last executing test programs: 5m33.627850175s ago: executing program 2 (id=2273): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}, {&(0x7f0000000040)="0b38906966b9", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 5m33.514832753s ago: executing program 2 (id=2275): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x7) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc3"}}}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 5m33.459786112s ago: executing program 0 (id=2276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x5, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x20000000, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x3b5e, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0xffffffc0, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7ff, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x0, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x2, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x800, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x2, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x10001, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x2, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x4, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0xffff, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x1, 0x6, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0x9, 0x8, 0x5, 0x4, 0x9, 0xffff, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 5m33.145004863s ago: executing program 2 (id=2281): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000b80)="da745502116f7ffad3799cc22bbf26d5ad3fb0579fc54bd68266f6bf416c1ca6538e59ff49d662f639") socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x8004) 5m32.663178919s ago: executing program 4 (id=2282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000030000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000f1af8f237fd5f327eb038e000000000000000000000a7b62d8d8c6f7c294eebff8e19eb538e60f1966c0b33d412d870103620ec7553d9a8a7d2f2e1842457811bfdef7dba7798eeb2ebd7e7bb463f58f4c969d7b443e892e69a5763c81d9b014514d681fc8620453e2999d473d15d1cb6d4174e3d199612bf949d2b0d29fd30311c5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m32.552995905s ago: executing program 4 (id=2283): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x7fffffff, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "696335283bf79057", "5615c6170f365581598bfabd2e006a7a2a6ea19e000000000000000800", "00008aa4", "b6405ad112e098b1"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "8e8e382a56a800", "7d445e3b052f0000000200", "5ed3aff3", "37230100"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "8e8e382a56a800", "7d445e3b052f0000000200", "5ed3aff3", "37230100"}, 0x28) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x8}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x8}}) 5m31.757054481s ago: executing program 2 (id=2285): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000001640), 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) connect$unix(r3, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$tipc(r3, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x4}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000440)=""/74, 0x328000, 0x800, 0x6}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r11, &(0x7f0000000100)={0x2c, 0x0, r13}, 0x10) bind$xdp(r8, &(0x7f0000000240)={0x2c, 0x1, r10, 0x0, r11}, 0x60) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001400000429bd7000fddbdf25021804c8", @ANYRES32=r10, @ANYBLOB="08000900060000000800040000000000080009000c0000001400030065727372616e3000000000000000002fda6d720004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 5m31.690229763s ago: executing program 4 (id=2287): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, 0x8) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, 0x8) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0xfffffffd, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e4"}, @sadb_address={0x5, 0x6, 0x33, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x70}, 0x1, 0x7}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r7, 0x1, 0x4c, 0x0, &(0x7f0000000300)) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xe}, &(0x7f0000000080)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r11, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x14000000) r13 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000d00000026bd7000fddbdf2502142007fc02ff000026000008001000ff03000008000f0001c8000e08ffff000600000008000400", @ANYRES32=r15, @ANYBLOB="08000f0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x20004048) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r9) 5m31.673790568s ago: executing program 0 (id=2288): r0 = socket$nl_generic(0x11, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m31.438031807s ago: executing program 0 (id=2289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_dump={0x3e, 0x2, 0x5}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x54}}, 0x20008820) 5m31.26699336s ago: executing program 4 (id=2293): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03000088"], 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a006da800000000000000001c1400000000ff000000000094ec0fd28b86b235b28863653a97a36a8544849a8c1628aec5be327409f66d9572f4abd913"], 0x1c}}, 0x0) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03000088"], 0x4) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a006da800000000000000001c1400000000ff000000000094ec0fd28b86b235b28863653a97a36a8544849a8c1628aec5be327409f66d9572f4abd913"], 0x1c}}, 0x0) (async) 5m31.259493202s ago: executing program 0 (id=2294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="020080000000100000000800000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000100)=0x4, 0x4) 5m31.202069903s ago: executing program 2 (id=2295): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 5m31.132817803s ago: executing program 0 (id=2296): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}]}, 0x1c}}, 0x48000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1f40, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x14c, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xef6e}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2991}, {0x6, 0x11, 0xe919}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 5m31.108846904s ago: executing program 4 (id=2297): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x300, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x64000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020041}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x10) r10 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r10, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x2, 0xc040) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={0x54, r9, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4884}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0x200}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004810}, 0x4064091) 5m30.987495154s ago: executing program 4 (id=2299): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0xffffffff}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f0000000800"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, &(0x7f00000000c0)) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000140)={0x77359400}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r6, r6, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f000000180000005655e1f199fb61366a"], 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) (async) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005d00)={@map, 0xffffffffffffffff, 0x1c}, 0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a4fdd7a6ccb2535880a0d"], 0x26}}, 0x0) 5m30.986443133s ago: executing program 2 (id=2300): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5m30.664754243s ago: executing program 32 (id=2299): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0xffffffff}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f0000000800"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, &(0x7f00000000c0)) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000140)={0x77359400}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r6, r6, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f000000180000005655e1f199fb61366a"], 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) (async) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005d00)={@map, 0xffffffffffffffff, 0x1c}, 0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a4fdd7a6ccb2535880a0d"], 0x26}}, 0x0) 5m30.649526494s ago: executing program 0 (id=2302): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) (async, rerun: 64) r0 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000040)) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) (rerun: 32) 5m30.495594228s ago: executing program 33 (id=2302): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) (async, rerun: 64) r0 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000040)) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) (rerun: 32) 5m30.485964559s ago: executing program 34 (id=2300): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.029106382s ago: executing program 6 (id=6443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000000030d0003006c6973743a736574"], 0x5c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$can_raw(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)=""/234, 0xea}, {&(0x7f0000000a80)=""/133, 0x85}], 0x2}, 0x200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x34}}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r6, {0x3, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054) 2.707501111s ago: executing program 6 (id=6449): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x11a) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000080)="a5a1dd3a4fcd15712fb854df1d60c2bbe0f67ab5ca7c51811a71ce29bd7396ec58d00c66f192030c7aea9de46cf3a8d8965fb07cd98c9ac0dccceb3a2f8000c47fa67be059e5fcae309f8cfcb11d5e69f1386894d39d26311a01f9a7313d911e88e3") 1.910582138s ago: executing program 6 (id=6462): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc289}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x18, r5, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 1.836433103s ago: executing program 7 (id=6464): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r4, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) 1.279354688s ago: executing program 6 (id=6467): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4010, r1}, 0x18) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4010, r1}, 0x18) (async) listen(r0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) (async) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) (async) 1.263157079s ago: executing program 3 (id=6468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000700)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000003080300003a0000000c0004800800014000000002"], 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES64=r2, @ANYBLOB="cacd750ede71019d5ea441ce3da94d103d365327cb0968d0072c6d33b4002e2eb5d5a4d24de6d216dd65859486d24250359b283f28edaae4318bfbf23a04b7264bc9dd81d6818ee11a8ccb4b0c43ba93c9c906f580959434be2a879a1db79e100f4c15fbebebc176bbb3cb4a8c4f49408d956e6c025e9ca108b0d7e1ebdacefc2a81029b624df635dda4da77a8d2caa2d576e68fb1a0477a1a6b822cd711b61ef6ec6682302f04cd55a271182bf101143e58bc290bf29ba09fe84e97261b915dc660d5e1734c738c1b4a33475b1f88fdd2fef6bacc4a9daa881239481e0634684b3c99ffd259bc05d4ac8f2e", @ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x20000c45) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdd3a229329ee32a8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_O_TEI={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) 1.191689379s ago: executing program 1 (id=6470): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x0, 0x2}]}, @ptr]}}, 0x0, 0x3a}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x10}, [@IFLA_PHYS_SWITCH_ID={0xa, 0x24, "a423a842ff88"}]}, 0x2c}}, 0x60040050) 1.105205111s ago: executing program 7 (id=6471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x100) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x3960, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x391c, 0x3, 0x0, 0x1, [{0x142c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc0, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x80}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_KEY={0x11d4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "57bb6d9fafc6fcbb049300877a89f272170995aeeee106508834c24fad30b0f185ee7efe8a87fe87dcab89002a67bcf803a86e6519d0436b6e0a1a4438e300ed715403e60aa32cf8b4765d7de62595e42c1a03e26955cf2cdf0f4964392407e5ff9ea437e0058c14f3c030959f7857c7004d534a76de16a7e70301c10a6b326c6dc52c0747a59d10b7232297db384b855ea5b8885044127e079cfb62e8bdd9f4331cab4bf2a5cfc6256813f4e4bcb8c2c1bbd2947706edf0e8cfe1fd58d7ff223ec19417557242d346c8ff9eb4bdaa9b42692e6938cf81ed7f851f0d7f634a0207e5f6bc"}, @NFTA_DATA_VALUE={0xad, 0x1, "6163ed2a2eea9aad0e7e2181c54a75bcc1fbb099e87e2c3265979c1342fd171233155a09058fc2612bb15fbe38cbee87fad65bc0020582195e7bd7dc4758fdd4491c2b946412567386de153a6e963b9a20fedb01a53895e2fb2e8394acad829fd8a035aa616e3482fd8d78ff529ab2c8379190fba777eeee49b8cd65bb758823726c2c21e05e283277db6da8865cab2877c2e33a9fe60ec8d90c4ba7aaad2f31e094783291293fe520"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY_END={0x194, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "32a28e7d2df2dd8e1318b84a7519777820027d43cb2bb32391b37640a7de1940032307cd30ac287621faa747224dfcef60838d28cb296e8262c2546e2bfe999c8542bdead5bb9410c9dd85bf1fc5de4094a2a437666195f166cbeb774abb56fe67636f215bd67dce6a16c4526b6c64d004ddf604a3af7077f531722da4f640880677dd81dd1bbd6fd8741bb5abae02e2b3d47ea46081cbb8f04ef412434f7b"}]}]}, {0x4a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "881c157118a0fd7b23370d7d89eb59fecf3e9bccd8fce480fd6a2df60703c2d0153e4f232fa4be0879511a5553806b8c40a9dd2788ab721d87f0d9dfff7414e22cb317f3679eb401ee68d9d386463cd1026bfd283305a3cfd8c7858aacb087893c95b891eaabc4d9e754847bd0432a05be437cadd137dac1b7f1115086fd11e4eba91e19b44e6edd4e89b5050338d2f5de0eebcb310e393883940a97f721623fbef80e655397f7706ad387c5475efa95f149f4e36cf5da4dea31b2b1f402cb986669d4d72a53e6e8c087"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "e9e4b49dd280b0350bd3e64aa3ecf2f6bc8d7a3e0db45a4f7c1fcafc27e3eae1ae0c923120d6665557dafde2970bdf337b66b412be19fbc0fc77fc4d3c68cac6b4d651625e73a3acbfcb05b00d484973cb83e1cb6837eb3839c8aec62bae0146ec94539211f6a62824b8e55becf5cc5fedb949813875ae8820d1c62795f49139522a80439b30e60766a40258e643146e5aae6cdb1211378ad4b076587642847ecb101772e81752f0fa828c4967899cc28536de70f2fee25e1d79ec920db0f6242742476c4db03c68dc1a60025fa2f3d1e8863ac4b787d9dccce606917656f19b08fa6bd965f69af92aa73eab6bbd4c9186f499e463"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "97a1f89e404ebcb115db1b340f19f13926395dd80fa9c3f6c5eb26dc2110be0d7a60a3b925feecebff7d0ac7ff1962ad816ac330f9886fdcfc8f06bd9a434cd92146584c804cf85f3feefa0addec154fdda504f50ea4ad664a"}, @NFTA_DATA_VALUE={0x3d, 0x1, "137e77d10a41395a1874229d03fd793f895b2fed5419e81c6fb62d4437a76e560f7719122a8634609cbde8115eec0b11072c2f42a5f76bf763"}, @NFTA_DATA_VALUE={0xd4, 0x1, "c5155ad39d47edcf824284e06f016595b1266544930491d02253b4753bd2f96fed2bd3020b210acfce4e7efa3f0ca4fea0dbaa889278643f602b3ef8f4c09888a04f29426bd3dfca96158248b923df44cb471cd9b26bf61c684d8add44a90fda4f1a1f5bd1b86b872f9d8c3408a76c422c3c8251773060ff825545cbb3fbb5541bc7691c6bddcc7c93db04705c0688c02b1e2be0f0bbd13ca083e48c2f619da2e689a36a4f78cecc0920110862ec083e2f3ed0ddd3d28a8d0152aebb0ec50605cfff318cb296262e7b13bca10192938f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000000}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x45, 0x1, "25597598aaeb4c56b31b397a800900113c11af784944d1c979739fc1a6b6ecf4c16c431bf9d744cca5b567f8a5ab6e7c42eb08e20c7c220f097a581b0e38e2981d"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x1628, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x1388, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x53, 0x1, "2333948c348ed8e6db901d40ee4eab3bcf018fac3a6798b8520ed23ae56eacc520be478f9540430a4553ce20223eb95368a8afaf6883e5714e0c88fc649db8369f52c0ac80ee2b1aab5836ab5db99e"}, @NFTA_DATA_VALUE={0x79, 0x1, "236d549c1b8f16e2b03e4a3639bb50cf156c0faff76619c7144e59e2a1263b68135a05ff48adcafa97801af039f11498994f44f629ecdb4b718d04b964c00dd8bd42a66a04b0226af1341543300b7a46703ca9c3c3f1d059458c2184b4c97bc840ce8a9c190da11a2de3c30ef79fb037ff92b37893"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa9, 0x1, "f562a3eb601972cd1bd44e3fbe04927c85961b7c8037f02a5af01fa696969817a25bdbcd94942491875ba5eb048e08b951d18a5ef4fa11ed3ddfdfe69d2289eb9a7ad63ef312a8a848c2f7bedc2490dfc1a5044c198591fb3a129b6f591040ed18848cc7e5a26605feb3bf73802d881ffaa0b6e48dcb1236f261de6bf9276ec063da908ec5f669ad3caa18845d13b3b97e33dd73136e0dc3b3280cbd9b50cb36a84731db1d"}, @NFTA_DATA_VALUE={0xef, 0x1, "645e4d2a0398ef8f90fe38a698000079d16c240084c5a6cf50424813586f507040b0d60abfbbb4cc1bc289aae51c7c98fcb2473b51cd06e0d488893e1bcffd6ce3963de22b497d258c251ebed5d8df5efbc1c230bd89c1b9f54e3b8e10b01812a7dfb2230ec4bbae4db04c0ec56cb795a1ac0da065a5499089111047290d042147ddac4ac8c3da00b37db75b26f41a14f98c668ab3f216a8ebe09d6e296e33e012816bd16f7be3a346a544ffcee40fa446c96c59e293b56d9c4aea062ef8e817f29a35b70cba825f1b180b6ad64195afca4385043df6a3001ce0e119f5f92f440434305e33b6c3c2ba5b1a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x95, 0x1, "9d89a0c1237fb3401208ce274d0e3e970949d51f38c0dcb88f79c36a556d5bce555c7f47d877cb4a8278883b59d59734e37349e27734dfdecdf9d115ee5a16fd6b9fbf05b91f75eaa6c0b37cb80a696c646cfce14c047bcd4eb79bcbe8b7a6050caadd4e270e36e9f229fd88b26adcf0a77f426dd5383e2849208f83c3d24152cee26a529dba71bfa7a8534c8d03e81693"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_DATA={0x26c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1c, 0x1, "111aa3334f624b5ce9df79ae31eed33b14611e178eae8933"}, @NFTA_DATA_VALUE={0xf7, 0x1, "af3d9df232e780b4594b3e550e8001f416f1cf56d5d816e226bd1cf9ad8c02b5cc03c304eb24e073c558c8a32dfde4db69a4addfe17ffbdfb3a0c97bb2750f248a70bfd70df2b92750d03c6e32536e2e8c36b6a6a2f073c74ebbcfa2729ad89b15a26e1963a7fe207d0827d90133cf93b6e63a7f728f35238c250c3f7b144e6669a7fe3c57b95e2f63195eafecfa30be3e5fb775eb20921fa0b88f2e1234bc3e295f5dea1ebff84ba2f37661bad9c5a0d7d1f452658a26b0d0edbcaaf68853caf613540d26b50426c1a6fe8bcff46f8f715b904a9f05a4140fbec172d74d0ec73839652c8bc78a856c8034d583806c7f506edd"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "a7faccd2a7148f6aaadf1f3b5c589a9a2fc570d3a6c7f97295156aac84fd1190282ff447006dbdbdfcad550d331132704f0fa52bafd6e7f4a8f8adef8565345433b5d2ca9b3af948c6085f902071c217e3455bb51e0bf8319400ee52f487bafc582042013182ffdca64cd7aafb388cbb543ef2a0ca7eb947df2ddf509978e853f5ff0618ec64e1294db9fdc1ccbd39219d17a31b77caeec67f8667229f1d3f6bcbffd6f22107f7caf380d8a36a2b8ff928afe746360a52815d1f782a25ded42e5accb307b4e42693733d1286418060ce938e"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6cb}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x338, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xe8267bdfa9efc551}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "f49843baf281959afd81c333508369976d1f7b936201a756e0d7c2ff8dcdd78452228e06001153a492a79db36ca6d472fe124ada65272d0cde878f645b4e3888675c31569c722216afa73d5a9b1257ba299d2573dd723566b373401a4501a56583d9bd5bcd81917422f6d2f261356d21cf4a6b63471b86c93d28f6bf622f2b4318666910de74a22cd375"}]}, @NFTA_SET_ELEM_DATA={0x23c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "8789cefc37331dc102d0c473f77b631bb04ac95ef4c0c8fb8dfa461d17d321f6b90c5c1c86b57384171393ac82ede410e5ed0820eb4529c54c2e5a2d5a58b88463f15c990191119cec4fe14e6716f9bf0e7b0fe087cce137d48384bb580fbff6caedb5a46f2aaf9a7a428982e7f88883393c62085a74dc280a06e60048851770123239712d8738941242f7862f58afc4c617742f954ab70c7305b6d9c01c20af8c2a2831dbeb9e7ca00166481f26ae90125dd21502069d2b2b322880317a3ce3184881faa4ab214c07f996c1"}, @NFTA_DATA_VALUE={0x47, 0x1, "14f052632e3a9c5f6da75385b88bde12894f71bc923c941b57f854a60db479a158521faa2b1ff3ed4d32b4a44cb7b92cf86e328a7137c4ae7d316592355147c4ce7c3f"}, @NFTA_DATA_VALUE={0xfa, 0x1, "8f6797354aa3cd15d4995454360d90f4d968fc88382ec7042c3db725ba4176d491632d4316d0f1d47efb4e37dfcc142d0f38e4e127ef3dc34e5757390d654f13f568b51b3925da6289c8753df77fc02ea1706c364637a8eab62d5cf4ca008fe826934fe2aabab11417c775e1ea47db08a41f9e2398f9056dd10f335e1dc9dcacfbf0c636368da6328354d071e583fb4c932867d6693981c36ceccd6d33169d822a7c70a917277f7d4ea9640745810c0aeb80be4713676b6a0f00a4bd75f199a134757fb8329f34565fcbb88a5c467ae6fc0cafd3f013466fbba60e2fb45243c29453efb9656ea23f7dc6fc1d6186a7618e4dfaa5f21c"}, @NFTA_DATA_VALUE={0xf, 0x1, "03ace7a45023c7c8a27217"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}]}, {0x62c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x418, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "cd7cb169b1bd39fb8274193cdd29c30b70ccd0cc84ef39574a9071caf1c6de45759163ef5393c5706ca0e10bde933c6b14775fc798c2d2ff5df13b2d19a20863fdd823868a559f6e6321d04b6cab2b1312e98645b2"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "8c25447f4a1463eba982c5fd61fd54a6182d5e601b3c784aa6448acfb6b98ce2ba0180cbc341b7418364274894af27920889debe3a9d37ab61eb4d12fc42a8b86180f4fee58707629c0dc0e5de76e61b720755a473170ba53c78b45e11bad95b6dc6762217e21e2233f00962eed0655fbc5c3f1216afdcae199ee37248ffc5d1e802cdf92e7f3a78287bb419dcd4b92ba2a517739999c3d2ac9ec67f5be69f4742feca91b757c00228915a2281b225a098578e2fb96d40cd4e94d1074247b14148deff12c34ea4f6c59d2e359b7fa094c9"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x63, 0x1, "b373eccbf55503ad63e41198c35bd2257c97b7bb1a6848f9ae907d0eef9698e2dea864181378a16d38e309526419a74b408f61a58ba9a9549e9aa7504f9d4629a5ad37501f613eac9e761e381ab293323ce6d31b26690660c573f3cb46f869"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "aed877f6fb1e080e6fac35e7edc360d051b05332646b90ee88081140ff80fbef418da2060f46476d31d31852e7339cf41161f10b3f80a9e4e8053d446f8aef1826cd7003437d99fca896279056e024cb03b46b8c212aa713a5632e79f63e3be3c02fb7092dcaf3ef277c97e3494699e63f31e1663c391f89f987c9c892fc379ed102a5b1698daf8ac717a05527bf56d9353fc0330f4b0d79bc3a735521fed3a7e338bd1b1f800f8b367ddb1376f6f97fadbb8c8692660457f579e4150c5c6d775260"}, @NFTA_DATA_VALUE={0x7a, 0x1, "2f0a7672a21ef8b6e0188a2cb5780d93415e2b1810a520b405ed2c1f1d83067ed9e811daa24e9317f522536332b94785b5b134b693138f14d12937ffe80327de0921f5e7743cd1dc414e6d40241eca282297fb65741a4b6767fbd8650a9300da2f2d5ba0cb64e9724e08405b0abff4dcd6d32365f658"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_USERDATA={0x62, 0x6, 0x1, 0x0, "1d7a9431797cb8c389f14ec7468d6edfa81ca338096e46723e2fb7de3d6ef2f0ee84d9d932b6d97f492fa6be19e7f33ae43d4820decb1c21e1c7aeebbb7c91c6b69ea9338b7907b4f85d8fec27c04e05767b326508434b66d4e29562fa64"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0x44, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "aeebc665a2491a3526ca02b5e82475e39ddd515aa1208095bb1d3c615b08768ea5cf8016b346360b91d76538b96dfe72332be944bf587b5573fe"}]}, @NFTA_SET_ELEM_KEY_END={0x134, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x72, 0x1, "a8f4f931b3f7dc53485fc64d48303bcc5eced91ec666818f08db07cc38994c441a92dad21529e9e13f4f1061a8e62518e36c74d70864433ed266edc8e28080002891f6b92a2608b932ffa57b873c75f201d927cfadbf6caf273ba70b8e79cdcdc696e50ca64b91028ec6c7885d20"}, @NFTA_DATA_VALUE={0xb9, 0x1, "b4a4124809c5710be7025075e519b260bd674f6deb2ea4d60b60b1ad4c645b6519c978ef3e419ba05cca6b0a3554b5201b5a5b8b09e265fc31c5a5323b92d3363a8d507a78ac41fdaec535af72aa1f076bbbdb3d23b28f724cbdc80b53b3a7e4b1921a553e4b35397612911bd530cca235d977d4b02974624cb3b9d4cf65b71a1d0ee214cde3f56bb3d9a4d046eae25acbf45f9fc72c0b203ab98b44f22a7feba7e30252c5ea7ebf042949c5f81446e7b207c5ada7"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_USERDATA={0x4c, 0x6, 0x1, 0x0, "3448fda1a63b7757c98ae23225f7f2f8d05668149c55f272f675a633d12ae6e7d578eda35a2bb1faac29771ab40844928a7736ad001e7a953021dd5784895b6a55c3407625f33173"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x88, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2f7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x9c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x21, 0xc, "beb3c33b1038ea991eaf65db0c13268c5f8deb87b24ef42af286333ba9"}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x10, 0xc, "386132c7639b31e4157c2be5"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3ac8}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000080) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0xc8}}, 0x80c1) socket$inet6(0xa, 0xa, 0x8) 1.091756666s ago: executing program 1 (id=6472): r0 = socket$kcm(0xa, 0x922000000003, 0x11) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket(0x2b, 0x1, 0x1) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000300)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @remote, 0x1}, 0x1c) (async) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780), 0x6, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0x28, r5, 0x1, 0x40000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, &(0x7f0000000040)) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000980)={0x1d, r9}, 0x10) r10 = accept4(r8, 0x0, 0x0, 0x800) (async) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) (async) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d", 0x4a}], 0x3}], 0x1, 0x40800) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/76, 0x4c}], 0x1}, 0x0) (async) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$inet6(r10, &(0x7f0000000480)={&(0x7f00000002c0)={0xa, 0x4e24, 0x9, @remote, 0x4149}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000600)="94791e2f233a352213e03b6e406088e2a333fee83530a032e377371bf2221aa8e8c6f3e75effea0f7c45c7f4e6472c583100faff6d6798eeac6a54efbf171eedc8ea3fe583b3a22cf426198717e6210a45923ea79fa30f8a733a4e61008023f273c7cf11ae8ec7e443559c7484455e3dcfec08ea24a69e92b25fc0422f59a184810d3679d1603d4dbd4381557820d13728c3a1f3cfff3c1bcc2a006451d9", 0x9e}, {&(0x7f0000000340)="eaff0619366d4db8d4c393a3159634445313b361628e85b08d955f1874a340033f0a2a3839c9dad077900b66cfa8bd925bd178fbae6c6366a83c5440291289cd469cae6bcd147ea660cdcc5a97c2468df0f3ebbab342a392105bdca1e5f31043da94f7683a", 0x65}, {&(0x7f00000007c0)="db6b7657a51ca40fd6209385aa98a1be04237cc83dbea62ceacc0609612fab74710e43fc2551e6c661f125d4770dc2e03fc10b2a99acdc060249f7161a2b8c8b86fdf570662a62f56285e91bd287930ba46cc0ee91a5ff20dce0d366c170aa6ab4ffd1e51482f43f0fe165622560e3ccf6f5be9a766c3e3c47c8673f1400bd00c5354eedafb1d22059362df157bed8264c7bff31b8ebeff44d3d07d7d29146c424d6498d2654c4ce39d02cf22ed9c82291118582e469ecfc440b2c27a2c23d23dd3f02486bec1fd230f031831114713a79da16d57ae7", 0xd6}, {&(0x7f00000008c0)="6de9b60fb699d0048d755b84fe0d2cc0c2d21e1f11e08fa764d2894b91535f5a643147497f1d2838c2e351380d9f09aa53985ca91268125f091f7bfb1939713efc01182a7c1f4b966f70e37049bd9308c214a1ed6d375e0afcfa3fecc523a0f29df8cb95a44d15d8b89c28e98ee70d0982e783006618fae8fbc6fd9205bedb1491a82450f49a734713ac21767349331ec4160306f35421a1d0f1f4ffbc6aba32f740644d34dc2993", 0xa8}, {&(0x7f0000000440)="c6cf9d3f36", 0x5}, {&(0x7f0000000a80)="d702ad2755b4f5650b9c79bd5f3fbae19384b3fe40d493e552c3308133f4ddabe65c04801286d6c9b118c88b9e4b7fbbb9121d1ebf0596cae02139d8042e30d2c635749de3206f5beaf06e2d09aac192c05ed1b5bccf5337a7b110edf39c3ce8f32b82c4d068de4eb70963f82bc7db098c6cc9b5533a08e72080d5a7720dc694d6ce2fabbd98da58f57911de13d58cd12584e2e0a36a6fee23b9ab9442b7f8af858ee2c788eaaf99f6fa160430b72de2b66b14972bd757920233531393de58ac0d38375d70b55a821cfad2c1a100eb", 0xcf}, {&(0x7f00000006c0)="3cf4655f526c19371495fca81752bcf2b39f96c3dbeae01da034ff24ce7733b167c630e5cc1645e583ccac58cbb8720f151bea9e1574b2a3d6a0882d5d50fa648d34254b255b906d92dc42495a8c68278f586a01c2248b52e30d62065a9e", 0x5e}, {&(0x7f0000000b80)="b97fe46beb4ca557d76d03aea41b9dde14137da00d361f5e80a16c6d44d3833539d3320d1e0cbc11c863379b195098851d30bb010c2296a65e2bfb730e7a39efa69b19f604a37bd79dc958b909e3548f5bc7d8bcec510c7d1ab39f35695713f20deabfe14645144c42ce44589ee696be5cbbba40ead64d0b54022c6d08661f5ee755fe4534980427d7c702d54df397fbbbfcfd60a3235593ad77c525a12c2b61702053069290bb037d153a5d9533b1709cfd85da4d8553a95292fdc041cfdc3d490e07a64c339d", 0xc7}], 0x8}, 0x4010) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x8000003, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x8050) 969.318115ms ago: executing program 3 (id=6474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7d", 0x4}], 0x2}, 0x5) 919.21038ms ago: executing program 1 (id=6475): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 829.444066ms ago: executing program 3 (id=6477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x17, 0x2, 0x7, 0x2c, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_sec_ctx={0x6, 0x18, 0x40, 0x6f, 0x23, "467c9985a2d82be5a00dfa1e432de9fd93d67d1e830bfb45037d25c403f65e702fa349"}, @sadb_key={0xd, 0x0, 0x2c8, 0x0, "42503f75474a2d79422d70430a0fd8e081d06dc66a1119cc2d0863529a6a255e72e44c1f170e83ea4ba0e57aa2738e4af8c1cfd4005ae8026cbb2590518abadd041aa7840cbec0cf32ce6dd6631c7569eb0458ec1934ccccff"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7}}, @sadb_address={0x3, 0x17, 0x2b, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x4, 0x80, 0xc1, 0x2, 0x60000001}, @sadb_x_nat_t_type={0x1}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, @sadb_ident={0x2, 0xa, 0x400, 0x0, 0x4}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x160}}, 0x4c010) 753.806656ms ago: executing program 7 (id=6478): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, @rc={0x1f, @none, 0x4}, @generic={0xb, "19dc03ddab0cc5a954e1771d8bfa"}, 0xa, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='ip6_vti0\x00', 0xfffffffffffffffa, 0x987, 0xffff}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 734.339033ms ago: executing program 5 (id=6479): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1402, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xd}}}, 0x24}}, 0x4000000) recvmmsg$unix(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) 693.295733ms ago: executing program 1 (id=6480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034888a801000000000014"], 0xfdef) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r2, 0x8, 0x108, 0xfffffffe}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000800000000000d9cdbbb8c388ccb01f000000000095000000fc7279cd"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 599.862283ms ago: executing program 7 (id=6481): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x4, 0x7ff, 0x4, 0xfffffffc, 0x5, 0x0, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x4, 0x7ff, 0x4, 0xfffffffc, 0x5, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x90) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}, 0x5c) write$6lowpan_control(r4, &(0x7f0000000300)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) (async) write$6lowpan_control(r4, &(0x7f0000000300)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000c1a735b6b7a9b10061100000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 598.687524ms ago: executing program 3 (id=6482): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x11c, 0x4, 0x0, &(0x7f0000000380)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x270, 0x138, 0x1d8, 0x138, 0x1d8, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x3, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_int(r2, 0x11c, 0x4, 0x0, &(0x7f0000000380)) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x270, 0x138, 0x1d8, 0x138, 0x1d8, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x3, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) (async) 598.1899ms ago: executing program 5 (id=6483): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r2, 0xd1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000808, 0xffffffffffffff7c, 0x0}}, 0x10) 551.325514ms ago: executing program 5 (id=6484): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7efe87da}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xed}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8938}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xc}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xdf70}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_NAT_DST={0x60, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x949}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa165}]}]}, 0x134}}, 0x4014) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 491.082985ms ago: executing program 7 (id=6485): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipmr_newroute={0x6c, 0x18, 0x300, 0x70bd28, 0x25dfdbfb, {0x80, 0x80, 0x20, 0x1, 0xfd, 0x3, 0x1, 0xb, 0x2000}, [@RTA_UID={0x8, 0x19, r2}, @RTA_FLOW={0x8, 0xb, 0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_DPORT={0x6, 0x1d, 0x4e22}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x21, 0xde, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380), 0x4) connect(r0, &(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x1}}, 0x80) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000440)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000480)=0x2c) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f00000004c0), 0x10) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14, 0x80800) bind$packet(r5, &(0x7f0000000580)={0x11, 0x1, r3, 0x1, 0x7, 0x6, @remote}, 0x14) syz_emit_ethernet(0x9d, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @val={@val={0x88a8, 0x7}, {0x8100, 0x0, 0x1, 0x4}}, {@llc_tr={0x11, {@llc={0xff, 0xfc, "15", "6939cad7c89e45c6c84c12a78b6e2b7aeeab2b13be4187e194d7ec79cde406804427b58ed0b1b528ed159ee121146f05db64756b094b6bda51cde1a9e8af13d5268e36fcd59818790350d995d894d31aa112190a233ac563ea9a9e9a4484393c38b3252af73d49ba8c4f8cee3d70d2e29f8ba405dff191e71cc841339d6f146cc347e435"}}}}}, &(0x7f0000000680)={0x0, 0x4, [0x6ee, 0x46, 0xe9b, 0x59f]}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000006c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x84, r7, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb5af}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x10}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x1e}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x44003}, 0x40000) setsockopt$packet_int(r5, 0x107, 0x11, &(0x7f00000008c0)=0x1, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r6) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000980), r6) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r9, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x23}}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) r13 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x54, r10, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x44}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1b}}, @NL80211_ATTR_PID={0x8, 0x52, r13}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x800) r14 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r14, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, 0x3e9, 0x906, 0x70bd27, 0x25dfdbfe, {0x40, 0x1, 0x0, r13, 0x8, 0x101, 0x3, 0x3ff, 0x0, 0x3, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r8, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2faa077ba3bb1c28}, 0x40890) 443.924987ms ago: executing program 5 (id=6486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x96b2, '\x00', 0x0, r2, 0x5, 0x4, 0x1}, 0x50) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) 442.904913ms ago: executing program 1 (id=6487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = socket(0x2b, 0x1, 0x0) listen(r3, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, @tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @llc={0x1a, 0xf, 0x5, 0x3, 0x7, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x83b, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='wlan1\x00', 0x695efd8c, 0x7, 0x40}) sendmmsg$inet6(r3, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x805) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 433.694842ms ago: executing program 7 (id=6488): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x8, 0x0, 0x8000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x5, &(0x7f0000000540)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x76}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000006c0)=0x8) socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@getqdisc={0x28, 0x26, 0x800, 0x70bd27, 0x25dfdc02, {0x0, 0x0, 0x0, r7, {0xe, 0xc}, {0xffe0, 0x3}, {0xe, 0x4}}, [{0x4}]}, 0x28}}, 0xc080) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={r5, 0xcb}, 0x8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x54}}, 0x41) sendmsg$netlink(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002500000826bd7000fedbdf3a142c2c00"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040001) r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008154) 401.907128ms ago: executing program 3 (id=6489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x7, 0x7f, 0x93d, 0x20022, r0, 0x9, '\x00', r2, r5, 0x2, 0x5, 0x3}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r4, 0x0, 0x6, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x7, 0x7f, 0x93d, 0x20022, r0, 0x9, '\x00', r2, r5, 0x2, 0x5, 0x3}, 0x50) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) (async) 263.970342ms ago: executing program 6 (id=6490): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x7}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x2e, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xeab8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0xbb}, @ldst={0x2, 0x2, 0x1, 0x0, 0x3, 0xfffffffffffffffc, 0x10}, @jmp={0x5, 0x0, 0xf2e01cb71f532070, 0x8, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x93}, @jmp={0x5, 0x0, 0x0, 0x5, 0xa, 0x18, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe55}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x69, &(0x7f0000000080)=""/105, 0x40f00, 0x58, '\x00', r2, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0x3, 0x3, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x0, 0x10, 0x10}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 261.241198ms ago: executing program 5 (id=6491): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6(0xa, 0x1, 0x100) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket(0x2, 0x80805, 0x0) sendmmsg(r4, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1000000000000000840000000100000000000042a48e8c72f6f7ffffff5de3d1c65c16"], 0x10}}], 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0x300, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 260.723359ms ago: executing program 1 (id=6492): socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="000898"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x34ff, 0x0, 0x1}}) ioctl(r3, 0x8b1b, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0x5f, 0xfe, &(0x7f0000000080)="2c3fc95c3f4208e434c684c94272fab9bc5d16852978c195dbe9466bbedd2273376320f1a0ef917310ab9ea99759187b8e74fed4315c167a2f50085418c77523abdaae5afa60cc6e1790ddbf7cfa03889ae97cf7372d3f9b94e28ebf3d3e14", &(0x7f00000001c0)=""/254, 0x7, 0x0, 0xb1, 0xb5, &(0x7f0000000340)="d855a0614f1857dce50d619641eb37d4c945771bf54ebe97606d784e6e16e815e074ef24629ab6dcca25b6305b95a43fdc53355e4cc27e1e9cafa22aa5d4cb838b97ad70594a97166420ca90e4a71dd9cd41ecd7bfd7246167e6992f8201920ffa5f30200838170b2f49edd651cd6da51b69c5fc887ec6f3438a5fcc2481f9fb10ded2f5005f0280bd90e1d7d9b78726c058d06e33c5218772426063c40bcdf1564f3c7f87bc66d2ede65d60b9b580e043", &(0x7f0000000540)="a3634cd088882aab272a2daed52ea6c9f98584bf0b1f87f55488a829e70fbf7f1469704dbc732286ad294ffcfcb955cf8fdb7be944514a47219c7dec2c82c75de7e149de5da4c9a5fa3b6c31bb81ac47ffa83f9df78a7d311bdeb0d4308540737a4bdfb60684f75781633c2b9a7adb6026db955d4bdde87086de78ed72b87f7955d1ceb1e239eec25e326b1540cd2b84c8adf8c5485fa83b2eca8195362eaa55dd9b6a63c7ce36cb6d354142b5c698487c93109447", 0x1, 0x0, 0x181}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r5, 0x0, 0x25, 0xaa, &(0x7f00000007c0)="1283442a93f6075c211a795d13f0c025012f92efd79319b2df0d9efa0da04c6292703014d1", &(0x7f0000000800)=""/170, 0xf1, 0x0, 0x1000, 0x9d, &(0x7f00000008c0)="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", &(0x7f00000018c0)="a76493ccb3347cd97adaa727ed0895a7f0ec0357da19682aed1e87db7213664f52ac17082b31914c4d6e6832cb59b9ec1ecce47b18bb49d72f6e914dcc8297a83def7a1cd6c3c0b310c26e495ee8a4d5ee7b82d7de7161a00a507e7c908b273401a0da8d0ea8aab2e6367dee1d26dc1067d78a8fe7e6524ceb0b2de8f8618c51f2aa7b12c024a9078a5bd21c8526bbb7a3bed79dccff1e3278a6c3b474", 0x0, 0x0, 0xd7df}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 98.763665ms ago: executing program 5 (id=6493): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x1000) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 56.798328ms ago: executing program 6 (id=6494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000004c0)={r1, 0x1, 0xf7d, 0x1}) sendto$packet(r5, &(0x7f0000000500)="e6955369e10fcfb9eb6f20597a4a", 0xe, 0x20000090, &(0x7f0000000540)={0x11, 0x5, r4, 0x1, 0x26, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="03"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r12 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r12, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580), r5) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000440)={{0x2, 0x4e24, @multicast2}, {0x6, @random="bc0f7c8866e6"}, 0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 'nr0\x00'}) recvmmsg(r6, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000780)=""/229, 0xe5}, {&(0x7f00000006c0)=""/119, 0x77}, {&(0x7f0000000640)=""/13, 0xd}], 0x4, &(0x7f00000008c0)=""/171, 0xab}, 0x1ff}, {{&(0x7f0000000980)=@tipc=@name, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/88, 0x58}, {&(0x7f0000000a80)}], 0x2, &(0x7f0000000b00)=""/251, 0xfb}, 0xfc000000}, {{&(0x7f0000000c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c80)=""/27, 0x1b}], 0x1, &(0x7f0000000d00)=""/230, 0xe6}, 0xe5}, {{&(0x7f0000000e00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e80)=""/76, 0x4c}, {&(0x7f0000000f00)=""/226, 0xe2}, {&(0x7f0000001000)=""/109, 0x6d}, {&(0x7f0000001080)=""/239, 0xef}, {&(0x7f0000001180)=""/60, 0x3c}], 0x5, &(0x7f0000001240)=""/97, 0x61}, 0x10}, {{&(0x7f0000001300)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001380)=""/26, 0x1a}, {&(0x7f00000013c0)=""/175, 0xaf}, {&(0x7f0000001480)=""/178, 0xb2}, {&(0x7f0000001540)=""/220, 0xdc}, {&(0x7f0000001640)=""/195, 0xc3}], 0x5, &(0x7f00000017c0)=""/124, 0x7c}, 0x6}, {{&(0x7f0000001840)=@hci, 0x80, &(0x7f0000003a40)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/61, 0x3d}, {&(0x7f0000002900)=""/103, 0x67}, {&(0x7f0000002980)=""/148, 0x94}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x5, &(0x7f0000003ac0)=""/144, 0x90}, 0xfca}, {{&(0x7f0000003b80)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003c00)=""/79, 0x4f}, {&(0x7f0000003c80)=""/179, 0xb3}, {&(0x7f0000003d40)=""/76, 0x4c}, {&(0x7f0000003dc0)=""/1, 0x1}, {&(0x7f0000003e00)}, {&(0x7f0000003e40)=""/154, 0x9a}], 0x6}, 0x3}, {{&(0x7f0000003f80)=@sco, 0x80, &(0x7f0000004240)=[{&(0x7f0000004000)=""/155, 0x9b}, {&(0x7f00000040c0)=""/121, 0x79}, {&(0x7f0000004140)=""/75, 0x4b}, {&(0x7f00000041c0)=""/68, 0x44}], 0x4, &(0x7f0000004280)=""/174, 0xae}, 0x1}], 0x8, 0x100, &(0x7f0000004540)) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r13) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x2, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r9, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000a}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r14, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc051}, 0x20000000) 0s ago: executing program 3 (id=6495): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) (async) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580), 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x1, 0x10162, 0x0) kernel console output (not intermixed with test programs): adv0: entered promiscuous mode [ 494.705168][T23020] bridge0: port 2(batadv0) entered blocking state [ 494.747312][T23020] bridge0: port 2(batadv0) entered disabled state [ 494.760612][T23020] bridge0: port 2(batadv0) entered blocking state [ 494.767245][T23020] bridge0: port 2(batadv0) entered forwarding state [ 494.847525][T23034] netlink: 'syz.6.4833': attribute type 33 has an invalid length. [ 494.850203][T23028] bond7: entered promiscuous mode [ 494.862520][T23028] bond7: entered allmulticast mode [ 494.868761][T23028] 8021q: adding VLAN 0 to HW filter on device bond7 [ 495.101628][T23049] netlink: 'syz.5.4839': attribute type 11 has an invalid length. [ 495.198994][T13570] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 495.208355][T13570] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 495.405520][T23072] syzkaller0: entered promiscuous mode [ 495.412723][T23072] syzkaller0: entered allmulticast mode [ 495.526677][T23078] sctp: [Deprecated]: syz.6.4845 (pid 23078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.526677][T23078] Use struct sctp_sack_info instead [ 495.614553][T23085] IPVS: set_ctl: invalid protocol: 98 172.20.20.65:20003 [ 495.712220][T23088] netlink: 'syz.6.4848': attribute type 8 has an invalid length. [ 495.746180][T23089] netlink: 'syz.6.4848': attribute type 8 has an invalid length. [ 495.785258][T23092] bond9: ARP target 1.0.0.0 is already present [ 495.792221][T23092] bond9: option arp_ip_target: invalid value (1) [ 495.811390][T23092] bond9 (unregistering): Released all slaves [ 495.948118][T23107] __nla_validate_parse: 23 callbacks suppressed [ 495.948193][T23107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4854'. [ 496.172046][T23122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4859'. [ 496.280092][T23131] sctp: [Deprecated]: syz.3.4862 (pid 23131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.280092][T23131] Use struct sctp_sack_info instead [ 496.299599][T23130] sctp: [Deprecated]: syz.3.4862 (pid 23130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.299599][T23130] Use struct sctp_sack_info instead [ 496.321624][T23130] sctp: [Deprecated]: syz.3.4862 (pid 23130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.321624][T23130] Use struct sctp_sack_info instead [ 496.612530][T23158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4868'. [ 497.114946][T23180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4874'. [ 497.130338][T23182] netlink: 'syz.7.4876': attribute type 2 has an invalid length. [ 497.140116][T23182] netlink: 119 bytes leftover after parsing attributes in process `syz.7.4876'. [ 497.604311][T23189] netlink: 'syz.3.4879': attribute type 1 has an invalid length. [ 497.612396][T23189] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4879'. [ 497.622566][T23189] NCSI netlink: No device for ifindex 813332851 [ 497.769440][T23195] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4881'. [ 497.936029][T23207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4884'. [ 498.132048][T23207]  (unregistering): left allmulticast mode [ 498.301419][T23225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.314275][T23225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.348052][T23228] syzkaller0: entered promiscuous mode [ 498.353659][T23228] syzkaller0: entered allmulticast mode [ 498.722194][T23247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4900'. [ 498.835590][T23254] Bluetooth: MGMT ver 1.23 [ 498.907565][T23262] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 499.183734][T23277] syzkaller0: entered promiscuous mode [ 499.193657][T23291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4906'. [ 499.253663][T23277] syzkaller0: entered allmulticast mode [ 499.697820][T23326] xt_CT: You must specify a L4 protocol and not use inversions on it [ 500.032851][T23351] syzkaller0: entered promiscuous mode [ 500.049798][T23351] syzkaller0: entered allmulticast mode [ 501.472627][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 503.472565][T23382] syzkaller0: entered promiscuous mode [ 503.478184][T23382] syzkaller0: entered allmulticast mode [ 503.503531][T23384] __nla_validate_parse: 5 callbacks suppressed [ 503.503548][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4937'. [ 503.552255][T23388] validate_nla: 8 callbacks suppressed [ 503.552271][T23388] netlink: 'syz.3.4940': attribute type 1 has an invalid length. [ 503.655994][T23388] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4940'. [ 503.849369][T23400] syzkaller0: entered promiscuous mode [ 503.854953][T23400] syzkaller0: entered allmulticast mode [ 504.004541][T23413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4943'. [ 505.502389][T23410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4942'. [ 505.711588][T23424] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4946'. [ 505.958896][T23443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4954'. [ 506.000811][T23443] netlink: 10 bytes leftover after parsing attributes in process `syz.7.4954'. [ 506.270580][T23467] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 506.299132][T23467] openvswitch: netlink: Key type 64 is out of range max 32 [ 506.310479][T23470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4959'. [ 506.341830][T23470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4959'. [ 506.424934][T23472] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 506.551133][T23475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4961'. [ 507.332622][T23510] netlink: 'syz.3.4971': attribute type 2 has an invalid length. [ 507.670591][T23536] netlink: 'syz.5.4977': attribute type 2 has an invalid length. [ 507.800569][T23542] openvswitch: netlink: Duplicate or invalid key (type 0). [ 507.810332][T23542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.993578][T23553] netlink: 'syz.7.4984': attribute type 9 has an invalid length. [ 508.082935][T23557] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 508.103724][T23557] bond6 (unregistering): Released all slaves [ 508.446983][T23583] tipc: Enabled bearer , priority 0 [ 508.461704][T23583] syzkaller0: entered promiscuous mode [ 508.477624][T23583] syzkaller0: entered allmulticast mode [ 508.570736][T23583] tipc: Resetting bearer [ 508.600468][T23582] tipc: Resetting bearer [ 508.603349][T23596] __nla_validate_parse: 8 callbacks suppressed [ 508.603364][T23596] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4995'. [ 508.610111][T23597] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4995'. [ 508.669245][T23582] tipc: Disabling bearer [ 508.938303][T23617] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 508.952042][T23619] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 509.271336][T23627] IPVS: sh: FWM 3 0x00000003 - no destination available [ 509.507782][T23646] netlink: 'syz.7.5013': attribute type 10 has an invalid length. [ 509.630407][T23654] pim6reg527: entered allmulticast mode [ 509.710385][ T3033] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.719145][ T3033] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.736281][T23664] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 509.743061][T23667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5016'. [ 509.756304][T23664] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5018'. [ 509.766275][ T3033] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.779937][ T3033] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.919897][T23682] netlink: 'syz.5.5021': attribute type 2 has an invalid length. [ 510.187291][T23694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5026'. [ 510.191622][T23697] netlink: 'syz.5.5027': attribute type 1 has an invalid length. [ 510.204590][T23694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5026'. [ 510.315066][T23702] bond8: (slave geneve2): making interface the new active one [ 510.327883][T23702] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 510.336708][ T3498] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 510.345610][ T3498] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 510.355450][ T3498] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 510.364489][ T3498] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 510.434078][T23711] sch_fq: defrate 0 ignored. [ 510.550509][T23718] netlink: 'syz.3.5036': attribute type 3 has an invalid length. [ 510.577979][T23718] netlink: 'syz.3.5036': attribute type 3 has an invalid length. [ 510.594126][T23718] netlink: 'syz.3.5036': attribute type 3 has an invalid length. [ 510.604030][T23718] netlink: 'syz.3.5036': attribute type 3 has an invalid length. [ 510.617025][T23718] netlink: 'syz.3.5036': attribute type 3 has an invalid length. [ 510.625487][T23718] netlink: 'syz.3.5036': attribute type 3 has an invalid length. [ 510.634916][T23718] netlink: 'syz.3.5036': attribute type 3 has an invalid length. [ 510.644843][T23726] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5037'. [ 510.662979][T23726] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5037'. [ 510.752952][T23739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5040'. [ 510.893204][T23749] syzkaller1: entered promiscuous mode [ 510.916664][T23749] syzkaller1: entered allmulticast mode [ 511.011342][T23760] x_tables: duplicate underflow at hook 3 [ 511.030232][T23762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5048'. [ 511.195033][T23771] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 511.233021][T23769] xt_addrtype: ipv6 does not support BROADCAST matching [ 511.410474][T23779] lo: left promiscuous mode [ 511.422718][T23779] tunl0: left promiscuous mode [ 511.476744][T23779] bond0: left promiscuous mode [ 511.481669][T23779] bond_slave_0: left promiscuous mode [ 511.491603][T23779] bond_slave_1: left promiscuous mode [ 511.499581][T23779] team0: left promiscuous mode [ 511.504473][T23779] team_slave_0: left promiscuous mode [ 511.513443][T23779] team_slave_1: left promiscuous mode [ 511.550419][T23779] veth0_to_team: left promiscuous mode [ 511.647850][T23779] ip6gre1: left allmulticast mode [ 511.655385][T23779] bridge0: left allmulticast mode [ 511.662653][T23779] bond4: left promiscuous mode [ 511.670555][T23779] bond4: left allmulticast mode [ 511.712839][T23779] veth5: left promiscuous mode [ 511.720164][T23779] bond7: left promiscuous mode [ 511.726079][T23779] bond7: left allmulticast mode [ 511.883290][T23795] syzkaller0: entered promiscuous mode [ 511.897641][T23795] syzkaller0: entered allmulticast mode [ 512.388247][T23811] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.434979][T23811] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 512.594093][T23811] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.605103][T23811] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 512.709920][T23824] syzkaller0: entered promiscuous mode [ 512.715626][T23824] syzkaller0: entered allmulticast mode [ 512.759927][T23811] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.773331][T23811] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 512.847602][T23835] bond19: Invalid ad_actor_system MAC address. [ 512.853965][T23835] bond19: option ad_actor_system: invalid value (1) [ 512.870636][T23835] bond19 (unregistering): Released all slaves [ 513.132999][ T1132] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.150298][ T1132] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 513.184803][ T1132] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.193549][ T1132] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 514.947590][T23854] syzkaller1: entered promiscuous mode [ 514.953099][T23854] syzkaller1: entered allmulticast mode [ 514.961976][T23867] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 515.009086][ T3005] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.030386][ T3005] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 515.061058][T13570] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.069646][T13570] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 515.081635][T23872] __nla_validate_parse: 3 callbacks suppressed [ 515.081649][T23872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5081'. [ 515.191117][T23875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5082'. [ 515.439627][T23893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5087'. [ 515.476808][T23893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5087'. [ 515.553797][T23902] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5091'. [ 515.596964][T23894] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5087'. [ 515.748673][T23919] xt_hashlimit: overflow, try lower: 3/0 [ 515.937843][T23933] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5099'. [ 516.078559][T23944] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5102'. [ 516.214519][T23953] bond0: entered promiscuous mode [ 516.222305][T23953] bond_slave_0: entered promiscuous mode [ 516.242458][T23953] bond_slave_1: entered promiscuous mode [ 516.294721][T23953] batadv0: entered promiscuous mode [ 516.311098][T23961] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 516.327054][T23953] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 516.351421][T23953] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 516.540874][T23966] syzkaller0: entered promiscuous mode [ 516.552363][T23966] syzkaller0: entered allmulticast mode [ 516.554901][T23981] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5110'. [ 516.995034][T24004] vlan2: entered promiscuous mode [ 517.002874][T24004] bridge0: entered promiscuous mode [ 517.109356][T24011] syzkaller0: entered promiscuous mode [ 517.138219][T24011] syzkaller0: entered allmulticast mode [ 517.468317][T24020] syzkaller0: entered promiscuous mode [ 517.477685][T24020] syzkaller0: entered allmulticast mode [ 519.313002][T24042] veth0: entered promiscuous mode [ 519.318680][T24048] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 519.329423][T24048] tipc: Enabled bearer , priority 10 [ 519.335621][T24042] veth0: left promiscuous mode [ 519.515170][T24072] syzkaller0: entered promiscuous mode [ 519.528076][T24072] syzkaller0: entered allmulticast mode [ 519.591933][T24076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5136'. [ 520.036736][T24105] syzkaller0: entered promiscuous mode [ 520.048760][T24105] syzkaller0: entered allmulticast mode [ 520.066376][T24102] syzkaller0: entered promiscuous mode [ 520.074303][T24102] syzkaller0: entered allmulticast mode [ 520.165536][T24102] FAULT_INJECTION: forcing a failure. [ 520.165536][T24102] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 520.184102][T24102] CPU: 0 UID: 0 PID: 24102 Comm: syz.6.5145 Not tainted syzkaller #0 PREEMPT(full) [ 520.184126][T24102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 520.184136][T24102] Call Trace: [ 520.184141][T24102] [ 520.184150][T24102] dump_stack_lvl+0x189/0x250 [ 520.184176][T24102] ? __pfx____ratelimit+0x10/0x10 [ 520.184200][T24102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.184220][T24102] ? __pfx__printk+0x10/0x10 [ 520.184237][T24102] ? __might_fault+0xb0/0x130 [ 520.184271][T24102] should_fail_ex+0x414/0x560 [ 520.184301][T24102] _copy_from_user+0x2d/0xb0 [ 520.184322][T24102] ___sys_sendmsg+0x158/0x2a0 [ 520.184344][T24102] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.184406][T24102] ? __fget_files+0x2a/0x420 [ 520.184422][T24102] ? __fget_files+0x3a0/0x420 [ 520.184453][T24102] __x64_sys_sendmsg+0x19b/0x260 [ 520.184474][T24102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.184502][T24102] ? __pfx_ksys_write+0x10/0x10 [ 520.184528][T24102] ? do_syscall_64+0xbe/0xfa0 [ 520.184555][T24102] do_syscall_64+0xfa/0xfa0 [ 520.184575][T24102] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.184596][T24102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.184612][T24102] ? clear_bhb_loop+0x60/0xb0 [ 520.184630][T24102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.184645][T24102] RIP: 0033:0x7f819fd8f749 [ 520.184660][T24102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.184673][T24102] RSP: 002b:00007f81a0b48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.184691][T24102] RAX: ffffffffffffffda RBX: 00007f819ffe5fa0 RCX: 00007f819fd8f749 [ 520.184708][T24102] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000007 [ 520.184718][T24102] RBP: 00007f81a0b48090 R08: 0000000000000000 R09: 0000000000000000 [ 520.184728][T24102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.184736][T24102] R13: 00007f819ffe6038 R14: 00007f819ffe5fa0 R15: 00007fff4d1d7a78 [ 520.184769][T24102] [ 520.804547][T24151] validate_nla: 35 callbacks suppressed [ 520.804566][T24151] netlink: 'syz.7.5161': attribute type 21 has an invalid length. [ 520.825128][T24151] __nla_validate_parse: 1 callbacks suppressed [ 520.825145][T24151] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5161'. [ 520.871331][T24151] netlink: 'syz.7.5161': attribute type 4 has an invalid length. [ 520.876444][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5163'. [ 520.892579][T24151] netlink: 'syz.7.5161': attribute type 5 has an invalid length. [ 520.907489][T24156] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20000 [ 520.914419][T24151] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5161'. [ 521.129544][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5168'. [ 521.148911][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5168'. [ 521.209290][T24187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5170'. [ 521.212190][T24175] Can't find ip_set type hash:net,port,ne [ 521.252820][T24183] Can't find ip_set type hash:net,port,ne [ 521.397372][T24194] netlink: 'syz.5.5173': attribute type 4 has an invalid length. [ 521.466869][T24201] netlink: 'syz.3.5176': attribute type 1 has an invalid length. [ 521.481568][T24201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.599129][T24215] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5178'. [ 521.617998][T24214] netlink: 'syz.1.5180': attribute type 142 has an invalid length. [ 521.645638][T24215] netlink: 'syz.5.5178': attribute type 1 has an invalid length. [ 521.739136][T24220] netlink: 'syz.3.5181': attribute type 5 has an invalid length. [ 521.762467][T24220] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5181'. [ 521.842380][T24223] syzkaller1: entered promiscuous mode [ 521.851551][T24223] syzkaller1: entered allmulticast mode [ 521.955560][T24241] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5186'. [ 521.973400][T24240] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5186'. [ 521.996806][T24240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.140900][T24250] syzkaller0: entered promiscuous mode [ 522.150725][T24250] syzkaller0: entered allmulticast mode [ 522.164904][T24250] FAULT_INJECTION: forcing a failure. [ 522.164904][T24250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.188961][T24250] CPU: 0 UID: 0 PID: 24250 Comm: syz.5.5191 Not tainted syzkaller #0 PREEMPT(full) [ 522.188985][T24250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.188995][T24250] Call Trace: [ 522.189002][T24250] [ 522.189010][T24250] dump_stack_lvl+0x189/0x250 [ 522.189036][T24250] ? __pfx____ratelimit+0x10/0x10 [ 522.189058][T24250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.189078][T24250] ? __pfx__printk+0x10/0x10 [ 522.189096][T24250] ? __might_fault+0xb0/0x130 [ 522.189130][T24250] should_fail_ex+0x414/0x560 [ 522.189158][T24250] _copy_from_iter+0x404/0x1790 [ 522.189201][T24250] ? __pfx__copy_from_iter+0x10/0x10 [ 522.189222][T24250] ? dev_get_by_index+0x22/0x2e0 [ 522.189242][T24250] ? dev_get_by_index+0x22/0x2e0 [ 522.189266][T24250] packet_sendmsg+0x3072/0x5080 [ 522.189299][T24250] ? aa_new_mount+0x330/0x810 [ 522.189333][T24250] ? __lock_acquire+0xab9/0xd20 [ 522.189350][T24250] ? __pfx___might_resched+0x10/0x10 [ 522.189384][T24250] ? __pfx_packet_sendmsg+0x10/0x10 [ 522.189403][T24250] ? aa_sk_perm+0x81e/0x950 [ 522.189430][T24250] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 522.189459][T24250] ? __lock_acquire+0xab9/0xd20 [ 522.189473][T24250] ? aa_sock_msg_perm+0xf1/0x1d0 [ 522.189497][T24250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 522.189514][T24250] ? __pfx_packet_sendmsg+0x10/0x10 [ 522.189536][T24250] __sock_sendmsg+0x21c/0x270 [ 522.189560][T24250] ____sys_sendmsg+0x505/0x830 [ 522.189585][T24250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.189611][T24250] ? import_iovec+0x74/0xa0 [ 522.189635][T24250] ___sys_sendmsg+0x21f/0x2a0 [ 522.189656][T24250] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.189707][T24250] ? __fget_files+0x2a/0x420 [ 522.189723][T24250] ? __fget_files+0x3a0/0x420 [ 522.189747][T24250] __x64_sys_sendmsg+0x19b/0x260 [ 522.189767][T24250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.189792][T24250] ? __pfx_ksys_write+0x10/0x10 [ 522.189816][T24250] ? do_syscall_64+0xbe/0xfa0 [ 522.189842][T24250] do_syscall_64+0xfa/0xfa0 [ 522.189861][T24250] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.189884][T24250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.189900][T24250] ? clear_bhb_loop+0x60/0xb0 [ 522.189920][T24250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.189935][T24250] RIP: 0033:0x7fe05798f749 [ 522.189950][T24250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.189964][T24250] RSP: 002b:00007fe05882f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.189983][T24250] RAX: ffffffffffffffda RBX: 00007fe057be5fa0 RCX: 00007fe05798f749 [ 522.189995][T24250] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000007 [ 522.190006][T24250] RBP: 00007fe05882f090 R08: 0000000000000000 R09: 0000000000000000 [ 522.190015][T24250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.190024][T24250] R13: 00007fe057be6038 R14: 00007fe057be5fa0 R15: 00007ffeca0e7088 [ 522.190054][T24250] [ 522.533527][T24251] block nbd3: server does not support multiple connections per device. [ 522.542354][T24251] block nbd3: shutting down sockets [ 523.151648][T24294] netlink: 'syz.1.5207': attribute type 5 has an invalid length. [ 523.204509][T24301] syzkaller1: entered promiscuous mode [ 523.221133][T24301] syzkaller1: entered allmulticast mode [ 523.272637][T24307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.325573][T24307] vet0_virt_wifi: renamed from lo [ 523.430912][T24318] syzkaller0: entered promiscuous mode [ 523.450639][T24318] syzkaller0: entered allmulticast mode [ 523.540039][T24325] netlink: 'syz.6.5216': attribute type 10 has an invalid length. [ 523.667862][T24325] team0: Port device geneve0 added [ 524.010673][T24361] lo speed is unknown, defaulting to 1000 [ 524.276777][T24383] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 524.307563][T24383] syzkaller0: entered promiscuous mode [ 524.313068][T24383] syzkaller0: entered allmulticast mode [ 524.530496][T24403] A link change request failed with some changes committed already. Interface vet0_virt_wifi may have been left with an inconsistent configuration, please check. [ 524.755988][T24401] syzkaller0: entered promiscuous mode [ 524.761584][T24401] syzkaller0: entered allmulticast mode [ 525.211270][T24440] netlink: 'syz.6.5244': attribute type 11 has an invalid length. [ 527.002444][T24426] bridge0: port 2(batadv0) entered disabled state [ 527.009390][T24426] bridge0: port 1() entered disabled state [ 527.202618][T24426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.400476][T24426] xfrm1: left promiscuous mode [ 527.418380][T24426] geneve2: left promiscuous mode [ 527.432672][T24426] bridge5: left promiscuous mode [ 527.453324][T24426] ipvlan2: left promiscuous mode [ 527.559415][T24432] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 527.615942][ T1132] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.688333][ T1132] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.714641][ T1132] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.740005][T24466] 8021q: VLANs not supported on ipvlan0 [ 527.781674][ T1132] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.931543][T24485] __nla_validate_parse: 14 callbacks suppressed [ 527.931562][T24485] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5254'. [ 528.069746][T24492] syzkaller0: entered promiscuous mode [ 528.075421][T24492] syzkaller0: entered allmulticast mode [ 528.093380][T24492] FAULT_INJECTION: forcing a failure. [ 528.093380][T24492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.115412][T24492] CPU: 0 UID: 0 PID: 24492 Comm: syz.6.5256 Not tainted syzkaller #0 PREEMPT(full) [ 528.115437][T24492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.115448][T24492] Call Trace: [ 528.115455][T24492] [ 528.115463][T24492] dump_stack_lvl+0x189/0x250 [ 528.115489][T24492] ? __pfx____ratelimit+0x10/0x10 [ 528.115512][T24492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.115534][T24492] ? __pfx__printk+0x10/0x10 [ 528.115552][T24492] ? __might_fault+0xb0/0x130 [ 528.115593][T24492] should_fail_ex+0x414/0x560 [ 528.115623][T24492] _copy_from_iter+0x404/0x1790 [ 528.115659][T24492] ? __pfx__copy_from_iter+0x10/0x10 [ 528.115687][T24492] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 528.115711][T24492] skb_copy_datagram_from_iter+0xf5/0x720 [ 528.115737][T24492] ? dev_get_by_index+0x22/0x2e0 [ 528.115754][T24492] ? skb_put+0x11b/0x210 [ 528.115772][T24492] packet_sendmsg+0x3797/0x5080 [ 528.115804][T24492] ? aa_new_mount+0x330/0x810 [ 528.115841][T24492] ? __pfx___might_resched+0x10/0x10 [ 528.115874][T24492] ? __pfx_packet_sendmsg+0x10/0x10 [ 528.115894][T24492] ? aa_sk_perm+0x81e/0x950 [ 528.115921][T24492] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 528.115951][T24492] ? __lock_acquire+0xab9/0xd20 [ 528.115965][T24492] ? aa_sock_msg_perm+0xf1/0x1d0 [ 528.115990][T24492] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 528.116006][T24492] ? __pfx_packet_sendmsg+0x10/0x10 [ 528.116030][T24492] __sock_sendmsg+0x21c/0x270 [ 528.116055][T24492] ____sys_sendmsg+0x505/0x830 [ 528.116080][T24492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 528.116108][T24492] ? import_iovec+0x74/0xa0 [ 528.116132][T24492] ___sys_sendmsg+0x21f/0x2a0 [ 528.116153][T24492] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.116210][T24492] ? __fget_files+0x2a/0x420 [ 528.116225][T24492] ? __fget_files+0x3a0/0x420 [ 528.116253][T24492] __x64_sys_sendmsg+0x19b/0x260 [ 528.116274][T24492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 528.116302][T24492] ? __pfx_ksys_write+0x10/0x10 [ 528.116328][T24492] ? do_syscall_64+0xbe/0xfa0 [ 528.116355][T24492] do_syscall_64+0xfa/0xfa0 [ 528.116375][T24492] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.116397][T24492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.116414][T24492] ? clear_bhb_loop+0x60/0xb0 [ 528.116435][T24492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.116451][T24492] RIP: 0033:0x7f819fd8f749 [ 528.116467][T24492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.116482][T24492] RSP: 002b:00007f81a0b48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.116501][T24492] RAX: ffffffffffffffda RBX: 00007f819ffe5fa0 RCX: 00007f819fd8f749 [ 528.116514][T24492] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000007 [ 528.116525][T24492] RBP: 00007f81a0b48090 R08: 0000000000000000 R09: 0000000000000000 [ 528.116535][T24492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.116545][T24492] R13: 00007f819ffe6038 R14: 00007f819ffe5fa0 R15: 00007fff4d1d7a78 [ 528.116583][T24492] [ 528.505259][T24512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5261'. [ 528.602388][T24515] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5259'. [ 528.658929][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5259'. [ 528.888857][T24524] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5265'. [ 529.128503][T24537] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 529.243632][T24540] SET target dimension over the limit! [ 529.607525][T24555] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 529.654407][T24562] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 529.693338][T24558] syzkaller0: entered promiscuous mode [ 529.699488][T24558] syzkaller0: entered allmulticast mode [ 529.714351][T24561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5277'. [ 529.725145][T24566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5279'. [ 529.737445][T24558] FAULT_INJECTION: forcing a failure. [ 529.737445][T24558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.751366][T24558] CPU: 1 UID: 0 PID: 24558 Comm: syz.7.5276 Not tainted syzkaller #0 PREEMPT(full) [ 529.751390][T24558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.751401][T24558] Call Trace: [ 529.751408][T24558] [ 529.751416][T24558] dump_stack_lvl+0x189/0x250 [ 529.751451][T24558] ? __pfx____ratelimit+0x10/0x10 [ 529.751475][T24558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.751497][T24558] ? __pfx__printk+0x10/0x10 [ 529.751515][T24558] ? __might_fault+0xb0/0x130 [ 529.751550][T24558] should_fail_ex+0x414/0x560 [ 529.751580][T24558] _copy_from_iter+0x589/0x1790 [ 529.751616][T24558] ? __pfx__copy_from_iter+0x10/0x10 [ 529.751645][T24558] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 529.751668][T24558] skb_copy_datagram_from_iter+0xf5/0x720 [ 529.751692][T24558] ? dev_get_by_index+0x22/0x2e0 [ 529.751712][T24558] ? skb_put+0x11b/0x210 [ 529.751731][T24558] packet_sendmsg+0x3797/0x5080 [ 529.751766][T24558] ? aa_new_mount+0x330/0x810 [ 529.751805][T24558] ? __pfx___might_resched+0x10/0x10 [ 529.751842][T24558] ? __pfx_packet_sendmsg+0x10/0x10 [ 529.751863][T24558] ? aa_sk_perm+0x81e/0x950 [ 529.751891][T24558] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 529.751921][T24558] ? __lock_acquire+0xab9/0xd20 [ 529.751936][T24558] ? aa_sock_msg_perm+0xf1/0x1d0 [ 529.751959][T24558] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.751976][T24558] ? __pfx_packet_sendmsg+0x10/0x10 [ 529.751999][T24558] __sock_sendmsg+0x21c/0x270 [ 529.752025][T24558] ____sys_sendmsg+0x505/0x830 [ 529.752048][T24558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.752076][T24558] ? import_iovec+0x74/0xa0 [ 529.752100][T24558] ___sys_sendmsg+0x21f/0x2a0 [ 529.752121][T24558] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.752177][T24558] ? __fget_files+0x2a/0x420 [ 529.752192][T24558] ? __fget_files+0x3a0/0x420 [ 529.752219][T24558] __x64_sys_sendmsg+0x19b/0x260 [ 529.752240][T24558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.752268][T24558] ? __pfx_ksys_write+0x10/0x10 [ 529.752295][T24558] ? do_syscall_64+0xbe/0xfa0 [ 529.752321][T24558] do_syscall_64+0xfa/0xfa0 [ 529.752344][T24558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.752360][T24558] ? asm_sysvec_call_function_single+0x1a/0x20 [ 529.752377][T24558] ? clear_bhb_loop+0x60/0xb0 [ 529.752398][T24558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.752414][T24558] RIP: 0033:0x7fbdd1b8f749 [ 529.752430][T24558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.752451][T24558] RSP: 002b:00007fbdd2a2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.752469][T24558] RAX: ffffffffffffffda RBX: 00007fbdd1de5fa0 RCX: 00007fbdd1b8f749 [ 529.752482][T24558] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000007 [ 529.752493][T24558] RBP: 00007fbdd2a2a090 R08: 0000000000000000 R09: 0000000000000000 [ 529.752503][T24558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.752514][T24558] R13: 00007fbdd1de6038 R14: 00007fbdd1de5fa0 R15: 00007ffed7179f68 [ 529.752545][T24558] [ 530.066627][T24566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5279'. [ 530.127188][T24561] netlink: 'syz.6.5277': attribute type 1 has an invalid length. [ 530.135172][T24561] netlink: 'syz.6.5277': attribute type 2 has an invalid length. [ 530.215576][T24577] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 530.477328][T24603] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5285'. [ 530.489194][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5285'. [ 530.871382][T24618] netlink: 'syz.3.5292': attribute type 39 has an invalid length. [ 530.880769][T24617] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 530.897303][T24617] syzkaller0: entered promiscuous mode [ 530.933396][T24617] syzkaller0: entered allmulticast mode [ 531.067892][T24623] delete_channel: no stack [ 531.320557][ T9529] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 531.332686][ T9529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 531.343506][ T9529] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 531.353111][ T9529] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 531.363436][ T9529] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 531.395325][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 531.405188][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 531.412798][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 531.422962][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 531.430792][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 531.552109][T24630] lo speed is unknown, defaulting to 1000 [ 531.758007][T24653] IPVS: length: 8 != 1152 [ 531.853623][T24657] tipc: Enabled bearer , priority 0 [ 531.861142][T24657] syzkaller0: entered promiscuous mode [ 531.872008][T24657] syzkaller0: entered allmulticast mode [ 531.903746][T24664] lo: entered allmulticast mode [ 531.952404][T24630] chnl_net:caif_netlink_parms(): no params data found [ 531.995308][T24657] tipc: Resetting bearer [ 532.030126][T24667] C: renamed from lo (while UP) [ 532.054591][T24667] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 532.087922][T24655] tipc: Resetting bearer [ 532.125062][T24655] tipc: Disabling bearer [ 532.387093][T24630] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.403349][T24630] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.432900][T24630] bridge_slave_0: entered allmulticast mode [ 532.443068][T24630] bridge_slave_0: entered promiscuous mode [ 532.453438][T24630] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.486719][T24630] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.494019][T24630] bridge_slave_1: entered allmulticast mode [ 532.506711][T24630] bridge_slave_1: entered promiscuous mode [ 532.535502][T24708] bridge71: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 532.556341][T24718] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 532.664288][T24630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.687973][T24630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.801908][T24729] netlink: 'syz.7.5318': attribute type 33 has an invalid length. [ 532.932921][T24630] team0: Port device team_slave_0 added [ 532.944852][T24630] team0: Port device team_slave_1 added [ 533.051651][T24743] netlink: 'syz.1.5321': attribute type 1 has an invalid length. [ 533.096927][T24630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.115562][T24630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.165357][T24630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.204878][T24757] __nla_validate_parse: 7 callbacks suppressed [ 533.204895][T24757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5321'. [ 533.289255][T24630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.303841][T24630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.331977][T24630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.346634][T24757] bond6 (unregistering): Released all slaves [ 533.379749][T24762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5326'. [ 533.416576][T24762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5326'. [ 533.509247][T24630] hsr_slave_0: entered promiscuous mode [ 533.523801][T24630] hsr_slave_1: entered promiscuous mode [ 533.538393][T24630] debugfs: 'hsr0' already exists in 'hsr' [ 533.546323][ T5829] Bluetooth: hci2: command tx timeout [ 533.551731][T24630] Cannot create hsr debugfs directory [ 533.597852][T24775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5331'. [ 533.920483][T24787] netlink: 'syz.7.5333': attribute type 1 has an invalid length. [ 533.929173][T24630] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 533.943941][T24630] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 534.034555][T24630] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 534.045178][T24630] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 534.124024][T24630] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 534.140126][T24630] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 534.176632][T24800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5337'. [ 534.227469][T24630] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 534.237924][T24630] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 534.259625][T24802] netlink: 'syz.5.5339': attribute type 9 has an invalid length. [ 534.319842][T24805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5340'. [ 534.514808][T24630] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 534.528646][T24630] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 534.547873][T24630] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 534.571966][T24630] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 535.637102][ T5829] Bluetooth: hci2: command tx timeout [ 536.548761][T24832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.723018][T24630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.787537][T24630] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.823748][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.830990][ T6736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.855262][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.862501][ T6736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.079862][T24860] syzkaller1: entered promiscuous mode [ 537.096422][T24860] syzkaller1: entered allmulticast mode [ 537.180084][T24869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5358'. [ 537.184207][T24871] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5359'. [ 537.403794][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5362'. [ 537.423284][T24882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5362'. [ 537.450657][T24630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.709317][ T5829] Bluetooth: hci2: command tx timeout [ 537.908392][T24630] veth0_vlan: entered promiscuous mode [ 537.920709][T24630] veth1_vlan: entered promiscuous mode [ 537.951470][T24630] veth0_macvtap: entered promiscuous mode [ 537.961817][T24630] veth1_macvtap: entered promiscuous mode [ 537.980239][T24630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.995374][T24630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.009503][T13570] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.019632][T13570] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.030967][T13570] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.040825][T13570] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.301146][T24930] netlink: 'syz.7.5372': attribute type 6 has an invalid length. [ 538.442037][T24935] syzkaller0: entered promiscuous mode [ 538.447862][T24935] syzkaller0: entered allmulticast mode [ 538.625841][ T6736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.633699][ T6736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.705549][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.735906][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.997514][T24966] __nla_validate_parse: 1 callbacks suppressed [ 538.997532][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5381'. [ 539.791243][ T5829] Bluetooth: hci2: command tx timeout [ 539.847049][ T9529] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 539.885301][ T9529] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 539.898181][ T9529] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 539.918700][ T9529] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 539.928140][ T9529] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.974628][T24991] openvswitch: netlink: Unknown nsh attribute 0 [ 539.991637][T24991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.023339][T24998] netlink: 'syz.1.5388': attribute type 16 has an invalid length. [ 540.033981][T24998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5388'. [ 540.176806][T24986] lo speed is unknown, defaulting to 1000 [ 540.438860][T25023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5399'. [ 540.451589][T25015] syzkaller0: entered promiscuous mode [ 540.458080][T25015] syzkaller0: entered allmulticast mode [ 540.539471][T25020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5398'. [ 540.593080][T25027] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20003 [ 542.031475][ T9529] Bluetooth: hci0: command tx timeout [ 542.510764][T25018] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 542.528855][T25020] bridge_slave_1: left allmulticast mode [ 542.534535][T25020] bridge_slave_1: left promiscuous mode [ 542.541175][T25020] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.552157][T25020] bridge_slave_0: left allmulticast mode [ 542.561157][T25020] bridge_slave_0: left promiscuous mode [ 542.569596][T25020] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.600755][T25047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5404'. [ 542.641415][T25020] bridge0 (unregistering): left allmulticast mode [ 542.808339][T25053] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5405'. [ 542.878735][T25053] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5405'. [ 542.899874][T24986] chnl_net:caif_netlink_parms(): no params data found [ 543.153089][T25081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5409'. [ 543.180005][T24986] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.196032][T25081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5409'. [ 543.217261][T24986] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.224571][T24986] bridge_slave_0: entered allmulticast mode [ 543.238933][T25083] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 543.250480][ T5939] IPVS: starting estimator thread 0... [ 543.262142][T24986] bridge_slave_0: entered promiscuous mode [ 543.295656][T25085] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 543.366040][T25089] IPVS: using max 29 ests per chain, 69600 per kthread [ 543.427825][T24986] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.435171][T24986] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.442929][T24986] bridge_slave_1: entered allmulticast mode [ 543.453151][T24986] bridge_slave_1: entered promiscuous mode [ 543.529014][T25105] syzkaller0: entered promiscuous mode [ 543.534600][T25105] syzkaller0: entered allmulticast mode [ 544.116236][ T9529] Bluetooth: hci0: command tx timeout [ 545.387932][T24986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.401327][T24986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.659173][T25119] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.666739][T25119] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.028187][T25119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.056260][T25119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.189300][ T9529] Bluetooth: hci0: command tx timeout [ 546.581467][T25135] syzkaller0: entered promiscuous mode [ 546.597388][T25135] syzkaller0: entered allmulticast mode [ 546.619654][T25160] netlink: 'syz.6.5425': attribute type 1 has an invalid length. [ 546.626021][T13569] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.637939][T13569] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.698932][T25163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5426'. [ 546.743955][T25155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5426'. [ 548.277597][ T9529] Bluetooth: hci0: command tx timeout [ 548.433340][T13569] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.444148][T24986] team0: Port device team_slave_0 added [ 548.469301][T25159] netlink: 'syz.3.5427': attribute type 2 has an invalid length. [ 548.481789][T13569] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.493368][T24986] team0: Port device team_slave_1 added [ 548.619769][T24986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.634051][T24986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.716117][T24986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.755379][T24986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.783459][T24986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.829342][T24986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.003387][T24986] hsr_slave_0: entered promiscuous mode [ 549.030879][T24986] hsr_slave_1: entered promiscuous mode [ 549.077148][T24986] debugfs: 'hsr0' already exists in 'hsr' [ 549.088197][T24986] Cannot create hsr debugfs directory [ 549.093795][T25201] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5435'. [ 549.109151][T25202] ipt_REJECT: TCP_RESET invalid for non-tcp [ 549.115506][T25201] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5435'. [ 549.117817][T25208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5436'. [ 549.179556][T25209] veth3: entered allmulticast mode [ 549.239161][T25207] veth5: entered allmulticast mode [ 549.319467][T25201] syzkaller0: entered promiscuous mode [ 549.324995][T25201] syzkaller0: entered allmulticast mode [ 549.469623][T25227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.683688][T25229] syzkaller0: entered promiscuous mode [ 549.693062][T25229] syzkaller0: entered allmulticast mode [ 549.700811][ T3033] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.711370][ T3033] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.037962][T25251] openvswitch: netlink: Flow key attribute not present in set flow. [ 550.187980][T25260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5450'. [ 550.197623][T25260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5450'. [ 551.544669][ T3033] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.555369][ T3033] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.661644][T25262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5451'. [ 551.703346][T25266] netlink: 'syz.6.5453': attribute type 1 has an invalid length. [ 551.714109][T25269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5451'. [ 551.728898][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5453'. [ 551.740287][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5453'. [ 551.744647][T24986] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.762276][T24986] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.774041][T24986] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 551.909511][T24986] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.922624][T24986] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.933437][T24986] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 552.059500][T25287] rdma_op ffff88807b6199f0 conn xmit_rdma 0000000000000000 [ 552.067856][T25287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5458'. [ 552.077470][T25287] netlink: 'syz.1.5458': attribute type 7 has an invalid length. [ 552.079801][T24986] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.085197][T25287] netlink: 'syz.1.5458': attribute type 8 has an invalid length. [ 552.085213][T25287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5458'. [ 552.122388][T24986] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.133029][T24986] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 552.289570][T24986] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.294243][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5462'. [ 552.305795][T24986] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.324616][T24986] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 552.488346][T25310] sock: sock_timestamping_bind_phc: sock not bind to device [ 552.534710][T25298] syzkaller0: entered promiscuous mode [ 552.540609][T25298] syzkaller0: entered allmulticast mode [ 556.961186][T25331] tipc: Enabling of bearer rejected, failed to enable media [ 557.271715][T25350] gtp0: entered promiscuous mode [ 557.367276][T25354] openvswitch: netlink: IP tunnel dst address not specified [ 557.463357][T25361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5477'. [ 557.478877][T24986] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 557.688643][T25380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5481'. [ 558.973498][T24986] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 558.985167][T24986] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 559.022261][T25376] syzkaller1: entered promiscuous mode [ 559.036678][T25376] syzkaller1: entered allmulticast mode [ 559.056367][T24986] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 559.212208][ T1132] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.247153][T25402] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5482'. [ 559.324915][ T13] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.337675][ T13] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 559.423720][ T13] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.448030][ T13] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 559.484540][ T13] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.496383][ T13] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 559.591931][T13569] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 559.605587][T13569] bond0 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 3a:b6:c6:c6:e0:ec - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 560.005587][T25433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5492'. [ 560.057929][T25434] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5492'. [ 560.165205][T13569] ` (unregistering): Released all slaves [ 560.178706][T13569] bond1 (unregistering): Released all slaves [ 560.204559][T13569] bond0 (unregistering): (slave veth5): Releasing backup interface [ 560.215319][T13569] bond0 (unregistering): Released all slaves [ 560.235248][T13569] bond2 (unregistering): (slave veth7): Releasing backup interface [ 560.245165][T13569] bond2 (unregistering): Released all slaves [ 560.370181][T13569] bond3 (unregistering): Released all slaves [ 560.390461][ T13] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.399022][ T13] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 560.410647][ T13] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.430376][T25435] ip6_vti0: entered allmulticast mode [ 560.452675][ T13] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.474368][T25431] ip6_vti0: left allmulticast mode [ 560.492984][ T13] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.522681][T13569] 9: left promiscuous mode [ 560.676387][T13569] tipc: Left network mode [ 560.780154][T25458] netlink: 'syz.3.5499': attribute type 11 has an invalid length. [ 560.902138][T24986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.029624][T24986] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.079338][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.086538][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.148577][T13569] hsr_slave_0: left promiscuous mode [ 561.155261][T13569] hsr_slave_1: left promiscuous mode [ 561.629586][T25496] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5508'. [ 562.250842][T25505] tipc: Enabling of bearer rejected, failed to enable media [ 562.289373][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.296553][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.510833][T25517] xt_hashlimit: max too large, truncated to 1048576 [ 562.615439][T25528] netlink: 'syz.1.5512': attribute type 3 has an invalid length. [ 562.642168][T25528] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5512'. [ 562.774584][T25537] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 562.889731][T25541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5517'. [ 562.908733][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 562.941322][T13569] IPVS: stop unused estimator thread 0... [ 562.984445][T24986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.114371][T25553] syzkaller0: entered promiscuous mode [ 563.125055][T25553] syzkaller0: entered allmulticast mode [ 563.395176][T24986] veth0_vlan: entered promiscuous mode [ 563.402247][T25529] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 563.411599][T24986] veth1_vlan: entered promiscuous mode [ 563.460271][T24986] veth0_macvtap: entered promiscuous mode [ 563.473683][T24986] veth1_macvtap: entered promiscuous mode [ 563.553998][T25573] IPv6: NLM_F_CREATE should be specified when creating new route [ 563.562063][T24986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.574974][T24986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.630342][ T3033] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.640596][ T3033] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.671740][ T3033] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.681363][ T3033] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.958780][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.004048][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.054635][T25597] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 564.054634][T25598] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5527'. [ 564.055255][T25597] netlink: 'syz.7.5528': attribute type 4 has an invalid length. [ 564.089172][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.098633][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.250260][T25608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5530'. [ 564.269972][T25614] xt_check_match: 55 callbacks suppressed [ 564.269993][T25614] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 564.549720][T25629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5538'. [ 564.666408][ T9529] Bluetooth: hci0: command 0x0c20 tx timeout [ 564.682685][T25640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5539'. [ 564.789867][T25640] netlink: 'syz.1.5539': attribute type 12 has an invalid length. [ 564.929742][T25648] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5541'. [ 564.957597][T25640] bond6: option primary_reselect: invalid value (255) [ 564.983366][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 564.994398][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 565.003675][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 565.013589][T25648] netlink: 'syz.5.5541': attribute type 2 has an invalid length. [ 565.024851][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 565.033157][T25640] bond6 (unregistering): Released all slaves [ 565.048815][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 565.068529][T25653] netlink: 'syz.3.5542': attribute type 23 has an invalid length. [ 565.166499][T25649] lo speed is unknown, defaulting to 1000 [ 565.481920][T25674] xt_l2tp: invalid flags combination: 8 [ 565.579015][T25672] syzkaller0: entered promiscuous mode [ 565.584536][T25672] syzkaller0: entered allmulticast mode [ 565.621194][T25681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5550'. [ 565.814003][T25687] netlink: 174 bytes leftover after parsing attributes in process `syz.3.5552'. [ 565.889019][T25649] chnl_net:caif_netlink_parms(): no params data found [ 567.160437][ T5829] Bluetooth: hci4: command tx timeout [ 567.806746][T25649] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.813929][T25649] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.856192][T25649] bridge_slave_0: entered allmulticast mode [ 567.879483][T25649] bridge_slave_0: entered promiscuous mode [ 567.895628][T25649] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.904298][T25649] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.913164][T25649] bridge_slave_1: entered allmulticast mode [ 567.929928][T25712] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5559'. [ 567.940089][T25649] bridge_slave_1: entered promiscuous mode [ 568.146985][T25649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.193485][T25719] delete_channel: no stack [ 568.198977][T25699] infiniband sy: set active [ 568.198997][T25699] infiniband sy: added bond_slave_0 [ 568.231903][T25719] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.5562'. [ 568.240871][T25649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.242207][T25719] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 568.270153][T25699] RDS/IB: sy: added [ 568.274143][T25699] smc: adding ib device sy with port count 1 [ 568.286470][T25699] smc: ib device sy port 1 has no pnetid [ 568.419548][T25729] tipc: Enabled bearer , priority 10 [ 568.450726][T25731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5564'. [ 568.463059][T25649] team0: Port device team_slave_0 added [ 568.560097][T25649] team0: Port device team_slave_1 added [ 568.684209][T25743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5570'. [ 568.697672][T25649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.704644][T25649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.732679][T25649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.755495][T25649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.775202][T25649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.801898][T25649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.930410][T25649] hsr_slave_0: entered promiscuous mode [ 568.947188][T25649] hsr_slave_1: entered promiscuous mode [ 568.953723][T25649] debugfs: 'hsr0' already exists in 'hsr' [ 568.976392][T25649] Cannot create hsr debugfs directory [ 569.135509][T25757] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 569.226861][ T5829] Bluetooth: hci4: command tx timeout [ 569.468548][T25769] team_slave_0: entered promiscuous mode [ 569.474648][T25769] team_slave_1: entered promiscuous mode [ 569.480474][T25769] geneve0: entered promiscuous mode [ 569.495298][T25769] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 569.503574][T25769] team0: Device macvtap1 is already an upper device of the team interface [ 569.528160][T25769] team_slave_0: left promiscuous mode [ 569.533677][T25769] team_slave_1: left promiscuous mode [ 569.539309][T25769] geneve0: left promiscuous mode [ 569.660227][T25773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 569.773221][T25780] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5581'. [ 569.899028][T25649] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 569.915565][T25649] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 569.935371][T25649] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 569.950040][T25649] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 569.961768][T25786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5582'. [ 570.208133][T25649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.259650][T25649] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.293188][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.300489][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.334186][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.341482][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.367255][T25805] netlink: 'syz.6.5587': attribute type 1 has an invalid length. [ 570.812390][T25822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5592'. [ 570.943460][T25649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.129032][T25839] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5596'. [ 571.306706][ T5829] Bluetooth: hci4: command tx timeout [ 571.840958][T25649] veth0_vlan: entered promiscuous mode [ 571.872152][T25649] veth1_vlan: entered promiscuous mode [ 572.007001][T25649] veth0_macvtap: entered promiscuous mode [ 572.045457][T25881] tipc: Enabling of bearer rejected, failed to enable media [ 572.066458][T25649] veth1_macvtap: entered promiscuous mode [ 572.147411][T25649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.182183][T25649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.221965][ T6736] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.240592][ T6736] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.269742][ T6736] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.313971][ T6736] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.351721][T25887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5608'. [ 572.521236][T25893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5610'. [ 572.591575][T25893] bond9: Invalid ad_actor_system MAC address. [ 572.605908][T25893] bond9: option ad_actor_system: invalid value (1) [ 572.621392][T25893] bond9 (unregistering): Released all slaves [ 572.645052][T25903] Bluetooth: MGMT ver 1.23 [ 572.717900][T13570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.747126][T13570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.896738][T13570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.904600][T13570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.395808][ T5829] Bluetooth: hci4: command tx timeout [ 573.420997][T25932] lo speed is unknown, defaulting to 1000 [ 573.584825][T25938] x_tables: duplicate underflow at hook 2 [ 573.611227][T25937] x_tables: duplicate underflow at hook 2 [ 573.621950][T25940] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 573.809348][T25951] netem: change failed [ 573.874806][T25954] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5627'. [ 573.913492][T25954] vxcan2: entered allmulticast mode [ 574.158381][T25971] netlink: 'syz.5.5633': attribute type 39 has an invalid length. [ 574.450699][T25989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5637'. [ 574.505493][T25993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5637'. [ 574.530154][T25989] xfrm2: entered promiscuous mode [ 574.541919][T25989] xfrm2: entered allmulticast mode [ 574.633139][T25996] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5639'. [ 574.816919][T26007] macsec0: default FDB implementation only supports local addresses [ 575.251645][T26020] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5649'. [ 575.417346][T26046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5656'. [ 575.546261][T26062] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5659'. [ 575.764359][T26073] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5664'. [ 575.781634][T26073] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5664'. [ 575.803930][T26073] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5664'. [ 576.091637][T26101] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 576.108036][T26101] bridge0: entered allmulticast mode [ 576.114901][T26101] netlink: 'syz.7.5672': attribute type 1 has an invalid length. [ 576.126539][T26101] netlink: 'syz.7.5672': attribute type 1 has an invalid length. [ 576.135243][T26101] netlink: 'syz.7.5672': attribute type 1 has an invalid length. [ 576.153164][T26101] netlink: 'syz.7.5672': attribute type 1 has an invalid length. [ 576.704890][T26138] syzkaller0: entered promiscuous mode [ 576.743743][T26138] syzkaller0: entered allmulticast mode [ 576.806145][T26147] netlink: 'syz.1.5687': attribute type 1 has an invalid length. [ 576.852488][T26149] sctp: [Deprecated]: syz.7.5685 (pid 26149) Use of int in maxseg socket option. [ 576.852488][T26149] Use struct sctp_assoc_value instead [ 577.076321][T26163] lo speed is unknown, defaulting to 1000 [ 579.409525][T26203] __nla_validate_parse: 7 callbacks suppressed [ 579.409544][T26203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5702'. [ 579.656128][T26220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5708'. [ 579.677271][T26218] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5709'. [ 579.769952][T26218] syzkaller1: entered promiscuous mode [ 579.775462][T26218] syzkaller1: entered allmulticast mode [ 579.900917][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5712'. [ 580.041608][T26229] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.080174][T26231] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 580.103780][T26231] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 580.112064][T26231] gretap1: entered promiscuous mode [ 580.118638][T26231] gretap1: entered allmulticast mode [ 580.126433][T26244] tipc: Enabling of bearer rejected, failed to enable media [ 580.171978][T26229] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.311983][T26229] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.484164][T26256] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 580.520914][T26256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5721'. [ 580.552922][T26229] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.805140][ T3005] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.869074][ T1132] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.894271][ T9529] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.907483][ T9529] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.919891][ T9529] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 580.930188][ T9529] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 580.944228][ T9529] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 580.978225][T26277] xt_NFQUEUE: number of total queues is 0 [ 580.979052][T13570] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.992837][T13570] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.059490][T26273] lo speed is unknown, defaulting to 1000 [ 581.108129][T26282] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5726'. [ 581.197732][T26282] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 581.374247][ T3498] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.418985][ T3498] netdevsim netdevsim3 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.489327][ T6736] netdevsim netdevsim3 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.544968][ T3498] netdevsim netdevsim3 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.562981][ T1132] batadv0: left promiscuous mode [ 581.569437][ T1132] bridge0: port 2(batadv0) entered disabled state [ 581.577732][ T1132] : left allmulticast mode [ 581.582297][ T1132] : left promiscuous mode [ 581.588385][ T1132] bridge0: port 1() entered disabled state [ 582.204513][ T30] audit: type=1804 audit(1763683567.975:8): pid=26321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.5735" name="/newroot/37/cgroup.controllers" dev="tmpfs" ino=206 res=1 errno=0 [ 582.230647][ T30] audit: type=1800 audit(1763683567.975:9): pid=26321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5735" name="cgroup.controllers" dev="tmpfs" ino=206 res=0 errno=0 [ 582.271193][ T1132] team0: Port device bridge5 removed [ 582.633665][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.642832][ T1132] bond_slave_0: left allmulticast mode [ 582.650407][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.659895][ T1132] bond_slave_1: left allmulticast mode [ 582.669271][ T1132] bond0 (unregistering): (slave team0): Releasing backup interface [ 582.678144][ T1132] team0: left allmulticast mode [ 582.683000][ T1132] team_slave_0: left allmulticast mode [ 582.688721][ T1132] team_slave_1: left allmulticast mode [ 582.696153][ T1132] bond0 (unregistering): Released all slaves [ 582.710373][ T1132] bond1 (unregistering): Released all slaves [ 582.722809][ T1132] bond2 (unregistering): Released all slaves [ 582.735484][ T1132] bond3 (unregistering): Released all slaves [ 582.755569][ T1132] bond4 (unregistering): (slave bond5): Releasing backup interface [ 582.769526][ T1132] bond4 (unregistering): Released all slaves [ 582.886819][ T1132] bond5 (unregistering): Released all slaves [ 582.899604][ T1132] bond6 (unregistering): Released all slaves [ 582.913347][ T1132] bond7 (unregistering): Released all slaves [ 582.926667][ T1132] bond8 (unregistering): Released all slaves [ 582.986215][ T5829] Bluetooth: hci1: command tx timeout [ 583.103857][T26329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5739'. [ 583.194458][T26339] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5741'. [ 583.240552][T26339] xfrm1: entered promiscuous mode [ 583.248206][T26339] xfrm1: entered allmulticast mode [ 583.394460][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.431639][T26273] chnl_net:caif_netlink_parms(): no params data found [ 583.510210][T26363] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5747'. [ 583.531016][T26364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5744'. [ 583.749918][T26374] netlink: 'syz.7.5749': attribute type 5 has an invalid length. [ 583.770765][T26374] netlink: 'syz.7.5749': attribute type 11 has an invalid length. [ 585.066090][ T5829] Bluetooth: hci1: command tx timeout [ 585.350844][T26364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.382623][T26364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.425641][T26372] netlink: 'syz.7.5749': attribute type 1 has an invalid length. [ 585.433766][T26372] netlink: 'syz.7.5749': attribute type 2 has an invalid length. [ 585.576128][T26378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.710244][T26387] __nla_validate_parse: 7 callbacks suppressed [ 585.710261][T26387] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.5753'. [ 585.775337][T26273] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.785539][T26273] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.793887][T26273] bridge_slave_0: entered allmulticast mode [ 585.816867][T26273] bridge_slave_0: entered promiscuous mode [ 585.830405][T26391] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 585.840783][T26273] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.852546][T26399] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5756'. [ 585.892695][T26273] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.913693][T26273] bridge_slave_1: entered allmulticast mode [ 585.932528][T26273] bridge_slave_1: entered promiscuous mode [ 585.940805][ T1132] tipc: Disabling bearer [ 585.951442][ T1132] tipc: Left network mode [ 586.080582][T26406] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5759'. [ 586.161861][T26273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.278225][T26273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.414333][T26273] team0: Port device team_slave_0 added [ 586.461067][T26273] team0: Port device team_slave_1 added [ 586.514387][T26273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.521650][T26273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.550848][T26273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.566451][T26273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.573877][T26273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.602425][T26273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.658945][T26273] hsr_slave_0: entered promiscuous mode [ 586.665404][T26273] hsr_slave_1: entered promiscuous mode [ 586.674004][T26273] debugfs: 'hsr0' already exists in 'hsr' [ 586.685201][T26273] Cannot create hsr debugfs directory [ 586.831308][T26273] netdevsim netdevsim3 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.889252][T26273] netdevsim netdevsim3 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.054747][T26273] netdevsim netdevsim3 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.145984][ T5829] Bluetooth: hci1: command tx timeout [ 587.208803][T26273] netdevsim netdevsim3 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.451903][T26454] syzkaller0: entered promiscuous mode [ 587.463712][T26454] syzkaller0: entered allmulticast mode [ 587.480943][ T1132] hsr_slave_0: left promiscuous mode [ 587.489450][ T1132] hsr_slave_1: left promiscuous mode [ 587.495629][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.582873][T26467] Cannot find set identified by id 1 to match [ 587.601628][T26467] Cannot find set identified by id 1 to match [ 587.608334][T26467] Cannot find set identified by id 1 to match [ 587.614555][T26467] Cannot find set identified by id 1 to match [ 587.644369][T26467] Cannot find set identified by id 1 to match [ 587.662657][T26472] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5774'. [ 587.666514][T26467] Cannot find set identified by id 1 to match [ 587.679524][T26467] Cannot find set identified by id 1 to match [ 587.686125][T26467] Cannot find set identified by id 1 to match [ 587.692627][T26467] Cannot find set identified by id 1 to match [ 587.700958][T26467] Cannot find set identified by id 1 to match [ 587.997846][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 588.047584][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 589.232503][ T5829] Bluetooth: hci1: command tx timeout [ 590.316808][T26472] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 590.327461][T26472] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5774'. [ 590.408971][T26479] delete_channel: no stack [ 590.472910][T26480] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5776'. [ 592.194286][T26468] lo speed is unknown, defaulting to 1000 [ 592.206564][T26484] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5777'. [ 592.251971][T26273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 592.271677][T26273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 592.366762][T26273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 592.401243][T26273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 592.420352][T26492] IPVS: set_ctl: invalid protocol: 204 172.30.0.7:20001 [ 592.430200][T26493] IPVS: set_ctl: invalid protocol: 204 172.30.0.7:20001 [ 592.464158][ T1132] IPVS: stop unused estimator thread 0... [ 592.780633][T26273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.849609][ T1132] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.871857][ T1132] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.881588][T26520] xt_ecn: cannot match TCP bits for non-tcp packets [ 592.971713][ T1132] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.004235][T26527] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5786'. [ 593.019189][ T1132] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.063259][T26531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5789'. [ 593.099990][T26273] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.121067][ T1132] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.139566][ T1132] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.180503][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.187755][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.229782][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.236974][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.294868][ T1132] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.328364][ T1132] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.344603][T26542] netlink: 'syz.6.5793': attribute type 2 has an invalid length. [ 593.646475][ T3498] netdevsim netdevsim2 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.702465][ T37] netdevsim netdevsim2 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.713900][ T37] netdevsim netdevsim2 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.755590][ T3005] netdevsim netdevsim2 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.772715][ T1132] team0: left allmulticast mode [ 593.794451][ T1132] team_slave_0: left allmulticast mode [ 593.816941][ T1132] team_slave_1: left allmulticast mode [ 593.822541][ T1132] team0: left promiscuous mode [ 593.832809][ T1132] team_slave_0: left promiscuous mode [ 593.839000][ T1132] team_slave_1: left promiscuous mode [ 593.846512][ T1132] bridge0: port 4(team0) entered disabled state [ 593.860098][ T1132] bond2: left promiscuous mode [ 593.866590][T26562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5797'. [ 593.871269][ T1132] bridge0: port 3(bond2) entered disabled state [ 593.886906][ T1132] bridge_slave_1: left allmulticast mode [ 593.892752][ T1132] bridge_slave_1: left promiscuous mode [ 593.901174][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.912742][ T1132] bridge_slave_0: left allmulticast mode [ 593.920957][ T1132] bridge_slave_0: left promiscuous mode [ 593.929670][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.939876][T26565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 594.755018][ T1132] bond1 (unregistering): Released all slaves [ 594.884535][ T1132] bond2 (unregistering): Released all slaves [ 594.898041][ T1132] bond3 (unregistering): Released all slaves [ 594.912272][ T1132] bond4 (unregistering): Released all slaves [ 594.925686][ T1132] bond5 (unregistering): Released all slaves [ 594.944396][ T1132] bond0 (unregistering): Released all slaves [ 595.152253][T26273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.178435][ T1132] tipc: Disabling bearer [ 595.193999][ T1132] tipc: Left network mode [ 595.345526][T26586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5804'. [ 595.502691][T26273] veth0_vlan: entered promiscuous mode [ 595.529900][T26594] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5806'. [ 595.567940][T26591] netlink: 'syz.1.5806': attribute type 29 has an invalid length. [ 595.588581][T26600] netlink: 'syz.6.5808': attribute type 7 has an invalid length. [ 595.593877][T26592] netlink: 'syz.1.5806': attribute type 29 has an invalid length. [ 595.621012][T26273] veth1_vlan: entered promiscuous mode [ 595.660491][T26600] netlink: 'syz.6.5808': attribute type 7 has an invalid length. [ 595.795612][T26273] veth0_macvtap: entered promiscuous mode [ 595.839271][T26273] veth1_macvtap: entered promiscuous mode [ 595.934716][T26614] netlink: 'syz.6.5811': attribute type 1 has an invalid length. [ 596.138035][T26615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 596.153086][T26615] bond2: (slave bond3): making interface the new active one [ 596.161434][T26618] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5811'. [ 596.161637][T26615] bond2: (slave bond3): Enslaving as an active interface with an up link [ 596.184359][T26618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.327258][T26614] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 596.385364][T26273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.454416][T26273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.513784][ T3498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.558805][ T3498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.600075][ T3498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.623684][ T3498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.816811][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.824236][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.909358][ T1132] veth1_macvtap: left promiscuous mode [ 596.915046][ T1132] veth0_macvtap: left promiscuous mode [ 596.985274][T26648] netlink: 'syz.5.5818': attribute type 11 has an invalid length. [ 597.095802][T26662] netlink: 'syz.5.5818': attribute type 6 has an invalid length. [ 597.253568][T26672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5825'. [ 597.420336][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 597.469137][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 597.976469][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.984325][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.042040][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.050977][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.118692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.184773][T26682] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5826'. [ 598.212472][T26687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5718'. [ 598.230788][T26688] 0: reclassify loop, rule prio 0, protocol 800 [ 598.239990][T26687] 0: reclassify loop, rule prio 0, protocol 800 [ 598.389731][T26693] geneve2: entered promiscuous mode [ 598.429727][T26697] bond0: Error: Cannot enslave bond to itself. [ 598.442646][T26697] Cannot find del_set index 0 as target [ 598.649122][T26719] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5838'. [ 598.714166][T26718] bond1 (unregistering): Released all slaves [ 598.868193][T26733] tipc: Started in network mode [ 598.873608][T26733] tipc: Node identity ac14140f, cluster identity 4711 [ 598.881467][T26733] tipc: New replicast peer: 255.255.255.255 [ 598.889060][T26733] tipc: Enabled bearer , priority 10 [ 599.334514][T26758] bond1: invalid ARP target 0.0.0.0 specified for addition [ 599.344870][T26758] bond1: option arp_ip_target: invalid value (0) [ 599.362470][T26758] bond1 (unregistering): Released all slaves [ 599.449063][T26765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5852'. [ 599.461200][T26765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5852'. [ 599.539672][T26765] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5852'. [ 599.548236][T26768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5853'. [ 599.587269][T26765] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5852'. [ 599.616720][T26765] netlink: 'syz.1.5852': attribute type 5 has an invalid length. [ 599.640579][T26765] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5852'. [ 599.718493][T26777] bond6: entered promiscuous mode [ 599.744387][T26777] bond6: entered allmulticast mode [ 599.777395][T26777] 8021q: adding VLAN 0 to HW filter on device bond6 [ 599.819999][T26784] gtp0: entered promiscuous mode [ 599.828658][T26784] gtp0: entered allmulticast mode [ 600.006152][T25152] tipc: Node number set to 2886997007 [ 600.638506][T26836] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 600.785026][T26849] netlink: 'syz.7.5873': attribute type 1 has an invalid length. [ 600.853925][T26856] netlink: 'syz.7.5877': attribute type 4 has an invalid length. [ 600.862581][T26857] netlink: 'syz.5.5876': attribute type 6 has an invalid length. [ 601.253480][T26882] netlink: 'syz.7.5887': attribute type 7 has an invalid length. [ 601.349300][T26885] syzkaller1: entered allmulticast mode [ 601.466635][ T1132] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.486595][ T1132] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.509517][T26897] bond0: entered allmulticast mode [ 601.514680][T26897] bond_slave_0: entered allmulticast mode [ 601.520979][T26897] bond_slave_1: entered allmulticast mode [ 601.553723][ T1132] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.598306][ T1132] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.629415][T26904] SET target dimension over the limit! [ 601.755260][T26909] xt_TCPMSS: Only works on TCP SYN packets [ 602.082934][T26932] netlink: 'syz.1.5899': attribute type 1 has an invalid length. [ 602.486881][T26965] syz.7.5912 (26965) used obsolete PPPIOCDETACH ioctl [ 602.507896][T26966] xt_NFQUEUE: number of total queues is 0 [ 602.527164][T26965] __nla_validate_parse: 14 callbacks suppressed [ 602.527192][T26965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5912'. [ 602.531984][T26969] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5914'. [ 602.728559][T26979] bridge2: entered promiscuous mode [ 602.744820][T26979] bridge2: entered allmulticast mode [ 602.913638][T26991] syzkaller0: entered promiscuous mode [ 602.919442][T26991] syzkaller0: entered allmulticast mode [ 603.362206][T27019] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.865417][T27055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 604.168631][T27069] netlink: 'syz.7.5943': attribute type 21 has an invalid length. [ 604.195843][T27069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5943'. [ 604.233791][ T3498] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.248344][T27069] netlink: 'syz.7.5943': attribute type 21 has an invalid length. [ 604.273073][ T3498] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.294281][T27069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5943'. [ 604.320939][ T3498] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.321926][T27078] openvswitch: netlink: Key type 64 is out of range max 32 [ 604.349921][ T3498] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.590227][T27091] netlink: 'syz.6.5951': attribute type 7 has an invalid length. [ 605.009826][T27106] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5956'. [ 605.050889][T27102] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.071297][T27102] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.078553][T27102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.121461][T27114] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5956'. [ 605.287840][T27124] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5959'. [ 605.324489][ T9529] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 605.336434][T27123] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5959'. [ 605.347466][ T9529] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 605.358658][ T9529] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 605.369445][ T9529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 605.381839][ T9529] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 605.453623][T27126] lo speed is unknown, defaulting to 1000 [ 606.143053][T27159] xt_socket: unknown flags 0xe4 [ 606.362280][T27164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5968'. [ 606.579591][T27126] chnl_net:caif_netlink_parms(): no params data found [ 606.643668][T27181] netlink: 'syz.5.5971': attribute type 13 has an invalid length. [ 606.932012][T27188] netlink: 'syz.6.5974': attribute type 2 has an invalid length. [ 606.956863][T27126] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.964039][T27126] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.982064][T27126] bridge_slave_0: entered allmulticast mode [ 606.991943][T27126] bridge_slave_0: entered promiscuous mode [ 607.004140][T27126] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.014080][T27126] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.027341][T27126] bridge_slave_1: entered allmulticast mode [ 607.035238][T27126] bridge_slave_1: entered promiscuous mode [ 607.177161][T27126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.271763][T27126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.372300][T27126] team0: Port device team_slave_0 added [ 607.428376][T27126] team0: Port device team_slave_1 added [ 607.468597][ T5829] Bluetooth: hci3: command tx timeout [ 607.542981][T27126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.554910][T27126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.585521][T27126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.602130][T27216] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5982'. [ 607.615154][T27231] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5985'. [ 607.648773][T27126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.655959][T27126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.689849][T27126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.812405][T27126] hsr_slave_0: entered promiscuous mode [ 607.822982][T27126] hsr_slave_1: entered promiscuous mode [ 607.834154][T27126] debugfs: 'hsr0' already exists in 'hsr' [ 607.843688][T27126] Cannot create hsr debugfs directory [ 608.540369][T27126] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.607376][T27126] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.646074][T27126] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 608.718067][T27270] netlink: 'syz.6.5997': attribute type 5 has an invalid length. [ 608.806155][T27126] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.843115][T27126] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.863649][T27126] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 608.950982][T27126] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.972446][T27126] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.988818][T27290] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6002'. [ 608.995798][T27126] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 609.149506][T27126] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.174284][T27126] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.215795][T27126] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 609.261479][T27299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6004'. [ 609.261480][T27302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6004'. [ 609.415556][T27304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6005'. [ 609.432218][T27308] netlink: 'syz.7.6006': attribute type 13 has an invalid length. [ 609.548623][ T5829] Bluetooth: hci3: command tx timeout [ 609.586563][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.707346][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.797539][T27126] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 609.848897][T27126] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 609.884177][T27126] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 609.898232][T27325] netlink: 'syz.6.6010': attribute type 1 has an invalid length. [ 609.911078][T27126] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 609.980565][T27329] gretap2: entered promiscuous mode [ 609.997212][T27329] bond4: (slave gretap2): making interface the new active one [ 610.006851][T27329] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 610.051239][T27325] bond4: entered promiscuous mode [ 610.070228][T27325] macvlan2: entered promiscuous mode [ 610.138756][T27325] macvlan2: entered allmulticast mode [ 610.169114][T27325] bond4: entered allmulticast mode [ 610.174286][T27325] gretap2: entered allmulticast mode [ 610.215614][T27325] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 610.226816][T27325] bond4: left promiscuous mode [ 610.240026][T27341] netlink: 'syz.3.6013': attribute type 1 has an invalid length. [ 610.297844][T27344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6013'. [ 610.389326][T27341] 8021q: adding VLAN 0 to HW filter on device bond3 [ 610.432297][T27344] bond3: entered promiscuous mode [ 610.448045][T27344] bond3: entered allmulticast mode [ 610.454770][T27339] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6012'. [ 610.491185][T27347] bond3: (slave dummy0): making interface the new active one [ 610.519741][T27347] dummy0: entered promiscuous mode [ 610.530048][T27347] dummy0: entered allmulticast mode [ 610.547236][T27347] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 610.733105][T27350] bond3 (unregistering): (slave dummy0): Releasing active interface [ 610.742452][T27350] dummy0: left promiscuous mode [ 610.748401][T27350] dummy0: left allmulticast mode [ 610.758748][T27350] bond3 (unregistering): Released all slaves [ 611.024398][T27126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.081992][T27126] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.103814][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.111036][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.131212][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.138429][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.208160][T27374] nbd3: detected capacity change from 0 to 127 [ 611.217847][ T5829] block nbd3: Receive control failed (result -32) [ 611.267195][T27382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.281272][T27382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6026'. [ 611.371252][T27388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6028'. [ 611.385070][T27391] netlink: 'syz.5.6027': attribute type 2 has an invalid length. [ 611.485648][T27395] macsec1: entered promiscuous mode [ 611.598452][T27399] bond3: entered promiscuous mode [ 611.603672][T27399] bond3: entered allmulticast mode [ 611.611534][T27399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 611.611889][T27403] netlink: 'syz.5.6031': attribute type 1 has an invalid length. [ 611.629363][ T5829] Bluetooth: hci3: command tx timeout [ 611.679921][T27403] netlink: 'syz.5.6031': attribute type 1 has an invalid length. [ 611.731517][T27409] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 611.743285][T27409] bond4 (unregistering): Released all slaves [ 611.795056][T27126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.928981][T27126] veth0_vlan: entered promiscuous mode [ 611.960533][T27126] veth1_vlan: entered promiscuous mode [ 612.198188][T27126] veth0_macvtap: entered promiscuous mode [ 612.230784][T27441] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 612.254118][T27438] xfrm1: entered promiscuous mode [ 612.272581][T27438] xfrm1: entered allmulticast mode [ 612.311394][T27126] veth1_macvtap: entered promiscuous mode [ 612.355220][T27126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.388907][T27126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.410246][ T3498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.422584][ T3498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.458178][ T3498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.469618][T25149] IPVS: starting estimator thread 0... [ 612.498335][ T3498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.587373][T27454] IPVS: using max 35 ests per chain, 84000 per kthread [ 612.651760][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.674309][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.775223][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.786945][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.904042][T27473] __nla_validate_parse: 8 callbacks suppressed [ 612.904061][T27473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6052'. [ 612.999479][T27473] syzkaller0: entered promiscuous mode [ 613.010723][T27473] syzkaller0: entered allmulticast mode [ 613.021768][T27477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5949'. [ 613.046514][T27480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6054'. [ 613.057339][T27477] bridge: RTM_NEWNEIGH with invalid ether address [ 613.140157][T27486] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20001 [ 613.152276][T27486] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20004 [ 613.205437][T27493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6058'. [ 613.282462][T27493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6058'. [ 613.328561][T27498] vxcan0: tx address claim with different name [ 613.335334][T27498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6060'. [ 613.510810][T27501] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6061'. [ 613.521940][T27511] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6064'. [ 613.663531][T27516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6066'. [ 613.677377][T27516] netlink: 'syz.1.6066': attribute type 7 has an invalid length. [ 613.685214][T27516] netlink: 'syz.1.6066': attribute type 8 has an invalid length. [ 613.709356][ T5829] Bluetooth: hci3: command tx timeout [ 613.742810][T27516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6066'. [ 615.730355][T27532] netlink: 'syz.7.6070': attribute type 29 has an invalid length. [ 616.611785][T27606] netlink: 'syz.7.6091': attribute type 1 has an invalid length. [ 616.785594][T27610] macvtap1: entered allmulticast mode [ 616.804285][T27610] veth0_macvtap: entered allmulticast mode [ 617.094635][T27635] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 617.113928][T27637] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 617.137449][T27630] syzkaller0: entered promiscuous mode [ 617.142963][T27630] syzkaller0: entered allmulticast mode [ 617.174448][T27630] syzkaller1: entered promiscuous mode [ 617.180233][T27630] syzkaller1: entered allmulticast mode [ 617.305004][T27647] netlink: 'syz.7.6108': attribute type 29 has an invalid length. [ 617.694781][T27676] netlink: 'syz.3.6116': attribute type 1 has an invalid length. [ 617.944458][T27687] __nla_validate_parse: 5 callbacks suppressed [ 617.944476][T27687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6122'. [ 617.951467][T27683] bond0: Caught tx_queue_len zero misconfig [ 617.991164][T27686] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6120'. [ 618.100519][T27694] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6123'. [ 618.280816][T27700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.292840][T27686] ip_vti0: entered allmulticast mode [ 618.305575][T27693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6122'. [ 618.319582][T27693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6122'. [ 618.460824][T27704] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6126'. [ 618.484963][T27702] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6126'. [ 618.533731][T27707] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 618.567666][T27707] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 618.916270][T27723] tipc: Started in network mode [ 618.925993][T27723] tipc: Node identity 025826e809ee, cluster identity 4711 [ 618.943630][T27723] tipc: Enabled bearer , priority 0 [ 618.960119][T27723] syzkaller0: entered promiscuous mode [ 618.974185][T27723] syzkaller0: entered allmulticast mode [ 619.059307][T27723] tipc: Resetting bearer [ 619.087818][T27722] tipc: Resetting bearer [ 619.142390][T27722] tipc: Disabling bearer [ 619.371660][T27731] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6135'. [ 619.418654][T27731] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6135'. [ 619.516709][T27731] bond4: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 619.537713][T27740] netlink: 'syz.5.6138': attribute type 1 has an invalid length. [ 619.556465][T27741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6137'. [ 619.575807][T27741] netlink: 'syz.1.6137': attribute type 3 has an invalid length. [ 619.807297][T27746] netlink: 'syz.7.6139': attribute type 21 has an invalid length. [ 619.831411][T27748] SET target dimension over the limit! [ 620.603410][T27798] netlink: 'syz.1.6157': attribute type 10 has an invalid length. [ 620.671951][T27795] syzkaller0: entered promiscuous mode [ 620.680126][T27795] syzkaller0: entered allmulticast mode [ 620.704439][T27798] team0: Port device dummy0 added [ 620.711408][T27805] vet0_virt_wifi: renamed from lo (while UP) [ 620.903529][T27817] xt_hashlimit: size too large, truncated to 1048576 [ 621.083329][T27826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 621.117536][T27833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 623.031110][T27853] __nla_validate_parse: 10 callbacks suppressed [ 623.031129][T27853] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6175'. [ 623.061655][T27857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6174'. [ 623.065336][T27859] netlink: 'syz.3.6172': attribute type 1 has an invalid length. [ 623.075601][T27857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6174'. [ 623.109097][T27854] tipc: Enabling of bearer rejected, failed to enable media [ 623.111883][T27849] can: request_module (can-proto-0) failed. [ 623.310171][T27868] netlink: 'syz.3.6177': attribute type 1 has an invalid length. [ 623.325562][T27870] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6178'. [ 623.750274][T27904] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6190'. [ 623.772247][T27904] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6190'. [ 623.775973][T27908] xt_CT: No such helper "netbios-ns" [ 623.788064][T27912] netlink: 'syz.3.6191': attribute type 1 has an invalid length. [ 623.808385][T27912] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6191'. [ 624.086547][T27934] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6199'. [ 624.097771][T27932] netlink: 'syz.7.6198': attribute type 1 has an invalid length. [ 624.101641][T27934] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6199'. [ 624.153564][T27941] netlink: 'syz.5.6200': attribute type 1 has an invalid length. [ 624.184995][T27932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.212797][T27943] bond1: (slave geneve2): making interface the new active one [ 624.223869][T27943] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 624.355527][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.499152][T27963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6207'. [ 624.557858][T27967] tipc: Started in network mode [ 624.562767][T27967] tipc: Node identity 14a4ee1ee438, cluster identity 4711 [ 624.597285][T27967] tipc: Enabled bearer , priority 2 [ 624.628456][T27967] tipc: Enabling of bearer rejected, already enabled [ 624.656469][T27967] tipc: Enabling of bearer rejected, already enabled [ 624.680057][T27967] tipc: Enabling of bearer rejected, already enabled [ 624.741899][T27967] tipc: Enabling of bearer rejected, already enabled [ 624.834614][T27973] : entered promiscuous mode [ 624.875046][T27984] netlink: 'syz.1.6209': attribute type 3 has an invalid length. [ 624.889913][T27967] tipc: Enabling of bearer rejected, already enabled [ 624.915519][T27981] netlink: 'syz.1.6209': attribute type 11 has an invalid length. [ 624.949544][T27967] tipc: Enabling of bearer rejected, already enabled [ 624.985004][T27967] tipc: Enabling of bearer rejected, already enabled [ 625.000774][T27971] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 625.003048][T27967] tipc: Enabling of bearer rejected, already enabled [ 625.060627][T27987] xfrm1: entered allmulticast mode [ 625.096462][T27967] tipc: Enabling of bearer rejected, already enabled [ 625.127854][T27967] tipc: Enabling of bearer rejected, already enabled [ 625.152515][T27967] tipc: Enabling of bearer rejected, already enabled [ 625.178810][T27967] tipc: Enabling of bearer rejected, already enabled [ 625.196393][T27967] tipc: Enabling of bearer rejected, already enabled [ 625.226407][T27967] tipc: Enabling of bearer rejected, already enabled [ 625.247436][T27967] tipc: Enabling of bearer rejected, already enabled [ 625.286421][T27967] tipc: Enabling of bearer rejected, already enabled [ 625.529671][T28024] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 625.716906][T25149] tipc: Node number set to 4036816414 [ 625.760561][T28036] netlink: 'syz.6.6226': attribute type 12 has an invalid length. [ 625.768732][T28036] netlink: 'syz.6.6226': attribute type 29 has an invalid length. [ 626.070066][T27967] tipc: Enabling of bearer rejected, already enabled [ 626.220800][T28047] netlink: 'syz.7.6230': attribute type 1 has an invalid length. [ 626.294722][T28050] syzkaller1: entered promiscuous mode [ 626.307018][T28050] syzkaller1: entered allmulticast mode [ 626.473036][T28060] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 626.776808][T28083] syzkaller1: entered promiscuous mode [ 626.784731][T28083] syzkaller1: entered allmulticast mode [ 626.837933][T28088] Cannot find del_set index 4 as target [ 626.844192][T28088] tunl0: Caught tx_queue_len zero misconfig [ 627.550078][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 627.732139][T28141] siw: device registration error -23 [ 627.745564][T28147] bond5: option miimon: invalid value (18446744073709551585) [ 627.753334][T28147] bond5: option miimon: allowed values 0 - 2147483647 [ 627.765184][T28147] bond5 (unregistering): Released all slaves [ 627.779734][T28155] netlink: 'syz.5.6261': attribute type 5 has an invalid length. [ 628.074819][T28175] __nla_validate_parse: 10 callbacks suppressed [ 628.074836][T28175] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6268'. [ 628.374459][T28192] syzkaller1: entered promiscuous mode [ 628.382753][T28192] syzkaller1: entered allmulticast mode [ 628.476023][T28197] netlink: 'syz.6.6273': attribute type 1 has an invalid length. [ 628.642279][T28211] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 630.536487][T28216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6280'. [ 630.552237][T28216] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.564178][T28217] tipc: Enabled bearer , priority 0 [ 630.592282][T28219] syzkaller0: entered promiscuous mode [ 630.606609][T28219] syzkaller0: entered allmulticast mode [ 630.623155][T28227] tipc: Resetting bearer [ 630.678240][T28227] tipc: Resetting bearer [ 630.714115][T28227] tipc: Disabling bearer [ 630.819847][T28235] tipc: Started in network mode [ 630.824771][T28235] tipc: Node identity 2220946fb6cb, cluster identity 4711 [ 630.856044][T28235] tipc: Enabled bearer , priority 0 [ 630.876253][T28235] syzkaller0: entered promiscuous mode [ 630.883039][T28235] syzkaller0: entered allmulticast mode [ 630.896892][T28246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6288'. [ 630.935128][T28248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6287'. [ 631.093569][T28254] tipc: Resetting bearer [ 631.103745][T28248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.664344][T28299] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 631.771157][T28234] tipc: Resetting bearer [ 631.806778][T28234] tipc: Disabling bearer [ 632.011053][T28311] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6308'. [ 632.024674][T28313] netlink: 'syz.5.6307': attribute type 1 has an invalid length. [ 632.051059][T28313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6307'. [ 632.051210][T28308] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 632.063297][T28316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6306'. [ 632.082948][T24459] IPVS: starting estimator thread 0... [ 632.090363][T28312] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6307'. [ 632.175795][T28318] IPVS: using max 29 ests per chain, 69600 per kthread [ 632.360579][T28335] netlink: 'syz.1.6314': attribute type 33 has an invalid length. [ 632.470048][T28347] netlink: 'syz.7.6318': attribute type 1 has an invalid length. [ 632.644781][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6322'. [ 632.675134][T28353] bond0: invalid ARP target 0.0.0.0 specified for addition [ 632.685321][T28353] bond0: option arp_ip_target: invalid value (0) [ 632.705818][T28357] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 632.723661][T28357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6325'. [ 632.886421][T28372] Bluetooth: MGMT ver 1.23 [ 632.896622][T28371] netlink: 'syz.5.6329': attribute type 19 has an invalid length. [ 633.104565][T28385] __nla_validate_parse: 5 callbacks suppressed [ 633.104583][T28385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6336'. [ 633.134756][T28385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6336'. [ 633.147260][T28385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6336'. [ 633.159939][T28385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6336'. [ 633.170861][T28389] netlink: 'syz.6.6337': attribute type 2 has an invalid length. [ 633.214499][T28391] tipc: Enabled bearer , priority 0 [ 633.229859][T28391] syzkaller0: entered promiscuous mode [ 633.239371][T28391] syzkaller0: entered allmulticast mode [ 633.284357][T28391] tipc: Resetting bearer [ 633.297944][T28390] tipc: Resetting bearer [ 633.317562][T28390] tipc: Disabling bearer [ 633.603754][T28410] netlink: 'syz.1.6345': attribute type 1 has an invalid length. [ 633.613009][T28410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6345'. [ 633.621964][T28410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6345'. [ 633.713663][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b736800: rx timeout, send abort [ 633.722190][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b736800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 633.794099][T28412] lo speed is unknown, defaulting to 1000 [ 633.814756][T28415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6347'. [ 633.828906][T28415] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6347'. [ 633.914759][T28415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6347'. [ 634.020893][T28419] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.6348'. [ 634.719099][T28456] netlink: 'syz.1.6359': attribute type 1 has an invalid length. [ 635.468787][ T5829] Bluetooth: hci3: command tx timeout [ 636.416659][T28540] netlink: 'syz.1.6387': attribute type 1 has an invalid length. [ 636.436390][T28540] netlink: 'syz.1.6387': attribute type 1 has an invalid length. [ 636.656946][T28550] netlink: 'syz.3.6389': attribute type 29 has an invalid length. [ 636.681494][T28550] netlink: 'syz.3.6389': attribute type 29 has an invalid length. [ 636.719309][T28550] netlink: 'syz.3.6389': attribute type 1 has an invalid length. [ 636.969502][T28574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.032412][T28580] x_tables: duplicate underflow at hook 3 [ 637.050778][T28577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.236890][T28590] syzkaller0: entered promiscuous mode [ 637.242715][T28590] syzkaller0: entered allmulticast mode [ 637.493610][T28610] bridge0: entered allmulticast mode [ 637.851606][T28625] ip6tnl0: Caught tx_queue_len zero misconfig [ 638.240181][T28642] siw: device registration error -23 [ 638.496315][ T30] audit: type=1107 audit(1763683624.245:10): pid=28656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0F$XXkԅXEUm. #Nh@Z`4F]қ SWm]#΂(/AryRxѷ׀]>J%*' [ 638.723684][T28675] tipc: Started in network mode [ 638.729087][T28675] tipc: Node identity ac14140f, cluster identity 4711 [ 638.736297][T28675] tipc: New replicast peer: 255.255.255.255 [ 638.752217][T28675] tipc: Enabled bearer , priority 10 [ 638.870357][T28680] __nla_validate_parse: 13 callbacks suppressed [ 638.870376][T28680] netlink: 6040 bytes leftover after parsing attributes in process `syz.6.6429'. [ 638.871427][T28679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6432'. [ 638.918641][T28682] netlink: 'syz.3.6433': attribute type 1 has an invalid length. [ 638.946981][T28682] nbd: error processing sock list [ 638.952821][T28682] block nbd4: shutting down sockets [ 639.060898][T28693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6432'. [ 639.305076][T28679] team0 (unregistering): Port device team_slave_0 removed [ 639.323386][T28679] team0 (unregistering): Port device team_slave_1 removed [ 639.394201][T28693] bridge_slave_1: left allmulticast mode [ 639.404601][T28693] bridge_slave_1: left promiscuous mode [ 639.414265][T28693] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.435326][T28693] bridge_slave_0: left allmulticast mode [ 639.441347][T28693] bridge_slave_0: left promiscuous mode [ 639.450872][T28693] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.549033][T28703] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6435'. [ 639.632669][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6440'. [ 639.645812][T28721] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6440'. [ 639.673906][T28721] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6440'. [ 639.746666][T28723] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.754351][T28723] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.832366][T28728] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 639.847846][T28725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6442'. [ 639.887410][T24456] tipc: Node number set to 2886997007 [ 640.023381][T28743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6447'. [ 640.100190][T28743] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6447'. [ 640.102007][T28746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.213008][T28749] sctp: [Deprecated]: syz.1.6450 (pid 28749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.213008][T28749] Use struct sctp_sack_info instead [ 640.277640][T28753] sctp: [Deprecated]: syz.1.6450 (pid 28753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.277640][T28753] Use struct sctp_sack_info instead [ 640.393334][T28760] syzkaller0: entered promiscuous mode [ 640.403168][T28760] syzkaller0: entered allmulticast mode [ 640.567660][T24456] IPVS: starting estimator thread 0... [ 640.657424][T28769] IPVS: using max 28 ests per chain, 67200 per kthread [ 640.902740][T28800] netlink: 'syz.6.6462': attribute type 1 has an invalid length. [ 641.052521][T28806] bond5 (unregistering): Released all slaves [ 642.155645][T28860] syzkaller1: entered promiscuous mode [ 642.177699][T28860] syzkaller1: entered allmulticast mode [ 642.602091][T28887] veth0_macvtap (unregistering): left allmulticast mode [ 642.754529][T28904] [ 642.756899][T28904] ====================================================== [ 642.763914][T28904] WARNING: possible circular locking dependency detected [ 642.770937][T28904] syzkaller #0 Not tainted [ 642.775342][T28904] ------------------------------------------------------ [ 642.782362][T28904] syz.5.6493/28904 is trying to acquire lock: [ 642.788424][T28904] ffffffff8f4264d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 642.797759][T28904] [ 642.797759][T28904] but task is already holding lock: [ 642.805119][T28904] ffff888024832370 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 642.814430][T28904] [ 642.814430][T28904] which lock already depends on the new lock. [ 642.814430][T28904] [ 642.824833][T28904] [ 642.824833][T28904] the existing dependency chain (in reverse order) is: [ 642.833840][T28904] [ 642.833840][T28904] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 642.841831][T28904] lock_acquire+0x120/0x360 [ 642.846855][T28904] _raw_spin_lock_bh+0x36/0x50 [ 642.852130][T28904] nr_rt_device_down+0x12a/0x720 [ 642.857587][T28904] nr_device_event+0x137/0x150 [ 642.862938][T28904] notifier_call_chain+0x1b6/0x3e0 [ 642.868571][T28904] netif_close_many+0x29c/0x410 [ 642.873944][T28904] netif_close+0x158/0x210 [ 642.878886][T28904] dev_close+0x10a/0x220 [ 642.883641][T28904] bpq_device_event+0x377/0x6a0 [ 642.889001][T28904] notifier_call_chain+0x1b6/0x3e0 [ 642.894629][T28904] netif_close_many+0x29c/0x410 [ 642.900028][T28904] netif_close+0x158/0x210 [ 642.904959][T28904] dev_close+0x10a/0x220 [ 642.909713][T28904] bond_setup_by_slave+0x5f/0x3f0 [ 642.915258][T28904] bond_enslave+0x6ca/0x38a0 [ 642.920363][T28904] bond_do_ioctl+0x635/0x9b0 [ 642.925651][T28904] dev_ifsioc+0x90b/0xf00 [ 642.930511][T28904] dev_ioctl+0x7b4/0x1150 [ 642.935357][T28904] sock_do_ioctl+0x22c/0x300 [ 642.940491][T28904] sock_ioctl+0x576/0x790 [ 642.945366][T28904] __se_sys_ioctl+0xfc/0x170 [ 642.950480][T28904] do_syscall_64+0xfa/0xfa0 [ 642.955498][T28904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.961905][T28904] [ 642.961905][T28904] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 642.969715][T28904] lock_acquire+0x120/0x360 [ 642.974735][T28904] _raw_spin_lock_bh+0x36/0x50 [ 642.980010][T28904] nr_rt_device_down+0xa9/0x720 [ 642.985387][T28904] nr_device_event+0x137/0x150 [ 642.990659][T28904] notifier_call_chain+0x1b6/0x3e0 [ 642.996280][T28904] netif_close_many+0x29c/0x410 [ 643.001645][T28904] netif_close+0x158/0x210 [ 643.006571][T28904] dev_close+0x10a/0x220 [ 643.011319][T28904] bpq_device_event+0x377/0x6a0 [ 643.016686][T28904] notifier_call_chain+0x1b6/0x3e0 [ 643.022304][T28904] netif_close_many+0x29c/0x410 [ 643.027674][T28904] netif_close+0x158/0x210 [ 643.032600][T28904] dev_close+0x10a/0x220 [ 643.037351][T28904] bond_setup_by_slave+0x5f/0x3f0 [ 643.042896][T28904] bond_enslave+0x6ca/0x38a0 [ 643.047995][T28904] bond_do_ioctl+0x635/0x9b0 [ 643.053092][T28904] dev_ifsioc+0x90b/0xf00 [ 643.057935][T28904] dev_ioctl+0x7b4/0x1150 [ 643.062776][T28904] sock_do_ioctl+0x22c/0x300 [ 643.067875][T28904] sock_ioctl+0x576/0x790 [ 643.072716][T28904] __se_sys_ioctl+0xfc/0x170 [ 643.077818][T28904] do_syscall_64+0xfa/0xfa0 [ 643.082830][T28904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.089229][T28904] [ 643.089229][T28904] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 643.097120][T28904] validate_chain+0xb9b/0x2140 [ 643.102399][T28904] __lock_acquire+0xab9/0xd20 [ 643.107582][T28904] lock_acquire+0x120/0x360 [ 643.112592][T28904] _raw_spin_lock_bh+0x36/0x50 [ 643.117866][T28904] nr_remove_neigh+0x25/0xe0 [ 643.122977][T28904] nr_add_node+0x1d9f/0x2570 [ 643.128073][T28904] nr_rt_ioctl+0xc12/0xd50 [ 643.132998][T28904] sock_do_ioctl+0xdc/0x300 [ 643.138016][T28904] sock_ioctl+0x576/0x790 [ 643.142854][T28904] __se_sys_ioctl+0xfc/0x170 [ 643.147951][T28904] do_syscall_64+0xfa/0xfa0 [ 643.152968][T28904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.159370][T28904] [ 643.159370][T28904] other info that might help us debug this: [ 643.159370][T28904] [ 643.169585][T28904] Chain exists of: [ 643.169585][T28904] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 643.169585][T28904] [ 643.183398][T28904] Possible unsafe locking scenario: [ 643.183398][T28904] [ 643.190830][T28904] CPU0 CPU1 [ 643.196179][T28904] ---- ---- [ 643.201527][T28904] lock(&nr_node->node_lock); [ 643.206277][T28904] lock(nr_node_list_lock); [ 643.213370][T28904] lock(&nr_node->node_lock); [ 643.220649][T28904] lock(nr_neigh_list_lock); [ 643.225312][T28904] [ 643.225312][T28904] *** DEADLOCK *** [ 643.225312][T28904] [ 643.233442][T28904] 1 lock held by syz.5.6493/28904: [ 643.238544][T28904] #0: ffff888024832370 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 643.248288][T28904] [ 643.248288][T28904] stack backtrace: [ 643.254163][T28904] CPU: 1 UID: 0 PID: 28904 Comm: syz.5.6493 Not tainted syzkaller #0 PREEMPT(full) [ 643.254180][T28904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.254188][T28904] Call Trace: [ 643.254195][T28904] [ 643.254202][T28904] dump_stack_lvl+0x189/0x250 [ 643.254224][T28904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 643.254240][T28904] ? __pfx__printk+0x10/0x10 [ 643.254252][T28904] ? stack_trace_save+0x9c/0xe0 [ 643.254273][T28904] print_circular_bug+0x2ee/0x310 [ 643.254290][T28904] check_noncircular+0x134/0x160 [ 643.254308][T28904] validate_chain+0xb9b/0x2140 [ 643.254330][T28904] __lock_acquire+0xab9/0xd20 [ 643.254351][T28904] ? nr_remove_neigh+0x25/0xe0 [ 643.254366][T28904] lock_acquire+0x120/0x360 [ 643.254378][T28904] ? nr_remove_neigh+0x25/0xe0 [ 643.254396][T28904] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 643.254413][T28904] ? nr_remove_neigh+0x25/0xe0 [ 643.254428][T28904] _raw_spin_lock_bh+0x36/0x50 [ 643.254444][T28904] ? nr_remove_neigh+0x25/0xe0 [ 643.254460][T28904] nr_remove_neigh+0x25/0xe0 [ 643.254476][T28904] nr_add_node+0x1d9f/0x2570 [ 643.254493][T28904] ? __asan_memcpy+0x40/0x70 [ 643.254510][T28904] ? nr_call_to_digi+0x126/0x1b0 [ 643.254526][T28904] nr_rt_ioctl+0xc12/0xd50 [ 643.254545][T28904] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 643.254558][T28904] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.254579][T28904] ? apparmor_capable+0x137/0x1b0 [ 643.254598][T28904] ? capable+0x89/0xe0 [ 643.254612][T28904] ? nr_ioctl+0x1b1/0x3b0 [ 643.254624][T28904] sock_do_ioctl+0xdc/0x300 [ 643.254642][T28904] ? __pfx_sock_do_ioctl+0x10/0x10 [ 643.254663][T28904] sock_ioctl+0x576/0x790 [ 643.254679][T28904] ? __pfx_sock_ioctl+0x10/0x10 [ 643.254694][T28904] ? __fget_files+0x3a0/0x420 [ 643.254707][T28904] ? __fget_files+0x2a/0x420 [ 643.254719][T28904] ? bpf_lsm_file_ioctl+0x9/0x20 [ 643.254734][T28904] ? __pfx_sock_ioctl+0x10/0x10 [ 643.254748][T28904] __se_sys_ioctl+0xfc/0x170 [ 643.254765][T28904] do_syscall_64+0xfa/0xfa0 [ 643.254783][T28904] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.254799][T28904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.254813][T28904] ? clear_bhb_loop+0x60/0xb0 [ 643.254827][T28904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.254840][T28904] RIP: 0033:0x7f2f6b78f749 [ 643.254853][T28904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.254865][T28904] RSP: 002b:00007f2f6c703038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.254880][T28904] RAX: ffffffffffffffda RBX: 00007f2f6b9e5fa0 RCX: 00007f2f6b78f749 [ 643.254890][T28904] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000004 [ 643.254899][T28904] RBP: 00007f2f6b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 643.254907][T28904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.254916][T28904] R13: 00007f2f6b9e6038 R14: 00007f2f6b9e5fa0 R15: 00007ffedf59e7c8 [ 643.254932][T28904] [ 643.658860][T28912] tipc: Enabled bearer , priority 0 [ 644.392604][T28905] tipc: Disabling bearer