last executing test programs: 9m8.262081294s ago: executing program 1 (id=687): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) recvmmsg(r1, &(0x7f0000000cc0), 0x0, 0x40010023, 0x0) shutdown(r1, 0x1) 9m7.888618638s ago: executing program 1 (id=693): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x2}}]}, 0x13c}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x2}}]}, 0x13c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462', @ANYRESHEX=0x0], 0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1a329, 0x10400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013}) (async) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013}) r10 = accept4(r1, 0x0, 0x0, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x208, 0x2e0, 0x2e0, 0x208, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xf0, 0x118, 0x0, {0x1000000}, [@common=@dst={{0x48}, {0x7fff, 0x3, 0x7de91c6f22c9938, [0x9, 0x1ff, 0x87e, 0x2a, 0xafd4, 0x9, 0xa, 0x7, 0x6, 0x1000, 0x6, 0x200, 0x9, 0x0, 0x7, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPVS_CMD_DEL_DAEMON(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x24000884}, 0x48041) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x24000884}, 0x48041) accept$alg(r10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) connect$unix(r12, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4042090}, 0x0) 9m2.473053911s ago: executing program 1 (id=764): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800c000100626974776973650024000280080003400000000408000140000000000a73797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00000000000000"], 0x8c}}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000340)='FREEZING\x00', 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x60}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r9, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001800010000000000000000000a00000000000000000000001800160014000100020000000000000000001000fc00010008001f"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448cb, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000049d9b0da03d6cea5559d397c7bc8a10654e1985c20f56a681644c96e7aa1443ed2d171b6d390422e0ed67d9e71c4cee0de7037cf311473edc3ee5d9bfc70c752dfac94", @ANYRES16=r10, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000000000040000001000000008000"/37], 0x48) 9m1.389760548s ago: executing program 1 (id=777): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c00457abeedd50000000000", @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x48010) 9m0.410417525s ago: executing program 1 (id=786): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x28, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 8) 9m0.171869694s ago: executing program 1 (id=790): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x4c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xfffffdb2, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xca6f}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x4c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xfffffdb2, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xca6f}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1001a}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000f2e6e72d00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000f2e6e72d00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x108, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x108, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) r4 = socket(0x2b, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) (async) bind$inet6(r4, 0x0, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f00000001c0)={0x4, 0x2, 0x8, 0x4, 0xff, 0x0, 0x8000000000000001}) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) close(0x3) (async) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0xe, 0x12, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x3, 0x0, 0x4, 0x3, 0x6, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000013c0)=""/4096, 0x1f00, 0x26, '\x00', 0x0, @sk_skb=0x4, r3, 0x8, &(0x7f00000023c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002400)={0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000440)=[{0x0, 0x1, 0x0, 0x9}, {0x0, 0x1, 0x7, 0x7}, {0x2, 0x4, 0xb}, {0x3, 0x1, 0xc, 0x5}, {0x3, 0x1, 0xe, 0x1}, {0x3, 0x1}, {0x4, 0x3, 0x2, 0xa}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002800)={r5, 0x0, 0xb6, 0xc7, &(0x7f0000002580)="26f98e526842b939f224e443d1e392187880fc03451b0a700e6f6c1cdd279e7dde694a7dae4094ae8780fb90cb1f615173eff17cd63380d2cef09da6fc121c6e7375dbd7964b10fefd1b6673a9c0b51bd290a0a20c4b0ff5e225fce968a82d77f98a0785f4b056442ac33adadd05e5136cf3f9e4c64dc0bcdf24c756765275d22b374a638fb6db722367b5bc717b028b5ff890df95158b0de6a823d52d4f3cb52d8fe7a85bccc5c505b9b711d1e60fc2875a3a45d069", &(0x7f0000002640)=""/199, 0x9, 0x0, 0x5f, 0x1c, &(0x7f0000002740)="c4a72e41b1fdab9747853ee7aa661e24c333682e941e004729ad700509763451c8efa1d1a84972d9af53705e4f41a4e5cb49630180c363f3ae0a6ba6615280f41e46e88aca2681ab6ae3453ceffb726725cc4e5d015fb17e789582e21bc6c8", &(0x7f00000027c0)="f7eaf073298f4a9d0f788e0073e1e5502829ea049f7edebad95ab7eb", 0x1, 0x0, 0x6}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r7], 0x54}}, 0x800) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x4}, &(0x7f0000000180)=0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r10) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m45.106330846s ago: executing program 32 (id=790): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x4c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xfffffdb2, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xca6f}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x4c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xfffffdb2, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xca6f}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1001a}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000f2e6e72d00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000f2e6e72d00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x108, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x108, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) r4 = socket(0x2b, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) (async) bind$inet6(r4, 0x0, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f00000001c0)={0x4, 0x2, 0x8, 0x4, 0xff, 0x0, 0x8000000000000001}) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) close(0x3) (async) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0xe, 0x12, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x3, 0x0, 0x4, 0x3, 0x6, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000013c0)=""/4096, 0x1f00, 0x26, '\x00', 0x0, @sk_skb=0x4, r3, 0x8, &(0x7f00000023c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002400)={0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000440)=[{0x0, 0x1, 0x0, 0x9}, {0x0, 0x1, 0x7, 0x7}, {0x2, 0x4, 0xb}, {0x3, 0x1, 0xc, 0x5}, {0x3, 0x1, 0xe, 0x1}, {0x3, 0x1}, {0x4, 0x3, 0x2, 0xa}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002800)={r5, 0x0, 0xb6, 0xc7, &(0x7f0000002580)="26f98e526842b939f224e443d1e392187880fc03451b0a700e6f6c1cdd279e7dde694a7dae4094ae8780fb90cb1f615173eff17cd63380d2cef09da6fc121c6e7375dbd7964b10fefd1b6673a9c0b51bd290a0a20c4b0ff5e225fce968a82d77f98a0785f4b056442ac33adadd05e5136cf3f9e4c64dc0bcdf24c756765275d22b374a638fb6db722367b5bc717b028b5ff890df95158b0de6a823d52d4f3cb52d8fe7a85bccc5c505b9b711d1e60fc2875a3a45d069", &(0x7f0000002640)=""/199, 0x9, 0x0, 0x5f, 0x1c, &(0x7f0000002740)="c4a72e41b1fdab9747853ee7aa661e24c333682e941e004729ad700509763451c8efa1d1a84972d9af53705e4f41a4e5cb49630180c363f3ae0a6ba6615280f41e46e88aca2681ab6ae3453ceffb726725cc4e5d015fb17e789582e21bc6c8", &(0x7f00000027c0)="f7eaf073298f4a9d0f788e0073e1e5502829ea049f7edebad95ab7eb", 0x1, 0x0, 0x6}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r7], 0x54}}, 0x800) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x4}, &(0x7f0000000180)=0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r10) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.199727507s ago: executing program 3 (id=4496): r0 = socket$netlink(0x10, 0x3, 0x15) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe00000020000000000000000000026e4297b00000000000000000000000000004e200000000000000a"], 0xb8}}, 0x24000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r3, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x20, 0x5e, 0xe25, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @nested={0x4}]}, 0x20}], 0x1, 0x0, 0x0, 0x4040002}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="000000000000000009000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000030000000000000000000000008000"/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2c8d0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x20}, 0x10) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000180)={0x2, 'gretap0\x00', {}, 0x101}) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) 5.51672108s ago: executing program 3 (id=4499): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0xc042}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000240)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r4, 0x201, 0x0, 0x0, {0x4, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002}, 0x0) close(r1) 5.252383369s ago: executing program 3 (id=4503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x1304, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}, @NFT_MSG_NEWFLOWTABLE={0xe8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x205, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x238}, 0x1, 0x0, 0x0, 0x40000}, 0x8c0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x884) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10fffff500e9ecffffffffffffff0000000a0001006f776e65720000000c00018008000100647570000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4048010) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.852343986s ago: executing program 3 (id=4508): socket$netlink(0x10, 0x3, 0x0) 4.711291784s ago: executing program 3 (id=4510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000840)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 4.131821433s ago: executing program 0 (id=4514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x6010}, 0x18) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000640)={0xc6e}, 0x4) writev(r3, &(0x7f00000005c0)=[{&(0x7f00000000c0)="4f0154a5c49acceb17937550e369420672e3cbaf20f5a078fd83282594cbf7631dc267954f752011930f0be6cc4a56ded5b06770201277c9c769d892ccdec39131b84b2467b6e7ff18b4e2636cd7a7aa0bd0e897eff0bbda1e60bf43a99dfa9806981ce178ab966e746405ad1303089c5e05f13393d9c24d4449bf9e443d93dfcb648275fbf30279762a2eab2dc0915da70c17231b0cb1c091a2717c7584b054846d6e3fc36df786cf64233120920a672014e70dfcb6cd8182845d556e53fed6093e540035e46f82613ed6f41ed5f398947d06808813c552fb084b027978902cc21769d2d65db9", 0xe7}, {&(0x7f00000001c0)="133dd2f05893b1dda007e97b4797b61d8f4a53a22e79744a1d78b2844e275bb30ea4687038d65f15233451d45362518b760daa47610723ac4099ae321432a0b5d909d05d80667ab23fa1f95383fc8ffc81c01c49945349de540edcff42abe670f99dc7076ef7eb65f45700403615e4f10a677afb5bc23742db4054ff623c2f3af03bb62a14977f983430ad355d10a7ec0af10616278637135a9ed66388e99f", 0x9f}, {&(0x7f0000000280)="64001427900134969e2986e39c6a2be59f55980d91a0f33045c10505987403fb725b9039c09e6b2bef34587bbc27b5fdb92d9187b80acdf1c1dce809ea6cf216e743b28054fb01f68f41fcf4b1bf933340c1b65ae0b4e23fefb7f01e4de555f99f549a5779c0e99f72d566a42b7870dd0c74c0a28886e8ce396f0529ec3f688445776b23f137847b6454e75ee126face2cd0047f719a661178c646a1", 0x9c}, {&(0x7f0000000400)="e95da075c829dd61f868cea0326e5ab6c3da6bccb07e1b5131ba20be0969d6cbc7dc1db56ca4b37842bb1056561a6659329aeeefbef83f0ab9f1cc2c4da95941eed1bd02cea503f1fc35f4775fbf575f8507ae8d315ae72d83a6cd47f120b3d3d63b5cf4fd379f837bb04e2c505278df487b279146dfdb259b4c85289f987fcd97bc4700a3dd7937e320009b236658b7ad996df496d1dc80e4d786a2cddfc2d5c900c1c9f08ca93d61ca84292c52aa0b36537a227ee5d771fdea91ba731fdf6bc0f3d11f5e67f8d8fd4ca07782c0bf61cb7d4fa81fc4e700ad0c695b35094ea9906f17dbe1b67093e58506f088ad4994d6d7444d746146", 0xf7}, {&(0x7f0000000500)="d4d6489cb81a18a31f6899fd781bee243e1942a9c8857061eecd37df93af38552127d8d1819888b332fe7d8d1e223bad02b77527f8211e690b962ab6c12c2ac70937b209290ac1a3d3c54ed31c745c8d442e7dd81f67ec3532c4267be59ca0", 0x5f}, {&(0x7f0000000580)}], 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}]}, 0x2c}}, 0x0) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x80800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@getae={0x1298, 0x1f, 0x100, 0x70bd2c, 0x25dfdbfb, {{@in=@loopback, 0x4d6, 0x11, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x6}, [@algo_comp={0x10a, 0x3, {{'lzs\x00'}, 0x610, "24c5fc4546f8c932220ebcc65250415ea5fd73d4870375ed5baab22ba4b4907d6696d42e88623b3c907eae6819d804f73791a85337e9392ded23d4e5ac00d009c58caafbee03dddd056ece7c9573cb5c3b9bae37932236cb4347953433adb868500dd53c53f153ce6970d14915781a7eb0953ea918bcb58d24f108d04466d290b80595e7ae3bd7b5ee805ae2fb22bedc9a1c65df5f5a5c88b3fb6125b7fe8cc0ef38d42580a08762f763f0a3c0425816c298c8ae818ea4b4b9954f100ed6aae28151"}}, @algo_auth_trunc={0x104c, 0x14, {{'vmac64(cipher_null)\x00'}, 0x8000, 0x0, "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"}}, @algo_auth_trunc={0xff, 0x14, {{'vmac64(aes-arm64)\x00'}, 0x598, 0x0, "1bdf7f36d3f3ff3c51ad0a544cc1ae2f8f9cd4a62c6134ec9c85652d788623e4f82fd30de93f516f6a44d95e84b4018cdbf6bfb85b43ca5fb90e00e7031c96190f70a4c44c8e07d455af12e43f3f2bc3f1bd2efc1578f9ab863242ef2cd728417085293b5362095d740aded478cd144f1331d7441d474e0801a8f5a558bdcde92e6fc033558bf3595351db71d2d47442b8370cbe6421fd9795b6ceaffb26b1bf390711f5d626922c3eb288bfe2cc095bdbd9ac"}}]}, 0x1298}}, 0x0) connect$bt_l2cap(r5, &(0x7f0000000580)={0x1f, 0x7, @none, 0xff00}, 0xe) 3.952612433s ago: executing program 0 (id=4517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540), 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000100)="3ab4c9e0a7fe53102691b839c22682d75327264dabeb0c40a1906122de282631fd710409ce3fc1e0d1023e24c2c9cf01fdf8a60f94b559c4a5d931d5f439d49071549916b41f9490c14bc9224429cc95639ae56d109b2cbae476c601d77fe708d17c4e9b385613473bbd3dd539f95b23cf69e82d1be83a5072e016d0193d73edabf1cbba590916b9bf4f2936bcc1ee0509586bd1e6d20c55389b076c451469ed665829ec09810b4ccc6f99a29a695f6de1eb308dfeb43ab35a3bec870631dc", &(0x7f00000001c0)=""/32, &(0x7f0000000340)="9f52f3d42f1097ee7a4226446001012212a83698ab7f05b4027e6335e4d446a91845b3602fe19aa22b329d8ba4edba1fc91c10bb704a4c239c6d3cfeda1684b33073b175f0ccc0d86f7ad983574db990a9b8ccd7ed594625221ff2b3d72da33c28d8e32d2850d6a6d873894328723dc3d2401db09d65ff5f7c3b5547eda8635b22bb364c7fb607e3229913a4eb5a870e22a0edaeea91a8e031cacc89e1478c0fabf0b714888b2645a1767e7216daa4a2be0e9c5a216d7368d688b90bdddacb5fc59ce900", &(0x7f0000000440)="30a66132ee596be6069f028707e9a6cfc0aab566e4008f91bcad032f3269c249dc2dd38ceb493383789b4fe97840d0377f31e1103d84c0f409b5655a35561e8751a432c6252d215ca5440bec6bcd5a439237a4ed64f0778d67bc22aa81062ea2c4cd44a32c80761dc2a428d2d0abe1042e04ed1a979486da9420724f9c48bf3d046a4bff2e78a74cd26bb6dc27b4b55f2cef4b72bcbf18704e94a6fe927ad0e6746fd94949cc4606bf936ca51e7d2c34916b2932e8c75897ef072404fb77c6acd21cd19f1a899275a4ac", 0x1, r1, 0x4}, 0x38) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 3.859878201s ago: executing program 5 (id=4518): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x100000000000000) 3.859522474s ago: executing program 3 (id=4519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c09c03b5406050000000000000000000600000714000780060004404e200000060005404e20000005000100070000000900020073797a3000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r1 = socket(0xf, 0x3, 0x7) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r3, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x51}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4080}, 0x2008800) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9980030000000000280012800b00010065727370616e00001800028004001200060010004e20000006000d00070000001400030068"], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.758917186s ago: executing program 0 (id=4521): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xcdb6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x4, 0x81}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa0200, 0x0) write$tun(r2, &(0x7f0000000180)={@void, @void, @mpls={[{0x4}, {0xffffe}, {0x9, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x4, 0x0, 0x1}], @generic="812f8e396cd05405e3f432f5da80b4819f613d002f694c384ea535baa231b66bedc5d5efecdb74ca728f8c36178ae7d3292a4818a65e95bc5198c8d82c4c65756620aaa54f0bbf94819696c2513fbd2204ed30a9c8173fedee28bd6d2d1c388cf6987e6b1cbf26adb54663b774eaa4fe0bfff53a213a62e10d0fd9c53aabc5a5affc3fe9fb4863270f0b497277f662508f29326f758ae49d4b5dc73827d773d539280a9a0e8f69106f67f0cd030333f6a5"}}, 0xc5) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000280)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x104, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0xcc8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x389}, {0x6, 0x11, 0x2}}]}, 0x104}, 0x1, 0x0, 0x0, 0x8814}, 0x4008000) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000500)={{r2}, "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"}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001540), r3) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000001a00)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001580)={0x420, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9d1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4e}]}, @TIPC_NLA_NODE={0x2f8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "c2c9b530a0d1d1e240eb42ab327524807bec2ff75fd548f0502f155c71"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ID={0x103, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "2e5a4bdab90f2dec796d382f2cf147b344601f83adf79df0581c7baf3ec15160"}}, @TIPC_NLA_NODE_ID={0xdf, 0x3, "2b4e895a01baf2cc7553d995c17bd870d13f3ae247cfac8888b54688ad23c2e7ebe6549c60f6b673be24d23a5e4cf5c0c72466baf6729fcc08ea413a8247f9d09bd6b153cb01c424a62d16f5eddd89de50313bb9d511f093b14c0d1336f4c0aae2c37bc3222fde7b6de66a270b1c373f0e62dbde19bce22d350cbb6c69c18ba199b8a98823903c1717529226eb31a2407b919f6b59b282868b78b105cea1e5694f4bbb6fe032f6c22f7ba11d24150d1b1d21753a53e73c2c2bbea8978a9abee1d8bed3117643f6400c78bfb2fa333980b3278d13200903763b7cbd"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x63, 0x3, "4f6770a2629a9f7f1ea8b1d14135491187653060174d4676adcd9129ed5df02a03fc922a4f36c6200a23ae5ea2f10a21e1d2c5b2ba2561184afc86dec1ebdddf610db4bc529f69e204fac5e6e642292139bbbb41f77367831323d998cf81e8"}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x74f1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1010}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}]}]}, 0x420}}, 0x20000081) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000001a40)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000001a80)={0x2a}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000001bc0)={r0, &(0x7f0000001ac0)='-\x93\x00', 0x80200, &(0x7f0000001b00)={@align, {0x71, 0x5, 0x5, 0x5}}, 0x9, &(0x7f0000001b40), &(0x7f0000001b80)=0x5}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000001c00)={r1, @in={{0x2, 0x4e21, @local}}}, 0x84) recvfrom$inet6(r0, &(0x7f0000001cc0)=""/4096, 0x1000, 0x10100, &(0x7f0000002cc0)={0xa, 0x4e22, 0x0, @remote, 0x10001}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002d40), r6) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000003040)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003000)={&(0x7f0000002d80)={0x24c, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb9ed}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1e2fd917}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_ID={0x93, 0x3, "8a67fb617e9646b35cbbb4b3c5e0c5d26fdbeb88dfd522ce9b3cb13bb34fd8642346864fb5bebb2afa2001cc525011f5d0f20741b0e37b691a724c809ec845028d9a55d1e5207cfd2a5947a863f8f791b5de8794ff84058996d1cd51f91096f28eb38250d8db1ccec4b7aa5808e073cc6d19db1d01905cbe75bbdd3de00e9e2d49e4a6bdc505a3c0ec6f46fe12a89b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xab, 0x3, "58d6973ca02b0bbd76371920e10b2a3f5b700822f423b851cdaf05c030a397762eb27bacb7b546f54b34cfbbd699db89d33f0fb4225145944362d71b88f6e463a64347c56566ca693a088536352958d084d151bd2b3f17424e74ab60a4a2847cbef8949e578c914fc381db54d15ac5f8c0372fb9431479a42da32000c6fcead63c93cc8a7b87119fb6b86e853d48724ad7679672094238609d90eb993de1d3a05b7752fab43489"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x15916000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40080) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000003080)={0x509, 0x8, 0x8009, 0x8000, 0x10000, 0xcca, 0x2, 0x5, r1}, &(0x7f00000030c0)=0x20) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003100)={r8, 0x100, 0xa23, 0x7}, &(0x7f0000003140)=0x10) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f00000032c0)={{r9, &(0x7f0000003180)='virt_wifi0\x00', 0x101000, &(0x7f00000031c0)={@align=0x7, {0x9, 0x200, 0xc, 0x4}}, 0x231cff84, &(0x7f0000003200), &(0x7f0000003240)=0x8}, {[0x6, 0x7fff, 0x7, 0x2]}, 0xfffffff9, 0x21, &(0x7f0000003280)=""/33}) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f0000003380)=@req={0x28, &(0x7f0000003340)={'pim6reg0\x00', @ifru_hwaddr=@remote}}) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000035c0)={&(0x7f00000033c0), 0xc, &(0x7f0000003580)={&(0x7f0000003400)={0x170, r7, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa3940}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8844}, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r11, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x5f}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1557}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4) 3.671837896s ago: executing program 5 (id=4522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}]}, 0x18}], 0x1}, 0x84) sendmsg$nl_generic(r1, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x320, 0x2a, 0x400, 0x70bd2a, 0x25dfdbfe, {0x20}, [@generic="7dc8d79f9bf8072c74a9d9876ca76ecf74530af1987bbfe9e36591fe3a252e4ce66a7334d4d39ccd5dfc72abaf14ebf7bd87982fc8a4c08d97a741d32e8ce8bdec7210a5b0a97393bdbc28b0af1643dd926f3ee6df46d781c70086d21cc68cbf2858b80b0b4f41b02e3ea8e397901b5b40aa3ecf08cd49983d46eb60d29a661dd80d1fcdb58ebf87", @nested={0x18, 0x9f, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0xc1, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x66}]}, @typed={0x8, 0x79, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x1c, 0x0, 0x0, @uid=r6}, @typed={0x4, 0x67}, @nested={0x59, 0xa4, 0x0, 0x1, [@typed={0x8, 0x2a, 0x0, 0x0, @str='*!%\x00'}, @nested={0x4, 0x66}, @nested={0x4, 0xc4}, @nested={0x4, 0x3c}, @typed={0x8, 0x105, 0x0, 0x0, @u32=0x2}, @generic="212b7d65ede60632e9c221dd61b6dde5f10573e43e0649055d86641819309425e6e25f8b99f0ce0cf225bc9285eddaec89a985b9223ca0660a"]}, @nested={0x171, 0x1, 0x0, 0x1, [@generic="afe1d915951b71", @typed={0x7e, 0xa9, 0x0, 0x0, @binary="2f33c53795f2da5544fdde0cfde074196bd33ae20af2fa3f6a9c63d58e5de736da1f87964d6100ef027a1a40aed3543a706ab8a629733479f0ddef21f0f0956c1048b5760b263d4c63c65685a785e1b95b24a40ddb3e992dfacc780ac9cc82e9c6f737d514ea555d90ce8f01af49da2062f6193eea0526d5a62a"}, @typed={0x8, 0x156, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x9, 0x0}}, @generic="867f7a3c740c3726870c3e9f3f57098dfdb7b02516cfbc97404b4bac03c319bb5c7c5d6db9391588b86af90862db7060254a1c79720477a48c8c651bb26798bcefcdaf2c494580b309ada5a3fdc5602b9ddef608eb644152f93047ad6debc6e068059870e3509f8b4f8fde3f6af94e469c8e7c4526c7b0ec4bee93774e5222ffe91d460721e6e94f503fa73a6ea47e1d6d130450a93ae753e179adbea7e67dcd385265195419c5176b829b59ec67d53ac4054fcc75f56fed7ea5664bf1fa216570b52e914a992a2c45c577cb9116", @nested={0x4, 0x15}, @typed={0xb, 0x8a, 0x0, 0x0, @str='TIPCv2\x00'}]}, @nested={0x5, 0xc4, 0x0, 0x1, [@generic="8b"]}, @generic="dbac2bb135957a6f4bab004a3467d5e873699c04d5c8f612f03acbc8a733b8f0c486dc637952b5c3acc2bca252f6368cd81e6d51ae098d66f4ee9de99aac7b6261dcfb5352cf3c11efb0f2c7f26c74bb6ebad7c1e0bfcc129b1530f755c493d979e54ed3fd62ba9d32d335baa8686968d8eb51b4c76f3782", @typed={0x8, 0x15e, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x320}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c015) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x18800) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) close(0x3) 3.571418255s ago: executing program 0 (id=4524): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x1007, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r6, 0x1, 0x400, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2c8e3c9c, @local, 0x3ff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4a9c4b67}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000008140)=ANY=[@ANYBLOB="c4220000120001000000000000000000100000000c0000000000000000000000a42221"], 0x22c4}], 0x1}, 0x0) shutdown(r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.231539903s ago: executing program 5 (id=4526): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000040"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a40), r6) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf251b0000fb0f002e800c0004000200aaaaaaaaaaaa08000300", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a00)={0x1164, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x9}, @typed={0xa, 0x131, 0x0, 0x0, @str='vcan0\x00'}, @generic="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", @nested={0x34c, 0x96, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0x3}, @nested={0xc8, 0xad, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @u32=0x8}, @nested={0x10, 0x2e, 0x0, 0x1, [@nested={0x4, 0x16b}, @typed={0x8, 0x11c, 0x0, 0x0, @u32=0x9}]}, @typed={0xc, 0xac, 0x0, 0x0, @u64=0x7fffffff}, @nested={0x64, 0x13c, 0x0, 0x1, [@nested={0x4, 0x13c}, @generic="791ce2ee9f55750046b11531d50892ceae91397e71942915e4ec38625c12738a92f5aa07c06accc20570162a545b5ce51d905b73cbb23ce0d6b4be7daa045ac4ea55eef1c49debe295d11ac04ae9170799929fb7", @nested={0x4, 0x6}, @nested={0x4, 0x125}]}, @typed={0x4, 0x3c}, @nested={0x10, 0xa5, 0x0, 0x1, [@typed={0xc, 0x83, 0x0, 0x0, @u64=0x4}]}, @generic="537afa08ac7d5522d156ff71a92d11d9ed1dc7498744f733cd8b8075ed40cd6336b0ceb25945d6d4"]}, @nested={0x4, 0x132}, @generic="347d0c9153d6d7ed4cf041f4f14a7347c341c6d616584df43d33cd7c47e2cd8b016871078d9d04c962063a43465f909ce78f9f4bfc09ba", @generic="a0f95a3b544fa6e72627b669bfc4517affc35533d3620c695f760f097544323b5427bd1666cb5f8ff4cfe8550c3535b9e29a0a4be6fdcd30de4f8222d5cb80869d2bcf3cf2313dd69e293a24e00e4ddd224a2c622b900869426f17a7497ce303ad6d3c187333e1e639651f11", @generic="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", @generic="ea3956933b1b0595c34d80c0e787036b85e41e52cb17439dec444659e24c9873d6c601a08b8702e0e46e4eec61c6ed75326a0a2ecbc7171fa4177a8c0efe409d108321472bf0d81bab140716b6c2ad02da1949ea4f9485e96381a535559fe92b8c0d619860abdbdb07a5f89d97f16ae2d3d9044a80e6b31f837f0c5b1e598388b4736a991136dfe21c88202d62571d0beaf96884bba03f758c0f5b3e7ac53d1e3c29608b00cc10e0c677a044684b276962a6852c0f1dfb921acdba22343a", @typed={0x14, 0x118, 0x0, 0x0, @ipv6=@remote}]}, @generic="935510d862d66faab93b0f9f89dfa897211bd1f473a6672ee9d8f4f7f75488617de40196e43580a119d5b81281750c16722242a4a00e071385c98de754d902a4546658f1ba2db9baabab4b214db2eb24addebba8f41ad46f7ddf308fbb644c0e678e0fd22b2389ab1a2f0cc4cc42f77ab1aa310f355987ff1ca37847baaf1fc42a1d2b808a0277e473a2ded918865e8c2eb5c567d89229ec02ee28d29b68126d96cf98a8f9ece3ba1f4b359aa79e1eed37af97a4884edced86a86bc9eac772f7891a52c32b016e843203403e585b5152b2bd8474bd67fe5240f32068e71edc2125916b76d79280f2af2cc1c8dd21b60aead1e6", @generic="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"]}, 0x1164}, 0x1, 0x0, 0x0, 0x8054}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x10, 0x1, 0x3, 0x401, {{0x31, 0x4, 0x0, 0x21, 0xc4, 0x65, 0x0, 0x5, 0x0, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4, 0x401}, @cipso={0x86, 0x67, 0x3, [{0x1, 0xf, "17c7140a7c36023381a774e8ee"}, {0x1, 0x9, "a7a3e4bc7e560e"}, {0x0, 0xe, "ae828aa92bc3c2a5623514d1"}, {0x6, 0xf, "720f019b613c98b3174b3e1952"}, {0x1, 0xe, "daf93b946f7d4027ba62b325"}, {0x1, 0x7, "fc1e5549e8"}, {0x5, 0x10, "9180f9cf40cf70b8fccc09df39a9"}, {0x2, 0x7, "8f56b880b1"}]}, @timestamp_prespec={0x44, 0x44, 0x7c, 0x3, 0x3, [{@multicast1, 0x4}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x7}, {@loopback, 0x3f3e}, {@local, 0x8}, {@empty, 0x1}, {@local, 0xffffffff}]}]}}}}}) sendmsg$nl_route(r4, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000006d00000227bd7000fbdbdf2500000000", @ANYRES32=r10, @ANYBLOB="000000005200010008c7bc545f3eb1b4ab000100bb5cbb364cbb000008001b0007000000d6dba413dff436759fbec571dab5f64b694777fe0cfa36c2361c03c0692f7b5c5eb996f84831f4dab8cf369544e660c700bda3f23908027f9ca133208f755cd934dd4571a9"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000070900010073797a3100000000c0000000160a01010000000000000000050000020900010073797a31000000000c0005400000000000000001940003800800024000000fff08000240000082f108000240000007ff68e5000380140001006970366772653000000000000000000014000100736974300000000000000000000000001400010076657468305f766c616e0000003892411c4fa1c09365616d5f736c617665e730000000001400010076657468305f746f5f627269646765000800024000000002080002400000000628000000000a01010000000000000000010000080900010073797a3100000000080002400000000114000000110001000000000000000000000000fb0ab2efc5772fc63084aeea90daef7702d7033593edb35d02ea2d37426560a8d4ac26b714e2ae461c2a88e0d3020c23251750436ef511854c5187a5412c3df8d17dccca75213ff6e344696f777972fa"], 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan1\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) sendto$packet(r3, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r11, 0x1, 0x85, 0x6, @multicast}, 0x14) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x4, 0xf, 0x5, @vifc_lcl_ifindex=r11, @broadcast}, 0x10) 1.815946371s ago: executing program 2 (id=4535): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(seed-generic)\x00'}, 0xa8a87f924d634f51) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(seed-generic)\x00'}, 0xa8a87f924d634f51) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (async) 1.814363696s ago: executing program 4 (id=4536): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x2, 0x7}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040)=0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x2, 0x70bd2d, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x19ef}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2d}]}, 0x24}, 0x1, 0x0, 0x0, 0x64005}, 0x200088c4) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 1.782179932s ago: executing program 5 (id=4537): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r1, 0x118, 0x3, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x8f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x54}}, 0x0) 1.724759354s ago: executing program 2 (id=4538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x5, 0x0}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r0, @ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000400)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100017000fddbdf2500000000000000", @ANYRES32=0x0, @ANYBLOB="92100000100200001400030076657468315f766c616e00"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001480)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x3, 0x30, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local, {[@generic={0x44, 0x5, "ff6852"}, @ra={0x94, 0x4}]}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x0, @val=0x80}}}}}}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6b}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) 1.491504753s ago: executing program 2 (id=4539): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="40fe"], 0x4) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000002380), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf25110000000800150000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4440}, 0x80) (async) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf25110000000800150000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4440}, 0x80) sendmsg$NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000) 1.490802159s ago: executing program 5 (id=4540): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80800040}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xb1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x7c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x5f, 0x2, {0x2, 0x25}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x5f, 0x2, {0x2, 0x25}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x80, 0x5e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x80, 0x5e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r8, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x1, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x2}, {}, {0xa, 0x3}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x31, 0x0, {{0x1c, 0x4, 0x3, 0x4, 0x70, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x34, 0xb1, 0x1, 0x1, [{@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xf}, {@loopback, 0x48f}, {@private=0xa010100, 0x7f}, {@rand_addr=0x64010102, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "1c3a0c"}, {0x2, 0x6, "8e7577bc"}, {0x6, 0x11, "cbfe0e045fe3e67eb47eeba454f545"}, {0x6, 0x6, "a03092e5"}]}]}}}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r12, 0x1, 0x22, 0x0, 0x0) (async) setsockopt$sock_int(r12, 0x1, 0x22, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000000440)) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xd8, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x2}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x40, 0x3}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x40, 0x4}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xc}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xb}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x59, 0x5}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x6}]}}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x18c}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe00}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x24}]}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfb}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000180)={@remote, 0x24, r11}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r6, @ANYRES32=0x0], 0x20}}, 0x0) 1.354102652s ago: executing program 4 (id=4541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x0, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) 1.215912733s ago: executing program 5 (id=4542): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0xe, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "bd96fac5d5805dc8459d455c1facbe196de2470bc33f90dfa521ae081668d04d", 0x4, 0x4, 0x6, 0x9}, 0x3c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x7, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) bind$inet6(r7, &(0x7f0000000100), 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0xff9a, 0x100, 0x6, 0x1}, {0x7, 0x0, 0xc, 0x0, 0x7ff, 0x8}, 0x5, 0x8, 0x12d8}}, @TCA_TBF_RATE64={0xc, 0x4, 0x68320f62c310815e}, @TCA_TBF_PTAB={0x404, 0x3, [0x80, 0x6, 0x2, 0x7fffffff, 0x41d, 0x4, 0x10000, 0x7ff, 0x101, 0x8, 0x16, 0x7, 0x5, 0x5, 0x4, 0x7, 0x0, 0x2, 0xd7, 0x6, 0x6, 0xfff, 0xf44, 0x401, 0x3, 0x0, 0x5, 0x37, 0x7, 0x9, 0x80000000, 0x9, 0x5939, 0x0, 0x2, 0x9, 0x401, 0x3, 0x2551, 0x0, 0x756, 0x3, 0x0, 0x6, 0x2, 0x14, 0x5, 0xce9, 0x79cd, 0x800, 0x5, 0x2, 0x5, 0x3, 0x7, 0x1, 0xa, 0x10001, 0x9, 0xfffffff8, 0x9, 0x6, 0xa, 0x8, 0x3, 0x1, 0xb, 0x1, 0x82d8, 0x1, 0x3, 0x3, 0x4, 0x10001, 0xfffffff9, 0x4, 0x0, 0x8, 0xf9d, 0x4, 0x800, 0x80000000, 0x80, 0x4, 0x5, 0x1c1, 0x7, 0x7, 0x6, 0x0, 0x8, 0x1ff, 0xb, 0x3, 0x6, 0x1, 0x7, 0x3, 0xffff, 0xfffffff3, 0x10000, 0x3, 0x101, 0x2, 0x215245f2, 0xd8, 0x8, 0xe0000000, 0x4000, 0x5, 0xa, 0x9, 0x10, 0xc, 0x7, 0x0, 0x8000, 0x4, 0x3, 0x8000, 0x10000, 0xd, 0x8, 0xf205, 0xfffffffd, 0x7fffffff, 0x1, 0x45f, 0x6f, 0x6, 0xafc, 0x5, 0x1ff800, 0x1, 0x1e8b, 0x5d9, 0x6, 0xc2, 0x5, 0x7, 0x8, 0x2, 0x3ff, 0x4, 0x5, 0x7ff, 0x27, 0x7fff, 0x3daf, 0x7, 0x9, 0xc, 0x5, 0x5, 0x93, 0xc, 0x2, 0x99, 0x6, 0x6, 0x8, 0x7, 0x8, 0x1, 0x40, 0xfffffffb, 0xa, 0x1, 0x2, 0x9, 0x0, 0x4, 0x3, 0x200, 0xebc1, 0xe, 0x1537, 0x4eaa, 0x4, 0xffffffff, 0x989, 0xaa, 0x1, 0x0, 0x4, 0x4, 0xe, 0x80000001, 0x5, 0x8, 0x7, 0x0, 0x7, 0x4, 0x81, 0x3, 0x603d, 0x0, 0x1, 0x8, 0x4, 0x18f, 0x9, 0x7, 0x200, 0x1, 0x2, 0x5f, 0x3, 0xfffffff8, 0x9, 0x0, 0x10, 0xfffffffa, 0x0, 0x0, 0x8, 0xb, 0xfffffffc, 0x3, 0x6, 0x7ff, 0xa, 0x5, 0x5, 0x2, 0x401, 0xff, 0x8, 0x5, 0x9, 0x5, 0x7fff, 0xe41, 0x7, 0x0, 0x200, 0xfffffe00, 0x8, 0x14000000, 0x5, 0x9, 0x6, 0x800, 0x8, 0x2, 0x7, 0x4, 0x10000, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x80, 0x6]}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x8800}, 0x20044000) 1.075872504s ago: executing program 2 (id=4543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000b80)={0x40, 0x1, 0x44f2ade573ff9a8a}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.071134729s ago: executing program 4 (id=4544): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendto$inet(r3, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r3, 0x0, 0x0, 0x800) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000f00)=@newtaction={0x44, 0x30, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1f, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8804) r5 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x10, &(0x7f0000000280)=0x8, 0x4) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x7ffffffe, 0x1}}}, 0x10) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x8000, 0x6, 0x6, 0x7, 0x6, 0x8, 0x400]}}]}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x4, 0x0, 0x80000000}, 0x28) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0xc}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r12, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@initdev, @rand_addr, 0x0}, &(0x7f00000003c0)=0xc) recvfrom$packet(r1, &(0x7f00000002c0)=""/169, 0xa9, 0x40010042, &(0x7f0000000400)={0x11, 0x1c, r13, 0x1, 0xa6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r14 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x421, 0x70b925, 0x0, {0x0, 0x0, 0x0, r15, 0x0, 0x10000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}]}, 0x48}}, 0x0) 916.55653ms ago: executing program 2 (id=4545): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0a0000000900001008000000800000000000007714f4ebaa7fe78564afb17d7884c0109245bf0adf4ce38b1b54188330f8842903aceea5fd7c292031585fbbd63ccf0753ba0e884cf8fd6a9accb02b0cae3bae6b7cf4bd8fd7d70b2de64c3aa23de38927b90470f5b7ea1f1ca0c793f9d7058ed81f198644f83e8c42b15c591ecc20375ef61390eb404321c69053714a4cbd34b3ad", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000001c0)={'ip_vti0\x00', {0x2, 0x4e22, @empty}}) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{0x0, 0x25}, 0x0, 0x5b}, 0xddb606d5abed366d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000001}, 0x94) 732.101167ms ago: executing program 4 (id=4546): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x38, r5, 0x1, 0x70bd2a, 0x25dfdbf8, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x5, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)={0x2d0, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x19c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x64}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0x124, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000001}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1fe}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xb8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r10, 0x6, 0x100}, 0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000080)={r10, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000880)={0x0, 0x2c, &(0x7f0000000840)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x4}]}, &(0x7f00000008c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 660.695132ms ago: executing program 2 (id=4547): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000040"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a40), r6) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf251b0000fb0f002e800c0004000200aaaaaaaaaaaa08000300", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a00)={0x1164, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x9}, @typed={0xa, 0x131, 0x0, 0x0, @str='vcan0\x00'}, @generic="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", @nested={0x34c, 0x96, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0x3}, @nested={0xc8, 0xad, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @u32=0x8}, @nested={0x10, 0x2e, 0x0, 0x1, [@nested={0x4, 0x16b}, @typed={0x8, 0x11c, 0x0, 0x0, @u32=0x9}]}, @typed={0xc, 0xac, 0x0, 0x0, @u64=0x7fffffff}, @nested={0x64, 0x13c, 0x0, 0x1, [@nested={0x4, 0x13c}, @generic="791ce2ee9f55750046b11531d50892ceae91397e71942915e4ec38625c12738a92f5aa07c06accc20570162a545b5ce51d905b73cbb23ce0d6b4be7daa045ac4ea55eef1c49debe295d11ac04ae9170799929fb7", @nested={0x4, 0x6}, @nested={0x4, 0x125}]}, @typed={0x4, 0x3c}, @nested={0x10, 0xa5, 0x0, 0x1, [@typed={0xc, 0x83, 0x0, 0x0, @u64=0x4}]}, @generic="537afa08ac7d5522d156ff71a92d11d9ed1dc7498744f733cd8b8075ed40cd6336b0ceb25945d6d4"]}, @nested={0x4, 0x132}, @generic="347d0c9153d6d7ed4cf041f4f14a7347c341c6d616584df43d33cd7c47e2cd8b016871078d9d04c962063a43465f909ce78f9f4bfc09ba", @generic="a0f95a3b544fa6e72627b669bfc4517affc35533d3620c695f760f097544323b5427bd1666cb5f8ff4cfe8550c3535b9e29a0a4be6fdcd30de4f8222d5cb80869d2bcf3cf2313dd69e293a24e00e4ddd224a2c622b900869426f17a7497ce303ad6d3c187333e1e639651f11", @generic="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", @generic="ea3956933b1b0595c34d80c0e787036b85e41e52cb17439dec444659e24c9873d6c601a08b8702e0e46e4eec61c6ed75326a0a2ecbc7171fa4177a8c0efe409d108321472bf0d81bab140716b6c2ad02da1949ea4f9485e96381a535559fe92b8c0d619860abdbdb07a5f89d97f16ae2d3d9044a80e6b31f837f0c5b1e598388b4736a991136dfe21c88202d62571d0beaf96884bba03f758c0f5b3e7ac53d1e3c29608b00cc10e0c677a044684b276962a6852c0f1dfb921acdba22343a", @typed={0x14, 0x118, 0x0, 0x0, @ipv6=@remote}]}, @generic="935510d862d66faab93b0f9f89dfa897211bd1f473a6672ee9d8f4f7f75488617de40196e43580a119d5b81281750c16722242a4a00e071385c98de754d902a4546658f1ba2db9baabab4b214db2eb24addebba8f41ad46f7ddf308fbb644c0e678e0fd22b2389ab1a2f0cc4cc42f77ab1aa310f355987ff1ca37847baaf1fc42a1d2b808a0277e473a2ded918865e8c2eb5c567d89229ec02ee28d29b68126d96cf98a8f9ece3ba1f4b359aa79e1eed37af97a4884edced86a86bc9eac772f7891a52c32b016e843203403e585b5152b2bd8474bd67fe5240f32068e71edc2125916b76d79280f2af2cc1c8dd21b60aead1e6", @generic="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"]}, 0x1164}, 0x1, 0x0, 0x0, 0x8054}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x10, 0x1, 0x3, 0x401, {{0x31, 0x4, 0x0, 0x21, 0xc4, 0x65, 0x0, 0x5, 0x0, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4, 0x401}, @cipso={0x86, 0x67, 0x3, [{0x1, 0xf, "17c7140a7c36023381a774e8ee"}, {0x1, 0x9, "a7a3e4bc7e560e"}, {0x0, 0xe, "ae828aa92bc3c2a5623514d1"}, {0x6, 0xf, "720f019b613c98b3174b3e1952"}, {0x1, 0xe, "daf93b946f7d4027ba62b325"}, {0x1, 0x7, "fc1e5549e8"}, {0x5, 0x10, "9180f9cf40cf70b8fccc09df39a9"}, {0x2, 0x7, "8f56b880b1"}]}, @timestamp_prespec={0x44, 0x44, 0x7c, 0x3, 0x3, [{@multicast1, 0x4}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x7}, {@loopback, 0x3f3e}, {@local, 0x8}, {@empty, 0x1}, {@local, 0xffffffff}]}]}}}}}) sendmsg$nl_route(r4, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000006d00000227bd7000fbdbdf2500000000", @ANYRES32=r10, @ANYBLOB="000000005200010008c7bc545f3eb1b4ab000100bb5cbb364cbb000008001b0007000000d6dba413dff436759fbec571dab5f64b694777fe0cfa36c2361c03c0692f7b5c5eb996f84831f4dab8cf369544e660c700bda3f23908027f9ca133208f755cd934dd4571a9"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan1\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) sendto$packet(r3, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r11, 0x1, 0x85, 0x6, @multicast}, 0x14) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x4, 0xf, 0x5, @vifc_lcl_ifindex=r11, @broadcast}, 0x10) 385.125639ms ago: executing program 0 (id=4548): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'lo\x00', 0x7c2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000220) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000008c0)=r7, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x1e, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000000)) 200.0946ms ago: executing program 4 (id=4549): r0 = epoll_create(0x1a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff85000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ddffffffffff2b00000018000180140002007665746830"], 0x2c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000080)={[0x7]}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000004e474fe8d350cdf9bb9f208ac50a28000000000a010200000000000000000a00404ca2348a40000000030900010073797a3100000000200000000b0a010800000000000000000a0000060900010073797a3100110001000000a9decbdaca00de50f5fe5c2b24ff585987e674d6c2fa3f00"/146], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x4c0d0) 29.319479ms ago: executing program 0 (id=4550): setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="40000000000000001701000002000000270000002619031abc19302407df3af640c9fbfa17ffda2790174ecb05a719411b1c5ea59f88c905e064410000000000b20f240549767912"], 0x40, 0x20008000}, {0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x4000}], 0x2, 0x84) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000240)="226cc45e8575d8d74bdfe88421ae91092064daac6293ccf43889ae46e1fab4f19d4e0f", 0x23}, {&(0x7f0000000280)="dd17928d377c188ccfa56b6187ecfa6eb9a08affecf55a293e1e44ef19f66511dfc1f390a73dc5fdc6f69fb45093883dda15ac1abc818f5408c0184fb13d5faa6b44463365f16e04f1505753b7d9ea72adcfe4211a2a42abc05320dc9d2ab7948ff94b39d619116d7491418fba7245446f6e9ea4acfbb9f7659dbc1f9d65ba26a761819bbafca0018cb108948429a3121e33f84352c28e0c1379d1bb100df39f8f", 0xa1}, {&(0x7f0000000340)="3a3217a6ab845c8bdecef1e3aef4f50ed954337c84840e0d47e749a17b3e2860d2b3", 0x22}], 0x4, &(0x7f0000001040), 0x0, 0x84}], 0x1, 0x80001) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000010003704feffffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="3b240400000000001800128008000100736974000c00028000000000c056000900040000006795bcdea8e310208e330b3bceefa675935497caaf59fd72155eb34ac310d7ae5e2ad8a44ec5734b0800dfed279162af6651ca15927d8fa3a7f8d9cb3773665db2082dfefa93188685f00296e72f8a532e9d2c73fa0800eea910295b9e062a186194ac8d9df0913525b4878d5978e339c863c296dcf09054cef20b20fba4d46bd25f82b777fcd0e74e273d80cc90c9d77f189237c503b393415e87f2f300998798522ff6d41795d6b9f9d4"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8) read$alg(r3, &(0x7f0000001080)=""/4130, 0x1022) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r9) sendmsg$kcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000011008108090f9becdb4cb92e26483137002b9dc74cb4dd96710fe920a7b2631900000069bd6efb2502eaf60d002700020400bf050005001201c5ea39063071e922d8afb0b492ca6119fb0f33777da93adbaf7027c0a1f7399bef09dd3620bea7a043f72b5bed07fbb935e5d29abfdc43ff8f535e618bd1b7a40de2dbfb9a4fec192d385dcfa5ee348d4bd6f7bc8c4b937f11fd7eee6b293e398d2be48b977e44495034e1cdcd1735f3f9b2b8ea0be3e046376164ff5e5a5f464080f62f8c9a2bacef94664b6d326c89f176dbdbbd85d93f58e2a8d953039a04a437b14e04cd09b2ec7da00501e979d4f72a3f4fc355fb96f516", 0xf7}], 0x1}, 0x4000804) 0s ago: executing program 4 (id=4551): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) syz_emit_ethernet(0x79, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0xfffd]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "57a197f243aa2abb5f831e11b1"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1457e7002d001347f500"/20], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) syz_genetlink_get_family_id$ethtool(0x0, r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8, 0x9, 0x55, 0x6}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000811}, 0x20000800) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24}, 0x94) kernel console output (not intermixed with test programs): parsing attributes in process `syz.3.2759'. [ 467.589825][T15378] veth0_vlan: entered promiscuous mode [ 467.648385][T15378] veth1_vlan: entered promiscuous mode [ 467.768475][T15863] veth1_to_bond: entered allmulticast mode [ 467.777803][T15378] veth0_macvtap: entered promiscuous mode [ 467.787136][T15863] veth1_to_bond: left allmulticast mode [ 467.804370][T15378] veth1_macvtap: entered promiscuous mode [ 467.836464][T15378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.867561][T15378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.892448][ T187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.906640][ T187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.922244][ T187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.942549][ T187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.239615][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.266442][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.331429][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.349855][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.556512][T15887] syzkaller0: entered promiscuous mode [ 468.564092][T15887] syzkaller0: entered allmulticast mode [ 468.576729][T15889] syzkaller0: entered promiscuous mode [ 468.598358][T15889] syzkaller0: entered allmulticast mode [ 468.765426][T15896] bridge0: port 3(ipvlan2) entered blocking state [ 468.776328][T15896] bridge0: port 3(ipvlan2) entered disabled state [ 468.783797][T15896] ipvlan2: entered allmulticast mode [ 468.789569][T15896] bridge0: entered allmulticast mode [ 468.794913][T15898] block nbd0: server does not support multiple connections per device. [ 468.811736][T15896] ipvlan2: left allmulticast mode [ 468.817287][T15896] bridge0: left allmulticast mode [ 468.857349][T15898] block nbd0: shutting down sockets [ 469.112542][T15918] sctp: [Deprecated]: syz.4.2779 (pid 15918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.112542][T15918] Use struct sctp_sack_info instead [ 469.265132][T15918] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2779'. [ 469.685634][T15945] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 469.722738][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2789'. [ 469.734908][T15947] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2786'. [ 469.746679][T15947] tipc: Invalid UDP bearer configuration [ 469.746749][T15947] tipc: Enabling of bearer rejected, failed to enable media [ 469.793646][T15957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2788'. [ 469.960491][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2790'. [ 469.974145][T15965] IPVS: length: 136 != 24 [ 470.456837][T15988] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 470.478017][T15994] vcan0: tx address claim with different name [ 470.811632][T16011] pim6reg: entered allmulticast mode [ 470.872471][T16011] pim6reg: left allmulticast mode [ 471.039852][T16017] syzkaller0: entered promiscuous mode [ 471.045551][T16017] syzkaller0: entered allmulticast mode [ 475.374595][T16041] net_ratelimit: 5 callbacks suppressed [ 475.374617][T16041] Set syz1 is full, maxelem 65536 reached [ 475.856059][T16032] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 475.968909][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 476.332937][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2821'. [ 476.359035][T16072] netlink: 50 bytes leftover after parsing attributes in process `syz.5.2821'. [ 476.388913][T16072] netlink: 50 bytes leftover after parsing attributes in process `syz.5.2821'. [ 476.532545][ T5646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 476.544017][ T5646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 476.554700][ T5646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 476.578939][ T5646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 476.591775][ T5646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 476.785079][T16093] netlink: 'syz.3.2824': attribute type 1 has an invalid length. [ 476.884172][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2825'. [ 476.897021][T16103] sock: sock_set_timeout: `syz.4.2826' (pid 16103) tries to set negative timeout [ 477.063622][T16102] bond16: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 477.077681][T16111] netlink: 'syz.2.2827': attribute type 21 has an invalid length. [ 477.136849][T16116] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2827'. [ 477.181928][T16093] veth11: entered promiscuous mode [ 477.360200][T16111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 477.368454][T16123] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 477.581764][T16129] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2830'. [ 477.805417][T16142] xt_hashlimit: size too large, truncated to 1048576 [ 477.843094][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.894355][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 477.929246][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.953882][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 477.977575][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 477.993191][T16150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2835'. [ 478.099132][T16150] gretap0: entered allmulticast mode [ 478.406317][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.437485][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 478.461859][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.494844][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 478.516355][T16172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2838'. [ 478.609062][ T5643] Bluetooth: hci4: command tx timeout [ 478.652609][T16179] ip6t_srh: unknown srh invflags 4000 [ 478.867033][T16190] xt_TCPMSS: Only works on TCP SYN packets [ 478.962428][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.013223][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 479.081445][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.119939][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 479.581931][T16084] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 479.617280][T16084] lo speed is unknown, defaulting to 1000 [ 479.741423][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.774125][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 479.820774][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.864417][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 480.624373][T16256] bond8: entered promiscuous mode [ 480.650632][T16256] bond8: entered allmulticast mode [ 480.682678][T16256] 8021q: adding VLAN 0 to HW filter on device bond8 [ 480.689713][ T5643] Bluetooth: hci4: command tx timeout [ 480.938314][T16282] netlink: 'syz.2.2862': attribute type 10 has an invalid length. [ 480.962187][T16268] veth0_macvtap: left promiscuous mode [ 481.053218][T16282] veth1_macvtap: left promiscuous mode [ 481.147733][T16287] netlink: 'syz.2.2864': attribute type 3 has an invalid length. [ 481.230166][ T81] pim6reg: left allmulticast mode [ 481.246334][ T81] pim6reg527: left allmulticast mode [ 481.366869][T16297] __nla_validate_parse: 2 callbacks suppressed [ 481.366892][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2865'. [ 481.413654][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2865'. [ 481.613537][T16302] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2865'. [ 481.806157][ T81] bond7 (unregistering): (slave gretap1): Releasing active interface [ 481.853777][ T81] bond8 (unregistering): (slave geneve3): Releasing active interface [ 481.926043][ T81] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 481.938480][ T81] bridge2 (unregistering): left promiscuous mode [ 481.993875][ T81] bond12 (unregistering): (slave bridge8): Releasing backup interface [ 482.007037][ T81] bridge8 (unregistering): left promiscuous mode [ 482.024506][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.036001][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.053714][ T81] bond0 (unregistering): (slave team0): Releasing backup interface [ 482.066528][ T81] bond0 (unregistering): Released all slaves [ 482.079021][ T81] bond1 (unregistering): Released all slaves [ 482.095910][ T81] bond2 (unregistering): Released all slaves [ 482.113682][ T81] bond3 (unregistering): Released all slaves [ 482.146334][ T81] bond4 (unregistering): Released all slaves [ 482.170155][ T81] bond5 (unregistering): (slave veth7): Releasing active interface [ 482.182035][ T81] bond5 (unregistering): Released all slaves [ 482.212072][ T81] bond6 (unregistering): Released all slaves [ 482.235993][ T81] bond7 (unregistering): Released all slaves [ 482.259418][ T81] bond8 (unregistering): Released all slaves [ 482.279769][ T81] bond9 (unregistering): Released all slaves [ 482.305872][ T81] bond10 (unregistering): Released all slaves [ 482.328398][ T81] bond11 (unregistering): Released all slaves [ 482.414326][ T81] bond12 (unregistering): Released all slaves [ 482.432516][ T81] bond13 (unregistering): Released all slaves [ 482.583105][T16309] erspan0: entered promiscuous mode [ 482.619653][T16309] vlan4: entered promiscuous mode [ 482.770214][ T5643] Bluetooth: hci4: command tx timeout [ 482.924568][ T81] : left promiscuous mode [ 483.391141][ T81] tipc: Left network mode [ 484.211000][T16372] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2882'. [ 484.487011][T16084] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.504472][T16084] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.514753][T16084] bridge_slave_0: entered allmulticast mode [ 484.533964][T16084] bridge_slave_0: entered promiscuous mode [ 484.552963][T16084] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.569992][T16084] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.593301][T16084] bridge_slave_1: entered allmulticast mode [ 484.611039][T16084] bridge_slave_1: entered promiscuous mode [ 484.742266][T16084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.758014][T16084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.828459][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2887'. [ 484.850046][ T5643] Bluetooth: hci4: command tx timeout [ 484.983938][T16393] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2886'. [ 485.276594][T16084] team0: Port device team_slave_0 added [ 485.314223][T16084] team0: Port device team_slave_1 added [ 485.633601][T16084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.655043][T16084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.710968][T16084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.777266][ T81] hsr_slave_0: left promiscuous mode [ 485.800238][ T81] hsr_slave_1: left promiscuous mode [ 485.824315][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.851694][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.878258][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.886097][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.908043][ T81] veth1_macvtap: left promiscuous mode [ 485.914077][ T81] veth0_macvtap: left promiscuous mode [ 485.921777][ T81] veth1_vlan: left promiscuous mode [ 485.927258][ T81] veth0_vlan: left promiscuous mode [ 486.436423][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2899'. [ 486.894617][ T81] team0 (unregistering): Port device team_slave_1 removed [ 486.911540][ T81] team0 (unregistering): Port device team_slave_0 removed [ 487.041368][T16084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.049235][T16084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.069603][ T115] smbdirect: ib_dev[syz2] removed [ 487.081790][T16084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.466617][T16443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.511375][T16443] veth0_vlan: left promiscuous mode [ 487.779356][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 487.804152][ T29] lo speed is unknown, defaulting to 1000 [ 487.822912][ T29] infiniband syz2: ib_query_port failed (-19) [ 487.924107][ T5782] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 487.932017][T16496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2900'. [ 487.960860][ T5782] syú2: Port: 1 Link DOWN [ 488.090238][T16084] hsr_slave_0: entered promiscuous mode [ 488.112731][T16084] hsr_slave_1: entered promiscuous mode [ 488.138442][T16084] debugfs: 'hsr0' already exists in 'hsr' [ 488.169349][T16084] Cannot create hsr debugfs directory [ 488.204981][ T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.240372][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 488.278869][ T13] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 488.294820][ T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.333866][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 488.356206][ T13] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 488.443117][ T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.466940][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 488.510004][ T13] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 488.550633][ T36] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.583338][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 488.649003][ T36] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 488.921412][ T81] IPVS: stop unused estimator thread 0... [ 489.147053][T16522] syzkaller1: entered promiscuous mode [ 489.166916][T16522] syzkaller1: entered allmulticast mode [ 489.520900][T16539] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2907'. [ 490.913258][T16583] netlink: 'syz.5.2917': attribute type 2 has an invalid length. [ 490.973271][T16583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.143496][T16084] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 491.199997][T16084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.233126][T16084] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 491.287652][T16084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.323418][T16084] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 491.372084][T16084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 491.404164][ T13] bridge_slave_1: left allmulticast mode [ 491.416211][ T13] bridge_slave_1: left promiscuous mode [ 491.439859][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.487743][T16607] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2922'. [ 491.504068][ T13] bridge_slave_0: left allmulticast mode [ 491.524027][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.637374][ T13] pim6reg: left allmulticast mode [ 491.654656][ T13] dvmrp0: left allmulticast mode [ 492.106691][ T13] erspan0 (unregistering): left promiscuous mode [ 492.197290][ T13] gretap0 (unregistering): left promiscuous mode [ 492.272635][ T13] bond5 (unregistering): (slave gretap2): Releasing active interface [ 492.492444][ T13] bond1 (unregistering): Released all slaves [ 492.514551][ T13] bond2 (unregistering): Released all slaves [ 492.547447][ T13] bond3 (unregistering): Released all slaves [ 492.576245][ T13] bond4 (unregistering): Released all slaves [ 492.599112][ T13] bond5 (unregistering): Released all slaves [ 492.621973][ T13] bond0 (unregistering): Released all slaves [ 492.657286][T16084] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 492.670680][T16084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 492.684365][T16599] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.076053][ T13] tipc: Disabling bearer [ 493.111141][ T13] tipc: Left network mode [ 493.289616][T16084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.694661][T16683] xt_socket: unknown flags 0x50 [ 493.720989][T16084] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.794788][ T9636] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.802036][ T9636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.086588][T16698] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 494.094934][T16698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.132794][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.140187][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.459503][ T29] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 494.583091][T16699] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 494.621053][ T13] hsr_slave_0: left promiscuous mode [ 494.627545][ T13] hsr_slave_1: left promiscuous mode [ 494.634180][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.643707][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.652935][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.661186][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.676094][ T13] veth1_macvtap: left promiscuous mode [ 494.681827][ T13] veth0_macvtap: left promiscuous mode [ 494.687658][ T13] veth1_vlan: left promiscuous mode [ 494.696407][ T13] veth0_vlan: left promiscuous mode [ 494.702088][ T29] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 494.743565][T16724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.053997][ T13] team0 (unregistering): Port device team_slave_1 removed [ 495.079054][ T13] team0 (unregistering): Port device team_slave_0 removed [ 495.190399][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2942'. [ 495.216721][T16717] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 495.272655][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2946'. [ 495.290541][T16727] netlink: 50 bytes leftover after parsing attributes in process `syz.5.2946'. [ 495.321229][T16727] netlink: 50 bytes leftover after parsing attributes in process `syz.5.2946'. [ 495.758032][T16753] netlink: 'syz.3.2949': attribute type 4 has an invalid length. [ 495.922238][ T13] IPVS: stop unused estimator thread 0... [ 496.212867][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2953'. [ 496.265686][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2953'. [ 496.348220][T16782] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 496.561064][T16791] netlink: 'syz.4.2956': attribute type 1 has an invalid length. [ 496.713424][T16791] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 497.026348][T16813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2958'. [ 499.639291][T16810] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 500.136741][T16084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.321371][T16084] veth0_vlan: entered promiscuous mode [ 500.336685][T16084] veth1_vlan: entered promiscuous mode [ 500.440175][T16894] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2967'. [ 500.458131][T16084] veth0_macvtap: entered promiscuous mode [ 500.495818][T16084] veth1_macvtap: entered promiscuous mode [ 500.503192][T16894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2967'. [ 500.541370][T16084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.585851][T16084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.643313][ T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.663857][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.702987][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.724321][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.782656][T16904] xt_HMARK: spi-set and port-set can't be combined [ 500.984411][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.016312][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.160653][ T9647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.212149][ T9647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.573915][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.003866][ T5646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 502.014543][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 502.022737][ T5646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 502.033815][ T5646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 502.046105][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 502.508237][T16990] syzkaller0: entered promiscuous mode [ 502.529984][T16990] syzkaller0: entered allmulticast mode [ 502.570781][T16994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2992'. [ 502.942024][T16965] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 503.301939][ T115] bridge_slave_1: left promiscuous mode [ 503.307923][ T115] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.317620][ T115] bridge_slave_0: left allmulticast mode [ 503.323953][ T115] bridge_slave_0: left promiscuous mode [ 503.331789][ T115] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.555810][ T115] bond3 (unregistering): (slave geneve4): Releasing active interface [ 503.629487][ T115] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 503.637639][ T115] bridge2 (unregistering): left promiscuous mode [ 503.655381][ T115] bond1 (unregistering): Released all slaves [ 503.679004][ T115] bond2 (unregistering): Released all slaves [ 503.702254][ T115] bond3 (unregistering): Released all slaves [ 503.732603][ T115] bond4 (unregistering): Released all slaves [ 503.750488][ T115] bond5 (unregistering): Released all slaves [ 503.776337][ T115] bond6 (unregistering): Released all slaves [ 503.799989][ T115] bond0 (unregistering): Released all slaves [ 503.818762][ T115] bond7 (unregistering): Released all slaves [ 503.846133][ T115] bond8 (unregistering): Released all slaves [ 503.862864][ T115] bond9 (unregistering): Released all slaves [ 504.050787][ T115] tipc: Left network mode [ 504.131118][ T5643] Bluetooth: hci1: command tx timeout [ 504.337382][T16965] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.346436][T16965] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.355330][T16965] bridge_slave_0: entered allmulticast mode [ 504.364609][T16965] bridge_slave_0: entered promiscuous mode [ 504.375771][T16965] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.385863][T16965] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.394541][T16965] bridge_slave_1: entered allmulticast mode [ 504.407002][T16965] bridge_slave_1: entered promiscuous mode [ 504.449149][T16965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.462315][T16965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.516167][T16965] team0: Port device team_slave_0 added [ 504.527743][T16965] team0: Port device team_slave_1 added [ 504.565222][T16965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.572518][T16965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.599192][T16965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.622764][T16965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.631192][T16965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.657663][T16965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.709416][ T115] hsr_slave_0: left promiscuous mode [ 504.715533][ T115] hsr_slave_1: left promiscuous mode [ 504.723219][ T115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.952484][T16968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.183162][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 505.285228][T17032] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2999'. [ 505.303137][T17032] nbd: illegal input index -8454144 [ 505.386217][T17034] sctp: [Deprecated]: syz.5.3001 (pid 17034) Use of int in max_burst socket option. [ 505.386217][T17034] Use struct sctp_assoc_value instead [ 505.452995][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3000'. [ 505.476950][ T13] smbdirect: ib_dev[syú2] removed [ 505.601930][T17040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3003'. [ 505.657890][T16965] hsr_slave_0: entered promiscuous mode [ 505.665234][T16965] hsr_slave_1: entered promiscuous mode [ 505.692983][T16965] debugfs: 'hsr0' already exists in 'hsr' [ 505.710532][T16965] Cannot create hsr debugfs directory [ 505.973481][T17061] netlink: 'syz.0.3006': attribute type 1 has an invalid length. [ 506.024195][T17060] xt_connbytes: Forcing CT accounting to be enabled [ 506.070363][T17060] Cannot find set identified by id 65534 to match [ 506.160074][T17057] bond1: option all_slaves_active: invalid value (222) [ 506.177453][T17057] bond1 (unregistering): Released all slaves [ 506.209626][ T5643] Bluetooth: hci1: command tx timeout [ 506.276869][T17069] veth0_to_bond: entered allmulticast mode [ 506.349391][T17075] openvswitch: netlink: Duplicate key (type 6). [ 506.661832][T17083] syzkaller0: entered promiscuous mode [ 506.676140][T17083] syzkaller0: entered allmulticast mode [ 506.960803][ T115] IPVS: stop unused estimator thread 0... [ 507.150829][T17104] Cannot find add_set index 4 as target [ 507.186907][T17104] Cannot find add_set index 4 as target [ 507.414059][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3022'. [ 507.446713][T17116] netlink: 'syz.5.3022': attribute type 29 has an invalid length. [ 507.473214][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3022'. [ 507.630554][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3022'. [ 507.642463][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 507.678163][T17124] netlink: 'syz.5.3022': attribute type 29 has an invalid length. [ 507.710354][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3022'. [ 508.003188][T17142] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 508.155937][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3027'. [ 508.205366][T17149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.289072][ T5643] Bluetooth: hci1: command tx timeout [ 508.436875][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3028'. [ 508.453476][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3029'. [ 508.471098][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3028'. [ 508.577579][T17156] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 508.604156][ T5736] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 509.511483][T17191] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.613488][T16965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 509.643145][T16965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.680223][T17203] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3039'. [ 509.693192][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3039'. [ 509.702901][T16965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 509.735408][T16965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.765707][T16965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 509.802478][T16965] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.836452][T16965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.885971][T16965] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.182051][T17233] sctp: [Deprecated]: syz.0.3045 (pid 17233) Use of int in max_burst socket option. [ 510.182051][T17233] Use struct sctp_assoc_value instead [ 510.346701][T16965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.369010][ T5643] Bluetooth: hci1: command tx timeout [ 510.471356][T16965] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.503494][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.510872][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.571479][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.578809][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.307470][T17284] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 511.316708][T17284] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 511.338695][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3056'. [ 511.426270][T17284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 511.461744][T17284] hsr_slave_0: left promiscuous mode [ 511.485334][T17284] hsr_slave_1: left promiscuous mode [ 511.741558][T17302] tipc: Resetting bearer [ 511.868368][T17302] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 511.905885][T17299] syzkaller0: entered promiscuous mode [ 511.924656][T17299] syzkaller0: entered allmulticast mode [ 512.364389][T16965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.644973][T17343] lo: entered allmulticast mode [ 512.666579][T17343] lo: left allmulticast mode [ 512.686533][T17350] __nla_validate_parse: 5 callbacks suppressed [ 512.686555][T17350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3067'. [ 512.902424][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3070'. [ 512.941003][T16965] veth0_vlan: entered promiscuous mode [ 513.085876][T16965] veth1_vlan: entered promiscuous mode [ 513.265557][T16965] veth0_macvtap: entered promiscuous mode [ 513.326507][T16965] veth1_macvtap: entered promiscuous mode [ 513.416650][T16965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.463552][T16965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.519908][ T81] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.566827][ T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.592120][ T81] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.635701][ T81] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.767687][T17399] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 513.811327][T17402] syzkaller0: entered promiscuous mode [ 513.822030][T17399] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 513.834603][T17402] syzkaller0: entered allmulticast mode [ 513.844090][T17400] syzkaller0: entered promiscuous mode [ 513.850939][T17400] syzkaller0: entered allmulticast mode [ 513.856639][T17399] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 513.975619][T17397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3081'. [ 514.014342][T17397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3081'. [ 514.207740][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.242534][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.377453][ T9647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.407109][ T9647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.630610][T17436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'. [ 514.693833][T17433] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3089'. [ 514.741745][T17443] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3091'. [ 514.782873][T17443] openvswitch: netlink: Message has 512 unknown bytes. [ 514.793515][T17436] 8021q: adding VLAN 0 to HW filter on device bond19 [ 514.886464][T17444] syzkaller0: entered promiscuous mode [ 514.894434][T17444] syzkaller0: entered allmulticast mode [ 514.936072][T17450] macvlan3: entered promiscuous mode [ 514.956424][T17450] macvlan3: entered allmulticast mode [ 514.981069][T17450] bond19: entered promiscuous mode [ 514.987876][T17450] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 515.003941][T17450] bond19: left promiscuous mode [ 515.067243][T17433] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3089'. [ 515.464304][T17478] netlink: 576 bytes leftover after parsing attributes in process `syz.5.3096'. [ 515.903679][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 515.924449][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 515.932878][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 515.944849][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 515.971155][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 518.060444][ T5643] Bluetooth: hci3: command tx timeout [ 518.670401][T17534] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3102'. [ 518.775638][T17539] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 518.787867][T17527] x_tables: duplicate entry at hook 3 [ 518.996783][T17546] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3106'. [ 519.261996][T17562] netlink: 'syz.0.3110': attribute type 26 has an invalid length. [ 519.362853][T17562] netlink: 'syz.0.3110': attribute type 1 has an invalid length. [ 519.382075][T17567] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 519.389791][T17562] netlink: 756 bytes leftover after parsing attributes in process `syz.0.3110'. [ 519.443022][T17575] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3110'. [ 519.591875][T17581] syzkaller0: entered promiscuous mode [ 519.599669][T17576] netlink: 'syz.4.3112': attribute type 4 has an invalid length. [ 519.607583][T17581] syzkaller0: entered allmulticast mode [ 519.670152][T17580] netlink: 'syz.4.3112': attribute type 4 has an invalid length. [ 519.795511][T17573] netlink: 'syz.4.3112': attribute type 12 has an invalid length. [ 519.809290][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 519.963740][T17589] netlink: 'syz.5.3114': attribute type 3 has an invalid length. [ 520.129120][ T5643] Bluetooth: hci3: command tx timeout [ 520.539848][T17628] sctp: [Deprecated]: syz.2.3124 (pid 17628) Use of int in max_burst socket option. [ 520.539848][T17628] Use struct sctp_assoc_value instead [ 520.589814][T17493] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.625578][T17493] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.633985][T17493] bridge_slave_0: entered allmulticast mode [ 520.641541][T17630] netlink: 'syz.2.3125': attribute type 2 has an invalid length. [ 520.652161][T17493] bridge_slave_0: entered promiscuous mode [ 520.658129][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'. [ 520.670844][T17493] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.678013][T17493] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.706512][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 520.715911][T17493] bridge_slave_1: entered allmulticast mode [ 520.727623][T17493] bridge_slave_1: entered promiscuous mode [ 520.784073][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 520.812331][T17641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.835684][T17631] Unknown options in mask b7f2 [ 520.852011][T17493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.867288][T17630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.883627][T17493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.016782][T17493] team0: Port device team_slave_0 added [ 521.055671][T17493] team0: Port device team_slave_1 added [ 521.142950][T17652] x_tables: duplicate underflow at hook 2 [ 521.197069][T17493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.210042][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.237483][T17493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.254683][T17493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.264401][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.291595][T17493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.333923][T17659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3134'. [ 521.492569][T17493] hsr_slave_0: entered promiscuous mode [ 521.511015][T17493] hsr_slave_1: entered promiscuous mode [ 521.553382][T17493] debugfs: 'hsr0' already exists in 'hsr' [ 521.561713][T17493] Cannot create hsr debugfs directory [ 521.567337][T17672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.663698][T17669] bond5: Removing last ns target with arp_interval on [ 521.671150][T17675] netlink: 'syz.2.3138': attribute type 12 has an invalid length. [ 521.681844][T17675] netlink: 'syz.2.3138': attribute type 29 has an invalid length. [ 521.691988][T17675] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3138'. [ 521.693095][T17681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3139'. [ 521.701409][T17675] netlink: 'syz.2.3138': attribute type 3 has an invalid length. [ 521.721553][T17680] xt_hashlimit: size too large, truncated to 1048576 [ 521.837989][T17679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.902434][T17675] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 521.922593][T17675] 0ªX¹¦Dö»: entered allmulticast mode [ 521.976036][T17688] veth1_macvtap: left promiscuous mode [ 521.995596][T17688] macsec0: entered allmulticast mode [ 522.208739][ T5643] Bluetooth: hci3: command tx timeout [ 522.568066][T17493] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.582214][T17493] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.651476][T17718] : entered promiscuous mode [ 522.805275][T17493] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.830309][T17493] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.991295][T17493] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.002806][T17493] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.051746][T17742] syzkaller0: entered promiscuous mode [ 523.057575][T17742] syzkaller0: entered allmulticast mode [ 523.158270][T17493] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.194886][T17493] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.541698][T17759] syzkaller0: entered promiscuous mode [ 523.550298][T17759] syzkaller0: entered allmulticast mode [ 523.822304][T17493] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 523.847208][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.871754][T17778] __nla_validate_parse: 13 callbacks suppressed [ 523.871778][T17778] netlink: 39 bytes leftover after parsing attributes in process `syz.2.3168'. [ 523.900706][T17493] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 523.921453][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.944060][T17493] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 523.990079][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 524.017292][T17493] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 524.067684][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 524.102212][T17787] netlink: 81 bytes leftover after parsing attributes in process `syz.4.3170'. [ 524.290031][ T5643] Bluetooth: hci3: command tx timeout [ 524.468293][T17493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.505371][ T29] IPVS: starting estimator thread 0... [ 524.514455][T17810] IPVS: lc: FWM 3 0x00000003 - no destination available [ 524.543420][T17810] IPVS: lc: FWM 3 0x00000003 - no destination available [ 524.618631][T17816] IPVS: using max 27 ests per chain, 64800 per kthread [ 524.627640][T17815] bridge3: port 1(erspan0) entered disabled state [ 524.729547][T17815] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.738991][T17815] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.747749][T17815] bridge0: left promiscuous mode [ 524.753739][T17815] bridge0: left allmulticast mode [ 525.069648][T17815] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 525.103959][T17817] tap0: tun_chr_ioctl cmd 2148553947 [ 525.112206][T17820] tap0: tun_chr_ioctl cmd 2148553947 [ 525.140752][T17493] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.202813][ T9647] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.210162][ T9647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.263082][ T9647] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.270351][ T9647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.351885][T17832] netlink: 524 bytes leftover after parsing attributes in process `syz.5.3181'. [ 526.265628][T17493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.326219][T17493] veth0_vlan: entered promiscuous mode [ 526.343028][T17493] veth1_vlan: entered promiscuous mode [ 526.368837][ T5643] Bluetooth: hci3: command tx timeout [ 526.395002][T17493] veth0_macvtap: entered promiscuous mode [ 526.413633][T17493] veth1_macvtap: entered promiscuous mode [ 526.441755][T17493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.473251][T17493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.493116][ T187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.503892][ T187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.515306][ T187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.520883][T17869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3186'. [ 526.533209][ T187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.728069][T17874] syzkaller0: entered promiscuous mode [ 526.733763][T17874] syzkaller0: entered allmulticast mode [ 528.260557][T17829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.391258][ T9647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.426757][ T9647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.526683][ T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.541464][T17882] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3189'. [ 528.552480][ T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.579360][T17890] validate_nla: 6 callbacks suppressed [ 528.579379][T17890] netlink: 'syz.4.3192': attribute type 17 has an invalid length. [ 528.607877][T17890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3192'. [ 528.630412][T17890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3192'. [ 528.658468][T17890] erspan0: entered promiscuous mode [ 528.675642][T17890] gretap0: entered promiscuous mode [ 528.741749][T17893] netlink: 'syz.2.3193': attribute type 9 has an invalid length. [ 528.831641][T17899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3097'. [ 528.914071][T17907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 528.921401][T17907] IPv6: NLM_F_CREATE should be set when creating new route [ 528.928717][T17907] IPv6: NLM_F_CREATE should be set when creating new route [ 528.940130][T17905] syzkaller0: entered promiscuous mode [ 528.952603][T17905] syzkaller0: entered allmulticast mode [ 529.625250][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3207'. [ 529.666959][T17943] netlink: 'syz.2.3207': attribute type 5 has an invalid length. [ 529.694786][T17943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3207'. [ 529.859514][T17955] ip6gre2: entered promiscuous mode [ 529.882199][T17955] ip6gre2: entered allmulticast mode [ 529.930979][T17958] ipt_ECN: cannot use operation on non-tcp rule [ 530.100930][T17971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.112377][T17973] Bluetooth: MGMT ver 1.23 [ 530.119411][T17971] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3216'. [ 530.140444][T17965] netlink: 'syz.2.3214': attribute type 1 has an invalid length. [ 530.284801][T17981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3214'. [ 530.334998][T17986] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.3219'. [ 530.387189][T17976] veth3: entered promiscuous mode [ 530.442489][T17985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.494225][T17981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.680502][T17997] netlink: 'syz.3.3225': attribute type 27 has an invalid length. [ 530.702303][T17997] netlink: 'syz.3.3225': attribute type 4 has an invalid length. [ 530.711469][T18001] nft_compat: unsupported protocol 0 [ 530.714114][T17997] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3225'. [ 530.728376][T17999] IPv6: sit2: Disabled Multicast RS [ 530.740288][T17999] sit2: entered allmulticast mode [ 531.021958][T18018] ip6gre3: entered allmulticast mode [ 531.047920][ T81] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 531.234978][T18037] netlink: 'syz.4.3233': attribute type 1 has an invalid length. [ 531.273621][T18038] veth1_macvtap: entered allmulticast mode [ 531.591998][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 531.612966][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 531.826187][T18074] syzkaller0: entered promiscuous mode [ 531.858665][T18074] syzkaller0: entered allmulticast mode [ 531.902692][T18080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3248'. [ 532.044581][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3250'. [ 532.324617][T18102] can: request_module (can-proto-5) failed. [ 532.595254][T18117] netlink: 'syz.0.3260': attribute type 2 has an invalid length. [ 532.783110][T18122] vcan1: entered promiscuous mode [ 532.792283][T18122] vcan1: entered allmulticast mode [ 533.134019][T18148] netlink: 'syz.3.3269': attribute type 1 has an invalid length. [ 534.190382][ T5287] veth1_vlan: left promiscuous mode [ 535.293374][T18238] __nla_validate_parse: 5 callbacks suppressed [ 535.293395][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3293'. [ 535.482860][T18238] team0: Port device team_slave_0 removed [ 535.490295][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 535.513285][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3296'. [ 535.694171][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3296'. [ 535.704021][ T115] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.745751][ T115] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.763645][ T115] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.255134][T18280] netlink: 524 bytes leftover after parsing attributes in process `syz.4.3303'. [ 536.820871][T18301] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 536.832646][T18307] netlink: 'syz.0.3310': attribute type 8 has an invalid length. [ 536.844302][T18307] netlink: 'syz.0.3310': attribute type 1 has an invalid length. [ 536.852462][T18307] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3310'. [ 536.904597][T18301] bond2 (unregistering): Released all slaves [ 537.301601][T18325] netlink: 'syz.4.3314': attribute type 3 has an invalid length. [ 537.342753][T18325] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3314'. [ 537.371611][T18329] dvmrp0: entered allmulticast mode [ 537.387593][T18325] netlink: 'syz.4.3314': attribute type 4 has an invalid length. [ 537.406455][T18325] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3314'. [ 537.572649][T16478] IPVS: starting estimator thread 0... [ 537.610024][T18345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'. [ 537.681767][T18347] IPVS: using max 25 ests per chain, 60000 per kthread [ 537.715093][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880ab0d5000: rx timeout, send abort [ 537.735826][T18353] Cannot find add_set index 0 as target [ 537.827798][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3324'. [ 537.941175][T18364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3324'. [ 538.063387][T18369] veth0: entered promiscuous mode [ 538.082302][T18369] batadv_slave_1: entered promiscuous mode [ 538.092141][T18368] batadv_slave_1: left promiscuous mode [ 538.106946][T18368] veth0: left promiscuous mode [ 538.215246][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880ab0d6000: rx timeout, send abort [ 538.223802][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880ab0d5000: abort rx timeout. Force session deactivation [ 538.299811][T18376] tc action pedit offset 132 out of bounds [ 538.619503][T18388] nbd: couldn't find a device at index -488837 [ 538.723643][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880ab0d6000: abort rx timeout. Force session deactivation [ 538.925751][T18406] openvswitch: netlink: Flow actions attr not present in new flow. [ 538.954814][T18402] syzkaller0: entered promiscuous mode [ 538.965331][T18402] syzkaller0: entered allmulticast mode [ 539.700984][T18445] tipc: Enabling of bearer rejected, failed to enable media [ 540.171780][T18463] netlink: 'syz.3.3356': attribute type 4 has an invalid length. [ 540.223349][T18463] syzkaller0: entered promiscuous mode [ 540.236082][T18463] syzkaller0: entered allmulticast mode [ 540.363421][T18463] tipc: Started in network mode [ 540.368396][T18463] tipc: Node identity 62812685703c, cluster identity 4711 [ 540.407176][T18463] tipc: Enabled bearer , priority 0 [ 540.434475][T18462] tipc: Resetting bearer [ 540.456639][T18474] __nla_validate_parse: 9 callbacks suppressed [ 540.456660][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3360'. [ 540.536009][T18462] tipc: Disabling bearer [ 540.779533][T18482] netlink: 'syz.0.3362': attribute type 1 has an invalid length. [ 540.937269][T18491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3365'. [ 541.279414][T18514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3370'. [ 541.509582][T18520] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3372'. [ 541.560447][T18524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3374'. [ 541.615764][T18526] netlink: 'syz.4.3375': attribute type 12 has an invalid length. [ 541.670160][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3375'. [ 541.849186][T18530] syzkaller0: entered promiscuous mode [ 541.854980][T18530] syzkaller0: entered allmulticast mode [ 543.235761][T18568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3387'. [ 543.392086][T18568] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 543.392296][T18568] block (null): Could not allocate knbd recv work queue. [ 543.462688][T18568] nbd: failed to add new device [ 543.469917][T18569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3387'. [ 543.546552][T18569] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 543.546747][T18569] block (null): Could not allocate knbd recv work queue. [ 543.578927][T18569] nbd: failed to add new device [ 544.458898][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 544.666175][T18575] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3388'. [ 544.786131][T18580] netlink: 'syz.0.3389': attribute type 2 has an invalid length. [ 544.804100][T18580] netlink: 'syz.0.3389': attribute type 2 has an invalid length. [ 544.828182][T18580] netlink: 67 bytes leftover after parsing attributes in process `syz.0.3389'. [ 545.183745][T18602] netlink: 'syz.0.3395': attribute type 1 has an invalid length. [ 545.366210][T18609] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 545.389351][T16487] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 545.411695][T18612] sctp: [Deprecated]: syz.3.3399 (pid 18612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.411695][T18612] Use struct sctp_sack_info instead [ 545.440215][T18612] sctp: [Deprecated]: syz.3.3399 (pid 18612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.440215][T18612] Use struct sctp_sack_info instead [ 545.458846][T18614] __nla_validate_parse: 7 callbacks suppressed [ 545.458865][T18614] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.3400'. [ 545.710477][T18627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3404'. [ 545.761106][T18631] netlink: 960 bytes leftover after parsing attributes in process `syz.2.3403'. [ 545.789350][T16474] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 546.033829][T18640] syzkaller0: entered promiscuous mode [ 546.052673][T18640] syzkaller0: entered allmulticast mode [ 546.088792][T18640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3407'. [ 546.115099][T18640] openvswitch: netlink: Missing key (keys=40, expected=100) [ 546.214442][T18646] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3411'. [ 546.734893][T18661] syzkaller0: entered promiscuous mode [ 546.757078][T18661] syzkaller0: entered allmulticast mode [ 549.707002][T18676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.003549][T18715] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 550.031510][T18714] syzkaller1: entered promiscuous mode [ 550.051841][T18714] syzkaller1: entered allmulticast mode [ 550.254726][T18725] syzkaller0: entered promiscuous mode [ 550.266336][T18725] syzkaller0: entered allmulticast mode [ 550.276123][T18729] netlink: 'syz.3.3427': attribute type 1 has an invalid length. [ 550.291661][T18729] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3427'. [ 550.302461][T18729] netlink: 'syz.3.3427': attribute type 1 has an invalid length. [ 550.344765][T18729] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.3427'. [ 562.368808][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 568.129065][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 570.439472][T18755] netlink: 'syz.5.3430': attribute type 1 has an invalid length. [ 570.458015][T18755] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3430'. [ 570.494513][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3431'. [ 570.611719][T18772] netlink: 'syz.4.3434': attribute type 9 has an invalid length. [ 570.646213][T18770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 570.669089][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3437'. [ 570.683201][T18776] IPVS: length: 239 != 24 [ 570.987096][T18790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3438'. [ 571.901388][T18839] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 572.227980][T18811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.495601][T18863] netlink: 'syz.4.3453': attribute type 4 has an invalid length. [ 572.838058][T18878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3457'. [ 572.874949][T18880] netlink: 'syz.2.3458': attribute type 1 has an invalid length. [ 572.890630][T18878] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3457'. [ 572.935635][T18878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3457'. [ 572.956172][T18880] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 573.423962][T18922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3465'. [ 573.514012][T18922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3465'. [ 573.658843][T18937] netlink: 'syz.4.3469': attribute type 1 has an invalid length. [ 573.697480][T18937] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3469'. [ 573.755926][T18937] netlink: 'syz.4.3469': attribute type 1 has an invalid length. [ 574.278405][T18966] netlink: 'syz.5.3473': attribute type 5 has an invalid length. [ 574.306280][T18966] netlink: 'syz.5.3473': attribute type 5 has an invalid length. [ 574.457681][T18974] netlink: 'syz.5.3477': attribute type 1 has an invalid length. [ 574.619137][T18974] 8021q: adding VLAN 0 to HW filter on device bond6 [ 574.658818][T18952] openvswitch: netlink: Message has 512 unknown bytes. [ 574.706603][T18977] bond2: entered promiscuous mode [ 574.715660][T18977] bond2: entered allmulticast mode [ 574.742078][T18978] bond6: (slave geneve4): making interface the new active one [ 574.787197][T18964] netlink: 'syz.3.3475': attribute type 5 has an invalid length. [ 574.810528][T18978] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 575.009362][T18984] syzkaller0: entered promiscuous mode [ 575.036487][T18984] syzkaller0: entered allmulticast mode [ 575.170861][T18992] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 575.398177][T19005] vcan1: entered promiscuous mode [ 575.416667][T19005] vcan1: entered allmulticast mode [ 575.592512][T19018] bond7 (unregistering): Released all slaves [ 575.927175][T19043] __nla_validate_parse: 6 callbacks suppressed [ 575.927198][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3494'. [ 576.405111][T19076] validate_nla: 1 callbacks suppressed [ 576.405130][T19076] netlink: 'syz.2.3503': attribute type 64 has an invalid length. [ 576.775132][T19092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3508'. [ 577.003191][T19109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3514'. [ 577.040233][T19109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3514'. [ 577.065353][ T115] tipc: Subscription rejected, illegal request [ 577.106329][T19114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3515'. [ 577.876336][T19162] sctp: [Deprecated]: syz.2.3528 (pid 19162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.876336][T19162] Use struct sctp_sack_info instead [ 578.008279][T19170] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 578.531614][T19181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3533'. [ 578.684029][T19181] netlink: 'syz.5.3533': attribute type 1 has an invalid length. [ 578.889235][T19225] sit0: entered promiscuous mode [ 578.990202][T19225] netlink: 'syz.0.3539': attribute type 1 has an invalid length. [ 579.059840][T19225] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3539'. [ 579.141159][T19231] bond0: entered promiscuous mode [ 579.165198][T19231] bond_slave_0: entered promiscuous mode [ 579.190799][T19231] bond_slave_1: entered promiscuous mode [ 579.226594][T19231] batadv0: entered promiscuous mode [ 579.267950][T19231] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 579.336369][T19231] bond0: left promiscuous mode [ 579.358188][T19231] bond_slave_0: left promiscuous mode [ 579.380122][T19231] bond_slave_1: left promiscuous mode [ 579.406735][T19231] batadv0: left promiscuous mode [ 579.548735][T19256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3546'. [ 579.593151][T19235] bond2: option all_slaves_active: invalid value (222) [ 579.604191][T19235] bond2 (unregistering): Released all slaves [ 579.946964][T19272] openvswitch: netlink: Missing valid actions attribute. [ 579.967309][T19272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.005205][T19272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3551'. [ 580.164324][T19279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3550'. [ 580.718053][T19318] nbd: illegal input index -8454144 [ 580.963200][T19332] __nla_validate_parse: 3 callbacks suppressed [ 580.963222][T19332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3570'. [ 581.077579][T19342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3572'. [ 581.119330][T19332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3570'. [ 581.191608][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3574'. [ 581.218126][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3574'. [ 581.525778][T19370] netlink: 'syz.2.3580': attribute type 2 has an invalid length. [ 581.561856][T19370] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3580'. [ 581.696516][T19377] netlink: 'syz.3.3581': attribute type 83 has an invalid length. [ 582.068379][T19399] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 582.074968][T19399] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 582.149765][T19404] netlink: 'syz.4.3590': attribute type 12 has an invalid length. [ 582.170248][T19407] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 582.371293][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3593'. [ 582.383147][T19419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3593'. [ 582.405591][T19416] erspan0: left allmulticast mode [ 582.416559][T19416] erspan0: left promiscuous mode [ 582.423268][T19416] bridge3: port 1(erspan0) entered disabled state [ 582.569946][T19424] netlink: 'syz.5.3596': attribute type 1 has an invalid length. [ 582.797599][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'. [ 582.809953][T19442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'. [ 582.820847][T19430] netlink: 'syz.3.3597': attribute type 28 has an invalid length. [ 582.920628][T19441] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 583.328177][T19467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.467771][T19476] syzkaller0: entered promiscuous mode [ 583.474315][T19476] syzkaller0: entered allmulticast mode [ 583.828111][T19501] netlink: 'syz.2.3617': attribute type 12 has an invalid length. [ 584.196779][T19523] netlink: 'syz.5.3623': attribute type 5 has an invalid length. [ 584.490176][T19534] ipt_REJECT: ECHOREPLY no longer supported. [ 584.794379][T19554] x_tables: duplicate underflow at hook 1 [ 584.835500][T19559] IPv6: addrconf: prefix option has invalid lifetime [ 584.855263][T19558] mac80211_hwsim hwsim31 ÿ: renamed from wlan1 (while UP) [ 584.964989][T19570] veth0: entered promiscuous mode [ 585.034952][T19578] IPv6: Can't replace route, no match found [ 585.076184][T19580] syzkaller0: entered promiscuous mode [ 585.089677][T19580] syzkaller0: entered allmulticast mode [ 585.453875][T19602] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 585.883240][T19569] veth0: left promiscuous mode [ 586.195599][T19631] Cannot find add_set index 65532 as target [ 586.218686][T19638] lo speed is unknown, defaulting to 1000 [ 586.237784][T19638] lo speed is unknown, defaulting to 1000 [ 586.253486][T19638] lo speed is unknown, defaulting to 1000 [ 586.267907][T19638] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 586.303615][T19638] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 586.413347][T19638] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 586.542769][T19638] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 586.893646][T19638] lo speed is unknown, defaulting to 1000 [ 586.936312][T19638] lo speed is unknown, defaulting to 1000 [ 586.980372][T19638] lo speed is unknown, defaulting to 1000 [ 587.027350][T19638] lo speed is unknown, defaulting to 1000 [ 587.052398][T19638] lo speed is unknown, defaulting to 1000 [ 587.077287][T19638] lo speed is unknown, defaulting to 1000 [ 587.174233][T19677] __nla_validate_parse: 13 callbacks suppressed [ 587.174254][T19677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 587.253762][T19677] bond3: entered promiscuous mode [ 587.262752][T19677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 587.305418][T19677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 587.314304][T19677] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 587.326505][T19677] bond3: (slave ip6gre1): Error -95 calling set_mac_address [ 587.657446][T19696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3666'. [ 587.861151][T19696] 8021q: adding VLAN 0 to HW filter on device bond4 [ 588.027610][T19712] IPv6: sit1: Disabled Multicast RS [ 588.056630][T19712] sit1: entered allmulticast mode [ 588.177099][T19722] x_tables: duplicate underflow at hook 1 [ 588.203984][T19723] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3674'. [ 588.294336][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3673'. [ 588.309575][T19731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3675'. [ 588.496692][T19742] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3678'. [ 588.645952][T19746] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3679'. [ 588.733857][T19748] netlink: 'syz.0.3677': attribute type 29 has an invalid length. [ 589.262773][T19772] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3687'. [ 589.318193][T19772] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3687'. [ 589.816983][T19795] netlink: 'syz.5.3694': attribute type 10 has an invalid length. [ 589.837914][T19798] netlink: 'syz.5.3694': attribute type 10 has an invalid length. [ 590.416646][T19821] rdma_op ffff888078d9a9f0 conn xmit_rdma 0000000000000000 [ 590.700871][T19837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3703'. [ 590.742270][T19837] nbd: couldn't find a device at index 417 [ 590.849985][T19836] bond9: entered promiscuous mode [ 590.855297][T19836] bond9: entered allmulticast mode [ 590.863002][T19836] 8021q: adding VLAN 0 to HW filter on device bond9 [ 590.889419][T19841] netlink: 'syz.0.3705': attribute type 27 has an invalid length. [ 590.919701][T19841] netlink: 'syz.0.3705': attribute type 4 has an invalid length. [ 591.092566][T19847] team0: entered promiscuous mode [ 591.117359][T19847] team_slave_0: entered promiscuous mode [ 591.141657][T19847] team_slave_1: entered promiscuous mode [ 591.160803][T19847] team0: left promiscuous mode [ 591.180556][T19847] team_slave_0: left promiscuous mode [ 591.195155][T19847] team_slave_1: left promiscuous mode [ 591.684330][T19877] netlink: 'syz.2.3714': attribute type 11 has an invalid length. [ 591.713099][T19877] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 591.883994][T19881] netlink: 'syz.5.3716': attribute type 2 has an invalid length. [ 591.928102][T19881] netlink: 'syz.5.3716': attribute type 2 has an invalid length. [ 592.309028][T19905] team0: No ports can be present during mode change [ 592.334794][T19909] __nla_validate_parse: 4 callbacks suppressed [ 592.334814][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3723'. [ 592.821048][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3729'. [ 592.842436][T19926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3729'. [ 592.922837][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3729'. [ 592.998971][T19926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3729'. [ 593.033260][T19924] veth5: entered allmulticast mode [ 593.227225][T19936] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3732'. [ 593.564837][T19947] netlink: 'syz.3.3736': attribute type 1 has an invalid length. [ 593.594420][T19949] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3737'. [ 593.648309][T19947] bond1: entered promiscuous mode [ 593.656625][T19947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.892339][T19947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.903016][T19947] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 593.915405][T19947] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 593.962653][T19947] bond1: (slave ip6gre2): making interface the new active one [ 593.984905][T19947] ip6gre2: entered promiscuous mode [ 594.000315][T19947] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 594.017074][T19957] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 594.909619][T19994] netlink: 'syz.3.3748': attribute type 1 has an invalid length. [ 594.996650][T19997] nbd: couldn't find a device at index 0 [ 595.030549][T19997] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3749'. [ 595.524007][T20016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3754'. [ 595.536513][T20016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3754'. [ 595.812712][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 596.302004][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 596.676699][T20074] syzkaller0: entered promiscuous mode [ 596.696124][T20074] syzkaller0: entered allmulticast mode [ 597.540511][T20100] __nla_validate_parse: 5 callbacks suppressed [ 597.540533][T20100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3778'. [ 598.012028][T20124] xt_addrtype: ipv6 does not support BROADCAST matching [ 598.050625][T20126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3781'. [ 598.546674][T20140] netlink: 'syz.3.3787': attribute type 4 has an invalid length. [ 598.566613][T20140] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3787'. [ 599.176578][T20164] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3794'. [ 599.559332][T20174] bond3 (unregistering): Released all slaves [ 599.594659][T20178] netlink: 'syz.3.3798': attribute type 2 has an invalid length. [ 599.604085][T20178] netlink: 'syz.3.3798': attribute type 2 has an invalid length. [ 599.616821][T20178] netlink: 'syz.3.3798': attribute type 2 has an invalid length. [ 599.625741][T20178] netlink: 'syz.3.3798': attribute type 2 has an invalid length. [ 599.634344][T20178] netlink: 'syz.3.3798': attribute type 2 has an invalid length. [ 599.642723][T20178] netlink: 'syz.3.3798': attribute type 2 has an invalid length. [ 599.653703][T20178] netlink: 'syz.3.3798': attribute type 2 has an invalid length. [ 599.663890][T20176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3797'. [ 599.681718][T20178] netlink: 'syz.3.3798': attribute type 2 has an invalid length. [ 599.958408][T20189] validate_nla: 57 callbacks suppressed [ 599.958430][T20189] netlink: 'syz.3.3802': attribute type 1 has an invalid length. [ 600.290548][T20199] 8021q: VLANs not supported on sit0 [ 600.466276][T20204] netlink: 516 bytes leftover after parsing attributes in process `syz.3.3804'. [ 600.741124][T20210] xt_nfacct: accounting object `syz1' does not exist [ 622.882400][T20236] netlink: 'syz.2.3813': attribute type 75 has an invalid length. [ 622.892223][T20237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3814'. [ 624.531701][T20318] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 624.549834][T20317] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 624.659605][T20323] netlink: 'syz.2.3837': attribute type 1 has an invalid length. [ 624.766384][T20331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3836'. [ 625.026080][T20323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 625.066891][T20348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3837'. [ 625.128037][T20323] bond2: (slave bond3): making interface the new active one [ 625.148207][T20323] bond2: (slave bond3): Enslaving as an active interface with an up link [ 625.222340][T20344] bond2: (slave gretap0): Enslaving as a backup interface with an up link [ 625.267428][T20348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 625.576110][T20372] erspan0: entered allmulticast mode [ 625.787612][T20384] netlink: 'syz.3.3851': attribute type 1 has an invalid length. [ 625.876862][T20384] bond2: entered promiscuous mode [ 625.882939][T20384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 625.937498][T20391] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 626.536841][T18950] Bluetooth: hci4: command 0x0406 tx timeout [ 626.598173][T20415] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3861'. [ 626.929496][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3862'. [ 627.085354][T20445] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3868'. [ 627.805115][T20471] openvswitch: netlink: IP tunnel dst address not specified [ 628.155623][T20486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.423512][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3884'. [ 628.978183][T20511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3886'. [ 628.989074][T20511] openvswitch: netlink: Missing key (keys=40, expected=80) [ 629.380690][T20531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3893'. [ 629.436288][T20533] xt_TPROXY: Can be used only with -p tcp or -p udp [ 629.495307][T20533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3895'. [ 629.509305][T20537] netlink: 'syz.2.3891': attribute type 4 has an invalid length. [ 629.612891][T20542] xt_TPROXY: Can be used only with -p tcp or -p udp [ 629.746407][T20545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3896'. [ 630.065438][ T5646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 630.086458][ T5646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 630.102511][ T5646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 630.120093][ T5646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 630.128336][ T5646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 630.547224][T20563] netlink: 'syz.3.3901': attribute type 29 has an invalid length. [ 630.575371][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 630.761080][T20569] netlink: 'syz.3.3901': attribute type 29 has an invalid length. [ 630.785074][T20569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 630.807204][T20567] tipc: Started in network mode [ 630.814886][T20567] tipc: Node identity 2003, cluster identity 4711 [ 630.841461][T20567] tipc: Node number set to 8195 [ 631.284762][T20594] team0: Device ipvlan2 failed to register rx_handler [ 631.390768][T20601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3909'. [ 631.653297][ T5643] Bluetooth: hci1: command 0x0406 tx timeout [ 631.806994][T20612] dvmrp0: entered allmulticast mode [ 631.863368][T20621] netlink: 'syz.0.3911': attribute type 1 has an invalid length. [ 631.951877][T20551] lo speed is unknown, defaulting to 1000 [ 632.162711][T20631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3914'. [ 632.179558][T20631] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3914'. [ 632.209479][T18950] Bluetooth: hci0: command tx timeout [ 632.341180][T20640] xt_nat: multiple ranges no longer supported [ 633.350400][T20685] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 633.429199][T20687] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 633.855292][T20706] __nla_validate_parse: 7 callbacks suppressed [ 633.855313][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3930'. [ 633.873579][T20706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3930'. [ 633.971752][T20694] syzkaller1: entered promiscuous mode [ 633.996596][T20694] syzkaller1: entered allmulticast mode [ 634.206214][T20715] netlink: 'syz.4.3933': attribute type 2 has an invalid length. [ 634.289062][T18950] Bluetooth: hci0: command tx timeout [ 634.296403][T20551] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.345938][T20551] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.366644][T20721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 634.372260][T20551] bridge_slave_0: entered allmulticast mode [ 634.402987][T20551] bridge_slave_0: entered promiscuous mode [ 634.420259][T20551] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.431790][T20551] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.488885][T20551] bridge_slave_1: entered allmulticast mode [ 634.507695][T20551] bridge_slave_1: entered promiscuous mode [ 634.776451][T20551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.796815][T20551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.918049][T20551] team0: Port device team_slave_0 added [ 634.947639][T20551] team0: Port device team_slave_1 added [ 635.142659][T20551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.164540][T20551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.195519][T20551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.218352][T20551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.226837][T20551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.256800][T20551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.500530][T18950] Bluetooth: hci4: command 0x0406 tx timeout [ 635.813732][T20551] hsr_slave_0: entered promiscuous mode [ 635.831978][T20551] hsr_slave_1: entered promiscuous mode [ 635.853152][T20551] debugfs: 'hsr0' already exists in 'hsr' [ 635.868625][T20551] Cannot create hsr debugfs directory [ 635.892278][T20776] netlink: 'syz.0.3946': attribute type 1 has an invalid length. [ 635.971083][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3946'. [ 635.997563][T20782] netlink: 'syz.2.3947': attribute type 1 has an invalid length. [ 636.213518][T20776] bond3: entered promiscuous mode [ 636.229592][T20776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 636.250729][T20797] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 636.257335][T20797] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 636.368774][T18950] Bluetooth: hci0: command tx timeout [ 636.383833][T20793] bond3: (slave bridge1): making interface the new active one [ 636.408803][T20793] bridge1: entered promiscuous mode [ 636.431949][T20799] Can't find ip_set type [ 636.445641][T20793] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 636.456999][T20800] Can't find ip_set type [ 636.696734][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'. [ 636.913325][T20809] syzkaller0: entered promiscuous mode [ 636.930046][T20809] syzkaller0: entered allmulticast mode [ 637.242418][T20838] tipc: Can't bind to reserved service type 2 [ 637.387507][T20551] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.436256][T20551] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 637.464443][T20551] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 637.633850][T20852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3966'. [ 637.679200][T20551] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.694373][T20853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3966'. [ 637.719660][T20551] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 637.756494][T20551] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 637.981577][T20551] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.023736][T20551] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 638.061234][T20551] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 638.449081][T18950] Bluetooth: hci0: command tx timeout [ 638.466448][T20551] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.477302][T20870] Cannot find del_set index 4 as target [ 638.501546][T20551] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 638.523131][T20551] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 639.227740][T20551] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 639.342883][T20551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 639.362070][T20551] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 639.468389][T20551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 639.515154][T20551] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 639.563390][T20551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 639.603267][T20551] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 639.649413][T20551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 640.486789][T20551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.678225][T20551] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.747862][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.755119][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.942949][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.950302][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.266353][T20960] syzkaller0: entered promiscuous mode [ 641.278858][T20960] syzkaller0: entered allmulticast mode [ 642.107474][T15868] IPVS: starting estimator thread 0... [ 642.229144][T20982] IPVS: using max 30 ests per chain, 72000 per kthread [ 642.702167][T20993] Bluetooth: MGMT ver 1.23 [ 642.933401][T21007] netlink: 'syz.2.4002': attribute type 3 has an invalid length. [ 642.943977][T21006] xt_hashlimit: size too large, truncated to 1048576 [ 642.952875][T21007] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4002'. [ 643.345987][T21020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4007'. [ 643.379535][T21022] 8021q: VLANs not supported on lo [ 643.387835][T21020] netlink: 'syz.4.4007': attribute type 7 has an invalid length. [ 643.416841][T21020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4007'. [ 643.470456][T21020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4007'. [ 643.738294][ T30] audit: type=1800 audit(1784126044.704:5): pid=21033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4010" name="memory.events" dev="tmpfs" ino=997 res=0 errno=0 [ 643.826376][T20551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.886479][T21040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4012'. [ 643.919937][T21041] batadv_slave_1: entered promiscuous mode [ 644.065878][T21034] batadv_slave_1: left promiscuous mode [ 644.153169][T21052] netlink: 'syz.0.4015': attribute type 1 has an invalid length. [ 644.190327][T21052] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4015'. [ 644.230580][T21052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4015'. [ 644.253358][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4016'. [ 644.282915][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4016'. [ 644.317213][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4016'. [ 644.511466][T21065] netlink: 'syz.0.4019': attribute type 1 has an invalid length. [ 644.548052][T21064] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20002 [ 644.722102][T21077] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 644.766118][ T9638] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 644.881895][T21087] netlink: 'syz.2.4024': attribute type 1 has an invalid length. [ 645.066614][T20551] veth0_vlan: entered promiscuous mode [ 645.094948][T20551] veth1_vlan: entered promiscuous mode [ 645.168289][T21095] x_tables: duplicate underflow at hook 1 [ 645.194119][T20551] veth0_macvtap: entered promiscuous mode [ 645.212719][T20551] veth1_macvtap: entered promiscuous mode [ 645.252455][T20551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.278395][T20551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.303185][ T9636] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.334446][ T9636] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.382411][ T9636] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.408283][T21067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.429234][ T9636] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.800732][T21103] bond5 (unregistering): Released all slaves [ 645.833236][T21112] FAULT_INJECTION: forcing a failure. [ 645.833236][T21112] name failslab, interval 1, probability 0, space 0, times 0 [ 645.849688][T21112] CPU: 1 UID: 0 PID: 21112 Comm: syz.0.4031 Not tainted syzkaller #0 PREEMPT(full) [ 645.849718][T21112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 645.849731][T21112] Call Trace: [ 645.849741][T21112] [ 645.849751][T21112] dump_stack_lvl+0xe8/0x150 [ 645.849806][T21112] should_fail_ex+0x40c/0x560 [ 645.849841][T21112] should_failslab+0xa8/0x100 [ 645.849877][T21112] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 645.849905][T21112] ? alloc_pages_mpol+0x24a/0x380 [ 645.849936][T21112] ? ptlock_alloc+0x20/0x70 [ 645.849957][T21112] ? ptlock_alloc+0x20/0x70 [ 645.849988][T21112] ptlock_alloc+0x20/0x70 [ 645.850012][T21112] pte_alloc_one+0x7a/0x370 [ 645.850040][T21112] __do_fault+0xd1/0x2a0 [ 645.850071][T21112] do_pte_missing+0x1032/0x34b0 [ 645.850105][T21112] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 645.850136][T21112] ? mtree_range_walk+0x707/0x8b0 [ 645.850256][T21112] handle_mm_fault+0x1b36/0x3080 [ 645.850280][T21112] ? mt_find+0x186/0x630 [ 645.850313][T21112] ? handle_mm_fault+0xec/0x3080 [ 645.850346][T21112] ? __pfx_handle_mm_fault+0x10/0x10 [ 645.850402][T21112] __get_user_pages+0x1678/0x2720 [ 645.850476][T21112] populate_vma_page_range+0x2be/0x3c0 [ 645.850514][T21112] ? __pfx_populate_vma_page_range+0x10/0x10 [ 645.850553][T21112] ? down_read+0x2be/0x330 [ 645.850606][T21112] __mm_populate+0x25f/0x390 [ 645.850643][T21112] ? __pfx___mm_populate+0x10/0x10 [ 645.850690][T21112] vm_mmap_pgoff+0x353/0x4e0 [ 645.850747][T21112] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 645.850783][T21112] ? __fget_files+0x2a/0x420 [ 645.850827][T21112] ? __fget_files+0x3a2/0x420 [ 645.850854][T21112] ? __fget_files+0x2a/0x420 [ 645.850887][T21112] ksys_mmap_pgoff+0x4dc/0x760 [ 645.850915][T21112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.850941][T21112] do_syscall_64+0x174/0x580 [ 645.850972][T21112] ? trace_irq_disable+0x3b/0x140 [ 645.851001][T21112] ? clear_bhb_loop+0x40/0x90 [ 645.851028][T21112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.851050][T21112] RIP: 0033:0x7f42e939de59 [ 645.851071][T21112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.851090][T21112] RSP: 002b:00007f42ea236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 645.851113][T21112] RAX: ffffffffffffffda RBX: 00007f42e9625fa0 RCX: 00007f42e939de59 [ 645.851130][T21112] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 645.851143][T21112] RBP: 00007f42ea236090 R08: 0000000000000003 R09: 0000000000000000 [ 645.851156][T21112] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000002 [ 645.851169][T21112] R13: 00007f42e9626038 R14: 00007f42e9625fa0 R15: 00007fff8f56d088 [ 645.851205][T21112] [ 646.215210][T21117] netlink: 'syz.0.4032': attribute type 1 has an invalid length. [ 646.223319][T21117] netlink: 'syz.0.4032': attribute type 1 has an invalid length. [ 646.342864][ T9640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.377940][ T9640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.628681][ T6208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.663215][ T6208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.911680][T21142] tc_dump_action: action bad kind [ 646.937548][T21141] tc_dump_action: action bad kind [ 647.190142][T21152] syzkaller0: entered promiscuous mode [ 647.206909][T21152] syzkaller0: entered allmulticast mode [ 647.398276][T21166] netlink: 'syz.2.4044': attribute type 1 has an invalid length. [ 647.519225][T21162] bond4: (slave veth0_to_bond): making interface the new active one [ 647.530582][T21162] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 647.565551][T21169] macvlan0: entered promiscuous mode [ 647.571540][T21169] macvlan0: entered allmulticast mode [ 647.578326][T21169] bond4: entered promiscuous mode [ 647.586085][T21169] veth0_to_bond: entered promiscuous mode [ 647.596341][T21171] tls_set_device_offload: netdev not found [ 647.628739][T21169] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 647.638314][T21169] bond4: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 647.672678][T21169] bond4: left promiscuous mode [ 647.694904][T21169] veth0_to_bond: left promiscuous mode [ 647.741939][T21175] x_tables: duplicate entry at hook 1 [ 647.798060][T21175] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.879419][T21182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.889778][T21175] bond0: (slave bond3): Enslaving as an active interface with an up link [ 648.215508][T21194] 8021q: VLANs not supported on ip_vti0 [ 648.235473][T21194] __nla_validate_parse: 8 callbacks suppressed [ 648.235495][T21194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4052'. [ 648.373369][T21203] netlink: 'syz.4.4053': attribute type 15 has an invalid length. [ 648.500081][T21208] block nbd5: not configured, cannot reconfigure [ 648.532945][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4055'. [ 648.556415][T21198] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4052'. [ 648.685490][T21210] netlink: 'syz.5.4056': attribute type 2 has an invalid length. [ 648.880685][T21217] macvlan0: entered promiscuous mode [ 648.932157][T21220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4061'. [ 650.397269][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4072'. [ 650.688353][T21285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4080'. [ 650.858343][T21291] netlink: 'syz.0.4081': attribute type 2 has an invalid length. [ 650.885181][T21291] mac80211_hwsim hwsim29 ÿ: renamed from wlan1 (while UP) [ 651.548051][T21313] team0: Device xfrm0 is of different type [ 652.034905][T21326] veth1_to_bond: entered allmulticast mode [ 652.051225][T21326] veth1_to_bond: entered promiscuous mode [ 652.142973][T18950] Bluetooth: hci3: command 0x0405 tx timeout [ 652.250997][T21325] veth1_to_bond: left promiscuous mode [ 652.275958][T21325] veth1_to_bond: left allmulticast mode [ 652.417321][T21337] syzkaller0: entered allmulticast mode [ 652.717876][T21351] netlink: 'syz.3.4095': attribute type 2 has an invalid length. [ 653.131751][T21368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4101'. [ 653.196880][T21367] erspan0: entered promiscuous mode [ 653.213530][T21367] erspan0: entered allmulticast mode [ 653.258179][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4103'. [ 653.286907][T21373] netlink: 'syz.0.4103': attribute type 10 has an invalid length. [ 653.328657][T21373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4103'. [ 653.593596][T21381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4106'. [ 653.722109][T21378] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.729958][T21378] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.022040][T21378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.065214][T21378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.336494][ T9640] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.356687][ T9640] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.377788][ T9640] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.396177][ T9640] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.667022][T21406] bridge0: port 3(veth1_to_bridge) entered blocking state [ 654.695616][T21406] bridge0: port 3(veth1_to_bridge) entered disabled state [ 654.709284][T21406] veth1_to_bridge: entered allmulticast mode [ 654.737088][T21406] veth1_to_bridge: entered promiscuous mode [ 654.754632][T21406] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 654.785801][T15869] IPVS: starting estimator thread 0... [ 654.796372][T21406] bridge0: port 3(veth1_to_bridge) entered blocking state [ 654.803753][T21406] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 654.908752][T21411] IPVS: using max 25 ests per chain, 60000 per kthread [ 655.020747][T21418] netlink: 'syz.3.4115': attribute type 1 has an invalid length. [ 655.029371][T21418] netlink: 'syz.3.4115': attribute type 1 has an invalid length. [ 655.815380][T21420] netlink: 'syz.0.4114': attribute type 23 has an invalid length. [ 655.896559][T21425] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4117'. [ 656.033643][T21423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4116'. [ 656.222740][T21439] netlink: 524 bytes leftover after parsing attributes in process `syz.2.4122'. [ 656.547853][T21453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4124'. [ 657.020775][T21434] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.030321][T21434] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.461724][T21434] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 657.822560][T21479] syzkaller0: entered promiscuous mode [ 657.847746][T21479] syzkaller0: entered allmulticast mode [ 658.233798][T21494] netlink: 'syz.5.4134': attribute type 3 has an invalid length. [ 658.273114][T21494] sctp: [Deprecated]: syz.5.4134 (pid 21494) Use of int in max_burst socket option. [ 658.273114][T21494] Use struct sctp_assoc_value instead [ 658.425800][T21499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4135'. [ 658.445696][T21499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 658.595954][T21504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4137'. [ 658.625228][T21504] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4137'. [ 658.649286][T21504] netlink: 'syz.5.4137': attribute type 5 has an invalid length. [ 658.670145][T21511] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 658.676801][T21511] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 658.860524][T21519] netlink: 'syz.2.4141': attribute type 1 has an invalid length. [ 658.881815][T21519] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4141'. [ 659.273072][T21531] syzkaller0: entered promiscuous mode [ 659.293766][T21531] syzkaller0: entered allmulticast mode [ 659.425920][T21537] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4148'. [ 659.473753][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4148'. [ 659.507056][T21537] openvswitch: netlink: Message has 4 unknown bytes. [ 659.791021][T21550] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4151'. [ 660.160868][T21558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.234622][T21571] tipc: Started in network mode [ 660.241108][T21571] tipc: Node identity 8a3b4d93744a, cluster identity 4711 [ 660.249996][T21571] tipc: Enabled bearer , priority 0 [ 660.264544][T21571] syzkaller0: entered promiscuous mode [ 660.271562][T21571] syzkaller0: entered allmulticast mode [ 660.304387][T21571] tipc: Resetting bearer [ 660.372273][T21569] tipc: Resetting bearer [ 660.515399][T21569] tipc: Disabling bearer [ 660.983002][T21588] syzkaller0: entered promiscuous mode [ 661.007154][T21588] syzkaller0: entered allmulticast mode [ 661.239157][T21597] netlink: 'syz.3.4163': attribute type 1 has an invalid length. [ 661.251771][T21595] netlink: 'syz.3.4163': attribute type 1 has an invalid length. [ 661.340912][T21597] bond4: option mode: invalid value (9) [ 661.383541][T21597] bond4 (unregistering): Released all slaves [ 661.542425][T21595] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 661.792327][T21615] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 661.871327][T21615] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 661.926879][T21615] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 662.036288][T21615] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 662.143711][T21628] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4173'. [ 662.413297][ T9638] smbdirect: ib_dev[syz2] removed [ 662.650569][T21639] syzkaller0: entered promiscuous mode [ 662.674992][T21639] syzkaller0: entered allmulticast mode [ 662.887101][T21650] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4177'. [ 663.690934][T21672] __nla_validate_parse: 1 callbacks suppressed [ 663.690958][T21672] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4183'. [ 663.936548][T21675] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 663.964848][T21675] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 664.027796][T21682] netlink: 'syz.5.4185': attribute type 1 has an invalid length. [ 664.117871][T21682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 664.418987][T21685] bond1: (slave veth3): Enslaving as an active interface with a down link [ 664.542044][T21682] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 664.554118][T21682] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 664.962083][T21700] syzkaller0: entered promiscuous mode [ 664.983461][T21700] syzkaller0: entered allmulticast mode [ 665.034392][T21705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4193'. [ 665.408781][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 665.753572][T21736] netlink: 'syz.0.4200': attribute type 23 has an invalid length. [ 666.315860][T21763] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4210'. [ 666.346323][T21763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4210'. [ 666.369543][T21763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4210'. [ 666.667857][T21775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4213'. [ 666.763289][T21775] tipc: Enabling of bearer rejected, failed to enable media [ 667.106604][T21789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4217'. [ 667.174194][T21797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4217'. [ 667.566427][T21813] batadv_slave_1: entered promiscuous mode [ 667.592121][T21815] batadv_slave_1: left promiscuous mode [ 667.698383][T21811] syzkaller0: entered promiscuous mode [ 667.722993][T21811] syzkaller0: entered allmulticast mode [ 668.002486][T21791] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 668.031566][T21791] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 668.509283][T21791] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 668.535300][T21791] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 668.933656][T21791] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 668.998869][T21791] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 669.097547][T21791] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 669.110580][T21861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4234'. [ 669.151837][T21791] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 669.252319][T21866] netlink: 'syz.4.4236': attribute type 1 has an invalid length. [ 669.635453][T21791] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 669.644987][T21878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4237'. [ 669.664959][T21791] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 670.287880][T21903] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 670.743309][T21918] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4244'. [ 670.822233][T21925] netlink: 'syz.3.4245': attribute type 18 has an invalid length. [ 670.914207][ T9636] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.964269][ T9636] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.015058][ T9636] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.075222][ T9636] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.910665][T21960] syzkaller0: entered promiscuous mode [ 671.927348][T21960] syzkaller0: entered allmulticast mode [ 672.337000][T21982] netlink: 'syz.0.4258': attribute type 2 has an invalid length. [ 672.589948][T21992] syzkaller1: entered promiscuous mode [ 672.613319][T21992] syzkaller1: entered allmulticast mode [ 672.877250][T22002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4263'. [ 673.263764][T22017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4268'. [ 674.121070][T22050] syzkaller0: entered promiscuous mode [ 674.175802][T22050] syzkaller0: entered allmulticast mode [ 674.217551][T22057] openvswitch: netlink: IP tunnel dst address not specified [ 674.269024][T22057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4276'. [ 674.343029][T22057] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4276'. [ 675.313624][T22102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4283'. [ 675.370135][T22107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4284'. [ 675.605122][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4284'. [ 675.649550][T22121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4284'. [ 675.672373][T22125] netlink: 'syz.0.4286': attribute type 26 has an invalid length. [ 676.309244][T22148] syzkaller0: entered promiscuous mode [ 676.326226][T22148] syzkaller0: entered allmulticast mode [ 676.354786][T22157] tunl0: entered promiscuous mode [ 676.373624][T22157] netlink: 'syz.5.4293': attribute type 4 has an invalid length. [ 676.396314][T22157] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4293'. [ 676.946105][ T9640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.959272][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.978869][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.000333][T16491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.018595][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.040092][T16491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.056950][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.087200][T16491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.095962][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.554280][T22210] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4305'. [ 677.554317][T22206] netlink: 'syz.3.4304': attribute type 2 has an invalid length. [ 677.777954][T22223] netlink: 63135 bytes leftover after parsing attributes in process `syz.4.4308'. [ 677.796619][T22219] syzkaller0: entered promiscuous mode [ 677.804291][T22219] syzkaller0: entered allmulticast mode [ 677.995218][T22234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4310'. [ 678.087369][T22236] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 678.153706][T22236] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 679.057598][T22290] nbd: couldn't find a device at index 0 [ 679.693856][ T5287] veth0_vlan: left promiscuous mode [ 679.747656][T16474] veth0_vlan: entered promiscuous mode [ 679.810854][T16487] net_ratelimit: 11 callbacks suppressed [ 679.810875][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.049906][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.642619][T22369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.799697][T22378] __nla_validate_parse: 4 callbacks suppressed [ 680.799726][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4341'. [ 680.853486][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.898347][T22377] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 680.940348][T22382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4343'. [ 680.994486][T22384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 681.054107][T22387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 681.233378][T22391] netlink: 'syz.2.4346': attribute type 3 has an invalid length. [ 681.293157][T22391] netlink: 'syz.2.4346': attribute type 1 has an invalid length. [ 681.347324][T22396] syzkaller0: entered promiscuous mode [ 681.366848][T22396] syzkaller0: entered allmulticast mode [ 681.630731][T22412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4351'. [ 681.890474][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.986677][T22423] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4353'. [ 682.380112][T22431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4354'. [ 682.617779][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4358'. [ 682.686323][T22450] vlan0: entered allmulticast mode [ 682.695364][T16491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.710175][T22450] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 682.930149][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.975878][T22466] syzkaller0: entered promiscuous mode [ 682.988837][T22466] syzkaller0: entered allmulticast mode [ 683.090546][T16491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.154760][T22476] netlink: 'syz.4.4364': attribute type 13 has an invalid length. [ 683.477966][T22488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4367'. [ 683.701584][T22494] mac80211_hwsim hwsim26 syzkaller0: Caught tx_queue_len zero misconfig [ 683.969875][T17824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.124721][T22523] netlink: 'syz.2.4376': attribute type 2 has an invalid length. [ 684.145380][T22521] syzkaller0: entered promiscuous mode [ 684.160603][T22521] syzkaller0: entered allmulticast mode [ 684.210466][T22530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.222173][T22533] netlink: 'syz.2.4376': attribute type 1 has an invalid length. [ 684.248701][T22531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4377'. [ 684.331938][T22523] : entered promiscuous mode [ 684.552996][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4378'. [ 684.849722][T22539] team0: Port device team_slave_0 removed [ 685.012122][T17824] net_ratelimit: 2 callbacks suppressed [ 685.012144][T17824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.215773][T22569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.595593][T22587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4389'. [ 685.894815][T22603] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4393'. [ 685.971326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.982731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.054273][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.131354][T16491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.286153][T22617] netlink: 'syz.0.4398': attribute type 1 has an invalid length. [ 686.380473][T22617] 8021q: adding VLAN 0 to HW filter on device bond4 [ 686.675410][T22628] bond4: (slave veth5): Enslaving as an active interface with a down link [ 686.847700][T22617] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 686.895075][T22617] bond4: (slave batadv2): making interface the new active one [ 686.928016][T22617] batadv2: entered promiscuous mode [ 686.953414][T22617] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 686.994848][T22631] team_slave_0: Caught tx_queue_len zero misconfig [ 687.089567][T17824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.103058][T22636] bond4: (slave veth7): Enslaving as an active interface with a down link [ 687.343076][T22671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4405'. [ 687.667695][T22687] syzkaller1: entered promiscuous mode [ 687.679745][T22687] syzkaller1: entered allmulticast mode [ 688.048091][T22700] syzkaller0: entered promiscuous mode [ 688.070589][T22700] syzkaller0: entered allmulticast mode [ 688.185227][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.474530][T22724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.880379][T22747] netlink: 'syz.3.4423': attribute type 4 has an invalid length. [ 688.942470][T22747] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4423'. [ 689.171865][T16491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.388195][T22779] netlink: 'syz.0.4430': attribute type 1 has an invalid length. [ 689.403569][T22768] syzkaller0: entered promiscuous mode [ 689.410305][T22768] syzkaller0: entered allmulticast mode [ 689.494893][T22779] bond5: entered promiscuous mode [ 689.512970][T22779] 8021q: adding VLAN 0 to HW filter on device bond5 [ 690.291829][T16474] net_ratelimit: 1 callbacks suppressed [ 690.291866][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.331015][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.148284][T22781] syz_tun: entered allmulticast mode [ 692.155886][T22781] syz_tun: left allmulticast mode [ 692.182521][T22785] bond5: (slave bridge2): making interface the new active one [ 692.201873][T22785] bridge2: entered promiscuous mode [ 692.209218][T16491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.225084][T22785] bridge2: left promiscuous mode [ 692.289509][T16491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.354570][T22814] netlink: 'syz.3.4434': attribute type 1 has an invalid length. [ 692.366443][T22814] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4434'. [ 692.377596][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.661560][T22823] tipc: New replicast peer: 255.255.255.255 [ 692.693996][T22823] tipc: Enabled bearer , priority 10 [ 692.736455][T22829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4437'. [ 692.786713][T22826] netlink: 'syz.0.4437': attribute type 1 has an invalid length. [ 692.814368][T22826] netlink: 'syz.0.4437': attribute type 3 has an invalid length. [ 692.842331][T22826] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4437'. [ 693.366248][T22859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4446'. [ 693.387920][T22859] bond0: entered promiscuous mode [ 693.394808][T22859] bond_slave_0: entered promiscuous mode [ 693.403657][T22859] bond_slave_1: entered promiscuous mode [ 693.410465][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.502578][T22861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.566140][T22861] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 693.594425][ T9640] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.601692][ T9640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.612069][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.624218][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.810422][T16488] tipc: Node number set to 4268838291 [ 694.042026][T22892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.164089][T22899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4457'. [ 694.316745][T22906] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.4460'. [ 694.348046][T22906] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.4460'. [ 694.450146][T17824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.857964][T22929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4466'. [ 694.890320][T22929] 8021q: VLANs not supported on lo [ 695.249103][T16491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.265632][T22939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4471'. [ 695.277274][T22939] nbd: couldn't find a device at index 0 [ 695.364676][T22947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4467'. [ 695.490291][T16488] net_ratelimit: 1 callbacks suppressed [ 695.490313][T16488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.512262][T22956] netlink: 'syz.4.4476': attribute type 1 has an invalid length. [ 695.529830][T22954] tap0: tun_chr_ioctl cmd 1074025672 [ 695.543480][T22954] tap0: ignored: set checksum disabled [ 695.660267][T22956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 695.683253][T22957] tap0: tun_chr_ioctl cmd 1074025672 [ 695.693969][T22957] tap0: ignored: set checksum disabled [ 695.784740][T22967] bond5: (slave geneve2): making interface the new active one [ 695.795542][T22967] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 695.883265][T22971] team0: entered promiscuous mode [ 695.889155][T22971] team_slave_0: entered promiscuous mode [ 695.906604][T22971] team_slave_1: entered promiscuous mode [ 695.937093][T22971] team0: left promiscuous mode [ 695.943897][T22971] team_slave_0: left promiscuous mode [ 695.950460][T22971] team_slave_1: left promiscuous mode [ 695.978113][T22956] syzkaller1: entered promiscuous mode [ 695.993308][T22956] syzkaller1: entered allmulticast mode [ 696.387671][T23000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.398305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.411756][T23000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.536815][T16488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.630466][T22997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.644007][T16488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.684245][T22997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.733318][T22997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.816536][T23005] syzkaller0: entered promiscuous mode [ 696.823042][T23005] syzkaller0: entered allmulticast mode [ 696.915572][T23014] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 696.939838][T23014] bond6 (unregistering): Released all slaves [ 697.576110][T16488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.477543][T23007] tipc: Enabled bearer , priority 0 [ 699.488136][T23033] bridge_slave_1: left allmulticast mode [ 699.497122][T23033] bridge_slave_1: left promiscuous mode [ 699.514870][T23033] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.534807][T23033] bridge_slave_0: left allmulticast mode [ 699.559419][T23033] bridge_slave_0: left promiscuous mode [ 699.579501][T23033] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.645430][T23045] __nla_validate_parse: 5 callbacks suppressed [ 699.645450][T23045] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4496'. [ 699.677709][T23006] tipc: Resetting bearer [ 699.690148][T23006] tipc: Resetting bearer [ 699.722679][T23050] netlink: 344 bytes leftover after parsing attributes in process `syz.0.4497'. [ 700.691884][T16488] net_ratelimit: 3 callbacks suppressed [ 700.691901][T16488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.331874][T16478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.730171][T16488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.911005][T16478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.147515][T23006] tipc: Disabling bearer [ 702.158867][T23036] lo: entered promiscuous mode [ 702.164177][T23036] tunl0: entered promiscuous mode [ 702.170293][T23036] gre0: entered promiscuous mode [ 702.175625][T23036] 0ªX¹¦Dö»: entered promiscuous mode [ 702.181146][T23036] 0ªX¹¦Dö»: left allmulticast mode [ 702.186733][T23036] erspan0: entered promiscuous mode [ 702.194080][T23036] ip_vti0: entered promiscuous mode [ 702.213476][T23050] veth1_macvtap: left promiscuous mode [ 702.222923][T23050] macsec0: entered promiscuous mode [ 702.392794][T23063] netlink: 'syz.3.4499': attribute type 1 has an invalid length. [ 702.406637][T23063] netlink: 'syz.3.4499': attribute type 4 has an invalid length. [ 702.419898][T23063] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4499'. [ 702.432278][T23067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4500'. [ 702.458738][ T37] batadv2: left promiscuous mode [ 702.640432][T23075] bond4: entered promiscuous mode [ 702.655590][T23075] macvlan2: entered promiscuous mode [ 702.662007][T23075] macvlan2: entered allmulticast mode [ 702.668794][T23075] bond4: (slave macvlan2): Opening slave failed [ 702.770063][T17824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.191602][T23100] netlink: 'syz.3.4510': attribute type 13 has an invalid length. [ 703.228702][ T30] audit: type=1804 audit(1784126104.194:6): pid=23102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4511" name="/newroot/291/cgroup.controllers" dev="tmpfs" ino=1508 res=1 errno=0 [ 703.334460][ T30] audit: type=1800 audit(1784126104.194:7): pid=23102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4511" name="cgroup.controllers" dev="tmpfs" ino=1508 res=0 errno=0 [ 703.626586][T23102] bond5: option fail_over_mac: invalid value (16) [ 703.653729][T23102] bond5 (unregistering): Released all slaves [ 703.810728][T17824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.207764][T23143] vlan3: entered allmulticast mode [ 704.223733][T23143] veth1_virt_wifi: entered allmulticast mode [ 704.296158][T23143] bridge2: entered allmulticast mode [ 704.356186][T23151] tipc: Enabling of bearer rejected, failed to enable media [ 704.376715][T16478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.387990][T23146] syzkaller0: entered promiscuous mode [ 704.407950][T23146] syzkaller0: entered allmulticast mode [ 704.565542][T23158] 8021q: adding VLAN 0 to HW filter on device bond6 [ 704.866828][T17824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.972399][T23180] netlink: 'syz.4.4528': attribute type 3 has an invalid length. [ 705.427842][T23196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4531'. [ 705.784260][T23208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4534'. [ 705.889090][T17824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.441722][T23243] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4540'. [ 706.516581][T23241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4540'. [ 706.594538][T23253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4541'. [ 706.830355][T23261] netlink: 'syz.4.4544': attribute type 1 has an invalid length. [ 706.930587][T16488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.944193][T23261] bond7: entered promiscuous mode [ 706.951635][T23261] 8021q: adding VLAN 0 to HW filter on device bond7 [ 707.418702][T16478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.902666][ C0] ================================================================== [ 707.911145][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 707.919279][ C0] Read of size 2 at addr ffff888155e137b4 by task syz.0.4550/23296 [ 707.927276][ C0] [ 707.929697][ C0] CPU: 0 UID: 0 PID: 23296 Comm: syz.0.4550 Not tainted syzkaller #0 PREEMPT(full) [ 707.929771][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 707.929788][ C0] Call Trace: [ 707.929797][ C0] [ 707.929807][ C0] dump_stack_lvl+0xe8/0x150 [ 707.929856][ C0] print_address_description+0x55/0x1e0 [ 707.929898][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 707.929922][ C0] print_report+0x58/0x70 [ 707.929951][ C0] kasan_report+0x117/0x150 [ 707.929983][ C0] ? __pskb_pull_tail+0x1235/0x1890 [ 707.930009][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 707.930036][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 707.930068][ C0] __netif_receive_skb_core+0x13aa/0x30b0 [ 707.930130][ C0] ? lock_acquire+0x106/0x350 [ 707.930164][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 707.930190][ C0] ? lock_acquire+0x106/0x350 [ 707.930231][ C0] ? __lock_acquire+0x683/0x2cf0 [ 707.930265][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 707.930300][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 707.930327][ C0] ? __css_rstat_updated+0x235/0x540 [ 707.930375][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 707.930404][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 707.930430][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 707.930457][ C0] ? dev_gro_receive+0x1097/0x2380 [ 707.930555][ C0] napi_complete_done+0x299/0x730 [ 707.930584][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 707.930613][ C0] ? gro_cell_poll+0x175/0x5d0 [ 707.930670][ C0] gro_cell_poll+0x5ab/0x5d0 [ 707.930704][ C0] ? gro_cell_poll+0x175/0x5d0 [ 707.930733][ C0] __napi_poll+0xaa/0x330 [ 707.930758][ C0] net_rx_action+0x61d/0xf50 [ 707.930791][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 707.930816][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 707.930889][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 707.930915][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 707.930941][ C0] ? sched_clock+0x3f/0x60 [ 707.930992][ C0] handle_softirqs+0x225/0x840 [ 707.931026][ C0] ? do_softirq+0x76/0xd0 [ 707.931052][ C0] ? tun_rx_batched+0x185/0x790 [ 707.931161][ C0] do_softirq+0x76/0xd0 [ 707.931184][ C0] [ 707.931192][ C0] [ 707.931200][ C0] __local_bh_enable_ip+0xf8/0x130 [ 707.931225][ C0] ? tun_rx_batched+0x185/0x790 [ 707.931252][ C0] tun_rx_batched+0x616/0x790 [ 707.931285][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 707.931313][ C0] ? tun_get_user+0x2717/0x4370 [ 707.931341][ C0] ? tun_get_user+0x2717/0x4370 [ 707.931370][ C0] ? tun_get_user+0x23cb/0x4370 [ 707.931397][ C0] ? tun_get_user+0x23cb/0x4370 [ 707.931425][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 707.931448][ C0] ? tun_get_user+0x2717/0x4370 [ 707.931476][ C0] ? tun_get_user+0x2717/0x4370 [ 707.931504][ C0] tun_get_user+0x2b44/0x4370 [ 707.931540][ C0] ? aa_file_perm+0x18b/0x15f0 [ 707.931592][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 707.931614][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 707.931641][ C0] ? __lock_acquire+0x683/0x2cf0 [ 707.931673][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 707.931701][ C0] ? preempt_schedule_common+0x82/0xd0 [ 707.931733][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 707.931763][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 707.931790][ C0] ? tun_get+0x1c/0x2f0 [ 707.931818][ C0] ? tun_get+0x1c/0x2f0 [ 707.931858][ C0] ? tun_get+0x1c/0x2f0 [ 707.931884][ C0] ? tun_get+0x1c/0x2f0 [ 707.931913][ C0] tun_chr_write_iter+0x113/0x200 [ 707.931942][ C0] vfs_write+0x612/0xba0 [ 707.931988][ C0] ? __pfx_vfs_write+0x10/0x10 [ 707.932026][ C0] ? __fget_files+0x2a/0x420 [ 707.932060][ C0] ksys_write+0x150/0x270 [ 707.932093][ C0] ? __pfx_ksys_write+0x10/0x10 [ 707.932130][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.932153][ C0] do_syscall_64+0x174/0x580 [ 707.932183][ C0] ? trace_irq_disable+0x3b/0x140 [ 707.932210][ C0] ? clear_bhb_loop+0x40/0x90 [ 707.932236][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.932259][ C0] RIP: 0033:0x7f42e939de59 [ 707.932280][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.932300][ C0] RSP: 002b:00007f42ea236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 707.932325][ C0] RAX: ffffffffffffffda RBX: 00007f42e9625fa0 RCX: 00007f42e939de59 [ 707.932341][ C0] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005 [ 707.932356][ C0] RBP: 00007f42e9433e6f R08: 0000000000000000 R09: 0000000000000000 [ 707.932371][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.932384][ C0] R13: 00007f42e9626038 R14: 00007f42e9625fa0 R15: 00007fff8f56d088 [ 707.932412][ C0] [ 707.932420][ C0] [ 708.399754][ C0] The buggy address belongs to the physical page: [ 708.406193][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x155e13 [ 708.415144][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 708.422394][ C0] raw: 057ff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 708.431000][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 708.439612][ C0] page dumped because: kasan: bad access detected [ 708.446048][ C0] page_owner tracks the page as freed [ 708.451428][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x6cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 8639, tgid 8634 (syz.1.790), ts 180156133663, free_ts 201305185810 [ 708.470114][ C0] post_alloc_hook+0x1f9/0x250 [ 708.474906][ C0] get_page_from_freelist+0x21fa/0x2270 [ 708.480485][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 708.486334][ C0] __alloc_pages_noprof+0x10/0x100 [ 708.491482][ C0] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 708.496994][ C0] __kasan_populate_vmalloc+0xb7/0x1c0 [ 708.502498][ C0] alloc_vmap_area+0xd1a/0x1420 [ 708.507372][ C0] __get_vm_area_node+0x1f2/0x300 [ 708.512412][ C0] __vmalloc_node_range_noprof+0x358/0x1730 [ 708.518333][ C0] bpf_map_area_alloc+0x12d/0x170 [ 708.523383][ C0] array_map_alloc+0x295/0x710 [ 708.528192][ C0] map_create+0xf2a/0x1b90 [ 708.532628][ C0] __sys_bpf+0xaea/0xd90 [ 708.536972][ C0] __x64_sys_bpf+0xba/0xd0 [ 708.541409][ C0] do_syscall_64+0x174/0x580 [ 708.546021][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.551927][ C0] page last free pid 5756 tgid 5756 stack trace: [ 708.558262][ C0] __free_frozen_pages+0xc1e/0xd10 [ 708.563398][ C0] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 708.569140][ C0] __apply_to_page_range+0xbd8/0x1420 [ 708.574536][ C0] __kasan_release_vmalloc+0xa2/0xd0 [ 708.579925][ C0] purge_vmap_node+0x220/0x960 [ 708.584712][ C0] process_scheduled_works+0xa8e/0x14e0 [ 708.590323][ C0] worker_thread+0xa47/0xfb0 [ 708.594932][ C0] kthread+0x388/0x470 [ 708.599020][ C0] ret_from_fork+0x514/0xb70 [ 708.603633][ C0] ret_from_fork_asm+0x1a/0x30 [ 708.608413][ C0] [ 708.610756][ C0] Memory state around the buggy address: [ 708.616474][ C0] ffff888155e13680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 708.624632][ C0] ffff888155e13700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 708.632751][ C0] >ffff888155e13780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 708.640836][ C0] ^ [ 708.646488][ C0] ffff888155e13800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 708.654570][ C0] ffff888155e13880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 708.662644][ C0] ================================================================== [ 708.670936][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 708.678256][ C0] CPU: 0 UID: 0 PID: 23296 Comm: syz.0.4550 Not tainted syzkaller #0 PREEMPT(full) [ 708.687748][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 708.697835][ C0] Call Trace: [ 708.701152][ C0] [ 708.704027][ C0] vpanic+0x56c/0xa60 [ 708.708067][ C0] ? __pfx_vpanic+0x10/0x10 [ 708.712710][ C0] panic+0xc5/0xd0 [ 708.716499][ C0] ? __pfx_panic+0x10/0x10 [ 708.720965][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 708.726656][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 708.732366][ C0] check_panic_on_warn+0x89/0xb0 [ 708.737357][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 708.743035][ C0] end_report+0x73/0x170 [ 708.747332][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 708.753007][ C0] kasan_report+0x128/0x150 [ 708.757557][ C0] ? __pskb_pull_tail+0x1235/0x1890 [ 708.762796][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 708.768498][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 708.774198][ C0] __netif_receive_skb_core+0x13aa/0x30b0 [ 708.779971][ C0] ? lock_acquire+0x106/0x350 [ 708.784695][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 708.790828][ C0] ? lock_acquire+0x106/0x350 [ 708.795569][ C0] ? __lock_acquire+0x683/0x2cf0 [ 708.800578][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 708.806628][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 708.813169][ C0] ? __css_rstat_updated+0x235/0x540 [ 708.818513][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 708.824712][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 708.831088][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 708.837819][ C0] ? dev_gro_receive+0x1097/0x2380 [ 708.843001][ C0] napi_complete_done+0x299/0x730 [ 708.848071][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 708.853694][ C0] ? gro_cell_poll+0x175/0x5d0 [ 708.858536][ C0] gro_cell_poll+0x5ab/0x5d0 [ 708.863178][ C0] ? gro_cell_poll+0x175/0x5d0 [ 708.867992][ C0] __napi_poll+0xaa/0x330 [ 708.872364][ C0] net_rx_action+0x61d/0xf50 [ 708.877014][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 708.882163][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 708.887415][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 708.892773][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 708.898023][ C0] ? sched_clock+0x3f/0x60 [ 708.902493][ C0] handle_softirqs+0x225/0x840 [ 708.907301][ C0] ? do_softirq+0x76/0xd0 [ 708.911668][ C0] ? tun_rx_batched+0x185/0x790 [ 708.916554][ C0] do_softirq+0x76/0xd0 [ 708.920751][ C0] [ 708.923715][ C0] [ 708.926673][ C0] __local_bh_enable_ip+0xf8/0x130 [ 708.931830][ C0] ? tun_rx_batched+0x185/0x790 [ 708.936807][ C0] tun_rx_batched+0x616/0x790 [ 708.941536][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 708.946780][ C0] ? tun_get_user+0x2717/0x4370 [ 708.951679][ C0] ? tun_get_user+0x2717/0x4370 [ 708.956656][ C0] ? tun_get_user+0x23cb/0x4370 [ 708.961636][ C0] ? tun_get_user+0x23cb/0x4370 [ 708.966529][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 708.971880][ C0] ? tun_get_user+0x2717/0x4370 [ 708.976777][ C0] ? tun_get_user+0x2717/0x4370 [ 708.981670][ C0] tun_get_user+0x2b44/0x4370 [ 708.986393][ C0] ? aa_file_perm+0x18b/0x15f0 [ 708.991195][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 708.996028][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 709.001096][ C0] ? __lock_acquire+0x683/0x2cf0 [ 709.006078][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 709.011574][ C0] ? preempt_schedule_common+0x82/0xd0 [ 709.017076][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 709.022240][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 709.027757][ C0] ? tun_get+0x1c/0x2f0 [ 709.031987][ C0] ? tun_get+0x1c/0x2f0 [ 709.036188][ C0] ? tun_get+0x1c/0x2f0 [ 709.040387][ C0] ? tun_get+0x1c/0x2f0 [ 709.044700][ C0] tun_chr_write_iter+0x113/0x200 [ 709.049768][ C0] vfs_write+0x612/0xba0 [ 709.054063][ C0] ? __pfx_vfs_write+0x10/0x10 [ 709.058883][ C0] ? __fget_files+0x2a/0x420 [ 709.063520][ C0] ksys_write+0x150/0x270 [ 709.067896][ C0] ? __pfx_ksys_write+0x10/0x10 [ 709.072803][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.078932][ C0] do_syscall_64+0x174/0x580 [ 709.083571][ C0] ? trace_irq_disable+0x3b/0x140 [ 709.088628][ C0] ? clear_bhb_loop+0x40/0x90 [ 709.093363][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.099291][ C0] RIP: 0033:0x7f42e939de59 [ 709.103741][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.123469][ C0] RSP: 002b:00007f42ea236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 709.131926][ C0] RAX: ffffffffffffffda RBX: 00007f42e9625fa0 RCX: 00007f42e939de59 [ 709.139940][ C0] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005 [ 709.148038][ C0] RBP: 00007f42e9433e6f R08: 0000000000000000 R09: 0000000000000000 [ 709.156305][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.164491][ C0] R13: 00007f42e9626038 R14: 00007f42e9625fa0 R15: 00007fff8f56d088 [ 709.172600][ C0] [ 709.176266][ C0] Kernel Offset: disabled [ 709.180692][ C0] Rebooting in 86400 seconds..