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) 107.450877ms ago: executing program 1 (id=4312): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd61fbddf000083afffe8000000000000000000000000000bb000000000000000000000000018000907800000009"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300)='M', &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f00000001c0)='M', 0x0}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x40080c0, 0x0, 0xffffffffffffff16) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0x10}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x2, 0xb}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c060}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000005c0)={'tunl0\x00', r6, 0x8, 0x7, 0xeb, 0xfdd, {{0x18, 0x4, 0x2, 0x23, 0x60, 0x67, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @multicast2, {[@noop, @ssrr={0x89, 0x7, 0x63, [@empty]}, @timestamp_prespec={0x44, 0x1c, 0x8e, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}]}, @timestamp={0x44, 0x14, 0xaf, 0x0, 0x7, [0x8, 0xfffffe01, 0x100, 0x3]}, @ssrr={0x89, 0x13, 0xcb, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010102]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r7, 0x21) r8 = accept4(r7, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r9) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) 1.384414ms ago: executing program 4 (id=4313): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b04000000000000000002000000140000001100010000000000000000000000000a3177b7b98ce68223077a8e65187a08279a37c49a8e0918093055076ba52c7ff722d8e874b1564a71d366346422221604a8539613c570e476ad5226b6fc889e1affdda75f15c24b52b554cf868c91802f700141514afd0f9131efd82f3f479dbbb9701422a07c2f813c1cdafb970ff0dd3ddfdb29e58afc30f6920f68c7feca5d2535cc34618d2272077b47af83ad860166c5e49f1c69ff2eab1cf7749a0840e6782be10f799a2154142791af016355ae488111e93e"], 0x3c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b04000000000000000002000000140000001100010000000000000000000000000a3177b7b98ce68223077a8e65187a08279a37c49a8e0918093055076ba52c7ff722d8e874b1564a71d366346422221604a8539613c570e476ad5226b6fc889e1affdda75f15c24b52b554cf868c91802f700141514afd0f9131efd82f3f479dbbb9701422a07c2f813c1cdafb970ff0dd3ddfdb29e58afc30f6920f68c7feca5d2535cc34618d2272077b47af83ad860166c5e49f1c69ff2eab1cf7749a0840e6782be10f799a2154142791af016355ae488111e93e"], 0x3c}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="e03f03014100e1820f00000a000200053582c137153e3704020180fc5409000c00"/46, 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="e03f03014100e1820f00000a000200053582c137153e3704020180fc5409000c00"/46, 0x2e}], 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="c2ae3af8260261b4b2b0ba39b70fa9a22620c710673e19", @ANYRES16=r7, @ANYBLOB="000226bd7000fddbdf257900000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000080350000000400f4000400f4000400f4000400f400"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44000001) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x7800, 0x40, 0xbe, 0x2, {{0x1c, 0x4, 0x1, 0x4, 0x70, 0x68, 0x0, 0xe3, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, {[@rr={0x7, 0x7, 0x1f, [@remote]}, @ra={0x94, 0x4}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x0, 0x5, "9206ed"}, {0x7, 0xb, "3f03f040c0c4453377"}, {0x2, 0x10, "39f0d231b854c7ef49830654a20b"}, {0x5, 0x2}]}, @noop, @generic={0x44, 0x7, "f6adcea2f5"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0xa1, [@empty, @local, @broadcast, @multicast1, @multicast2, @rand_addr=0x64010100]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=4314): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) read$rfkill(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r3, &(0x7f0000000640), &(0x7f0000000680)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x6, 0x2, 0x15, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x1, 0x8, 0x9}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@const={0x1, 0x0, 0x0, 0xa, 0x2}, @volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000280)=""/171, 0x3f, 0xab, 0x0, 0x1000, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x1, 0x0}, 0x8) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000"], 0x140}}, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r13, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x6, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x10, r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x7, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0xa7, 0x0, 0x0, 0x0, 0x40, '\x00', r4, @fallback=0x33, r5, 0x8, &(0x7f00000003c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x2, &(0x7f00000005c0)=[0x1, r15, r16], &(0x7f0000000600)=[{0x4, 0x1, 0x1, 0x7}, {0x0, 0x1, 0xf, 0xb}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xa}, 0x8, 0x10, &(0x7f0000000340)={0x1}, 0x10}, 0x94) kernel console output (not intermixed with test programs): 5959] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 408.342909][T15975] pimreg3: entered allmulticast mode [ 408.489251][T15978] __nla_validate_parse: 15 callbacks suppressed [ 408.489270][T15978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2842'. [ 408.520928][T15978] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2842'. [ 408.579866][ T5908] net_ratelimit: 4 callbacks suppressed [ 408.579884][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.638640][T15978] batadv0: entered allmulticast mode [ 408.648049][T15978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.668877][T15978] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 408.685216][T15978] team0: Failed to send options change via netlink (err -105) [ 408.696100][T15978] team0: Port device batadv0 added [ 409.185619][T16002] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.195256][T16002] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.203514][T16002] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.211552][T16002] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.219755][T16002] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.234357][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.243447][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.252015][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.260397][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.269572][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.342182][T16001] wlan0 speed is unknown, defaulting to 1000 [ 409.369736][T16001] ip6_vti0 speed is unknown, defaulting to 1000 [ 409.445912][ T8460] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.459026][ T8460] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 409.471576][ T8460] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.535313][ T8460] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.545809][ T8460] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 409.556113][ T8460] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.620826][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.630808][ T8460] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.641303][ T8460] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 409.651884][ T8460] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.753821][ T8460] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.766089][ T8460] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 409.780955][T16017] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2848'. [ 409.791896][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2849'. [ 409.802275][ T8460] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.840970][T16011] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 409.870580][T16011] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2849'. [ 409.880631][T16011] NCSI netlink: No device for ifindex 0 [ 410.033934][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2853'. [ 410.052952][T16028] netlink: 'syz.3.2853': attribute type 3 has an invalid length. [ 410.106996][T16030] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 410.152047][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'. [ 410.241960][ T8460] bridge_slave_1: left allmulticast mode [ 410.254619][ T8460] bridge_slave_1: left promiscuous mode [ 410.267445][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.289515][ T8460] bridge_slave_0: left allmulticast mode [ 410.297895][ T8460] bridge_slave_0: left promiscuous mode [ 410.304265][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.419499][ T873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.657364][ T9077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.960516][ T8460] dvmrp6 (unregistering): left allmulticast mode [ 410.994965][T16062] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2861'. [ 411.056541][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 411.064682][ C0] lec:lec_tx_timeout: lec0 [ 411.121615][ T8460] team0: Port device geneve0 removed [ 411.189574][ T8460] bridge0 (unregistering): left allmulticast mode [ 411.298592][ T5842] Bluetooth: hci5: command tx timeout [ 411.591277][ T8460] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.602233][ T8460] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.613293][ T8460] ` (unregistering): Released all slaves [ 411.699658][ T9077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.715798][ T8460] bond1 (unregistering): Released all slaves [ 411.730664][ T8460] bond2 (unregistering): Released all slaves [ 411.747939][ T8460] bond3 (unregistering): Released all slaves [ 411.847927][ T8460] bond4 (unregistering): Released all slaves [ 411.947610][ T8460] bond5 (unregistering): (slave veth5): Releasing active interface [ 411.958414][ T8460] bond5 (unregistering): (slave veth7): Releasing active interface [ 411.969537][ T8460] bond5 (unregistering): Released all slaves [ 411.984673][ T8460] bond6 (unregistering): Released all slaves [ 412.079562][ T8460] bond0 (unregistering): (slave veth9): Releasing active interface [ 412.089287][ T8460] bond0 (unregistering): Released all slaves [ 412.103109][ T8460] bond7 (unregistering): Released all slaves [ 412.118236][ T8460] bond8 (unregistering): Released all slaves [ 412.134023][ T8460] bond9 (unregistering): Released all slaves [ 412.165661][T16051] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2860'. [ 412.177542][T16062] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2861'. [ 412.204135][T16001] chnl_net:caif_netlink_parms(): no params data found [ 412.481067][T16075] syzkaller1: entered promiscuous mode [ 412.486791][T16075] syzkaller1: entered allmulticast mode [ 412.545540][T16086] dummy0: left allmulticast mode [ 412.551248][T16086] bridge0: port 2(dummy0) entered disabled state [ 412.560533][T16086] bridge_slave_0: left allmulticast mode [ 412.572517][T16086] bridge_slave_0: left promiscuous mode [ 412.578535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.578882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.600257][T16086] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.736800][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.801728][T16001] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.818523][T16001] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.836208][T16001] bridge_slave_0: entered allmulticast mode [ 412.848532][T16001] bridge_slave_0: entered promiscuous mode [ 412.852804][T16086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 412.871015][T16001] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.878349][T16001] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.885640][T16001] bridge_slave_1: entered allmulticast mode [ 412.895053][T16001] bridge_slave_1: entered promiscuous mode [ 413.034057][T16001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.056790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.081623][T16001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.219275][T16112] geneve5: entered promiscuous mode [ 413.250870][T16001] team0: Port device team_slave_0 added [ 413.268696][ T3521] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 58302 - 0 [ 413.290339][T16001] team0: Port device team_slave_1 added [ 413.356246][ T3521] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 58302 - 0 [ 413.377041][ T5842] Bluetooth: hci5: command tx timeout [ 413.432325][ T3521] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 58302 - 0 [ 413.456974][ T3521] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 58302 - 0 [ 413.465383][ T873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.474727][T16001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.488836][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.550439][T16001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.565795][T16001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.570755][T16123] netlink: 'syz.4.2872': attribute type 1 has an invalid length. [ 413.573262][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.607588][T16001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.655497][T16123] __nla_validate_parse: 3 callbacks suppressed [ 413.655516][T16123] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2872'. [ 413.722156][T16001] hsr_slave_0: entered promiscuous mode [ 413.738483][T16001] hsr_slave_1: entered promiscuous mode [ 413.754585][T16001] debugfs: 'hsr0' already exists in 'hsr' [ 413.787074][T16001] Cannot create hsr debugfs directory [ 413.848499][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.004649][ T8460] tipc: Disabling bearer [ 414.013908][ T8460] tipc: Disabling bearer [ 414.043132][ T8460] tipc: Left network mode [ 414.252809][T16156] syzkaller0: entered promiscuous mode [ 414.268031][T16156] syzkaller0: entered allmulticast mode [ 414.710345][T16170] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2883'. [ 414.900073][ T9077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.110986][T16180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.120132][ T8460] hsr_slave_0: left promiscuous mode [ 415.130379][T16180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.146669][ T8460] hsr_slave_1: left promiscuous mode [ 415.157233][T16180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.233146][ T8460] veth0_macvtap: left promiscuous mode [ 415.257380][ T8460] veth1_vlan: left promiscuous mode [ 415.269999][ T8460] veth0_vlan: left promiscuous mode [ 415.457697][ T5842] Bluetooth: hci5: command tx timeout [ 415.557049][ T8460] pimreg3 (unregistering): left allmulticast mode [ 415.586015][ T8460] pim6reg527 (unregistering): left allmulticast mode [ 415.911107][T16179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.921107][T16179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.949503][ T9077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.058680][ T8460] team0 (unregistering): Port device team_slave_1 removed [ 416.107158][ T8460] team0 (unregistering): Port device team_slave_0 removed [ 416.411845][T16177] netlink: 'syz.4.2884': attribute type 1 has an invalid length. [ 416.532988][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.627802][T16211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2889'. [ 416.662631][T16211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.814511][T16001] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.871537][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2893'. [ 416.991678][T16001] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.072237][T16001] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.113416][T16001] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.413450][T16254] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2898'. [ 417.440185][T16257] netlink: 'syz.3.2900': attribute type 1 has an invalid length. [ 417.470858][T16254] dvmrp6: entered allmulticast mode [ 417.536915][ T5842] Bluetooth: hci5: command tx timeout [ 417.547105][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2900'. [ 417.562783][T16257] bond7: entered promiscuous mode [ 417.568636][T16257] 8021q: adding VLAN 0 to HW filter on device bond7 [ 417.579941][T16001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.701060][T16001] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.762556][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.769779][ T8276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.839580][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.846814][ T8276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.915644][T16283] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 417.933460][T16283] bond8 (unregistering): Released all slaves [ 417.991370][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'. [ 418.024812][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'. [ 418.595768][ T8460] IPVS: stop unused estimator thread 0... [ 418.609397][T16001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.682691][T16322] netlink: 'syz.4.2914': attribute type 15 has an invalid length. [ 418.707046][T16322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2914'. [ 418.762363][T16001] veth0_vlan: entered promiscuous mode [ 418.786800][T16001] veth1_vlan: entered promiscuous mode [ 418.889262][T16001] veth0_macvtap: entered promiscuous mode [ 418.911987][T16001] veth1_macvtap: entered promiscuous mode [ 419.040115][T16001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.058367][ T5922] net_ratelimit: 5 callbacks suppressed [ 419.058386][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.100775][T16343] netlink: 'syz.4.2916': attribute type 1 has an invalid length. [ 419.137070][T16343] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2916'. [ 419.172269][T16343] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2916'. [ 419.186616][T16343] netlink: 'syz.4.2916': attribute type 1 has an invalid length. [ 419.199048][T16343] netlink: 'syz.4.2916': attribute type 8 has an invalid length. [ 419.223133][T16001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.255298][T16343] netlink: 582 bytes leftover after parsing attributes in process `syz.4.2916'. [ 419.283807][ T8276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.326746][ T8276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.380003][ T8276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.414630][ T8276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.440741][T16353] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 419.538523][ T873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.670941][T16360] xt_cgroup: path and classid specified [ 419.698954][T16360] sctp: [Deprecated]: syz.0.2921 (pid 16360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.698954][T16360] Use struct sctp_sack_info instead [ 419.757586][ T8272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.788281][ T8272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.809549][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'. [ 419.825601][T16370] netlink: 'syz.0.2921': attribute type 10 has an invalid length. [ 419.864645][T16370] bridge_slave_1: left allmulticast mode [ 419.881660][T16370] bridge_slave_1: left promiscuous mode [ 419.904483][T16370] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.030226][ T8454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.044329][ T8454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.098527][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.114843][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2927'. [ 420.228416][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2927'. [ 420.561545][T16401] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2931'. [ 420.815818][T16002] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 420.834514][T16002] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 420.848867][T16002] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 420.872510][T16002] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.880669][T16002] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.021996][T16418] wlan0 speed is unknown, defaulting to 1000 [ 421.061264][T16418] ip6_vti0 speed is unknown, defaulting to 1000 [ 421.112917][T16432] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2936'. [ 421.129825][T16427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2935'. [ 421.148948][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.187825][T16429] macsec3: entered promiscuous mode [ 421.223302][T16429] macsec3: entered allmulticast mode [ 421.236926][T16429] bridge0: entered allmulticast mode [ 421.259502][T16429] bridge0: port 2(macsec3) entered blocking state [ 421.294764][T16429] bridge0: port 2(macsec3) entered disabled state [ 421.333890][T16429] bridge0: left allmulticast mode [ 421.391764][T16427] macsec3: entered promiscuous mode [ 421.411738][T16427] macsec3: entered allmulticast mode [ 421.426147][T16427] bridge0: entered allmulticast mode [ 421.446189][T16427] bridge0: port 2(macsec3) entered blocking state [ 421.466552][T16427] bridge0: port 2(macsec3) entered disabled state [ 421.492208][T16427] bridge0: left allmulticast mode [ 421.863954][ T8463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 421.894983][T16464] netlink: 'syz.3.2948': attribute type 1 has an invalid length. [ 421.904496][ T8463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 421.915898][ T8463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.963116][T16464] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 421.997494][ T8463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 422.016940][ T8463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 422.048306][ T8463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.100994][T16461] syzkaller0: entered promiscuous mode [ 422.112341][T16461] syzkaller0: entered allmulticast mode [ 422.196157][ T8463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 422.215094][ T8463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 422.240274][ T8463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.307492][T16485] IPVS: Error connecting to the multicast addr [ 422.344193][T16482] IPVS: Error connecting to the multicast addr [ 422.413812][ T8463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 422.441714][ T8463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 422.454476][ T8463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.522916][T16418] chnl_net:caif_netlink_parms(): no params data found [ 422.863733][ T8463] bridge_slave_1: left allmulticast mode [ 422.873236][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.907641][ T8463] bridge_slave_0: left allmulticast mode [ 422.915530][ T8463] bridge_slave_0: left promiscuous mode [ 422.922688][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.976699][ T5842] Bluetooth: hci2: command tx timeout [ 423.219219][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.373332][ T8463] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 423.399081][ T8463] ip6gretap1 (unregistering): left promiscuous mode [ 423.412496][ T8463] ip6gretap1 (unregistering): left allmulticast mode [ 423.857934][ T8463] gretap0 (unregistering): left promiscuous mode [ 423.889583][ T8463] bond8 (unregistering): (slave gretap2): Releasing active interface [ 423.911520][ T8463] bond10 (unregistering): (slave gretap3): Releasing active interface [ 424.015795][ T8463] bond7 (unregistering): (slave geneve2): Releasing active interface [ 424.147952][ T8463] bond1 (unregistering): (slave bridge1): Releasing active interface [ 424.256836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.265022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.273589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.282089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.290557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.299158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.307657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.316053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.324676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.333062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.664565][ T8463] bond0 (unregistering): left promiscuous mode [ 424.671177][ T8463] bond_slave_0: left promiscuous mode [ 424.677832][ T8463] @0Ù: left promiscuous mode [ 424.689886][ T8463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.699015][ T8463] bond_slave_0: left allmulticast mode [ 424.707031][ T8463] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 424.715611][ T8463] @0Ù: left allmulticast mode [ 424.722079][ T8463] bond0 (unregistering): Released all slaves [ 424.733535][ T8463] bond1 (unregistering): Released all slaves [ 424.834892][ T8463] bond2 (unregistering): left allmulticast mode [ 424.841379][ T8463] bond2 (unregistering): left promiscuous mode [ 424.857614][ T8463] team0: Port device macvlan2 removed [ 424.868077][ T8463] bond2 (unregistering): Released all slaves [ 424.961675][ T8463] bond3 (unregistering): Released all slaves [ 424.975789][ T8463] bond4 (unregistering): Released all slaves [ 425.057023][ T5842] Bluetooth: hci2: command tx timeout [ 425.081268][ T8463] bond5 (unregistering): Released all slaves [ 425.095309][ T8463] bond6 (unregistering): Released all slaves [ 425.200646][ T8463] bond7 (unregistering): Released all slaves [ 425.214538][ T8463] bond8 (unregistering): Released all slaves [ 425.229389][ T8463] bond9 (unregistering): Released all slaves [ 425.245105][ T8463] bond10 (unregistering): Released all slaves [ 425.263073][ T8463] bond11 (unregistering): Released all slaves [ 425.353069][T16556] gre2: left allmulticast mode [ 425.443885][ T8463] : left promiscuous mode [ 425.467549][T16560] netlink: 'syz.4.2970': attribute type 21 has an invalid length. [ 425.519164][T16418] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.547502][T16418] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.555545][T16418] bridge_slave_0: entered allmulticast mode [ 425.588492][T16562] __nla_validate_parse: 11 callbacks suppressed [ 425.588511][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'. [ 425.590934][T16418] bridge_slave_0: entered promiscuous mode [ 425.595068][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'. [ 425.633537][T16418] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.636710][ T8463] tipc: Left network mode [ 425.649969][T16418] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.683477][T16418] bridge_slave_1: entered allmulticast mode [ 425.712750][T16418] bridge_slave_1: entered promiscuous mode [ 425.792709][T16578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2975'. [ 425.811978][T16578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2975'. [ 426.054917][T16418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.247624][T16604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2979'. [ 426.247999][T16418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.140536][ T5842] Bluetooth: hci2: command tx timeout [ 427.197840][T16624] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2982'. [ 428.723000][T16627] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 428.734060][T16627] bond1: option packets_per_slave: allowed values 0 - 65535 [ 428.744660][T16627] bond1 (unregistering): Released all slaves [ 428.766826][T16633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2985'. [ 428.793249][T16418] team0: Port device team_slave_0 added [ 428.922699][T16638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2987'. [ 428.932032][T16638] netlink: 'syz.2.2987': attribute type 1 has an invalid length. [ 428.940734][T16638] netlink: 'syz.2.2987': attribute type 1 has an invalid length. [ 428.950542][T16638] netlink: 'syz.2.2987': attribute type 2 has an invalid length. [ 428.959313][T16638] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2987'. [ 428.979172][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'. [ 428.999401][T16418] team0: Port device team_slave_1 added [ 429.175787][T16418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.204719][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.232148][ T5842] Bluetooth: hci2: command tx timeout [ 429.248109][T16418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.287264][T16418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.294314][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.432606][T16418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.458039][ T9077] net_ratelimit: 56 callbacks suppressed [ 429.458058][ T9077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.721039][ T8463] hsr_slave_0: left promiscuous mode [ 429.735499][ T8463] hsr_slave_1: left promiscuous mode [ 429.775563][ T8463] veth0_macvtap: left promiscuous mode [ 430.261359][ T8463] team0 (unregistering): Port device team_slave_1 removed [ 430.300429][ T8463] team0 (unregistering): Port device team_slave_0 removed [ 430.507879][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.608085][T16668] syzkaller0: entered promiscuous mode [ 430.619911][T16668] syzkaller0: entered allmulticast mode [ 430.859664][T16418] hsr_slave_0: entered promiscuous mode [ 430.867343][T16703] __nla_validate_parse: 1 callbacks suppressed [ 430.867362][T16703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3001'. [ 430.877218][T16418] hsr_slave_1: entered promiscuous mode [ 430.890601][T16703] netlink: 'syz.2.3001': attribute type 7 has an invalid length. [ 430.899644][T16703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3001'. [ 430.923273][T16418] debugfs: 'hsr0' already exists in 'hsr' [ 430.936615][T16418] Cannot create hsr debugfs directory [ 430.952434][T16702] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3000'. [ 431.005992][T16712] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3003'. [ 431.371609][T16718] syzkaller0: entered promiscuous mode [ 431.380905][T16718] syzkaller0: entered allmulticast mode [ 431.461530][ T8463] IPVS: stop unused estimator thread 0... [ 431.547695][ T9077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.619313][T16739] bond1: option arp_interval: invalid value (18446744072761114633) [ 431.627586][T16739] bond1: option arp_interval: allowed values 0 - 2147483647 [ 431.637925][T16739] bond1 (unregistering): Released all slaves [ 431.680916][T16743] batadv2: entered allmulticast mode [ 431.941282][T16762] tipc: Enabling not permitted [ 431.953221][T16762] tipc: Enabling of bearer rejected, failed to enable media [ 432.257041][T11174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.578500][ T9077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.591845][T16418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 432.621586][T16418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 432.662369][T16418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 432.694244][T16418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 432.991407][T16810] netlink: 'syz.2.3022': attribute type 11 has an invalid length. [ 433.008340][T16810] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3022'. [ 433.153733][T16418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.209418][T16418] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.244755][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.252031][ T8272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.308802][ T3811] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.316470][ T3811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.389974][T16827] delete_channel: no stack [ 433.442062][T16829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3026'. [ 433.606845][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3026'. [ 433.616952][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.628942][T16841] dvmrp0: entered allmulticast mode [ 433.639645][T16843] netlink: 'syz.0.3029': attribute type 1 has an invalid length. [ 433.647568][T16843] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3029'. [ 433.648038][T16842] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.664464][T16842] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.750660][T16847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3031'. [ 434.093201][T16418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.115863][T16859] ip6_vti0 speed is unknown, defaulting to 1000 [ 434.302398][T16418] veth0_vlan: entered promiscuous mode [ 434.352145][T16418] veth1_vlan: entered promiscuous mode [ 434.488463][T16418] veth0_macvtap: entered promiscuous mode [ 434.545002][T16418] veth1_macvtap: entered promiscuous mode [ 434.621934][T16418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.658315][ T9077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.684661][T16418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.731950][ T3811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.810117][ T3811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.840034][ T3811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.927186][ T3811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.160501][T16910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3043'. [ 435.226210][T16910] netlink: 'syz.0.3043': attribute type 1 has an invalid length. [ 435.277515][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.291852][T16913] openvswitch: netlink: Missing valid actions attribute. [ 435.304015][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.313806][ T9082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.346940][T16913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.567261][ T8274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.575147][ T8274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.697426][ T9077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.717874][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.720394][T16002] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.730391][T16002] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.741243][T16002] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.750365][T16002] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.757439][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.777287][T16002] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.915195][T16972] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.047779][T16985] netlink: 'syz.2.3060': attribute type 1 has an invalid length. [ 437.203996][T16985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.223170][T16977] batman_adv: batadv0: Adding interface: dummy0 [ 437.244000][T16977] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.271392][T16977] batman_adv: batadv0: Interface activated: dummy0 [ 437.319036][T16990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.326184][T16990] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 437.348060][T16990] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 437.468772][T16984] batadv0: mtu less than device minimum [ 437.491942][T16984] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.504207][T16984] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.737130][T17022] __nla_validate_parse: 7 callbacks suppressed [ 437.737151][T17022] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3065'. [ 437.836782][ T30] audit: type=1107 audit(1769236261.896:7): pid=17023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 438.009456][T17031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3069'. [ 438.040165][T17034] netlink: 'syz.2.3070': attribute type 10 has an invalid length. [ 438.138738][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3067'. [ 438.158075][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3069'. [ 438.167871][T17034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3070'. [ 438.189222][T17039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3069'. [ 438.205138][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3069'. [ 438.223251][T17034] dummy0: entered promiscuous mode [ 438.233478][T17034] bridge0: port 3(dummy0) entered blocking state [ 438.247623][T17034] bridge0: port 3(dummy0) entered disabled state [ 438.266505][T17034] dummy0: entered allmulticast mode [ 438.352014][T16972] chnl_net:caif_netlink_parms(): no params data found [ 438.475356][T17049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'. [ 438.508117][T17049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.559180][T17049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.568723][T17049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.606196][T17049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.615672][T17049] batman_adv: batadv0: Interface deactivated: dummy0 [ 438.628468][T17049] batman_adv: batadv0: Removing interface: dummy0 [ 438.826815][T16002] Bluetooth: hci3: command tx timeout [ 438.863136][T16972] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.903031][T16972] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.925741][T16972] bridge_slave_0: entered allmulticast mode [ 438.934389][T16972] bridge_slave_0: entered promiscuous mode [ 438.945176][T17066] tipc: Enabling of bearer rejected, failed to enable media [ 438.962709][T16972] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.977416][T16972] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.984867][T16972] bridge_slave_1: entered allmulticast mode [ 438.994095][T16972] bridge_slave_1: entered promiscuous mode [ 439.032254][T17074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3080'. [ 439.104459][T17071] sctp: [Deprecated]: syz.0.3079 (pid 17071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.104459][T17071] Use struct sctp_sack_info instead [ 439.161098][T16972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.177765][T16972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.248265][T16972] team0: Port device team_slave_0 added [ 439.256804][T17087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3083'. [ 439.274014][T16972] team0: Port device team_slave_1 added [ 439.320287][T17090] netlink: 'syz.0.3084': attribute type 21 has an invalid length. [ 439.345106][T16972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.353248][T16972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.392450][T16972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.406281][T17090] ipt_REJECT: TCP_RESET invalid for non-tcp [ 439.413605][T16972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.423891][T16972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.460451][T16972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.546454][T16972] hsr_slave_0: entered promiscuous mode [ 439.554845][T16972] hsr_slave_1: entered promiscuous mode [ 439.574878][T16972] debugfs: 'hsr0' already exists in 'hsr' [ 439.596616][T16972] Cannot create hsr debugfs directory [ 439.804913][T16972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.846559][T16972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 439.919937][T17111] netlink: 'syz.0.3090': attribute type 1 has an invalid length. [ 440.083973][T16972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.101905][T16972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 440.290308][T16972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.338015][T16972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 440.508915][T16972] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 440.524079][T16972] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.534828][T16972] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 440.741068][T17152] netlink: 'syz.2.3101': attribute type 5 has an invalid length. [ 440.799793][T17159] tipc: Trying to set illegal importance in message [ 440.887122][T16972] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 440.900210][T16002] Bluetooth: hci3: command tx timeout [ 440.961372][T16972] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 440.975208][T16972] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 440.996339][T16972] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 441.068799][T17177] syzkaller0: entered promiscuous mode [ 441.085010][T17177] syzkaller0: entered allmulticast mode [ 441.114454][T17179] netlink: 'syz.1.3109': attribute type 9 has an invalid length. [ 441.552281][T16972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.597848][T16972] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.646647][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.653832][ T8462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.681152][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.688441][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.714560][T17202] netlink: 'syz.1.3117': attribute type 1 has an invalid length. [ 442.202531][T16972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.327552][T17242] netlink: 'syz.3.3126': attribute type 5 has an invalid length. [ 442.509045][T17259] netlink: 'syz.2.3129': attribute type 12 has an invalid length. [ 442.522281][T17259] netlink: 'syz.2.3129': attribute type 29 has an invalid length. [ 442.688101][T16972] veth0_vlan: entered promiscuous mode [ 442.728939][T16972] veth1_vlan: entered promiscuous mode [ 442.794233][T16972] veth0_macvtap: entered promiscuous mode [ 442.812303][T16972] veth1_macvtap: entered promiscuous mode [ 442.842386][T16972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.860774][T16972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.884871][ T8274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.897905][ T8274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.914057][ T8274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.940973][ T8274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.977660][ T5842] Bluetooth: hci3: command tx timeout [ 443.202726][ T8274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.228985][ T8274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.289187][ T8276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.318135][ T8276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.402940][T17295] __nla_validate_parse: 17 callbacks suppressed [ 443.402959][T17295] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3140'. [ 443.534476][T17289] xt_CT: No such helper "pptp" [ 443.730202][T17307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3142'. [ 443.780832][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3142'. [ 443.801221][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3142'. [ 444.051314][T17330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3145'. [ 444.107880][T17325] net_ratelimit: 58 callbacks suppressed [ 444.107902][T17325] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 444.169934][ T30] audit: type=1800 audit(1769236268.236:8): pid=17334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3147" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=293 res=0 errno=0 [ 444.401726][T17342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3149'. [ 444.420267][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.443058][T17345] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3149'. [ 444.472670][T17349] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 444.482322][T17349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 444.491325][T17349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 444.501588][T17349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 444.509451][T17349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 444.621882][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'. [ 444.721512][T17344] ip6_vti0 speed is unknown, defaulting to 1000 [ 444.830857][T17358] tipc: Enabling of bearer rejected, failed to enable media [ 444.871346][ T3562] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.916062][ T3562] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.939982][ T3562] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 58302 - 0 [ 445.021692][T17365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3155'. [ 445.052512][ T3562] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.063110][T17349] Bluetooth: hci3: command 0x0419 tx timeout [ 445.071330][ T3562] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.083990][ T3562] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 58302 - 0 [ 445.169654][ T3562] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.187241][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3156'. [ 445.208249][ T3562] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.241794][ T3562] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 58302 - 0 [ 445.292671][T17368] bond8: entered promiscuous mode [ 445.310949][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.320878][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.327368][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.328931][T17368] 8021q: adding VLAN 0 to HW filter on device bond8 [ 445.341836][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 445.398094][T17373] bond8: (slave xfrm2): refused to change device type [ 445.451104][ T3562] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.461462][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.494098][ T3562] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.514328][ T3562] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 58302 - 0 [ 446.047784][T17405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.158243][T17415] sctp: [Deprecated]: syz.2.3169 (pid 17415) Use of int in maxseg socket option. [ 446.158243][T17415] Use struct sctp_assoc_value instead [ 446.218319][ T3562] bridge_slave_0: left allmulticast mode [ 446.224141][ T3562] bridge_slave_0: left promiscuous mode [ 446.268159][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.502460][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.584208][T16002] Bluetooth: hci4: command tx timeout [ 446.732291][ T7526] smc: removing ib device syz2 [ 447.038051][ T3562] bond5 (unregistering): (slave gretap1): Releasing active interface [ 447.147579][T16002] Bluetooth: hci3: command 0x0419 tx timeout [ 447.218433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.227214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.235476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.247622][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.257629][ T3562] dvmrp0 (unregistering): left allmulticast mode [ 447.285941][ T3562] dvmrp6 (unregistering): left allmulticast mode [ 447.348924][ T3562] bond6 (unregistering): (slave geneve4): Releasing active interface [ 448.105059][ T3562] bond1 (unregistering): (slave veth5): Releasing active interface [ 448.125787][ T3562] bond1 (unregistering): Released all slaves [ 448.180855][ T3562] bond0 (unregistering): Released all slaves [ 448.370417][ T3562] bond2 (unregistering): Released all slaves [ 448.384970][ T3562] bond3 (unregistering): Released all slaves [ 448.481393][ T3562] bond4 (unregistering): Released all slaves [ 448.495785][ T3562] bond5 (unregistering): Released all slaves [ 448.604721][ T3562] bond6 (unregistering): Released all slaves [ 448.660422][T16002] Bluetooth: hci4: command tx timeout [ 448.710552][ T3562] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 448.721972][ T3562] bond7 (unregistering): (slave bond8): Releasing active interface [ 448.731129][ T3562] bond7 (unregistering): Released all slaves [ 448.829707][ T3562] bond8 (unregistering): Released all slaves [ 448.922383][ T3562] bond9 (unregistering): (slave veth9): Releasing active interface [ 448.932644][ T3562] bond9 (unregistering): Released all slaves [ 448.947685][ T3562] bond10 (unregistering): Released all slaves [ 448.987719][T17432] netlink: 'syz.2.3174': attribute type 14 has an invalid length. [ 449.076016][T17344] chnl_net:caif_netlink_parms(): no params data found [ 449.168700][ T3562] : left promiscuous mode [ 449.234108][T17449] __nla_validate_parse: 4 callbacks suppressed [ 449.234126][T17449] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3178'. [ 449.259682][T17449] netlink: 'syz.1.3178': attribute type 1 has an invalid length. [ 449.269318][T17449] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3178'. [ 449.323480][ T3562] 9: left promiscuous mode [ 449.536641][ T3562] tipc: Left network mode [ 449.605289][T17464] netlink: 'syz.1.3181': attribute type 1 has an invalid length. [ 449.616754][ T5846] net_ratelimit: 6 callbacks suppressed [ 449.616773][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.698679][T17482] netlink: 'syz.4.3183': attribute type 1 has an invalid length. [ 449.719046][T17344] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.726531][T17482] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3183'. [ 449.736283][T17344] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.744289][T17344] bridge_slave_0: entered allmulticast mode [ 449.764392][T17344] bridge_slave_0: entered promiscuous mode [ 449.793733][T17484] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3184'. [ 449.814029][T17488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3182'. [ 449.851279][T17344] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.869413][T17344] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.881747][T17344] bridge_slave_1: entered allmulticast mode [ 449.891440][T17344] bridge_slave_1: entered promiscuous mode [ 450.012730][T17344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.036338][ T3562] batadv0: left promiscuous mode [ 450.059856][ T3562] hsr_slave_0: left promiscuous mode [ 450.076278][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.085099][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.502506][T17503] netlink: 'syz.3.3186': attribute type 1 has an invalid length. [ 450.661266][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.719529][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 450.739256][T16002] Bluetooth: hci4: command tx timeout [ 450.768592][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 451.057799][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5710 ms [ 451.066005][ C0] lec:lec_tx_timeout: lec0 [ 451.144668][T17344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.161059][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3188'. [ 451.271024][T17344] team0: Port device team_slave_0 added [ 451.311325][T17344] team0: Port device team_slave_1 added [ 451.413996][T17344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.432993][T17344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.502151][T17344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.537105][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.548350][T17527] team_slave_0: entered promiscuous mode [ 451.554081][T17527] team_slave_1: entered promiscuous mode [ 451.579451][T17527] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 451.606358][T17344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.613862][T17344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.698557][T11174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.720885][T17344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.758520][T17539] xt_TCPMSS: Only works on TCP SYN packets [ 451.896811][T17544] bond1: option resend_igmp: invalid value (32767) [ 451.923847][T17544] bond1: option resend_igmp: allowed values 0 - 255 [ 451.950402][T17544] bond1 (unregistering): Released all slaves [ 451.971999][T17553] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3197'. [ 452.160080][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'. [ 452.176272][T17344] hsr_slave_0: entered promiscuous mode [ 452.180968][ T3562] IPVS: stop unused estimator thread 0... [ 452.189813][T17344] hsr_slave_1: entered promiscuous mode [ 452.209986][T17344] debugfs: 'hsr0' already exists in 'hsr' [ 452.223722][T17344] Cannot create hsr debugfs directory [ 452.253174][T17565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3198'. [ 452.267957][T17565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3198'. [ 452.323617][T17566] wireguard0: entered promiscuous mode [ 452.341883][T17566] wireguard0: entered allmulticast mode [ 452.372830][T17566] team0: Device wireguard0 is of different type [ 452.437813][T17569] netlink: 'syz.1.3201': attribute type 5 has an invalid length. [ 452.738702][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.816902][T16002] Bluetooth: hci4: command tx timeout [ 453.344652][T17625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.353546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.410400][T17628] netlink: 'syz.2.3213': attribute type 1 has an invalid length. [ 453.776786][T11174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.870157][T17344] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.909764][T17344] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.925660][T17344] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.943087][T17344] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.060058][T17668] geneve2: entered promiscuous mode [ 454.069164][T17668] geneve2: entered allmulticast mode [ 454.143138][T17671] netlink: Conntrack attr has 4 unknown bytes [ 454.214161][T17344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.270296][T17676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.307314][T17344] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.341527][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.348796][ T8454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.381122][T17682] tipc: Failed to obtain node identity [ 454.410521][T17682] tipc: Enabling of bearer rejected, failed to enable media [ 454.459384][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.466648][ T8454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.520129][T17688] __nla_validate_parse: 10 callbacks suppressed [ 454.520150][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 454.577996][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 454.628896][T17688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.651872][T17688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.677802][T17688] bond0 (unregistering): Released all slaves [ 454.789438][T17699] netlink: 'syz.1.3231': attribute type 1 has an invalid length. [ 454.817589][ T5846] net_ratelimit: 4 callbacks suppressed [ 454.817611][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.891181][T17699] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 455.117885][T17718] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3235'. [ 455.167106][T17718] netlink: Unknown conntrack attr (0) [ 455.237564][T17720] tipc: Enabled bearer , priority 0 [ 455.255994][T17719] syzkaller0: entered promiscuous mode [ 455.279386][T17719] syzkaller0: entered allmulticast mode [ 455.360537][T17719] tipc: Resetting bearer [ 455.409941][T17719] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3236'. [ 455.421787][T17729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.430204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.432182][T17344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.493166][T17723] can: request_module (can-proto-0) failed. [ 455.657132][T17716] tipc: Resetting bearer [ 455.689262][T17716] tipc: Disabling bearer [ 455.898322][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.921403][T17344] veth0_vlan: entered promiscuous mode [ 455.981651][T17344] veth1_vlan: entered promiscuous mode [ 456.009771][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 456.035065][T17757] netlink: 'syz.2.3243': attribute type 5 has an invalid length. [ 456.151990][T17344] veth0_macvtap: entered promiscuous mode [ 456.195753][T17344] veth1_macvtap: entered promiscuous mode [ 456.303451][T17344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.343305][T17344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.399254][ T8462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.426642][ T8462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.480941][ T8462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.514041][ T8462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.719962][ T3811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.758706][ T3811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.878210][T17791] sctp: [Deprecated]: syz.3.3249 (pid 17791) Use of int in maxseg socket option. [ 456.878210][T17791] Use struct sctp_assoc_value instead [ 456.893758][ T8460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.904134][T17786] netlink: 'syz.2.3247': attribute type 1 has an invalid length. [ 456.921455][ T8460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.935188][T17786] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3247'. [ 456.977506][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.107328][T17804] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3247'. [ 457.184779][T17791] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.309787][T17791] bridge_slave_0: left promiscuous mode [ 457.326770][T17791] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.360169][T17791] bridge_slave_1: left allmulticast mode [ 457.376054][T17791] bridge_slave_1: left promiscuous mode [ 457.387815][T17791] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.434262][T17791] bond0: (slave bond_slave_0): Releasing backup interface [ 457.466188][T17791] bond0: (slave bond_slave_1): Releasing backup interface [ 457.476778][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.523482][T17791] team0: Port device team_slave_0 removed [ 457.535017][T17826] netlink: 10036 bytes leftover after parsing attributes in process `syz.0.3146'. [ 457.568683][T17826] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.3146'. [ 457.582703][T17791] team0: Port device team_slave_1 removed [ 457.616814][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.659067][T17791] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 457.798301][T17820] syzkaller0: entered promiscuous mode [ 457.803985][T17820] syzkaller0: entered allmulticast mode [ 458.017888][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.317388][T17349] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.327216][T17349] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.335698][T17349] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.352539][T17349] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.360500][T17349] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.943547][T17833] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 460.097674][ T6014] net_ratelimit: 7 callbacks suppressed [ 460.097693][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.272036][T17887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.335421][T17893] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.3263'. [ 460.351603][T17893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3263'. [ 460.416786][T17349] Bluetooth: hci0: command tx timeout [ 460.577614][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.620859][T17849] chnl_net:caif_netlink_parms(): no params data found [ 460.710684][T17909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.719194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.887101][T17917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3271'. [ 460.983198][T17925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3273'. [ 461.006674][T17925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3273'. [ 461.036664][T17849] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.044372][T17849] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.052100][T17849] bridge_slave_0: entered allmulticast mode [ 461.062109][T17849] bridge_slave_0: entered promiscuous mode [ 461.068844][T17929] netlink: 'syz.2.3274': attribute type 1 has an invalid length. [ 461.076895][T17849] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.084229][T17849] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.092098][T17849] bridge_slave_1: entered allmulticast mode [ 461.100284][T17849] bridge_slave_1: entered promiscuous mode [ 461.136967][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.160776][T17849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.178857][T17849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.230234][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'. [ 461.245119][T17849] team0: Port device team_slave_0 added [ 461.254788][T17849] team0: Port device team_slave_1 added [ 461.322715][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3277'. [ 461.324141][T17849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.355684][T17849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.417805][T17849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.433772][T17849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.441317][T17849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.470771][T17849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.522637][T17944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3279'. [ 461.545796][T17945] Bluetooth: MGMT ver 1.23 [ 461.609969][T17849] hsr_slave_0: entered promiscuous mode [ 461.620204][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.622695][T17849] hsr_slave_1: entered promiscuous mode [ 461.641702][T17849] debugfs: 'hsr0' already exists in 'hsr' [ 461.649225][T17849] Cannot create hsr debugfs directory [ 461.664562][T17944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.673827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.777072][ T9077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.918295][T17849] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.929012][T17849] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 461.942409][T17849] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 461.991029][T17960] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3287'. [ 462.028734][T17960] bond0: (slave erspan0): Device is not bonding slave [ 462.035632][T17960] bond0: option active_slave: invalid value (erspan0) [ 462.045252][T17960] bond0 (unregistering): Released all slaves [ 462.073619][T17849] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.086010][T17849] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 462.097648][T17849] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.165146][T17963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3288'. [ 462.190985][T17849] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.201322][T17849] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 462.211480][T17849] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.289574][T17849] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.300694][T17849] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 462.311570][T17849] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.392610][T17969] netlink: 'syz.1.3290': attribute type 17 has an invalid length. [ 462.480531][T17849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 462.497197][T17349] Bluetooth: hci0: command tx timeout [ 462.509629][T17849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 462.533232][T17849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 462.560341][T17849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 462.767475][ T9080] IPVS: starting estimator thread 0... [ 462.791068][T17849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.831455][T17996] netlink: 'syz.0.3296': attribute type 2 has an invalid length. [ 462.845242][T17849] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.857213][T17994] IPVS: using max 26 ests per chain, 62400 per kthread [ 462.866072][T17996] 9: entered promiscuous mode [ 462.893714][ T3811] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.900969][ T3811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.948599][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.955801][ T8462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.197620][T18011] veth1_macvtap: left promiscuous mode [ 463.465470][T17849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.558887][T17849] veth0_vlan: entered promiscuous mode [ 463.593706][T17849] veth1_vlan: entered promiscuous mode [ 463.628849][ T8276] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6e [ 463.744584][T18036] syzkaller0: entered promiscuous mode [ 463.750862][T18036] syzkaller0: entered allmulticast mode [ 463.770460][T17849] veth0_macvtap: entered promiscuous mode [ 463.785070][T17849] veth1_macvtap: entered promiscuous mode [ 463.806781][T17849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.828463][T17849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.845430][ T3562] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.862417][ T3562] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.873900][ T3562] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.884099][ T3562] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.333202][T18035] tipc: Started in network mode [ 464.340586][T18035] tipc: Node identity 7e0b493cfc5b, cluster identity 4711 [ 464.356644][T18035] tipc: Enabled bearer , priority 0 [ 464.394512][T18025] tipc: Resetting bearer [ 464.586627][T17349] Bluetooth: hci0: command tx timeout [ 465.155720][ T3811] net_ratelimit: 16 callbacks suppressed [ 465.155742][ T3811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.178364][ T9077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.188881][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.299856][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.616909][ T9078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.773964][T18025] tipc: Disabling bearer [ 465.781347][ T9082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.796068][ T5909] tipc: Node number set to 2186299708 [ 465.939963][T18054] __nla_validate_parse: 4 callbacks suppressed [ 465.939982][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'. [ 465.942515][T18058] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3313'. [ 465.972852][ T3811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.984720][ T3811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.199836][ T8457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.218488][ T8457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.305643][T18071] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3318'. [ 466.324158][T18071] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3318'. [ 466.341462][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.360398][T18071] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3318'. [ 466.405694][T18075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3319'. [ 466.418707][ T9078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.579844][T18075] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3319'. [ 466.660732][T17349] Bluetooth: hci0: command tx timeout [ 466.680735][T18092] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3323'. [ 466.818005][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.902311][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3325'. [ 466.934957][T18101] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3326'. [ 466.977961][T18099] vxcan2: entered allmulticast mode [ 467.165067][T18109] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 467.174378][T18109] gretap1: entered promiscuous mode [ 467.183461][T18109] gretap1: entered allmulticast mode [ 467.377072][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.615577][T18133] netlink: 'syz.0.3336': attribute type 2 has an invalid length. [ 468.065197][T18158] netlink: 'syz.0.3345': attribute type 1 has an invalid length. [ 468.221340][T18151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.014292][ T8805] lec:lec_start_xmit: lec0:No lecd attached [ 469.650985][T18164] veth3: entered promiscuous mode [ 470.360029][T18232] xt_addrtype: ipv6 does not support BROADCAST matching [ 470.496900][ T9082] net_ratelimit: 15 callbacks suppressed [ 470.496919][ T9082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.551040][T18246] sit1: entered promiscuous mode [ 470.574508][T18246] sit1: entered allmulticast mode [ 470.809828][T18259] sit0: entered promiscuous mode [ 470.830408][T18259] netlink: 'syz.3.3372': attribute type 1 has an invalid length. [ 470.893558][T18265] x_tables: duplicate underflow at hook 1 [ 470.933380][T18269] netlink: 'syz.1.3379': attribute type 29 has an invalid length. [ 470.946519][T18269] __nla_validate_parse: 9 callbacks suppressed [ 470.946537][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3379'. [ 470.975510][T18267] netlink: 'syz.4.3378': attribute type 10 has an invalid length. [ 470.984380][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.012792][T18267] veth0_macvtap: left promiscuous mode [ 471.059738][T18276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3377'. [ 471.084924][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 471.117199][T18265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 471.200241][T18280] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3381'. [ 471.213992][T18280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3381'. [ 471.251310][T18280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3381'. [ 471.289744][T18289] netlink: 'syz.1.3381': attribute type 39 has an invalid length. [ 471.697454][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.806800][T18308] Bluetooth: MGMT ver 1.23 [ 472.017935][ T9082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.208353][T18337] xt_TCPMSS: Only works on TCP SYN packets [ 472.560983][T18354] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3398'. [ 472.608214][T18356] netlink: 'syz.0.3399': attribute type 6 has an invalid length. [ 472.823042][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3402'. [ 472.883563][ T1318] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.917560][ T1318] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.949181][ T1318] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.965958][ T1318] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.980434][T18375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3403'. [ 473.057547][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.123751][T18380] netlink: 'syz.4.3407': attribute type 29 has an invalid length. [ 473.293915][T18395] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.540645][T18413] ieee802154 phy0 wpan0: encryption failed: -22 [ 473.762956][ T8460] tipc: Subscription rejected, illegal request [ 474.026398][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 474.034687][ C0] lec:lec_tx_timeout: lec0 [ 474.073513][T18450] netlink: 'syz.2.3427': attribute type 18 has an invalid length. [ 474.083732][T18451] team0: Device gtp0 is up. Set it down before adding it as a team port [ 474.098064][ T9082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.167414][ T8276] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.176771][ T8459] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.177070][T18450] netlink: 'syz.2.3427': attribute type 18 has an invalid length. [ 474.193426][ T8459] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.198518][ T8459] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.366131][T18457] syzkaller0: entered promiscuous mode [ 474.378475][T18457] syzkaller0: entered allmulticast mode [ 474.391658][T18462] ip6gre2: entered promiscuous mode [ 474.419751][T18462] ip6gre2: entered allmulticast mode [ 474.737716][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.746188][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.137927][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.030852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.181153][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.490763][T18504] netlink: 'syz.4.3439': attribute type 1 has an invalid length. [ 476.574371][T18513] __nla_validate_parse: 9 callbacks suppressed [ 476.574390][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3439'. [ 476.580590][T18504] bond2: entered promiscuous mode [ 476.581003][T18504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.610810][T18511] 8021q: VLANs not supported on ip6tnl0 [ 476.664082][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3439'. [ 476.773672][T18504] bond2: (slave bridge1): making interface the new active one [ 476.784314][T18504] bridge1: entered promiscuous mode [ 476.792868][T18504] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 476.955325][T18526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3444'. [ 477.027617][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3447'. [ 477.073971][T18537] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3447'. [ 477.100086][T18537] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.107568][T18537] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.151604][T18545] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3447'. [ 477.178760][T18543] tipc: Started in network mode [ 477.183704][T18543] tipc: Node identity 927574226d88, cluster identity 4711 [ 477.197062][T18543] tipc: Enabled bearer , priority 0 [ 477.205946][T18543] syzkaller0: entered promiscuous mode [ 477.211516][T18543] syzkaller0: entered allmulticast mode [ 477.218282][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.229875][T18545] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.237152][T18545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.244808][T18545] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.252021][T18545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.265633][T18545] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3447'. [ 477.299605][T18541] tipc: Resetting bearer [ 477.365346][T18541] tipc: Disabling bearer [ 477.384247][T18545] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.391586][T18545] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.567557][T18564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3454'. [ 477.778537][T18017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.977109][T18593] xt_hashlimit: invalid rate [ 478.099520][T18593] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3462'. [ 478.256781][ T9080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.306854][T18609] netlink: 'syz.3.3467': attribute type 1 has an invalid length. [ 478.316025][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 478.471038][T18620] netlink: 'syz.1.3469': attribute type 1 has an invalid length. [ 478.487889][T18618] netlink: 'syz.3.3470': attribute type 4 has an invalid length. [ 478.497279][T18621] netlink: 'syz.4.3472': attribute type 1 has an invalid length. [ 478.581793][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.590555][ T9078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.240759][T18664] xt_cgroup: path and classid specified [ 479.310545][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.329986][T18669] netlink: 'syz.1.3479': attribute type 1 has an invalid length. [ 479.445719][T18676] tipc: Failed to remove unknown binding: 66,1,1/0:525149675/525149677 [ 479.570751][T18681] netlink: 'syz.1.3484': attribute type 11 has an invalid length. [ 479.711465][T18683] syzkaller0: entered promiscuous mode [ 479.718190][T18683] syzkaller0: entered allmulticast mode [ 479.810199][T18695] IPv6: NLM_F_CREATE should be specified when creating new route [ 479.939394][T18704] netlink: 'syz.3.3491': attribute type 1 has an invalid length. [ 480.339245][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.387251][ T5995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.549275][T18722] gre0: entered promiscuous mode [ 481.578572][T18723] __nla_validate_parse: 12 callbacks suppressed [ 481.578594][T18723] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3496'. [ 481.627081][T18017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.641524][T18727] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 481.735871][T18734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3500'. [ 481.785976][T18734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3500'. [ 482.165315][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3505'. [ 482.189974][T18760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3505'. [ 482.428358][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.534691][T18770] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 482.566106][T18770] bond0 (unregistering): Released all slaves [ 482.584528][T18777] netlink: 'syz.4.3509': attribute type 1 has an invalid length. [ 482.699110][T18780] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3510'. [ 482.721917][T18777] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3509'. [ 482.784964][T18781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3509'. [ 482.805138][T18781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.999571][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3511'. [ 483.223663][T18808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3516'. [ 483.302266][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807907a800: rx timeout, send abort [ 483.508428][T18824] FAULT_INJECTION: forcing a failure. [ 483.508428][T18824] name failslab, interval 1, probability 0, space 0, times 0 [ 483.535023][T18824] CPU: 1 UID: 0 PID: 18824 Comm: syz.0.3520 Not tainted syzkaller #0 PREEMPT(full) [ 483.535049][T18824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 483.535068][T18824] Call Trace: [ 483.535076][T18824] [ 483.535084][T18824] dump_stack_lvl+0xe8/0x150 [ 483.535114][T18824] should_fail_ex+0x412/0x560 [ 483.535146][T18824] should_failslab+0xa8/0x100 [ 483.535173][T18824] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 483.535201][T18824] ? __alloc_skb+0x193/0x390 [ 483.535228][T18824] ? __alloc_skb+0x1d7/0x390 [ 483.535254][T18824] ? __local_bh_enable_ip+0xd0/0x130 [ 483.535276][T18824] ? __alloc_skb+0x193/0x390 [ 483.535302][T18824] __alloc_skb+0x1d7/0x390 [ 483.535332][T18824] netlink_sendmsg+0x5d4/0xb40 [ 483.535364][T18824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.535387][T18824] ? aa_file_perm+0x12d/0x1630 [ 483.535413][T18824] ? aa_sock_msg_perm+0xf1/0x1b0 [ 483.535440][T18824] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.535459][T18824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.535481][T18824] __sock_sendmsg+0x21c/0x270 [ 483.535509][T18824] ____sys_sendmsg+0x4d7/0x810 [ 483.535529][T18824] ? __might_fault+0xaf/0x130 [ 483.535564][T18824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.535592][T18824] ? import_iovec+0x73/0xa0 [ 483.535617][T18824] ___sys_sendmsg+0x2a5/0x360 [ 483.535635][T18824] ? __lock_acquire+0x6b5/0x2cf0 [ 483.535661][T18824] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.535715][T18824] ? __fget_files+0x2a/0x420 [ 483.535740][T18824] ? __fget_files+0x3a0/0x420 [ 483.535772][T18824] __x64_sys_sendmsg+0x1bd/0x2a0 [ 483.535795][T18824] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.535824][T18824] ? __pfx_ksys_write+0x10/0x10 [ 483.535855][T18824] do_syscall_64+0xe2/0xf80 [ 483.535882][T18824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.535901][T18824] ? trace_irq_disable+0x37/0x100 [ 483.535927][T18824] ? clear_bhb_loop+0x60/0xb0 [ 483.535951][T18824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.535984][T18824] RIP: 0033:0x7f19e179acb9 [ 483.536004][T18824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.536020][T18824] RSP: 002b:00007f19e2618028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.536041][T18824] RAX: ffffffffffffffda RBX: 00007f19e1a15fa0 RCX: 00007f19e179acb9 [ 483.536055][T18824] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000007 [ 483.536067][T18824] RBP: 00007f19e2618090 R08: 0000000000000000 R09: 0000000000000000 [ 483.536079][T18824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.536091][T18824] R13: 00007f19e1a16038 R14: 00007f19e1a15fa0 R15: 00007ffc32447d08 [ 483.536122][T18824] [ 483.804695][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057ff1c00: rx timeout, send abort [ 483.815571][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807907a800: abort rx timeout. Force session deactivation [ 483.843114][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888057ff1c00: connection exists (fe ff). last cmd: 20 [ 484.093062][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057ff0c00: rx timeout, send abort [ 484.375878][T18852] mac80211_hwsim hwsim24 ÿ: renamed from wlan1 (while UP) [ 484.438819][T18855] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.449447][T18855] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.449473][T18861] netlink: 'syz.1.3532': attribute type 5 has an invalid length. [ 484.542059][T18861] geneve2: entered promiscuous mode [ 484.549129][T18861] geneve2: entered allmulticast mode [ 484.558327][ T8460] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 484.573506][ T8460] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 484.597559][ T8460] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 484.601634][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057ff0c00: abort rx timeout. Force session deactivation [ 484.625733][ T8460] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 484.641233][T18866] delete_channel: no stack [ 485.003498][T18888] netlink: 'syz.3.3541': attribute type 10 has an invalid length. [ 485.083538][T18888] team0: Port device dummy0 added [ 485.275346][T18905] netlink: 'syz.4.3549': attribute type 11 has an invalid length. [ 485.429628][T18911] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 485.643479][T18926] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.454316][T18969] syzkaller0: entered promiscuous mode [ 486.461558][T18969] syzkaller0: entered allmulticast mode [ 486.814320][T18995] __nla_validate_parse: 16 callbacks suppressed [ 486.814340][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3573'. [ 486.913396][T19000] netlink: 'syz.2.3575': attribute type 1 has an invalid length. [ 486.921676][T19000] netlink: 'syz.2.3575': attribute type 3 has an invalid length. [ 486.940214][T19000] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3575'. [ 486.957960][T19000] NCSI netlink: No device for ifindex 813332851 [ 487.031851][T19005] sctp: [Deprecated]: syz.2.3576 (pid 19005) Use of int in maxseg socket option. [ 487.031851][T19005] Use struct sctp_assoc_value instead [ 487.057382][T19005] sctp: [Deprecated]: syz.2.3576 (pid 19005) Use of int in maxseg socket option. [ 487.057382][T19005] Use struct sctp_assoc_value instead [ 487.074848][T19005] sctp: [Deprecated]: syz.2.3576 (pid 19005) Use of int in maxseg socket option. [ 487.074848][T19005] Use struct sctp_assoc_value instead [ 487.090254][T19005] sctp: [Deprecated]: syz.2.3576 (pid 19005) Use of int in maxseg socket option. [ 487.090254][T19005] Use struct sctp_assoc_value instead [ 487.106108][T19005] sctp: [Deprecated]: syz.2.3576 (pid 19005) Use of int in maxseg socket option. [ 487.106108][T19005] Use struct sctp_assoc_value instead [ 487.133766][T19005] sctp: [Deprecated]: syz.2.3576 (pid 19005) Use of int in maxseg socket option. [ 487.133766][T19005] Use struct sctp_assoc_value instead [ 487.168304][T19005] sctp: [Deprecated]: syz.2.3576 (pid 19005) Use of int in maxseg socket option. [ 487.168304][T19005] Use struct sctp_assoc_value instead [ 488.405293][T18976] 8021q: VLANs not supported on xfrm0 [ 488.556000][T19021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3579'. [ 488.585019][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3579'. [ 488.622827][T19029] tap0: tun_chr_ioctl cmd 2148553947 [ 488.710650][T19032] bridge2: port 1(veth3) entered blocking state [ 488.756640][T19032] bridge2: port 1(veth3) entered disabled state [ 488.773457][T19032] veth3: entered allmulticast mode [ 488.791207][T19032] veth3: entered promiscuous mode [ 488.894162][T19036] bridge2: port 2(veth0_to_bond) entered blocking state [ 488.941231][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3584'. [ 488.954716][T19036] bridge2: port 2(veth0_to_bond) entered disabled state [ 488.971975][T19049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3584'. [ 488.998605][T19036] veth0_to_bond: entered allmulticast mode [ 489.040140][T19036] veth0_to_bond: entered promiscuous mode [ 489.098136][T19049] geneve3: entered promiscuous mode [ 489.127122][T19049] geneve3: entered allmulticast mode [ 489.180050][T19063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3588'. [ 489.250007][T19063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3588'. [ 489.565876][T19078] netlink: 'syz.1.3590': attribute type 2 has an invalid length. [ 489.799432][T19100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3597'. [ 489.826660][T19102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3596'. [ 489.931604][T19107] syzkaller0: entered promiscuous mode [ 489.941404][T19107] syzkaller0: entered allmulticast mode [ 490.330812][T19130] Cannot find add_set index 0 as target [ 490.449763][T19140] netlink: 'syz.2.3607': attribute type 83 has an invalid length. [ 490.569191][T19147] xt_l2tp: missing protocol rule (udp|l2tpip) [ 490.818825][ T30] audit: type=1800 audit(1769236314.886:9): pid=19159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3615" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=857 res=0 errno=0 [ 490.866227][T19164] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 490.908592][T19164] 0ªî{X¹¦: entered allmulticast mode [ 490.914514][T19164] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 491.015966][T19170] netlink: 'syz.4.3618': attribute type 1 has an invalid length. [ 491.435799][T19184] syzkaller0: entered promiscuous mode [ 491.442301][T19184] syzkaller0: entered allmulticast mode [ 493.063692][T19190] syzkaller0: entered promiscuous mode [ 493.069368][T19190] syzkaller0: entered allmulticast mode [ 493.102433][T19195] syzkaller0: entered promiscuous mode [ 493.121835][T19195] syzkaller0: entered allmulticast mode [ 493.215240][T19216] 0ªî{X¹¦: left allmulticast mode [ 493.382535][T19219] __nla_validate_parse: 12 callbacks suppressed [ 493.382558][T19219] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3631'. [ 493.584000][ T1318] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 493.817293][T19251] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3637'. [ 493.868624][T19251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3637'. [ 494.550700][T19289] IPVS: length: 37 != 24 [ 495.001181][T19314] veth1: entered allmulticast mode [ 495.114609][T19321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3654'. [ 495.149204][T19307] IPv6: sit2: Disabled Multicast RS [ 495.158250][T19307] sit2: entered allmulticast mode [ 495.298856][T19330] tipc: Enabling of bearer rejected, failed to enable media [ 495.325765][T19330] netlink: 'syz.1.3657': attribute type 1 has an invalid length. [ 495.393523][T19321] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 495.458199][T19330] bond1: entered promiscuous mode [ 495.465386][T19330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.548832][T19334] bond1: (slave bridge3): making interface the new active one [ 495.573626][T19334] bridge3: entered promiscuous mode [ 495.583288][T19334] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 495.772313][T19346] smc: net device team0 applied user defined pnetid SYZ2 [ 495.798912][T19349] syzkaller0: entered promiscuous mode [ 495.804459][T19349] syzkaller0: entered allmulticast mode [ 496.122753][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3664'. [ 496.455475][T19375] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3669'. [ 496.603785][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3673'. [ 496.829582][T19391] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.846979][T19391] bridge_slave_1: left allmulticast mode [ 496.856718][T19391] bridge_slave_1: left promiscuous mode [ 496.862755][T19391] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.923781][T19391] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 496.989138][T19404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3678'. [ 497.018519][T19404] netlink: 'syz.0.3678': attribute type 10 has an invalid length. [ 497.036086][T19404] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.048582][T19404] bond0: (slave team0): Enslaving as an active interface with an up link [ 499.579541][T19452] syzkaller1: entered promiscuous mode [ 499.585105][T19452] syzkaller1: entered allmulticast mode [ 499.855025][T19478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3691'. [ 499.955157][T19489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3696'. [ 500.009621][T19492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3696'. [ 500.215648][T19497] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 500.239369][T19504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3700'. [ 500.264888][T19504] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3700'. [ 500.331832][T19501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3700'. [ 500.357575][T19501] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3700'. [ 500.377811][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'. [ 500.397283][T19517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3702'. [ 500.412788][T19514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3698'. [ 500.433622][T19517] geneve2: entered promiscuous mode [ 500.447151][T19517] geneve2: entered allmulticast mode [ 500.572822][T19525] openvswitch: netlink: Missing key (keys=40, expected=100) [ 500.782074][T19530] IPVS: ip_vs_add_dest(): server weight less than zero [ 500.792021][T19528] veth0: entered promiscuous mode [ 500.811770][T19534] team0: Cannot enslave team device to itself [ 500.845804][T19528] veth0: left promiscuous mode [ 501.136220][T19574] Cannot find add_set index 65532 as target [ 501.590844][T19592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.780837][T19601] netlink: 'syz.0.3720': attribute type 25 has an invalid length. [ 501.790480][T19601] netlink: 'syz.0.3720': attribute type 21 has an invalid length. [ 501.879343][T19570] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 502.228665][T19629] syzkaller1: entered promiscuous mode [ 502.236426][T19629] syzkaller1: entered allmulticast mode [ 502.271602][T19636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.510731][T19645] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.522573][T19646] netlink: 'syz.0.3737': attribute type 16 has an invalid length. [ 502.554305][T19646] netlink: 'syz.0.3737': attribute type 17 has an invalid length. [ 502.643307][T19646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 502.871601][T19669] xt_TPROXY: Can be used only with -p tcp or -p udp [ 503.408033][T19703] netlink: 'syz.3.3756': attribute type 1 has an invalid length. [ 503.592760][T19715] IPv6: sit3: Disabled Multicast RS [ 503.836022][T19725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.850350][T19727] netlink: 'syz.1.3761': attribute type 1 has an invalid length. [ 503.929502][T19721] veth0: entered promiscuous mode [ 504.004028][T19727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 504.041323][T19740] netlink: 'syz.0.3762': attribute type 74 has an invalid length. [ 504.153741][T19731] vlan0: entered allmulticast mode [ 504.159617][T19731] veth1: entered allmulticast mode [ 504.174685][T19731] bond2: (slave vlan0): making interface the new active one [ 504.186155][T19731] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 504.212060][T19742] veth1_to_bond: entered allmulticast mode [ 504.338980][T19744] veth1_to_bond (unregistering): left allmulticast mode [ 504.784807][T19781] sctp: [Deprecated]: syz.0.3777 (pid 19781) Use of struct sctp_assoc_value in delayed_ack socket option. [ 504.784807][T19781] Use struct sctp_sack_info instead [ 505.119967][T19796] __nla_validate_parse: 17 callbacks suppressed [ 505.119987][T19796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3780'. [ 505.144200][T19797] netlink: 'syz.3.3782': attribute type 1 has an invalid length. [ 505.254580][T19802] netlink: 'syz.2.3783': attribute type 10 has an invalid length. [ 505.324287][T19802] dummy0: left allmulticast mode [ 505.330080][T19802] dummy0: left promiscuous mode [ 505.335412][T19802] bridge0: port 3(dummy0) entered disabled state [ 505.407807][T19802] team0: Port device dummy0 added [ 505.579195][T19813] bridge0: port 3(batadv1) entered blocking state [ 505.586031][T19813] bridge0: port 3(batadv1) entered disabled state [ 505.594469][T19813] batadv1: entered allmulticast mode [ 505.603604][T19813] batadv1: entered promiscuous mode [ 505.640074][T19819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3786'. [ 505.690102][T19819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3786'. [ 505.720974][T19816] bond2: option mode: invalid value (9) [ 505.743200][T19816] bond2 (unregistering): Released all slaves [ 505.784235][T19823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3789'. [ 505.806569][T19825] netlink: 'syz.1.3789': attribute type 1 has an invalid length. [ 505.825550][T19825] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3789'. [ 505.856137][T19823] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3789'. [ 506.050919][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3793'. [ 506.097934][ T8457] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 506.107717][ T8457] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 506.303157][T19857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3799'. [ 506.312706][T19859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3799'. [ 506.312747][T19859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3799'. [ 506.503103][T19868] syzkaller0: entered promiscuous mode [ 506.509360][T19868] syzkaller0: entered allmulticast mode [ 506.634352][T19874] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 506.744068][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.750496][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.759773][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 506.868602][T19889] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 507.023389][T19902] validate_nla: 6 callbacks suppressed [ 507.023409][T19902] netlink: 'syz.3.3815': attribute type 3 has an invalid length. [ 507.192500][T19925] netlink: 'syz.4.3818': attribute type 5 has an invalid length. [ 508.088788][T19951] team0: Device ip6gre1 is of different type [ 508.167327][T19948] syzkaller1: entered allmulticast mode [ 508.177955][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.185200][ T8276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.588733][T19980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.600498][T19977] team0: Port device dummy0 removed [ 508.612040][T19982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.637885][T19981] bridge_slave_0: invalid flags given to default FDB implementation [ 508.760015][T19993] netlink: Unknown conntrack attr (type=2304, max=9) [ 508.892046][T20000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.905076][T20000] bond0: (slave rose0): Enslaving as an active interface with an up link [ 509.289130][ T8459] tipc: Subscription rejected, illegal request [ 509.511292][T20028] gre3: entered promiscuous mode [ 509.531840][T20028] gre3: entered allmulticast mode [ 510.056236][T20053] netlink: 'syz.0.3855': attribute type 3 has an invalid length. [ 510.204720][T20058] netlink: 'syz.1.3856': attribute type 10 has an invalid length. [ 510.359210][T20063] bond0: Unable to set down delay as MII monitoring is disabled [ 510.397082][T20063] bond0 (unregistering): Released all slaves [ 510.492402][T20058] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.511815][T20058] bridge_slave_1: left allmulticast mode [ 510.526864][T20058] bridge_slave_1: left promiscuous mode [ 510.543136][T20058] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.612500][T20058] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 511.204710][T20106] netlink: 'syz.1.3867': attribute type 1 has an invalid length. [ 511.280452][T20109] __nla_validate_parse: 16 callbacks suppressed [ 511.280471][T20109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3869'. [ 511.574925][T20109] hsr_slave_1 (unregistering): left promiscuous mode [ 511.818224][T20132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3874'. [ 512.016467][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 512.024572][ C0] lec:lec_tx_timeout: lec0 [ 512.114630][T20151] netlink: 'syz.1.3877': attribute type 3 has an invalid length. [ 512.162168][T20151] netlink: 'syz.1.3877': attribute type 3 has an invalid length. [ 512.237419][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3879'. [ 512.419570][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3880'. [ 512.449546][T20161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3880'. [ 512.689277][T20167] ip6gre1: entered allmulticast mode [ 512.848276][T20144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3876'. [ 513.171461][T20195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3886'. [ 513.539790][T20208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3891'. [ 513.617845][T20216] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3893'. [ 513.964168][T20226] xt_l2tp: invalid flags combination: 8 [ 514.121807][T20231] netlink: 'syz.1.3897': attribute type 1 has an invalid length. [ 514.141338][T20231] netlink: 'syz.1.3897': attribute type 4 has an invalid length. [ 514.187686][T20231] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3897'. [ 514.487312][T20247] : entered promiscuous mode [ 514.647633][T20259] netlink: 'syz.1.3906': attribute type 33 has an invalid length. [ 514.744952][T20259] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 514.764298][T20259] bond3 (unregistering): Released all slaves [ 514.926226][T20272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.090190][T20280] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 515.681777][T20309] tipc: Started in network mode [ 515.689366][T20309] tipc: Node identity 8e11c2e0e065, cluster identity 4711 [ 515.715801][T20309] tipc: Enabled bearer , priority 0 [ 515.731487][T20309] syzkaller0: entered promiscuous mode [ 515.749342][T20309] syzkaller0: entered allmulticast mode [ 515.842708][T20309] tipc: Resetting bearer [ 515.907419][T20307] tipc: Resetting bearer [ 515.948396][T20307] tipc: Disabling bearer [ 515.980055][T20326] netlink: 'syz.1.3927': attribute type 4 has an invalid length. [ 516.169517][T20329] netlink: 'syz.2.3929': attribute type 33 has an invalid length. [ 516.341819][T20338] __nla_validate_parse: 11 callbacks suppressed [ 516.341843][T20338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3932'. [ 516.380950][T20340] veth1_macvtap: left promiscuous mode [ 516.395028][T20340] macsec0: entered promiscuous mode [ 516.400834][T20340] macsec0: entered allmulticast mode [ 516.412141][T20340] veth1_macvtap: entered promiscuous mode [ 516.469001][T20340] veth1_macvtap: entered allmulticast mode [ 516.512906][T20340] macsec0: left promiscuous mode [ 516.530790][T20344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3934'. [ 516.537680][T20340] macsec0: left allmulticast mode [ 516.552894][T20340] veth1_macvtap: left allmulticast mode [ 517.555801][T20371] openvswitch: netlink: Invalid VLAN frame [ 517.748313][T20376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3941'. [ 517.936649][T20390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3946'. [ 517.952343][T20392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3946'. [ 518.253844][T20413] netlink: 'syz.4.3949': attribute type 1 has an invalid length. [ 518.300252][T20412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3951'. [ 518.433469][T20412] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 518.518691][T20421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.832699][T20437] bridge1: entered promiscuous mode [ 518.868559][T20437] bridge1: entered allmulticast mode [ 518.927543][T20437] team0: Port device bridge1 added [ 519.039638][T20447] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3961'. [ 519.080137][T20447] gretap0: entered promiscuous mode [ 519.135685][T20450] gretap0: left promiscuous mode [ 519.200447][T20450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.758726][T20470] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3965'. [ 519.990918][T20473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3967'. [ 520.315713][T20466] netlink: 'syz.0.3965': attribute type 29 has an invalid length. [ 520.353809][T20469] netlink: 'syz.0.3965': attribute type 29 has an invalid length. [ 520.707470][T20489] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 520.734384][T20489] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 520.783707][T20489] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 521.121790][T20511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3979'. [ 521.162308][T20512] bond2: entered promiscuous mode [ 521.168384][T20512] bond2: entered allmulticast mode [ 521.175021][T20512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.230584][T20514] bond3: entered promiscuous mode [ 521.235851][T20514] bond3: entered allmulticast mode [ 521.242753][T20514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.497209][T20526] __nla_validate_parse: 1 callbacks suppressed [ 521.497231][T20526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3983'. [ 521.589721][T20526] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3983'. [ 521.693745][T20526] veth5: entered promiscuous mode [ 521.717513][T20533] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3985'. [ 521.878522][T20543] netlink: 'syz.1.3989': attribute type 20 has an invalid length. [ 521.904908][T20543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3989'. [ 521.970225][ T8459] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.979375][T20543] netlink: 'syz.1.3989': attribute type 20 has an invalid length. [ 522.012469][ T8459] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.022246][T20543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3989'. [ 522.042783][ T8459] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.048985][T20559] xt_hashlimit: max too large, truncated to 1048576 [ 522.063199][ T8459] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.195500][T20565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3993'. [ 522.271234][T20558] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3993'. [ 522.352642][T20580] ieee802154 phy0 wpan0: encryption failed: -22 [ 522.546144][T20585] netlink: 'syz.0.3997': attribute type 10 has an invalid length. [ 522.624711][T20584] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3998'. [ 522.653201][T20585] team0: Port device dummy0 added [ 522.800911][T20593] @0Ù: renamed from bond_slave_1 (while UP) [ 522.859706][T20593] x_tables: duplicate underflow at hook 1 [ 522.867979][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4002'. [ 522.917073][T20595] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 522.932621][T20601] netlink: 'syz.0.4002': attribute type 3 has an invalid length. [ 522.978651][ T12] wlan0: Trigger new scan to find an IBSS to join [ 523.027270][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4004'. [ 523.324269][T20616] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 523.975535][T20647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 524.165145][T20657] nbd: must specify at least one socket [ 524.250349][T20663] bond0: Removing last ns target with arp_interval on [ 525.226483][T20719] netlink: 'syz.3.4040': attribute type 1 has an invalid length. [ 525.273689][T20722] netlink: 'syz.1.4041': attribute type 83 has an invalid length. [ 525.547365][T20725] bond2: (slave bridge2): making interface the new active one [ 525.558268][T20725] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 526.020212][ T8276] wlan0: Trigger new scan to find an IBSS to join [ 526.200217][T20781] IPv6: sit2: Disabled Multicast RS [ 526.234574][T20781] sit2: entered allmulticast mode [ 526.385124][T20785] bond3: entered promiscuous mode [ 526.391526][T20785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 526.598893][T20796] team0: Device gtp0 is up. Set it down before adding it as a team port [ 526.699396][T20804] __nla_validate_parse: 15 callbacks suppressed [ 526.699428][T20804] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4063'. [ 526.828248][T20809] netlink: 'syz.2.4064': attribute type 1 has an invalid length. [ 526.836253][T20809] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4064'. [ 527.974637][T20866] netlink: 'syz.3.4080': attribute type 6 has an invalid length. [ 528.043044][T20866] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4080'. [ 528.063956][T20873] netlink: 'syz.1.4083': attribute type 15 has an invalid length. [ 528.072718][T20873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4083'. [ 528.109694][T20873] netlink: 'syz.1.4083': attribute type 15 has an invalid length. [ 528.119381][T20873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4083'. [ 528.224119][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xa0 [ 528.251843][T20890] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 528.271515][T20890] bond2 (unregistering): Released all slaves [ 528.394244][T20904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.427995][T20904] netlink: 'syz.3.4088': attribute type 6 has an invalid length. [ 528.646132][T20917] team0: Cannot enslave team device to itself [ 528.892153][T20896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4088'. [ 528.993847][ T8459] wlan0: Creating new IBSS network, BSSID 2e:48:d6:85:2a:5e [ 529.148185][T20926] syzkaller1: entered promiscuous mode [ 529.159842][T20926] syzkaller1: entered allmulticast mode [ 529.260408][T20926] syzkaller0: entered promiscuous mode [ 529.265956][T20926] syzkaller0: entered allmulticast mode [ 529.347816][T20936] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 529.355485][T20936] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 529.477843][T20944] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4104'. [ 529.651515][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4107'. [ 529.681074][T20953] openvswitch: netlink: IP tunnel dst address not specified [ 529.804042][T20960] bond4: option miimon: invalid value (18446744073709551585) [ 529.812324][T20960] bond4: option miimon: allowed values 0 - 2147483647 [ 529.824847][T20960] bond4 (unregistering): Released all slaves [ 529.955280][T20967] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4109'. [ 530.734631][T21001] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.4119'. [ 530.762742][T21001] syzkaller1: entered promiscuous mode [ 530.768932][T21001] syzkaller1: entered allmulticast mode [ 531.361301][T21031] netlink: 'syz.0.4129': attribute type 8 has an invalid length. [ 531.400332][T21034] : entered promiscuous mode [ 531.561500][T21042] netem: change failed [ 531.643905][T18017] IPVS: starting estimator thread 0... [ 531.723926][T21053] __nla_validate_parse: 4 callbacks suppressed [ 531.723943][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4135'. [ 531.725666][T21054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4135'. [ 531.750722][T21051] IPVS: using max 26 ests per chain, 62400 per kthread [ 531.799855][T21054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.868368][T21060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4138'. [ 531.907237][T21060] openvswitch: netlink: Flow key attr not present in new flow. [ 531.949491][T21054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.129614][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.149322][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.165251][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.175437][T21067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4136'. [ 532.191785][T21076] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4140'. [ 532.220263][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.257084][T21076] gretap0: entered promiscuous mode [ 532.335056][T21076] gretap0: left promiscuous mode [ 532.378091][T21076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 532.445781][T21087] netlink: 'syz.4.4144': attribute type 1 has an invalid length. [ 532.500079][T21090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4145'. [ 532.535401][T21087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.617250][T21087] netlink: 'syz.4.4144': attribute type 29 has an invalid length. [ 532.625179][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4144'. [ 532.630864][T21097] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 532.651372][T21099] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.697815][ T8805] lec:lec_start_xmit: lec0:No lecd attached [ 532.734052][T21101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4149'. [ 532.861699][T21109] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 532.892138][T21117] tipc: Trying to set illegal importance in message [ 532.941919][T21116] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4153'. [ 533.061740][T21116] bridge_slave_0 (unregistering): left allmulticast mode [ 533.070986][T21116] bridge_slave_0 (unregistering): left promiscuous mode [ 533.079810][T21116] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.124717][T21124] netlink: 'syz.0.4155': attribute type 29 has an invalid length. [ 533.147255][T21128] netlink: 'syz.0.4155': attribute type 29 has an invalid length. [ 533.173719][T21124] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4155'. [ 533.312615][T21122] syzkaller0: entered promiscuous mode [ 533.329005][T21122] syzkaller0: entered allmulticast mode [ 533.393714][T21124] IPv6: sit4: Disabled Multicast RS [ 533.407733][T21124] sit4: entered allmulticast mode [ 533.451490][T21142] netlink: 'syz.3.4160': attribute type 1 has an invalid length. [ 534.037531][T21163] netlink: 'syz.4.4164': attribute type 1 has an invalid length. [ 534.372407][T21168] netlink: 'syz.1.4166': attribute type 1 has an invalid length. [ 534.421561][T16002] Bluetooth: hci5: command 0x0406 tx timeout [ 535.373410][T21168] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 535.443522][T21175] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 535.619178][T21184] 0ªî{X¹¦: entered promiscuous mode [ 535.934582][T21204] netlink: 'syz.1.4176': attribute type 13 has an invalid length. [ 536.023686][T21215] netlink: 'syz.2.4178': attribute type 9 has an invalid length. [ 536.359319][T21239] xt_limit: Overflow, try lower: 271964/0 [ 536.620100][T21250] netlink: 'syz.3.4188': attribute type 1 has an invalid length. [ 536.764588][T21252] bond5: option mode: invalid value (133) [ 536.782779][T21252] bond5 (unregistering): Released all slaves [ 537.203047][T21281] __nla_validate_parse: 10 callbacks suppressed [ 537.203068][T21281] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4196'. [ 537.261823][T21285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4197'. [ 537.277149][T21285] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4197'. [ 537.305833][T21284] ip6gre1: entered promiscuous mode [ 537.315308][T21285] netlink: 'syz.3.4197': attribute type 6 has an invalid length. [ 537.325415][T21285] netlink: 'syz.3.4197': attribute type 5 has an invalid length. [ 537.338278][T21285] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4197'. [ 537.349363][T21284] ip6gre1: entered allmulticast mode [ 537.383890][T21290] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 1, id = 0 [ 537.452047][T21295] netlink: 'syz.3.4201': attribute type 9 has an invalid length. [ 537.477405][T21296] netlink: 'syz.1.4200': attribute type 63 has an invalid length. [ 537.512488][T21292] netlink: 'syz.1.4200': attribute type 63 has an invalid length. [ 537.618498][T21300] netlink: 'syz.1.4205': attribute type 1 has an invalid length. [ 537.637467][T21300] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4205'. [ 537.661411][T21300] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4205'. [ 537.837493][T21309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4207'. [ 537.868455][T21310] netlink: 'syz.4.4206': attribute type 10 has an invalid length. [ 537.920688][T21314] netlink: 'syz.4.4206': attribute type 10 has an invalid length. [ 537.967272][T21310] syz_tun: entered promiscuous mode [ 537.993950][T21319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4206'. [ 538.016392][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 538.024515][ C0] lec:lec_tx_timeout: lec0 [ 538.089345][T21310] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 538.144603][T21314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.158774][T21314] bond_slave_0: entered promiscuous mode [ 538.164983][T21314] bond_slave_1: entered promiscuous mode [ 538.188759][T21314] team0: Port device bond0 added [ 538.230814][T21324] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4210'. [ 538.352672][T21328] openvswitch: netlink: IPv4 tun info is not correct [ 538.512346][T21334] netlink: 'syz.2.4215': attribute type 21 has an invalid length. [ 538.608548][T21351] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4218'. [ 539.424382][T21400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.843026][T21431] tap0: tun_chr_ioctl cmd 1074025676 [ 539.848840][T21431] tap0: owner set to 0 [ 539.873111][T21434] `: renamed from bond0 [ 539.884045][T21434] xt_NFQUEUE: number of total queues is 0 [ 540.167130][T21454] 8021q: VLANs not supported on wg0 [ 540.254672][T21456] bond4 (unregistering): Released all slaves [ 540.321802][T21462] syzkaller0: entered promiscuous mode [ 540.338649][T21462] syzkaller0: entered allmulticast mode [ 540.549621][T21472] x_tables: duplicate underflow at hook 1 [ 541.382423][T21514] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 542.051613][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.070589][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.210590][T21568] __nla_validate_parse: 16 callbacks suppressed [ 542.210612][T21568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4291'. [ 542.269938][T21571] vcan0: entered promiscuous mode [ 542.275318][T21571] vcan0: entered allmulticast mode [ 542.310560][T21570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4291'. [ 543.030266][T21609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4302'. [ 543.321799][T21633] x_tables: duplicate underflow at hook 1 [ 543.411176][T21636] validate_nla: 6 callbacks suppressed [ 543.411197][T21636] netlink: 'syz.0.4310': attribute type 1 has an invalid length. [ 543.485054][T21644] ================================================================== [ 543.493186][T21644] BUG: KASAN: slab-use-after-free in macvlan_forward_source+0x5d8/0x700 [ 543.501568][T21644] Read of size 2 at addr ffff88803322adfc by task syz.4.4313/21644 [ 543.509523][T21644] [ 543.511884][T21644] CPU: 1 UID: 0 PID: 21644 Comm: syz.4.4313 Not tainted syzkaller #0 PREEMPT(full) [ 543.511922][T21644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 543.511944][T21644] Call Trace: [ 543.511952][T21644] [ 543.511961][T21644] dump_stack_lvl+0xe8/0x150 [ 543.511990][T21644] print_report+0xba/0x230 [ 543.512012][T21644] ? macvlan_forward_source+0x5d8/0x700 [ 543.512048][T21644] kasan_report+0x117/0x150 [ 543.512074][T21644] ? macvlan_forward_source+0x5d8/0x700 [ 543.512107][T21644] macvlan_forward_source+0x5d8/0x700 [ 543.512142][T21644] macvlan_handle_frame+0x2e2/0x12e0 [ 543.512173][T21644] ? __pfx_macvlan_handle_frame+0x10/0x10 [ 543.512201][T21644] __netif_receive_skb_core+0x98f/0x30a0 [ 543.512231][T21644] ? __pfx___skb_flow_dissect+0x10/0x10 [ 543.512251][T21644] ? kernel_text_address+0xa5/0xe0 [ 543.512282][T21644] ? __kernel_text_address+0xd/0x30 [ 543.512310][T21644] ? unwind_get_return_address+0x4d/0x90 [ 543.512335][T21644] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 543.512373][T21644] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 543.512401][T21644] ? stack_trace_save+0xa9/0x100 [ 543.512430][T21644] ? __pfx_stack_trace_save+0x10/0x10 [ 543.512470][T21644] ? netif_receive_skb+0x105/0x790 [ 543.512494][T21644] ? lock_acquire+0x106/0x330 [ 543.512514][T21644] ? netif_receive_skb+0x105/0x790 [ 543.512541][T21644] __netif_receive_skb+0x72/0x370 [ 543.512571][T21644] ? netif_receive_skb+0x105/0x790 [ 543.512595][T21644] netif_receive_skb+0x1bb/0x790 [ 543.512621][T21644] ? __lock_acquire+0x6b5/0x2cf0 [ 543.512641][T21644] ? __pfx_netif_receive_skb+0x10/0x10 [ 543.512670][T21644] ? tun_rx_batched+0x185/0x790 [ 543.512693][T21644] tun_rx_batched+0x1de/0x790 [ 543.512720][T21644] ? __pfx_tun_rx_batched+0x10/0x10 [ 543.512743][T21644] ? tun_get_user+0x2669/0x3dd0 [ 543.512766][T21644] ? tun_get_user+0x2669/0x3dd0 [ 543.512790][T21644] ? tun_get_user+0x2354/0x3dd0 [ 543.512811][T21644] ? __local_bh_enable_ip+0xd0/0x130 [ 543.512835][T21644] ? tun_get_user+0x2669/0x3dd0 [ 543.512857][T21644] tun_get_user+0x2a78/0x3dd0 [ 543.512890][T21644] ? aa_file_perm+0x440/0x1630 [ 543.512918][T21644] ? __pfx_tun_get_user+0x10/0x10 [ 543.512943][T21644] ? __lock_acquire+0x6b5/0x2cf0 [ 543.512970][T21644] ? ref_tracker_alloc+0x363/0x4d0 [ 543.513003][T21644] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 543.513038][T21644] ? tun_get+0x1c/0x2f0 [ 543.513059][T21644] ? tun_get+0x1c/0x2f0 [ 543.513082][T21644] ? tun_get+0x1c/0x2f0 [ 543.513102][T21644] ? tun_get+0x1c/0x2f0 [ 543.513126][T21644] tun_chr_write_iter+0x113/0x200 [ 543.513150][T21644] vfs_write+0x61d/0xb90 [ 543.513173][T21644] ? __pfx_vfs_write+0x10/0x10 [ 543.513198][T21644] ? __fget_files+0x2a/0x420 [ 543.513227][T21644] ksys_write+0x150/0x270 [ 543.513247][T21644] ? __pfx_ksys_write+0x10/0x10 [ 543.513272][T21644] do_syscall_64+0xe2/0xf80 [ 543.513300][T21644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.513319][T21644] ? trace_irq_disable+0x37/0x100 [ 543.513345][T21644] ? clear_bhb_loop+0x60/0xb0 [ 543.513368][T21644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.513388][T21644] RIP: 0033:0x7f33be35b58e [ 543.513407][T21644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 543.513426][T21644] RSP: 002b:00007f33bc5f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.513447][T21644] RAX: ffffffffffffffda RBX: 00007f33bc5f66c0 RCX: 00007f33be35b58e [ 543.513463][T21644] RDX: 000000000000006e RSI: 0000200000000040 RDI: 00000000000000c8 [ 543.513476][T21644] RBP: 00007f33be408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 543.513490][T21644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.513501][T21644] R13: 00007f33be616038 R14: 00007f33be615fa0 R15: 00007ffd72c6fb28 [ 543.513527][T21644] [ 543.513535][T21644] [ 543.888632][T21644] Allocated by task 21630: [ 543.893065][T21644] kasan_save_track+0x3e/0x80 [ 543.897766][T21644] __kasan_kmalloc+0x93/0xb0 [ 543.902384][T21644] __kvmalloc_node_noprof+0x59a/0x8d0 [ 543.907781][T21644] bpf_stack_liveness_init+0x29/0x90 [ 543.913106][T21644] bpf_check+0x2152/0x1c4a0 [ 543.917630][T21644] bpf_prog_load+0x1484/0x1ae0 [ 543.922429][T21644] __sys_bpf+0x570/0x920 [ 543.926737][T21644] __x64_sys_bpf+0x7c/0x90 [ 543.931179][T21644] do_syscall_64+0xe2/0xf80 [ 543.935715][T21644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.941622][T21644] [ 543.943961][T21644] Freed by task 21630: [ 543.948066][T21644] kasan_save_track+0x3e/0x80 [ 543.952762][T21644] kasan_save_free_info+0x46/0x50 [ 543.957816][T21644] __kasan_slab_free+0x5c/0x80 [ 543.962600][T21644] kfree+0x1be/0x650 [ 543.966608][T21644] bpf_check+0x19ab3/0x1c4a0 [ 543.971244][T21644] bpf_prog_load+0x1484/0x1ae0 [ 543.976033][T21644] __sys_bpf+0x570/0x920 [ 543.980296][T21644] __x64_sys_bpf+0x7c/0x90 [ 543.984762][T21644] do_syscall_64+0xe2/0xf80 [ 543.989295][T21644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.995213][T21644] [ 543.997554][T21644] The buggy address belongs to the object at ffff88803322a000 [ 543.997554][T21644] which belongs to the cache kmalloc-cg-4k of size 4096 [ 544.011894][T21644] The buggy address is located 3580 bytes inside of [ 544.011894][T21644] freed 4096-byte region [ffff88803322a000, ffff88803322b000) [ 544.025898][T21644] [ 544.028241][T21644] The buggy address belongs to the physical page: [ 544.034682][T21644] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33228 [ 544.043467][T21644] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 544.051996][T21644] memcg:ffff88807bf13d41 [ 544.056252][T21644] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 544.063822][T21644] page_type: f5(slab) [ 544.067821][T21644] raw: 00fff00000000040 ffff88813ff30500 ffffea0001f90000 dead000000000002 [ 544.076429][T21644] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff88807bf13d41 [ 544.085044][T21644] head: 00fff00000000040 ffff88813ff30500 ffffea0001f90000 dead000000000002 [ 544.093740][T21644] head: 0000000000000000 0000000000040004 00000000f5000000 ffff88807bf13d41 [ 544.102530][T21644] head: 00fff00000000003 ffffea0000cc8a01 00000000ffffffff 00000000ffffffff [ 544.111229][T21644] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 544.119916][T21644] page dumped because: kasan: bad access detected [ 544.126380][T21644] page_owner tracks the page as allocated [ 544.132108][T21644] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16005, tgid 16005 (udevd), ts 414105207134, free_ts 414090481355 [ 544.153225][T21644] post_alloc_hook+0x228/0x280 [ 544.158017][T21644] get_page_from_freelist+0x24dc/0x2580 [ 544.163582][T21644] __alloc_frozen_pages_noprof+0x18d/0x380 [ 544.169405][T21644] alloc_pages_mpol+0x232/0x4a0 [ 544.174272][T21644] allocate_slab+0x86/0x3a0 [ 544.178886][T21644] ___slab_alloc+0xd82/0x1760 [ 544.183596][T21644] __slab_alloc+0x65/0x100 [ 544.188043][T21644] __kvmalloc_node_noprof+0x673/0x8d0 [ 544.193429][T21644] seq_read_iter+0x202/0xe10 [ 544.198039][T21644] vfs_read+0x582/0xa70 [ 544.202213][T21644] ksys_read+0x150/0x270 [ 544.206470][T21644] do_syscall_64+0xe2/0xf80 [ 544.211024][T21644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.216931][T21644] page last free pid 8460 tgid 8460 stack trace: [ 544.223274][T21644] __free_frozen_pages+0xbb0/0xd10 [ 544.228445][T21644] rhashtable_free_and_destroy+0x7e8/0x940 [ 544.234266][T21644] ila_xlat_exit_net+0x4f/0xa0 [ 544.239054][T21644] ops_undo_list+0x49f/0x940 [ 544.243762][T21644] cleanup_net+0x4df/0x7b0 [ 544.248199][T21644] process_scheduled_works+0xaec/0x17a0 [ 544.253761][T21644] worker_thread+0x89f/0xd90 [ 544.258372][T21644] kthread+0x726/0x8b0 [ 544.262468][T21644] ret_from_fork+0x51b/0xa40 [ 544.267078][T21644] ret_from_fork_asm+0x1a/0x30 [ 544.271884][T21644] [ 544.274218][T21644] Memory state around the buggy address: [ 544.279866][T21644] ffff88803322ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 544.287977][T21644] ffff88803322ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 544.296052][T21644] >ffff88803322ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 544.304128][T21644] ^ [ 544.312127][T21644] ffff88803322ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 544.320213][T21644] ffff88803322ae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 544.328291][T21644] ================================================================== [ 544.336488][T21644] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 544.343772][T21644] CPU: 1 UID: 0 PID: 21644 Comm: syz.4.4313 Not tainted syzkaller #0 PREEMPT(full) [ 544.353177][T21644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 544.363274][T21644] Call Trace: [ 544.366588][T21644] [ 544.369562][T21644] vpanic+0x1e0/0x670 [ 544.373600][T21644] panic+0xc5/0xd0 [ 544.377375][T21644] ? __pfx_panic+0x10/0x10 [ 544.381835][T21644] ? macvlan_forward_source+0x5d8/0x700 [ 544.387438][T21644] ? macvlan_forward_source+0x5d8/0x700 [ 544.393038][T21644] check_panic_on_warn+0x89/0xb0 [ 544.398040][T21644] ? macvlan_forward_source+0x5d8/0x700 [ 544.403635][T21644] end_report+0x6f/0x140 [ 544.407923][T21644] kasan_report+0x128/0x150 [ 544.412607][T21644] ? macvlan_forward_source+0x5d8/0x700 [ 544.418201][T21644] macvlan_forward_source+0x5d8/0x700 [ 544.423637][T21644] macvlan_handle_frame+0x2e2/0x12e0 [ 544.428970][T21644] ? __pfx_macvlan_handle_frame+0x10/0x10 [ 544.434735][T21644] __netif_receive_skb_core+0x98f/0x30a0 [ 544.440398][T21644] ? __pfx___skb_flow_dissect+0x10/0x10 [ 544.445963][T21644] ? kernel_text_address+0xa5/0xe0 [ 544.451107][T21644] ? __kernel_text_address+0xd/0x30 [ 544.456333][T21644] ? unwind_get_return_address+0x4d/0x90 [ 544.461991][T21644] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 544.468178][T21644] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 544.474292][T21644] ? stack_trace_save+0xa9/0x100 [ 544.479264][T21644] ? __pfx_stack_trace_save+0x10/0x10 [ 544.484673][T21644] ? netif_receive_skb+0x105/0x790 [ 544.489823][T21644] ? lock_acquire+0x106/0x330 [ 544.494533][T21644] ? netif_receive_skb+0x105/0x790 [ 544.499677][T21644] __netif_receive_skb+0x72/0x370 [ 544.504757][T21644] ? netif_receive_skb+0x105/0x790 [ 544.509976][T21644] netif_receive_skb+0x1bb/0x790 [ 544.514944][T21644] ? __lock_acquire+0x6b5/0x2cf0 [ 544.519967][T21644] ? __pfx_netif_receive_skb+0x10/0x10 [ 544.525456][T21644] ? tun_rx_batched+0x185/0x790 [ 544.530330][T21644] tun_rx_batched+0x1de/0x790 [ 544.535055][T21644] ? __pfx_tun_rx_batched+0x10/0x10 [ 544.540275][T21644] ? tun_get_user+0x2669/0x3dd0 [ 544.545264][T21644] ? tun_get_user+0x2669/0x3dd0 [ 544.550243][T21644] ? tun_get_user+0x2354/0x3dd0 [ 544.555129][T21644] ? __local_bh_enable_ip+0xd0/0x130 [ 544.560530][T21644] ? tun_get_user+0x2669/0x3dd0 [ 544.565406][T21644] tun_get_user+0x2a78/0x3dd0 [ 544.570123][T21644] ? aa_file_perm+0x440/0x1630 [ 544.574943][T21644] ? __pfx_tun_get_user+0x10/0x10 [ 544.580007][T21644] ? __lock_acquire+0x6b5/0x2cf0 [ 544.584985][T21644] ? ref_tracker_alloc+0x363/0x4d0 [ 544.590148][T21644] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 544.595651][T21644] ? tun_get+0x1c/0x2f0 [ 544.599830][T21644] ? tun_get+0x1c/0x2f0 [ 544.604028][T21644] ? tun_get+0x1c/0x2f0 [ 544.608468][T21644] ? tun_get+0x1c/0x2f0 [ 544.612649][T21644] tun_chr_write_iter+0x113/0x200 [ 544.617703][T21644] vfs_write+0x61d/0xb90 [ 544.621971][T21644] ? __pfx_vfs_write+0x10/0x10 [ 544.626758][T21644] ? __fget_files+0x2a/0x420 [ 544.631381][T21644] ksys_write+0x150/0x270 [ 544.635729][T21644] ? __pfx_ksys_write+0x10/0x10 [ 544.640606][T21644] do_syscall_64+0xe2/0xf80 [ 544.645136][T21644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.651215][T21644] ? trace_irq_disable+0x37/0x100 [ 544.656267][T21644] ? clear_bhb_loop+0x60/0xb0 [ 544.660981][T21644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.666900][T21644] RIP: 0033:0x7f33be35b58e [ 544.671527][T21644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 544.691246][T21644] RSP: 002b:00007f33bc5f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 544.699690][T21644] RAX: ffffffffffffffda RBX: 00007f33bc5f66c0 RCX: 00007f33be35b58e [ 544.707708][T21644] RDX: 000000000000006e RSI: 0000200000000040 RDI: 00000000000000c8 [ 544.715705][T21644] RBP: 00007f33be408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 544.723697][T21644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.731691][T21644] R13: 00007f33be616038 R14: 00007f33be615fa0 R15: 00007ffd72c6fb28 [ 544.739698][T21644] [ 544.743349][T21644] Kernel Offset: disabled [ 544.747684][T21644] Rebooting in 86400 seconds..