last executing test programs: 1.941582116s ago: executing program 3 (id=8797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x210, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e19, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4}, {0x40, 0xf9, 0x8}], 0x2, 0x3}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x24, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x31, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x7}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) 1.624831815s ago: executing program 3 (id=8801): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100a0015}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="10002dbd7000fddbdf251a00000038002e8006000100090000000800060002000000060001000300000008000600010000000c0004000203aaaaaaaaaaaa06000300a3aa000008000300", @ANYRES32=0x0, @ANYBLOB="1c002e800c0004000202aaaaaaaaaaaa0c0004000203aaaaaaaaaaaa08000300", @ANYRES32=r2, @ANYBLOB="681b5defa96457dcc086d72875bfccf0fbe9ab98321b7ea1406ead80415ae4c5b4a960d442bb3232edc94a2958e963eeb92ec3d9", @ANYRES32=r2, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20040) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000680)={&(0x7f0000000180), 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x14, r1, 0x4, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040804}, 0x20048001) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14200000", @ANYRES16=r5, @ANYBLOB="812a000000000000000009000000"], 0x14}}, 0x20000008) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r3, 0x644ad2ec32b79f57, 0x70bd29, 0x25cfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000) 1.392781132s ago: executing program 3 (id=8805): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000700)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "1eedc78106a0e743", "eba9f36855546014e24d7e30b50b3fde57008c99592d00", "8e8ec580", "3c3c23fff2050cf6"}, 0x38) sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) close(r3) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, r2, 0x1, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000003c0)}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0xb, [@const={0x6, 0x0, 0x0, 0xa, 0x4}, @enum64={0xc, 0x2, 0x0, 0x13, 0x0, 0x0, [{0x6, 0x2, 0x3}, {0x8, 0x4, 0x27f}]}, @datasec={0x5, 0x8, 0x0, 0xf, 0x1, [{0x5, 0x6, 0x6}, {0x2, 0x2, 0xa7a}, {0x3, 0x6, 0xe}, {0x4, 0x3, 0x2}, {0x1, 0x4, 0x1}, {0x1, 0x0, 0x9}, {0x4, 0x9, 0xfffffffc}, {0x2, 0x6, 0xe}], "c5"}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x80000001, [{0x7, 0x5, 0x2}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10, 0x3}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x0, 0x5f, 0x30, 0x0, 0x5f, 0x30]}}, &(0x7f00000005c0)=""/121, 0xef, 0x79, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x9, 0x2, 0x10001, 0x1, r7, 0xbfb, '\x00', 0x0, r8, 0x0, 0x3, 0x3, 0xd}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r10, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) 1.269125528s ago: executing program 2 (id=8807): r0 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000001"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000300)=""/4096}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, r1, 0x7}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, &(0x7f0000000380), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)=r1}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x1b, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="85000000260000008520000004000000184b0000080000000000000000000000950054438b00f0ffffff18010000756c6c2500000000002020207b1af8ff42000000bfa100000000040007010080000000000000000008000000b7030000c3c300008500000006000000"], &(0x7f0000001440)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x8, 0xffffffff}, 0x8, 0x10, &(0x7f0000001680)={0x1, 0x5, 0xdc, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r5], &(0x7f0000001cc0)=[{0x1, 0x5, 0x9, 0xb}, {0x2, 0x3, 0xe}, {0x5, 0x4, 0xf, 0x4}, {0x3, 0x2, 0x6, 0x4}, {0x1, 0x5, 0xf, 0x5}], 0x10, 0x2ab8}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = accept4(r6, 0x0, &(0x7f0000000000), 0x80000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r14 = accept4(r13, 0x0, 0x0, 0x800) sendmmsg$alg(r14, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010027bd700403dcdf2500000000", @ANYRES32=r12, @ANYBLOB="800000000168030024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008802) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r9, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc054) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002100030000000a00100088"], 0x5c}, 0x1, 0x0, 0x0, 0x4045}, 0x0) 1.19699239s ago: executing program 3 (id=8808): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x408) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x4000010) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x4000010) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc8, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4800}, 0x20004001) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x8, 0x20, 0x0, 0x5, {{0x9, 0x4, 0x2, 0x1, 0x24, 0x66, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp={0x44, 0xc, 0x98, 0x0, 0x5, [0x1, 0xfffffffb]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x39a}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xda3b}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x11) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f00000006c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@deltaction={0x28, 0x31, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x801) r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000800), &(0x7f0000000840)=0x10, 0x80000) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000880), 0x4) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000880), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe5e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x364}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1265}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x156}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe5e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x364}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1265}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x156}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) socket$inet_smc(0x2b, 0x1, 0x0) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r9, 0x890d, &(0x7f0000000a40)={0x0, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x100, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a00)='sit0\x00', 0xe89, 0x9, 0x800}) (async) ioctl$sock_inet_SIOCRTMSG(r9, 0x890d, &(0x7f0000000a40)={0x0, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x100, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a00)='sit0\x00', 0xe89, 0x9, 0x800}) socket$kcm(0x29, 0x5, 0x0) (async) r10 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000001100)={&(0x7f0000000ac0)=@generic={0x5, "53c2a58090e7a567c14928c8bcd422c3f0151759cc75072a1e35d71167a174e062126840c37868c95acc127ce7b6f259fff47ba69c7df10c8d1c9504e9e2b18852c4a9e85c2915733555ae83182a2cb457d5edc39eb5a210eb48a4a5d8207259d7ebd8db4f2f09e69831cddeb6a1710cbe2f35cab72c1aef804b78abe968"}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b40)="3f3273f9986b917656", 0x9}], 0x1, &(0x7f0000000bc0)=[{0x110, 0x10b, 0x6, "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"}, {0xc0, 0x117, 0x5, "2841d3b7944e501d35b1ad28dba31fb7ef886105d4595619b80728f27845d7ba1247cf3b9936f5eedc91152b970b59a7e31b1d07104d361ae25c02cee6970f33c789fd04f6210e6907fa14b70e1d7e23f1c0d1b1e38cb79a87ee9c3d58394170afd7cbc91e3d4972871ee12bd1dface8fc16a3fee98006db940dcb06de0e591dd737146954aa475f617bbf02678f12b917f39e995d318ddb9b7ebb23478d540350545bed157d63abd5582c"}, {0xc8, 0x114, 0x25, "2395186fa04b0c354cd0dc25808bcffaa38ad7006d209737933c3baa081235ddf0910ce868119cab704b639d23fb378be1c57238bab44b0b1a6193ef792284c294c32874b92729ad5df3cd91fe27e528fa2ebd666f8b8c66366ec6f676c88097f5c30dd21f81b28ff8923eb86beb6d8b23f76fa89afe36750c85c974e92b1a826d9ac6f907d096ce62e6168f179f7cdfac711e6fabcfe1b757985e648f6cf62fdbdd009ec0f627375f5f575dfcbbd5a5e1"}, {0x60, 0x11, 0x5, "6659ff410f4a49c8e271bcfa77494c2cbe13da041de7d8a8f67b87b9050b39edf661c7fa128253da29aa97af2d21ad766eb6d45827675a041409f0970175f0d2dc7d9d8ff9684e4176a755ef841579"}, {0x40, 0x111, 0x3, "5d4dc7bcda863d39aecf5a71150faa4e1b8931168ab5a6e2397aa34b4a1c4c7ae8cdec542a5bd7b13f6a91306da6"}, {0x108, 0x103, 0x5, "cc1b2d2ccf79f89bcff19fb0a3a74326791a0e910770d46a6fae0d1ee1003c3cb73e0cb889bd2f1d4e6f942abab616a5c0caf5b19ef16c7e0de06a8f29d8c2ffa265d0f084a13fcacfcb3feaec2783e9b4f6a43b198cdf986c16f8ddbd13648d8b28796416df27e8c15c325611ef5ee98f2a799e7aa4c4d36f3cf2dd820288e07b85974d69f12de40078cd47ad642f89c0e1c19c2c1ba031f4807ddb137441e70a18d61791a5449bfa5c7a3be5bc34640af32d9168d809dce0d30fd44be778f0bda86e6ea6514b571aa63e6f8bf00d9289076d3a2cd3f23043c6a272033ae7b9f9b036ea84cf269eedb4e662a46551249d5cc1309f4d6c"}, {0xf0, 0x1, 0x4, "adc08a2754db0c6d1c92c05c8c7c55666c663a621c4ad4c14f7d6fab46311b26e73ba6c89bad101478c142fbd19148241f50a964fa0993bb716accb59b7b88dd7a7e41bcb953ff6d8602ef52bd9cea745c8df99de1940c5bcef22512e756404f238231a14ffba68fe2de7875b2d7725fabaa2bf30e7165a12c489fe135e7cd912929af13872a8d4758670c5ff09c4eda83562d1bccd84473181749265ad54df86bb1a35383b3fe9683ed730bee524186cb0ffe4ff1059cf9f7174fe1c7236c6563961743f4780a34866022809a4dd2efffb8b9b86f34bc14141d87bcb7af"}], 0x530}, 0x20000014) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000001140)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}}) r12 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r12, 0x6b, 0x4, &(0x7f0000001180), &(0x7f00000011c0)=0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0xc038586a, &(0x7f0000001300)={r7, &(0x7f0000001200)='syztnl0\x00', 0x4000c0, &(0x7f0000001240)={@_ha_fsid={[0x0, 0xf]}, {0x9, 0x8, 0xe, 0x1}}, 0x8, &(0x7f0000001280), &(0x7f00000012c0)=0xfffffffb}) ioctl$sock_inet_udp_SIOCINQ(r13, 0x541b, &(0x7f0000001340)) ioctl$XFS_IOC_FSGROWFSRT(r12, 0x40105870, &(0x7f0000001380)={0x3, 0x4}) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000013c0)=0xffffffffffffffff, 0x4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8804) 1.093568295s ago: executing program 1 (id=8810): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x8c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0xfff3, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8000}]}}]}, 0x3c}}, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x9d, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) sendto$packet(r8, &(0x7f0000000480)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000900)={@hci={0x1f, 0x0, 0x4}, {&(0x7f0000000800)=""/83, 0x53}, &(0x7f00000008c0), 0x48}, 0xa0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x7801, 0x10, 0x3, 0x10001, {{0x2e, 0x4, 0x1, 0x1f, 0xb8, 0x66, 0x0, 0x40, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x15, 0x1, 0x9, [{@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x6}]}, @noop, @rr={0x7, 0x2b, 0x80, [@empty, @local, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2, @private=0xa010101, @multicast2, @rand_addr=0x64010100, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xe5, 0x1, 0x9, [{@broadcast, 0x8}, {@private=0xa010102, 0xffffffff}, {@rand_addr=0x64010101}, {@loopback, 0xfffffff7}, {@remote, 0x6}]}, @ssrr={0x89, 0x2b, 0xd2, [@dev={0xac, 0x14, 0x14, 0x3c}, @remote, @loopback, @local, @loopback, @remote, @loopback, @private=0xa010102, @local, @multicast1]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x80, 0x101, 0xe, 0xc40, 0x3, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffbe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x6, 0x4, 0x9}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000780)={&(0x7f0000000000), 0xc, &(0x7f0000000740)={&(0x7f0000000ec0)={0x1f0, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0xffffffffffffff6d, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xbbaf9eee028887e9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40874}, 0x4000) 1.013504913s ago: executing program 3 (id=8811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x18, 0x6, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000004500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSETELEM={0x1eb4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x19d0, 0x3, 0x0, 0x1, [{0x14e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14b0, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x149c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x12c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc6, 0x1, "77f4fba40029bbc55013678df1896be53bfb1bcd5f5574ff720965992492a3ce13ac00b8cb51dd6d0ca61db62ad16e4efe190595e41d2ec5f4da002f881c8dfeff1267e60ecbba8801a2901644e0dea904fc4aa538956bfd7bc1c3ebd7f85b056abd0ff1e7a1a4cffac39823a9e34d76ccfa0015897449517203bbc6b0285fca15ad07dc1e7350224621cee73f19ae7de0afe7edcba1612921c553c788edd9b1f650a763c905d107d1886417a1fb11ba82d61584efbdf00d471f7e43395722cdf867"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x24, 0x1, "4287d6c42137e426179d64969e0a5ad9b09f9bb92430db75761813da2c96151e"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DATA={0xa0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "db0cd8ddc000446f59985a53e86ef24732e9fa2aceafd18a1abe8e7aa5fa8981130b060962c89eaeabb715320ead46698d2b3c4b993c875b05985c3bde36e1cfd5f56305c7c4167dfee5b7247a7ba099b0d351c5a4075932a0d4275ada41309c953feda840055bc5ae4378f1415bd572f9c2e99f22a678298ac9f7cf7a81b5753adb52e553ea52cb53fa"}]}, @NFTA_IMMEDIATE_DATA={0x224, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x115, 0x1, "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"}, @NFTA_DATA_VALUE={0x9d, 0x1, "83361f8fad4b64e3496f384e1ee6c3fa45a544d94b74af397a8d72c599b7cfc1a1978948792ba1ae390beb0d0878a21cfcfd1a5d26df3678a51088c48254625a5ebfc8a212df4fc61fb341a256f253caa458c11775045a97bf3d9e234e35a9d3221821c42cfb3506856167e0c7eef06231267a920064b58d562c67ba0d28592bc587a15a4ceab5879af80ad57e05aa490328b01b8562a6b17c"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_IMMEDIATE_DATA={0x1088, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "8006a4d8dee544131c30cf436249498595e51d88ae19643ea0d7bb80ab9a2a6cbcf9b0e51f5f1d17277997fcbbb2acc004c382f6f5326e81245829a99df378ab250f3af17f224d1271896702e2127df115a2ebc5804292d2d4c156e5a0dd68c063d5a63e247a0bcd8d0b8f0400a16bf31cc365f1954fff6c878357f26719c1131271fb1b30ee8026e95a5ef5064ec86d58093a0dccbe4100579ef7e99300a172a5cc08f9aca64a3a8c9f41a8671ad92ff5a7ad5ea56e355be154546b47e7a28f74cded21734f2f886016f2868c32a1a0c5ad84f3c26e3e7e2e0cb24eda1b7a3f223c4547925828e58be41363ffc0c404d58168c01fc5d2f88454febbdfaa595176408d09fbd54515cfec782d13302b6159ec356d8c56bc8a25b1cb24f85e33b807e905c28485999cf9f6b6224a763914dcef869d947f83c3bdd64eb40c850827bd9946c1abc12f02dfbee3745cdf10b8ceed316aabb732a504f4eb6cdc0e0f09bbb5e211e28cf96f6385bd2086f2dbd2f6a3fa7cda29967e5b27fea20216ee1843040b51f689481b4a97e3c20e0da6731225ba3d986d6aa688237859f5f97eb234a30edc06eebfb19198377b1fb28f4ebe09b05168e5f56821509a874eacf324a3a4e127eb1734ce13b115f503d02f1cba157c262c5f5d37010232ee83a790c880fb262a044b32c0d29066100ea2bd8d1e720364fad3fb7ed8dfaeb8bbc1d73a082f1828fdbee8202d2e2820d3006e864dac46126a62b50d04c04faa538dc22cc60e7a8b9af311c9b37edc90ac99b97fa3bd71a0bb8f5a17a2a340ba4afa91be7782a10397ce7218798d2b4900ff1859b771710cf1dd74c84db4084d7e2a4490be72c60f50efca4fd6d4384db52693a5efd83d912a46ca9a461f0568bbb15e98cba78819dcf840bef8f324ba55afd6f3dcc5fa0084640a6c74734181b586b9cc824d16395fe67fdb2ff0265a6b73ea93551f698e1e98c19473e77ed7588773f2236548d4cb73b28274b0549a28b99f10e809957676eb84bc526aa37d0fc4e4418db531ac14ad85469260f8393d4c15e8d2ba09f2e9454b895fca79f911af156259266baf0b440e881e1a8716d295f0cce2b58ebd96331aca75829a7007768fe3543acdba629aeb1623f646dcddf52e87d94a023dfad9713fd565ccb6ab26d8dbbbe90403f9e374e6fbb507407a0fff673fdf43c1c969c6f76d77480af35a518f99457b6de237f344b5c6e11b7da98b9e7df4e052660c7aef00a1f831ace8de9b8ef59bc216c4e3c490fd414fdff4c63a8852451d9860bcfe9547a7303f5dd6948c2286a6c1b466ea2b57e79d60c63f87bab3b8c2f0928b84d01a5c02687b7ca54837314b1b17082419300704ca345a69961de223fd62f20eaa735356b017d2e314f35b8cffbe07ce53362cb28ab538f66748f2ca1a7f540e6a0ab9ed32bcff498ce09710e1a9f7dd22964699aca0fed46c0a78d39400ad30d8b9a1d5c2c6ba9471c4dd79d5cb022d7c8b779d4037934af9d061fa19bfd1ed1855e5c9836dbeae83ff7506882c9a44d03c75db5969b3f74dbf4dffd7f4624dc5aa6ec301514907975707407fb28af32695981c0b62e09e3bdf58e5d09744f704057035a93fd651adf7807b4577d52d6edd31a5cb65688258ff95565170db8568d1b78b4a71b33dbd2956dceb0b78358bc091a83058b78d06fe2f7884367db49f33a466c8a556fefa80c308b2bbe2625809681229fc206c7e86c85c91e5b24e431f99c2b528cd26101e37be1b3e21eb02cf2ea806870baea90ff4dff10a2b7b4295b7e2384482bb437e8252b09a5b84ff906525611c4f5469f56fb5a9a23d6ac4a06e9f211f932139b4de4446478222e02c53ca8f62d6a29d073b5365598754971f088662257921ff2a7d76a89f06644d108e2315985690698cf25e4cd4b6f90f4a35868a6fcc0d1eb96f5944e57c81674dc04059f21e2cbd25159e74997cff75c005a0939b4635d90999ba80bcad68ee4ae14e2bd8c7af9caf347a54b7b7aa923b94ddcca341246b5d038e3ac656d73b7011319a49d9f31c00ea1f46b102e5add4cb850282e750d3816c11af777a327a814f21105343d3f2dbd229142cabe203513a14fb0897af611949de2075a9424b846e79b77c635579553cd01fd73db632aaff6d06dc1c98d130b5b69458f457d2293217a877cc3c6efb4073e53c1e2c9f5c93cea1dec1988b9a418acdb1c7569bcca538d47b89293f1bd7dca639562d96348304e26145eb96f8933b126d27db8ac4d1933c9a1be069f2f497f5fcae706f07fec1df15e2e371019cd40743b1d98f56e3e22788433817978c0359f215543a0923830614868ff09a9fea6976c7f88bed5e46d726e53f053a04b37a51a9c6bed31464bcea874baf11b6bda7eefc88e60816ed467f9b8fe3b95dda839d141c82a9331283e451704a24416ad1d1a5297b45f1d7e7e32023302b673ca9f46f7e37ebb6f961e6a5f0cb735618a1ea5919bf35f60579638af0aff6709a4ffcfa11140210b9eb6ab9217fd03227db970dc977c35230c5bd6a229601a83aec110c948b768ffabcff76c7bc3204f22ec79e7635076ebccbc24a3f1e54f6d36f7fff0b76358f5a61a2a29a4876daf31ac82458fcc4dd8a8ced0feefb8ad884453ee8697041a70ad7be555f5eeb45a5315081ad01d52c60dd2e694bd9e0b6457644ae767afdf60402bbaa7cecf6dbd34bdc15f6818ed4b2e5dcb723962bee0443f1ca5f189374c06b5147e56a82b0ac5381b6f7d74df62afc127af0d8a26f02915ee70bd21c8fa15c128dba485212a1c0ff1f7c6943e98d05a2100f965fc3b6044ed11be981e684722d18fa2ccae6e7f8575c5dc91839e2d1299642a0ffedaacf5995eb555412c2a9bb87f54db285ab61a6d435812534ab03c55dd6226af079d9de7dbb9d424854b2ad0e3ea4021258b167438715da98a04e00d268a28f5c191fd9aaa2c7701c6ac46271ab596833164819c24a90e4af46d7c5f71cf08547f9ca577e5703fc31e366a986e11eb1406cdd3a95bb93a3595082a4fac45b9f5e2be14f7c200a95a4ce3e9ec7f4e51a6a84f73e9b49421f36ca808be4e998c3d2820ca209ab2b0593b6132bc84d1c2a6601726acc5523ea27b05b8732b1d85f1aa6a901f225fed60ed63fdef5ebf27476774542377662b5ffb629a04aa551d4566b94d6545a858cc6f0a18b3101aa354a2d2ccb475c0948c7beab576d1d34317e6139a21e1b31dd7df5cc5974455456bc9599cbe17cf36b425842454a6bafaa8d094975c256dfb538b7905536a8fa64d5c24a7f07f9018f1a3038d3d03f6a0b3fbc4c20e57b73ccd4fa86f4f19edcf8a7fd0378f26ad7be7596ce4f5221a2ca028213432bd64da09e9bb190e677ec22ac2391d821f51a552cf7a1d1cc1ce2c7eb2d7deace2032239e164ff86bb7f75f928cf27fc6b22879516f9088dee649dceeda04f649117fd17a976c22262d6073b6ed4a30fb056f089020a4231ac3d8f4afac3f5ad43d97cbf4ff6fb1e6909c1d044bf62aaff3fa2a36eb04a82acecca8baedbbf4b8b17458b90171d41d369b2da8a247a9ccd6e85a3eaccd58afc82c993a8d1ef72b5ff07d09330ff33dd7a0e5ddd1e2ef99f56828077908474a4ce8c4594ef380d7b399830d9e6bd0ff92bdc14c4d0968f12b9ac9433d59a064cc08be1ad9101b9af17ae7148c5e50cdfd0a50f33814a97daf93acaea5231c37919dc9a37757996448beea801f5156459fd428766428e779adfc814ba1600f6709e1dc9c86010f93be3863aadfa4b00f701ff51f9c94c171e4fbcbc3ed1622610d465379b1669d218d2244e316d10234384e7cf336f3c641d9f62f18515c643e16b2a76d8145c987fe01a1ecf7c92b05387419618ce6d51668e0f11b77a369764230fb48e59b734bb9889ef9748acc9d0fe9362db22b563efbd0aa23398d56bdb5fa6eafb4445155f7dc7c1152d795a6cbf3939aacf8eb4d4f4a172e64ba41a41537bb8b87d3d51597cc76fe4758fe333cc15e3b9f902bf739699839373fb5755166142ce1235dc377b861b9e4c98ba20f0152eb47a55777a43942a6c0e4cb6e022e88b22cda32c4af8c10a27afe98628be85a5e3c42381558b30042c3649bc1f44a6131bfdaeb3e58633439dbf796b7626db69ee6050909954e5294e2b274ef797c5eb16cbd7a3ce4b0cfc54ae107c03d06ee517d2a5907f94b98dab2662423d60351fe06791f9d8e7994cac9e143dc2b395fcaff5a66bea2542e988ec89547e7006046df76b5f5498b7f076a6f0e216da2c2883b6561267332da0e89fd69b2e6ebd71131a87568bdcc4a41905cb3831e29b15bfae54057c4006d9cb676f1587ec0a23fda06cd28e41a3e169d16a1d241323b0682b283c810c2026103ef82cdffe57c4cf69349dc6b92229aab0b5cec107e0fb6748bf034abd2f70d863d7854cfa83be0093ed0b767214376b5b321a30fe80c5a951c74282cd7948aaac248e44a4f41a952bd1aecafdbc09fae93642d7fb597af3a28cb17d821a672937c5c62c0208790af01a0fb837c62def2328072f9ca6f97c6163b29d0915e75e86618995e07aa65a8168fa1c6e3ccb82b08abc4f8ff79b527eef3cc9910c5362bd8494cbe07d5e5cc0eee25f706fe0d3d3ed80667dc1ffcdba0e899f1144f6c1d8cd01c67c11b73eed887ef48b716f1df8b32a10063de0e04f8e94e5eece59c9ef59bca36c69633a0c36d3f5966ed6465e17b2acd97222f26af1d3509d535b5ba078ce4023d7b21a2f6fe3d51afbb77eccf8d92b736122e784dd144ad16b65c2701c911e77f2dc3fbc5e0e81127e349e51be344476242e7d8f58c1f017f50a731f75836daca74932e6a310bf4a3d6dbe3a9f585a6a98be0397db554554715f7de6308b59493e278d398eb43cf3ada8a3b1e1f6b64130bce3507784435c62222c3bea183a0827d9c71f8daeab6e134d97480c9a481b866e7a8e12ce755c626901cc6c99f0e5a30398f122c4b2fce49a12dc190abb975a6bcebd6188373499ae0c0b12e5282c68e8cb955ddcd49c0d9994d254c0d235512989e48e0803be192c85703af09a45161e588239678c8f2b7ae7de1d1c6049591958d0681109387fe7b2dfa29622a2dde01a5dba566c088dd9f25c928fa86c5c5b786041c71702bbd44755581747e8e4744d7edb58f11f85846b8db85e73b98da27a93b1ca5e87ec499c0d7746105e9a21deea51e70394095edbed3ca9a6916d0f646b23341cef705d9cb6676f46a23f68274835a20e778e2c0033a501933a3495603c3cd9715c64761c8b373ee139ff3150d06bfe066783cd8d6e462b06cacdc12b8e62107c24a6cdf9bbd6513f3c362b8a5c2cddbc31666d42381f34955a6096a625b29056cd541dc1e892451cb410556bd8cd19b00d6288d134123281cf25d55a2f57fae5fa836c1ff66beaa15cdbabaaf2de9a6640899bdd102c7a7081e0789d37bf030898e29e287c72d90ceda7b5ea47b2c791691953cba0501903f4a2ab9a18e74967a0ff4fb2cf5e58fbba239b4900df46529871c9dd0a7f682d75c9c4c3dc13b147bf694f63c54a6bbaed1cb7beb167a750bd5e3297a3b0242f92718c8cc0cdb27466ff650f44ab7cdd7e53773ed44ef84f1896ff1a858f82d2b7c526ecf45c707379dd40ac2cc4c37986167451ce4abdfbff9102d7cabf8ba505687cc0a9926c05fb6206ed02f1a3d7ae0400b7de9f116aa9826508890420cbd7fa49b355a172323d90e44382c3688dc371fdc024e9ff93f47607cfb3df58964"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, {0x3a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "a1f9383d2958829fde0c7c0f29effba408d14db4caec9ef277504e88c97901ef0ea4ecb17d1f2c5ead6110e69f5ca142c014c5b69f452bc241b106e105a101b4ee9e117701abdb1896f2c1f7d933cf74cdd7bba65286a2b741"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "ee3c1f7c8be302d9542a142ec6d19fa052ef74375cdbb62bbe278d1ecc8e2157aad48ef19deaec7437dde385f196eeacc854f5504d82a3e0299512800eaa57d2b292e3eda634d08f2be049bb3f311c4a81618a5aa8f05be323aedcc5ec41eac7b00fc83db5193bbc9ddcfd14801f106c877cec55ce9e88ed6aaed860c3ea3d975bea9487fd961d91263302a1c12aac1c130803270065105162ad0c0bcdfea8e9e5c27cfbba1eca5c1b6702e8901a41d5e0fbd33760ddd6ff5aad36fd4140e854c2208eb5"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "2af94395bdb15ca2a7a0569bcf54800197ebcb7a1bfbc63767d9d3637e8788dd771000ad963d3263482822cbeee5b0509fea"}, @NFTA_DATA_VALUE={0xa2, 0x1, "78710ab6a20cea4b3e8894c7cdb797571274fac6357fb45e2c8c7cb06ce8fad76fd5a1349b77533a3a8c20256496760b3b0942a4532f006e8bbc03b365a46ac179d60701f337cd0fb0afcbeb637dafa9bcdcd41c12de01270d02ccb92ea2ab2db492a6ad33d8b583df4f8ad55b06c57f5a6b07c2456ca6d21201e74fdf8fba0928e6f4effd5b1940fb73788ea2b66829a8a322d0b9e79dfebc791eef849a"}, @NFTA_DATA_VALUE={0x82, 0x1, "27734770594a9096c34e5a88234946bfcf4fc288b0cd552745fc34614ce5d5f41c5049c283c8e8440f9f0bfbd969e00982db8bf0bb3ee217e2ced2b9f139794faa60bc8577117a4e68eede85cdcda25a31bafce6a1664c1f2a2120353c9c5336f9b4b750f0f2da0704d9a794c9379997d56f9a0ba3e85c22b86ba184cc49"}]}]}, {0x14c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x13c, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb2}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0xa8, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x9c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_DATA={0x3c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe6}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x88}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x1e}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c8, 0x3, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x108, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xc1b0}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x68, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x672}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7d30441c}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}, {0x3b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x63, 0x1, "21ed51e6f12a9e1045eba208d4b109bd54dbf66131fd7f3b5f9fb5d364d8ec5224f2386575230ef2da6f8fe2a16ea1628c8739c8da0a71f5cc99723906910e5adf1c03b9710fe1a157a395d2122cec40ec23b730ed937f4ff1c62411d51564"}, @NFTA_DATA_VALUE={0xa, 0x1, "d2a02f3d1213"}, @NFTA_DATA_VALUE={0xdc, 0x1, "6aec9db5aaa1398515edcaa53a794dfafa16db213c9da7be07c667eb7b9437db7dec4e60445e5068790b399ea40c5eadf13365114ff04974d54152f1b454b5c54e76c49c278c97bf35f03cc61223ef711a4a20fe5d03e7fd60e8a7cefe829e718e82ee529ebe0825d7ea4b4dbda019e52ea338232800072cc5d6617aabafc3f42a8c2861d4f3e255dd7501817645d14728968abdcea09b8ee0f8ed443cf2b13d6d136789fc1f7f8246a40da68c4a74710984180c3eeb9f3f72a9801b003fd5de848599822e302d7fe87d24a8450b26465467b37fb16a3189"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1b0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x9}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_PREFIX={0x11, 0x2, 0x1, 0x0, '/dev/net/tun\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'recent\x00'}, @NFTA_MATCH_INFO={0x39, 0x3, "374fc2b41db562f50536685ed6d26f3a3a1516d38f7cef0e95e01d17465dad460bb2c64b87547fb718928bbd70ae4f95699a897b09"}, @NFTA_MATCH_NAME={0xb, 0x1, 'tcpmss\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xbbcd}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xff}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x24c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xff, 0x6, "7500e56933b2ce784c2be131c3424fb29b3a77f63e8d6bd1e73dda56a078b03b87e3c1c3600a5bab72b6c1f95fa436097ac8e4809c4ce8982ff10a1501d1845ca98dce678b6442829f03a43d84dab6173f7b3d3f6a83dc67bb97cd3fd98217abf12e451bc0bc035e4c22aa6de53ed4b1ef507838bcccfef2975706bf2db6db84a1c247abdc00b7e3a0af56bb8c729ac5200f524520bf4ea22e27ea131e36ff0349607a47595b6cc7b1877cea83bb10b2eba34e4553e1f5c6d179170a21b411ab8f3ba34403122bd38ebe986f84e6a24dafd923f122ce6e2e28d92db49a91e6558bf38527007679753001a5d65ffe439efe355640bac0d9bd932f1c"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "eb96e67e56f117bd1a10861528100e68bbf862bd7a0978b502fa9770db64873d86eb331818e109ef9981"}, @NFTA_TABLE_USERDATA={0xdc, 0x6, "37c9424b6467d5e5d7c9e68da44090c1001ecee164e1f7c0b0dbdd4fc13201455cf2b14b882ee6f0a5a1d3b54af006cc8dd01856e43afd0ec04f202e1007c233f19bc52d9069de4ba6f40792674bc5bb610583d3c695e56ecc192eb2dc68f900cff70899b129585a77e2eb12acf68a7882b9e65cb979170fd6417865bb6754657506dfaeeb705303e995ab48a410ecf6527545071189736d55bc98198e301d5963629e36a2d388935d23e7ab6697dccb1690b699e5210fc375c2052337b738dfe3638358f86472f4d38ce391a8a961e95dd79b8153995642"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2144}, 0x1, 0x0, 0x0, 0xc804}, 0x4080) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[], 0xfe33) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09000000010000006d05000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4, 0x0, 0x11000000}, 0x38) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) listen(r7, 0x100) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000540)={0x3b}, 0x8) accept4(r7, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000400)=0x0) sendto(r1, &(0x7f0000000300)="8c395cd6bc0e058571f6b9c3bd4ee8375871b42088938c0324c61924857ed097fdbc183e29f112725f1667800296c287ba454beda35e1b33d2c8d44da8ef10e934f46da98cac4f7fa049a9d6604154e73fb5140892ce1aa34e9e5a9cb69b3740ec1f3dd880dd157e2fd1259ca08374a75e2dfc3755a2c0f570e14e09ac9ebb51d1b2aa35a3de4c7b5eb2f4e80174de125fb66d36fa3e064937ce810de4cb1962e8441726e923eaab7e5632bf98417ffef6a49253905354a4ece490e00c2a41a1bb17e125cc6fd3259620c2c8de6b937d4e66c86f402a", 0xd6, 0x4001, &(0x7f0000000600)=@nfc={0x27, r8, 0x1, 0x5}, 0x80) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r5], 0x38}}, 0x10) 914.274018ms ago: executing program 4 (id=8813): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0x8, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 870.023831ms ago: executing program 2 (id=8814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000180)) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10030600e0ff020004004788aa96a13b", 0x10, 0x0, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 742.093857ms ago: executing program 4 (id=8815): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x4, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xac, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x5c}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c001) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, r10, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 741.294591ms ago: executing program 0 (id=8816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000003010102000000000000000002000009100001800c0002800500010001000000140019800800010088000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40004) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) (async) r2 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(r1) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @private=0xa010100, "fd0c0000"}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x80, 0xce, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) 740.50276ms ago: executing program 1 (id=8817): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (rerun: 32) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x34040017}, 0x0) (async, rerun: 32) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) (rerun: 32) 608.593856ms ago: executing program 0 (id=8818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000040)='/\x00', 0x210000, &(0x7f0000000080)={@align=0x2, {0x7ff, 0x0, 0x5, 0x5}}, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) 596.563424ms ago: executing program 1 (id=8819): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0xc7, @empty, 0x4}, 0x1c) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000440)={r2}, &(0x7f00000001c0)=0x8) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaa1b0346d7ffffff000008004500001c0000000000119078000000000000000000144e2100089078f15866c389115a0feb575803ffaf5f980ce032cb8f4e097c659bdc3e567d18474e5d53b8c8f0d1023ba4a7482673ebab6cbb52b9d756b6c90adb785008faf5e386a3bee1faa7aba8d83240e8b9a5ec60c2a3f4a88e5433a1"], 0x0) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0xd1383000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@private0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x2, 0x6, 0x0, 0x1a, 0x100}) sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000030504000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002e000000000008001c00", @ANYRES32, @ANYBLOB="feffa84c06ef92a4b8c5b1a01989668f4c27763650e0e17ad4b974b1f5e38c1d59e9c66e10e20768e5bcab260a1425731d35726b809977c798209306b34a9eb7d21c05a3a2b72dec933aa413af2ba1013d3f9f8e0623e1a63ae98c99ebfd1d09e4c58ea1c27818ba995e3928e4692a07a9ca08d76ba28abda56efd"], 0x30}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x12, 0x4, 0x0, 0x6fb, 0x8, 0xfcf, 0x7, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) connect$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x44840) getsockopt$bt_BT_SNDMTU(r0, 0x11, 0xc, 0x0, &(0x7f0000000740)) r11 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r11, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000005700)=""/4068, 0xfe4}, {&(0x7f0000002d80)=""/4112, 0x1010}, {&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000004700)=""/4066, 0xfe2}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f00000002c0)=""/115, 0x73}], 0x7}, 0x0) 498.002316ms ago: executing program 2 (id=8820): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x58, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x14008801) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) (async) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 479.286421ms ago: executing program 0 (id=8821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000004340)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001540)="9555d9cc111d987d25750612e1b624c3abbff3793c9103a60a5d88e9422491145a1002c5297a2fea7de02f1c19acb3b3", 0x30}], 0x1, &(0x7f0000001780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x81}], 0x1, 0x2000891) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeea, [0x1]}}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) 445.115712ms ago: executing program 2 (id=8822): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000480), &(0x7f00000004c0), 0x1000000}, 0x20) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r3, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4$alg(r3, 0x0, 0x0, 0x80800) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmmsg$alg(r4, &(0x7f0000007280)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20000001) (async, rerun: 64) recvmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/97, 0x61}], 0x1}, 0x0) (async, rerun: 64) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000340)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r8, 0x4) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) (async) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="08d3e5389fd5", 0x6}], 0x1}, 0x4004040) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000006b43a7d9a7f9eed288fa2f9eb7c30000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 370.179163ms ago: executing program 4 (id=8823): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40208}, [@IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_PHYS_PORT_ID={0x18, 0x22, "e3a3b1ce51099138570157fc55d5bd4b1e0111dc"}, @IFLA_IFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x58}}, 0x0) 369.242771ms ago: executing program 1 (id=8824): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0xffff, 0x1, 0x1815, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffd, @mcast1, 0x20}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x101, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x20000800) 335.855923ms ago: executing program 4 (id=8825): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r0, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080001000d000000", 0x24) syz_emit_ethernet(0x5e, &(0x7f0000000400)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x4c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x1, 0xfff7, 0x0, 0x0, {[@md5sig={0x13, 0x12, "263292fb99d5157ac6a6ec526f6518c7"}, @md5sig={0x13, 0x12, "a7e8ec95aa6295ea40a52b32e98fdeef"}]}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44) 301.506766ms ago: executing program 0 (id=8826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = socket$kcm(0x2c, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x8}, 0x28) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8936, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvfrom(r2, &(0x7f0000000380)=""/184, 0xb8, 0x40000140, &(0x7f0000000440)=@llc={0x1a, 0x304, 0x5, 0x5, 0x2, 0x2a, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x80) 210.781793ms ago: executing program 2 (id=8827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) poll(&(0x7f0000000000)=[{r1, 0x1000}], 0x1, 0x2) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000000)="d3599132740b97b9eb491ba02ba322c10ffb5417fe0a1b4ec9586b2e29c2677ab3897dc6100dab52ed", &(0x7f00000000c0)=""/255, &(0x7f00000001c0)="209e5db3b2", &(0x7f0000000200)="e6", 0x8, r1}, 0x38) 210.211476ms ago: executing program 1 (id=8828): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)}, 0x12141) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000002e80)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000002dc0)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000480)=""/56, 0x38}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/148, 0x94}, {&(0x7f0000002c00)=""/229, 0xe5}, {&(0x7f0000002d00)=""/173, 0xad}], 0x8, &(0x7f0000002e40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 209.28271ms ago: executing program 4 (id=8829): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x1f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0x7}]}, 0x28}}, 0x0) 169.217695ms ago: executing program 0 (id=8830): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000180)={r2, &(0x7f0000000040)='cake\x00', 0xc800, &(0x7f00000000c0)={@align=0x8001, {0x0, 0x10, 0x4171, 0x1}}, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x1}) connect$netrom(r3, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000800}, 0x0) 122.725514ms ago: executing program 2 (id=8831): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @default, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, [@default, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x43eae5a61608ca7, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 69.865357ms ago: executing program 4 (id=8832): syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd61f6ff0100242f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010088a8ffff0986dd88be000000031c0885100100000000007b43080022eb0000000223022309020000000000000500ebb41b0800655800"/136], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x1, 0x1, {{0x9, 0x4, 0x3, 0x4, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @empty, {[@ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0xb, 0xcd, [@private=0xa010100, @private=0xa010101]}]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00010000000000000000008180000000000000000000001400019500000000000000000000ffffe0000001"], 0x30}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f00000002c0)=@newtclass={0x5cc, 0x28, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x6}, {0x6, 0x2}, {0x4, 0x80b49d1a2b7b929e}}, [@c_atm={{0x8}, {0x90, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0xfff3}}, @TCA_ATM_HDR={0x39, 0x3, "4e9616ce5a89201d31fdb4ef163f06384afc6f080d17a4c81c58df4641e943912d629cffdae25a55e17760383444995057edea2c20"}, @TCA_ATM_HDR={0x2a, 0x3, "d6d92c82f98acfa423817e5adc54315c901cd391ba97818a0a1c845a1f3b5d2268841c4ca4f6"}, @TCA_ATM_HDR={0x13, 0x3, "afbf9d48f1905a2782b69200256706"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x2}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x10}}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xe, 0x1, 0x100, 0x3, 0x81, 0x81}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xe, 0x1, 0xc, 0x42, 0x6, 0x80000001}}]}}, @c_atm={{0x8}, {0x3c, 0x2, [@TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x7}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0x2}}, @TCA_ATM_HDR={0x10, 0x3, "5ce51872ade69bca579f3bbd"}, @TCA_ATM_FD={0x8, 0x1, r4}]}}, @c_cbq={{0x8}, {0x450, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x4, 0x6, 0x7, 0x0, 0x10001}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x5, 0x4, 0x3483, 0x101, 0x6, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0x101, 0x6daf, 0x9, 0x4, 0x1, 0x6c, 0xecec, 0x1000, 0x4, 0x1, 0x5, 0x8, 0x1c3, 0x7, 0xfd, 0x623d, 0xd, 0x7287, 0x10001, 0x900, 0x4, 0x5, 0x0, 0x1, 0x20000000, 0x6a, 0x1ff, 0x0, 0xffffffc0, 0x5, 0x401, 0x7fff, 0x2, 0x386, 0x0, 0xffffffff, 0x1, 0x7, 0x10, 0x7, 0x2, 0x400, 0x352, 0x4, 0x0, 0xd15, 0x2, 0x6, 0xffffc03c, 0xfffffa23, 0x5, 0x6, 0x6, 0x3, 0x8, 0x0, 0xfffffffd, 0xffff, 0x2, 0x10000, 0xfffffffb, 0x8c8, 0x7, 0x7, 0x2, 0x1, 0x8, 0x9, 0x58d, 0xf9, 0x9, 0xff, 0x9, 0x0, 0x7fffffff, 0x9, 0xf228, 0x9, 0x0, 0x0, 0x6ea, 0x1, 0x8, 0x4, 0x8, 0x9bd, 0x5, 0x401, 0x6, 0x8, 0x5, 0x3f58d125, 0x200000, 0x8, 0x5, 0xc6d5, 0xeac0, 0x0, 0x5bd246c, 0x8, 0x1, 0x1, 0x7, 0x521, 0x4, 0x4a, 0x2, 0x7, 0x4000000, 0x9, 0x59, 0x3, 0x9c, 0x217, 0xfff, 0x5, 0x8, 0x8, 0x42, 0x100, 0x1, 0xe, 0x7, 0xffffffff, 0x81, 0xf4, 0xe, 0x2, 0x1, 0xfff, 0x4cc5e4de, 0x8, 0xd, 0xfffffff8, 0xa, 0x0, 0x3, 0x26b, 0x1c, 0x200, 0x6, 0x65, 0xffff, 0xfffffff8, 0x2, 0x6, 0x2, 0x8, 0x3, 0xf3, 0x1, 0x80000001, 0x3, 0x8, 0x0, 0x4, 0x8, 0x9, 0x7, 0x401, 0x0, 0x4, 0x9, 0xd7, 0x80000000, 0x30, 0x6, 0x401, 0x7, 0x8, 0x9, 0xea2, 0x400, 0x6, 0x125e, 0x5, 0x8, 0x32, 0x3, 0x7, 0x0, 0x10001, 0x7, 0x0, 0x0, 0x8, 0x67, 0x6d00, 0x7, 0x5, 0x1000, 0x6f, 0x6, 0x1, 0x3, 0x2, 0x7, 0x5, 0x0, 0xe200, 0x4, 0x8001, 0x6, 0x6, 0x4, 0x9208, 0x93, 0x81, 0x34, 0x8, 0x2, 0x9, 0xd2c2, 0x1c6a, 0x9, 0x9, 0x9, 0x1, 0x7, 0x3, 0x9, 0x9, 0x6, 0x80000001, 0x3, 0x2, 0x50a, 0x0, 0xff, 0xf, 0x7, 0x5, 0x80, 0x5c2e, 0x3, 0x200, 0x8, 0x0, 0xb, 0x8001, 0x561, 0x4, 0x7, 0x1ff]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xf, 0x1, 0x16, 0x7, 0x9, 0x9, 0x9, 0x3}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x8, 0x1, 0x3, 0x4, 0xf9}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x8, 0xa, 0x1e, 0x101, 0x7}}]}}, @c_atm={{0x8}, {0x28, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0x1f}}, @TCA_ATM_HDR={0x8, 0x3, "9fa52882"}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_HDR={0xb, 0x3, "df82ac921b2037"}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x40000}, 0x20080000) getsockname$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) 69.209123ms ago: executing program 1 (id=8833): close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000200)={&(0x7f0000000040)}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000400)={{r1, &(0x7f0000000040)='}\x00', 0x48100, &(0x7f0000000080)={@_ha_fsid={[0x4]}, {0x81, 0x5, 0x508b, 0x9}}, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0xc8}, 0x2, &(0x7f00000003c0)=[{0x3, 0x7c7, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="ce3ffd115a497ad27680b175383aa68aabf19a224fd096074b6b12e471ecdc0d86f437134f8cb49b86b20fc927d73fb6bbd10cd22017b40c16f4c25b7f9c", 0x3e, 0xa}, {0x3, 0xd, &(0x7f0000000240)='%:.\x00', &(0x7f00000002c0)="96e933a032e30f147e6f8bd9e5255aea95bc88487e0a6b9dac9a46e3fa881173ec9284d28f7f808de04135cd3f94bb7419344c1fcc26de5910cfdd9be30628094901cd216b5ce0cdf9e627087f747cdf263ed3b82a252b7ad5957bf5a397c603d907eef82f9c251eaf8c89176b1dc6e75fb616bd4e4cc4438d8db0c48ab5843dad04560a28fc3be1e5e7fe6d679a222b66bdb8fff19be12e7a69924863203d1ad9503dc3de7f421ec13acc9af445ad74939df88b2a9d892f79a6724df1c3782a94f39f0b602a714da836f48c5f9c7d8da57eeae86679549375212b4d36835d01e787", 0xe2}]}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x810) close(r1) 15.763222ms ago: executing program 3 (id=8834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x1c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x46}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000408d) shutdown(r3, 0x1) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @val=@perf_event={0x4}}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @private=0xa010100}, 0x2, 0x0, 0x2}}, 0x26) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xa0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r10, &(0x7f0000004480)={&(0x7f0000004380), 0xc, &(0x7f0000004440)={&(0x7f00000043c0)={0x24, 0x1407, 0x1e6a54407809fc47, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x4, 0x2, 'syz2\x00'}]}, 0x24}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0f3324278c9494fcd6353ff6225832795b70ac2de7cd1dc618a790f02737870579053f8a5f2c6a59a08c0a0781a1e3e671a524f27b135c4fe6840d06e966a321778e169bbe4a60081efa47f33f2a583e8b1163283ea1d10dfd7fae5dfdab878ec45e5627dc723f997559562e4bffd770242a156eaa91cb5160dbd5339c", @ANYRES16=r9, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000808000c00a60a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) 0s ago: executing program 0 (id=8835): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) close(r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002000010000000000000000000af9130000000002000000001400010000000000000000000000000000000001140002"], 0x44}}, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x8000000b, 0x8}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) kernel console output (not intermixed with test programs): z.2.6898'. [ 713.274612][T31716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6900'. [ 713.654995][ T6428] hsr_slave_0: left promiscuous mode [ 713.673680][ T6428] hsr_slave_1: left promiscuous mode [ 713.701145][T31735] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6907'. [ 713.725723][T31735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6907'. [ 713.762244][T31735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6907'. [ 714.494081][T31761] sctp: [Deprecated]: syz.3.6913 (pid 31761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 714.494081][T31761] Use struct sctp_sack_info instead [ 714.588697][ T6428] team0 (unregistering): Port device team_slave_1 removed [ 714.608059][ T6428] team0 (unregistering): Port device team_slave_0 removed [ 714.789998][T31758] x9: renamed from bridge_slave_0 (while UP) [ 714.978989][T31770] SET target dimension over the limit! [ 715.075325][T31774] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 715.112418][T31774] tipc: Enabled bearer , priority 10 [ 715.408007][T31792] netlink: 'syz.2.6924': attribute type 14 has an invalid length. [ 715.500675][ T6428] IPVS: stop unused estimator thread 0... [ 715.643737][T31801] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 715.678611][T31801] syzkaller1: linktype set to 823 [ 715.695204][T31804] openvswitch: netlink: IP tunnel dst address not specified [ 715.712425][T31803] bridge0: port 3(gretap0) entered blocking state [ 715.720511][T31801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6928'. [ 715.761132][T31803] bridge0: port 3(gretap0) entered disabled state [ 715.771008][T31803] gretap0: entered allmulticast mode [ 715.784549][T31803] gretap0: entered promiscuous mode [ 715.798272][T31803] bridge0: port 3(gretap0) entered blocking state [ 715.804851][T31803] bridge0: port 3(gretap0) entered forwarding state [ 715.815417][T31801] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 715.829088][T31801] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 715.841795][T31801] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6928'. [ 715.966031][T31805] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 715.996097][T31805] bond5 (unregistering): Released all slaves [ 716.142045][T31820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.245218][T31825] pim6reg1: entered promiscuous mode [ 716.268379][T31825] pim6reg1: entered allmulticast mode [ 716.300353][T31825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.442145][T31837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6940'. [ 716.471611][T31840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.484146][T31838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6940'. [ 716.494877][T31840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.505544][T31840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.513840][T31840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.985560][T31863] delete_channel: no stack [ 717.142506][T31869] tap0: tun_chr_ioctl cmd 2148553947 [ 717.331869][T31887] netlink: 'syz.1.6956': attribute type 4 has an invalid length. [ 717.387471][T31895] Bluetooth: MGMT ver 1.23 [ 717.556743][ T5906] IPVS: starting estimator thread 0... [ 717.562647][T31905] tipc: Enabling of bearer rejected, media not registered [ 717.573726][T31909] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20002 [ 717.589808][T31907] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20002 [ 717.602202][T31904] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 717.644887][T31907] netlink: 'syz.4.6962': attribute type 3 has an invalid length. [ 717.659087][T31906] IPVS: using max 27 ests per chain, 64800 per kthread [ 717.690562][T31909] netlink: 'syz.4.6962': attribute type 3 has an invalid length. [ 717.761448][T31919] __nla_validate_parse: 4 callbacks suppressed [ 717.761467][T31919] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6968'. [ 717.834712][T31923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6967'. [ 717.930655][T31923] bond2: entered promiscuous mode [ 717.935743][T31923] bond2: entered allmulticast mode [ 717.961523][T31932] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6970'. [ 717.985254][T31932] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6970'. [ 718.004494][T31934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6971'. [ 718.010112][T31936] netlink: 'syz.2.6972': attribute type 21 has an invalid length. [ 718.022573][T31936] IPv6: NLM_F_CREATE should be specified when creating new route [ 718.156235][T31947] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6976'. [ 718.212886][T31950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.295788][T31954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6977'. [ 718.311640][T31955] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 718.793346][T31973] netlink: 'syz.4.6982': attribute type 1 has an invalid length. [ 718.814427][T31976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6981'. [ 718.824849][T31973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 718.863853][T31976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6981'. [ 719.284755][T32017] nbd: must specify at least one socket [ 719.364955][T32021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6994'. [ 719.935737][T32063] lo: entered promiscuous mode [ 719.980136][T32063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.192275][T32077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.623901][T32097] netlink: 'syz.0.7013': attribute type 16 has an invalid length. [ 720.638779][T32097] netlink: 'syz.0.7013': attribute type 3 has an invalid length. [ 720.939014][T32104] tipc: Enabled bearer , priority 14 [ 721.543261][T32169] erspan0: entered promiscuous mode [ 721.706217][T32181] netlink: 'syz.1.7038': attribute type 1 has an invalid length. [ 721.732378][T32181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.747348][T32176] gretap0: entered promiscuous mode [ 721.788834][T32176] gretap0: left promiscuous mode [ 722.114590][T26022] block nbd1: Receive control failed (result -1) [ 722.194721][T26022] block nbd2: Receive control failed (result -1) [ 722.592938][T32228] netlink: 'syz.3.7050': attribute type 30 has an invalid length. [ 722.743703][T32239] netlink: 'syz.1.7053': attribute type 75 has an invalid length. [ 722.807658][T32245] tipc: Started in network mode [ 722.813252][T32245] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 722.840231][T32245] tipc: Enabled bearer , priority 10 [ 722.852878][T32245] __nla_validate_parse: 25 callbacks suppressed [ 722.852893][T32245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7055'. [ 722.904135][T32237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7054'. [ 722.910639][T32245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7055'. [ 722.956207][T32245] netlink: 'syz.4.7055': attribute type 14 has an invalid length. [ 722.977911][T32245] netlink: 'syz.4.7055': attribute type 13 has an invalid length. [ 723.342960][T32283] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 723.391342][T32281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7062'. [ 723.452184][T32285] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 723.467461][T32285] bond5 (unregistering): Released all slaves [ 723.499630][T32291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7066'. [ 723.618827][T32297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7067'. [ 723.715554][T32297] ip6erspan0: entered promiscuous mode [ 723.829152][T32305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7068'. [ 723.849051][T18069] tipc: Node number set to 4269801488 [ 723.892809][T32310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7071'. [ 723.967490][T32313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7073'. [ 723.988807][T32310] netlink: 'syz.3.7071': attribute type 1 has an invalid length. [ 724.078095][T32289] netlink: 'syz.2.7065': attribute type 21 has an invalid length. [ 724.112843][T32325] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 724.189540][T32329] netlink: 'syz.3.7076': attribute type 1 has an invalid length. [ 724.194413][T32289] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 724.237426][T32289] bond4 (unregistering): Released all slaves [ 724.308597][T32333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7078'. [ 724.697504][T32353] veth3: entered allmulticast mode [ 724.727225][T32357] tipc: Bearer : already 2 bearers with priority 10 [ 724.744665][T32357] tipc: Bearer : trying with adjusted priority [ 724.761380][T32357] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 724.883730][T32360] rdma_rxe: Failed to create IPv4 UDP tunnel [ 725.020976][T32375] sctp: [Deprecated]: syz.2.7094 (pid 32375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 725.020976][T32375] Use struct sctp_sack_info instead [ 725.424608][T32367] infiniband syz2: set active [ 725.431712][T32367] infiniband syz2: added bridge0 [ 725.455886][T32367] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 725.472183][T32367] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 725.497353][T32367] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 725.531146][T32367] RDS/IB: syz2: added [ 725.535343][T32367] smc: adding ib device syz2 with port count 1 [ 725.543200][T32367] smc: ib device syz2 port 1 has no pnetid [ 725.723920][T32410] syzkaller0: entered promiscuous mode [ 725.740207][T32410] syzkaller0: entered allmulticast mode [ 726.118128][T32426] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 726.144231][T32429] validate_nla: 1 callbacks suppressed [ 726.144250][T32429] netlink: 'syz.1.7111': attribute type 3 has an invalid length. [ 726.189844][T32428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.681911][T32452] netlink: 'syz.2.7119': attribute type 11 has an invalid length. [ 726.719671][ T29] audit: type=1800 audit(1777181492.312:21): pid=32450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7118" name="memory.events" dev="tmpfs" ino=1718 res=0 errno=0 [ 727.518287][T32488] netlink: 'syz.4.7132': attribute type 1 has an invalid length. [ 727.817252][T32509] vcan0: tx address claim with dlc 0 [ 727.951874][ T5211] block nbd0: Possible stuck request ffff8880274f9140: control (read@0,1024B). Runtime 150 seconds [ 727.966408][ T5211] block nbd0: Possible stuck request ffff8880274f9300: control (read@1024,1024B). Runtime 150 seconds [ 727.977623][ T5211] block nbd0: Possible stuck request ffff8880274f94c0: control (read@2048,1024B). Runtime 150 seconds [ 727.991161][ T11] block nbd0: Dead connection, failed to find a fallback [ 728.001042][ T11] block nbd0: shutting down sockets [ 728.008691][ T5211] block nbd0: Possible stuck request ffff8880274f9680: control (read@3072,1024B). Runtime 150 seconds [ 728.023351][ T11] blk_print_req_error: 137 callbacks suppressed [ 728.023367][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.041837][ T11] buffer_io_error: 138 callbacks suppressed [ 728.041852][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 728.057512][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.066614][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 728.074511][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.088859][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 728.096680][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.105914][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 728.118558][T24997] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.131257][T24997] Buffer I/O error on dev nbd0, logical block 0, async page read [ 728.139814][T24997] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.149012][T24997] Buffer I/O error on dev nbd0, logical block 1, async page read [ 728.157413][T24997] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.166559][T24997] Buffer I/O error on dev nbd0, logical block 2, async page read [ 728.175051][T24997] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.185041][T24997] Buffer I/O error on dev nbd0, logical block 3, async page read [ 728.193285][T24997] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.203131][T24997] Buffer I/O error on dev nbd0, logical block 0, async page read [ 728.211110][T24997] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.220280][T24997] Buffer I/O error on dev nbd0, logical block 1, async page read [ 728.231324][T24997] ldm_validate_partition_table(): Disk read failed. [ 728.240968][T24997] Dev nbd0: unable to read RDB block 0 [ 728.248915][T24997] nbd0: unable to read partition table [ 728.270790][T24997] ldm_validate_partition_table(): Disk read failed. [ 728.284952][T24997] Dev nbd0: unable to read RDB block 0 [ 728.295338][T24997] nbd0: unable to read partition table [ 728.537668][T32534] openvswitch: netlink: Message has 592 unknown bytes. [ 728.551096][T32534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.611959][T32539] netlink: 'syz.4.7145': attribute type 1 has an invalid length. [ 728.635778][T32539] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 728.782478][T32552] __nla_validate_parse: 14 callbacks suppressed [ 728.782497][T32552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7147'. [ 728.821146][T32551] delete_channel: no stack [ 728.955977][T32556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7150'. [ 728.978674][T32558] netlink: 'syz.4.7151': attribute type 1 has an invalid length. [ 729.000598][T32558] netlink: 'syz.4.7151': attribute type 2 has an invalid length. [ 729.232927][T32571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7155'. [ 729.332346][T32571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 729.353078][T32571] bond5 (unregistering): Released all slaves [ 729.492790][T32580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7157'. [ 729.503069][T32580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7157'. [ 729.637151][T32585] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7160'. [ 729.693302][T32587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7159'. [ 729.858196][T32592] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7162'. [ 729.879712][T32592] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 729.891061][T32592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.394223][T32610] netlink: 'syz.3.7168': attribute type 10 has an invalid length. [ 730.430608][T32612] openvswitch: netlink: IP tunnel dst address not specified [ 730.436510][T32610] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 730.567472][T32614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7170'. [ 730.969595][T32631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7177'. [ 731.133090][T32631] macvlan3: entered promiscuous mode [ 731.176049][T32631] macvlan3: entered allmulticast mode [ 731.204845][T32631] bond4: (slave macvlan3): Opening slave failed [ 731.640930][T32660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.836723][T32672] netlink: 'syz.2.7194': attribute type 1 has an invalid length. [ 731.919437][T32672] 8021q: adding VLAN 0 to HW filter on device bond5 [ 731.974689][T32673] tc_dump_action: action bad kind [ 731.983534][T32680] mac80211_hwsim hwsim69 : renamed from wlan1 (while UP) [ 732.002075][T32683] erspan0: entered promiscuous mode [ 732.010295][T32683] erspan0: left promiscuous mode [ 732.054973][T32672] vlan2: entered allmulticast mode [ 732.066139][T32672] bond5: entered allmulticast mode [ 732.094456][T32684] bridge0: port 3(gretap0) entered blocking state [ 732.110537][T32684] bridge0: port 3(gretap0) entered disabled state [ 732.137201][T32684] gretap0: entered allmulticast mode [ 732.166396][T32684] gretap0: entered promiscuous mode [ 732.200274][T32684] bridge0: port 3(gretap0) entered blocking state [ 732.206843][T32684] bridge0: port 3(gretap0) entered forwarding state [ 732.708879][T32701] syzkaller0: entered promiscuous mode [ 732.734339][T32701] syzkaller0: entered allmulticast mode [ 732.883271][T32720] macvlan0: entered promiscuous mode [ 732.897379][T32688] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 735.830897][T32763] netlink: 'syz.1.7220': attribute type 1 has an invalid length. [ 735.857660][ T300] __nla_validate_parse: 12 callbacks suppressed [ 735.857679][ T300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7222'. [ 736.207085][ T326] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 736.271616][ T328] netlink: 'syz.0.7230': attribute type 12 has an invalid length. [ 736.291879][ T328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7230'. [ 736.303094][ T328] netlink: 'syz.0.7230': attribute type 12 has an invalid length. [ 736.314352][ T328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7230'. [ 736.463250][ T336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7232'. [ 736.783685][ T349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7234'. [ 736.821881][ T361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7237'. [ 736.843170][ T361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7237'. [ 737.402622][ T389] netlink: 'syz.4.7242': attribute type 18 has an invalid length. [ 737.883067][ T405] netlink: 'syz.2.7246': attribute type 3 has an invalid length. [ 737.933885][ T405] netlink: 666 bytes leftover after parsing attributes in process `syz.2.7246'. [ 738.439630][ T435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7253'. [ 738.610470][ T447] netlink: 'syz.0.7256': attribute type 18 has an invalid length. [ 738.683110][ T451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7256'. [ 738.703073][ T451] netlink: 'syz.0.7256': attribute type 18 has an invalid length. [ 738.719736][ T447] netlink: 'syz.0.7256': attribute type 18 has an invalid length. [ 738.830038][ T451] netlink: 'syz.0.7256': attribute type 18 has an invalid length. [ 739.140207][ T486] 0: renamed from hsr_slave_1 [ 739.171592][ T486] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 739.823821][ T526] openvswitch: netlink: Flow actions attr not present in new flow. [ 740.309430][ T551] openvswitch: netlink: Missing key (keys=40, expected=100) [ 740.407584][ T554] netlink: 'syz.1.7279': attribute type 39 has an invalid length. [ 740.545812][ T563] netlink: 'syz.2.7281': attribute type 1 has an invalid length. [ 740.693891][ T579] netlink: 'syz.2.7285': attribute type 1 has an invalid length. [ 740.782290][ T585] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 741.108289][ T603] sit0: entered promiscuous mode [ 741.133692][ T603] netlink: 'syz.1.7292': attribute type 1 has an invalid length. [ 741.149550][ T603] __nla_validate_parse: 4 callbacks suppressed [ 741.149567][ T603] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7292'. [ 741.307395][ T621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7298'. [ 741.774011][ T644] bridge0: port 3(ipvlan2) entered blocking state [ 741.782151][ T644] bridge0: port 3(ipvlan2) entered disabled state [ 741.790148][ T644] ipvlan2: entered allmulticast mode [ 741.800342][ T644] ipvlan2: left allmulticast mode [ 742.046544][ T663] tipc: Started in network mode [ 742.053303][ T663] tipc: Node identity 2e8678a1da57, cluster identity 4711 [ 742.061763][ T663] tipc: Enabled bearer , priority 0 [ 742.121293][ T663] syzkaller0: entered promiscuous mode [ 742.126828][ T663] syzkaller0: entered allmulticast mode [ 742.148897][ T663] tipc: Resetting bearer [ 742.197095][ T670] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7310'. [ 742.306032][ T58] tipc: Resetting bearer [ 742.317068][ T662] tipc: Resetting bearer [ 742.534459][ T684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7313'. [ 742.591581][ T686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7314'. [ 744.590203][ T662] tipc: Disabling bearer [ 744.604721][ T684] bond0: entered promiscuous mode [ 744.610237][ T684] bond_slave_0: entered promiscuous mode [ 744.616031][ T684] bond_slave_1: entered promiscuous mode [ 744.623511][ T684] mac80211_hwsim hwsim77 wlan1: entered promiscuous mode [ 744.631349][ T684] hsr1: entered promiscuous mode [ 744.636441][ T686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.663480][T18067] tipc: Node number set to 4107368609 [ 744.907583][ T716] netlink: 'syz.3.7321': attribute type 4 has an invalid length. [ 745.098716][ T730] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 745.210982][ T735] netlink: 19 bytes leftover after parsing attributes in process `syz.3.7327'. [ 745.406140][ T742] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 747.153379][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.583777][ T761] lo: entered allmulticast mode [ 747.595475][ T761] lo: left allmulticast mode [ 747.615801][ T763] netlink: 'syz.2.7334': attribute type 2 has an invalid length. [ 747.625767][ T761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7331'. [ 747.889480][ T788] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.7340'. [ 747.963145][ T791] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7342'. [ 748.204945][ T808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7346'. [ 748.290099][ T814] --map-set only usable from mangle table [ 748.314963][ T817] netlink: 'syz.1.7348': attribute type 1 has an invalid length. [ 748.340630][ T817] bond7: entered promiscuous mode [ 748.346011][ T817] 8021q: adding VLAN 0 to HW filter on device bond7 [ 748.380370][ T817] ipvlan2: entered allmulticast mode [ 748.385787][ T817] bond7: entered allmulticast mode [ 748.407360][ T817] ipvlan3: entered allmulticast mode [ 748.433814][ T817] bond7: (slave bridge4): making interface the new active one [ 748.442727][ T817] bridge4: entered promiscuous mode [ 748.449489][ T817] bridge4: entered allmulticast mode [ 748.457542][ T817] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 748.574465][ T832] netlink: 'syz.1.7353': attribute type 1 has an invalid length. [ 748.583319][ T832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7353'. [ 748.617312][ T835] netlink: 'syz.0.7354': attribute type 4 has an invalid length. [ 748.627425][ T835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.792409][ T850] syzkaller1: entered promiscuous mode [ 748.798052][ T850] syzkaller1: entered allmulticast mode [ 748.844063][ T853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 748.851324][ T853] IPv6: NLM_F_CREATE should be set when creating new route [ 748.858639][ T853] IPv6: NLM_F_CREATE should be set when creating new route [ 748.865836][ T853] IPv6: NLM_F_CREATE should be set when creating new route [ 748.874510][ T853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 749.023840][ T857] bridge0: port 3(gretap0) entered disabled state [ 749.131291][ T857] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.138995][ T857] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.185062][ T865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7360'. [ 749.217446][ T869] SET target dimension over the limit! [ 749.610437][ T857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.658208][ T857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.756917][ T889] netlink: 'syz.0.7367': attribute type 1 has an invalid length. [ 749.984742][ T857] tipc: Resetting bearer [ 750.216376][ T889] bond5: entered promiscuous mode [ 750.241818][ T889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 750.288405][ T890] bond5: (slave bridge5): making interface the new active one [ 750.303651][ T890] bridge5: entered promiscuous mode [ 750.311437][ T890] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 750.332850][ T891] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 750.355900][ T891] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 750.372274][T15147] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.381225][T15147] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.392966][T15147] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.403799][T15147] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.434159][T15147] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.462122][T15147] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.480504][T15147] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.529667][T15147] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.570214][ T907] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7374'. [ 750.590857][ T921] openvswitch: netlink: EtherType 0 is less than min 600 [ 750.592461][ T922] openvswitch: netlink: EtherType 0 is less than min 600 [ 750.631574][ T924] lo speed is unknown, defaulting to 1000 [ 750.651324][ T924] lo speed is unknown, defaulting to 1000 [ 750.657577][ T922] netlink: 'syz.4.7376': attribute type 10 has an invalid length. [ 750.687039][ T924] lo speed is unknown, defaulting to 1000 [ 750.688252][ T921] netlink: 'syz.4.7376': attribute type 10 has an invalid length. [ 750.721897][ T922] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.735504][ T924] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 750.760643][ T922] bridge_slave_1: left allmulticast mode [ 750.766465][ T922] bridge_slave_1: left promiscuous mode [ 750.773026][ T922] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.776432][ T924] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 750.803356][ T924] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 750.805550][ T922] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 750.837025][ T924] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 750.854048][ T937] openvswitch: netlink: Multiple metadata blocks provided [ 750.880454][ T934] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7379'. [ 750.908815][ T934] bridge0: port 3(gretap0) entered disabled state [ 750.915455][ T934] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.923841][ T934] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.964306][ T5906] syz2: Port: 1 Link DOWN [ 750.966012][ T924] lo speed is unknown, defaulting to 1000 [ 751.012005][ T924] lo speed is unknown, defaulting to 1000 [ 751.039736][ T924] lo speed is unknown, defaulting to 1000 [ 751.047295][ T924] lo speed is unknown, defaulting to 1000 [ 751.059477][ T940] syzkaller0: entered promiscuous mode [ 751.065181][ T940] syzkaller0: entered allmulticast mode [ 751.083738][ T954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7382'. [ 751.089827][ T924] lo speed is unknown, defaulting to 1000 [ 751.191771][ T924] lo speed is unknown, defaulting to 1000 [ 751.203644][ T924] lo speed is unknown, defaulting to 1000 [ 751.221147][ T924] lo speed is unknown, defaulting to 1000 [ 751.241124][ T924] lo speed is unknown, defaulting to 1000 [ 751.264225][ T924] lo speed is unknown, defaulting to 1000 [ 751.536063][ T979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7390'. [ 751.652209][ T989] IPVS: sh: FWM 3 0x00000003 - no destination available [ 751.844208][ T1002] netlink: 'syz.3.7399': attribute type 3 has an invalid length. [ 752.423476][ T1065] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 753.134542][ T1104] __nla_validate_parse: 10 callbacks suppressed [ 753.134563][ T1104] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7426'. [ 753.159657][ T1104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7426'. [ 753.172705][ T1104] netlink: 31 bytes leftover after parsing attributes in process `syz.1.7426'. [ 753.182374][ T1104] netlink: 'syz.1.7426': attribute type 2 has an invalid length. [ 753.185740][ T1102] syzkaller0: entered promiscuous mode [ 753.191185][ T1104] netlink: 31 bytes leftover after parsing attributes in process `syz.1.7426'. [ 753.212506][ T1102] syzkaller0: entered allmulticast mode [ 753.244315][ T1104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7426'. [ 753.321089][ T1104] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 753.333788][ T1104] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 753.342665][ T1104] gretap2: entered promiscuous mode [ 753.349353][ T1104] gretap2: entered allmulticast mode [ 753.574909][ T1116] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7430'. [ 753.675787][ T1119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7432'. [ 753.705378][ T1120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7432'. [ 753.946317][ T1136] bond0: (slave bond_slave_1): Releasing backup interface [ 754.133665][ T1154] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7441'. [ 754.656532][ T1176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.684265][ T1178] ipt_REJECT: TCP_RESET invalid for non-tcp [ 754.693482][ T1176] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7448'. [ 755.024290][ T1192] syzkaller1: entered promiscuous mode [ 755.045098][ T1196] netlink: 'syz.3.7455': attribute type 1 has an invalid length. [ 755.057299][ T1192] syzkaller1: entered allmulticast mode [ 755.080128][ T1196] netlink: 'syz.3.7455': attribute type 1 has an invalid length. [ 755.128360][ T1199] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 756.583307][ T1236] lo speed is unknown, defaulting to 1000 [ 756.838206][ T1264] bond0: (slave syz_tun): Releasing backup interface [ 756.852681][ T1264] syz_tun (unregistering): left allmulticast mode [ 757.211447][ T1279] netlink: 'syz.4.7480': attribute type 10 has an invalid length. [ 757.351355][ T1279] veth0_vlan: left promiscuous mode [ 757.366191][ T1279] veth0_vlan: entered promiscuous mode [ 757.381883][ T1279] team0: Device veth0_vlan failed to register rx_handler [ 757.431332][ T1285] netlink: 'syz.2.7482': attribute type 4 has an invalid length. [ 757.565006][ T1293] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 757.880765][ T1305] delete_channel: no stack [ 758.126673][ T1328] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 758.363901][ T1337] __nla_validate_parse: 4 callbacks suppressed [ 758.363920][ T1337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7496'. [ 759.026745][ T1375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7506'. [ 759.054005][ T1375] netlink: 'syz.0.7506': attribute type 7 has an invalid length. [ 759.073088][ T1375] netlink: 'syz.0.7506': attribute type 8 has an invalid length. [ 759.096053][ T1375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7506'. [ 759.293967][ T1381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7509'. [ 759.322727][ T1381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7509'. [ 759.455843][ T1389] xt_ecn: cannot match TCP bits for non-tcp packets [ 759.500001][ T5906] lo speed is unknown, defaulting to 1000 [ 759.513504][ T5906] syz0: Port: 1 Link ACTIVE [ 759.621553][ T1395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7515'. [ 759.641456][ T1395] netlink: 'syz.4.7515': attribute type 1 has an invalid length. [ 759.665478][ T1395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7515'. [ 759.679768][ T1399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7516'. [ 759.704840][ T1395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7515'. [ 759.719834][ T1395] x9: left allmulticast mode [ 759.733061][ T1395] x9: left promiscuous mode [ 759.747661][ T1395] bridge0: port 1(1x9) entered disabled state [ 759.843666][ T1405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7519'. [ 760.361608][ T1432] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 760.401865][ T1432] bond6 (unregistering): Released all slaves [ 760.424825][ T1454] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 760.542353][ T1459] netlink: 'syz.1.7532': attribute type 6 has an invalid length. [ 760.596009][ T1463] netlink: 'syz.3.7534': attribute type 10 has an invalid length. [ 760.633000][ T1463] bond0: (slave dummy0): Releasing backup interface [ 760.653830][ T1463] team0: Port device dummy0 added [ 760.673687][ T1471] netlink: 'syz.3.7534': attribute type 10 has an invalid length. [ 760.719033][ T1471] team0: Port device dummy0 removed [ 760.732402][ T1471] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 761.030212][ T1491] netlink: 'syz.1.7541': attribute type 1 has an invalid length. [ 761.342877][ T1512] netlink: 'syz.0.7547': attribute type 1 has an invalid length. [ 761.522979][ T1528] openvswitch: netlink: IP tunnel dst address not specified [ 761.576206][ T1526] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 761.668440][ T1531] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 762.269116][ T1586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.130133][ T1613] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 764.411432][ T1632] sctp: [Deprecated]: syz.4.7581 (pid 1632) Use of int in maxseg socket option. [ 764.411432][ T1632] Use struct sctp_assoc_value instead [ 764.485237][ T1638] openvswitch: netlink: IPv4 tun info is not correct [ 764.589237][T26022] Bluetooth: hci5: command 0x0406 tx timeout [ 764.662237][ T1647] __nla_validate_parse: 17 callbacks suppressed [ 764.662256][ T1647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7587'. [ 764.709684][ T1647] x_tables: unsorted underflow at hook 3 [ 764.760951][ T1653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7588'. [ 764.807545][ T1653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7588'. [ 764.853450][ T1649] wireguard1: entered promiscuous mode [ 764.859958][ T1649] wireguard1: entered allmulticast mode [ 764.915510][ T1666] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 765.026482][ T1668] gretap3: entered promiscuous mode [ 765.039425][ T1668] batman_adv: batadv0: Adding interface: gretap3 [ 765.055608][ T1668] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568. [ 765.102773][ T1668] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 765.235779][ T1690] validate_nla: 3 callbacks suppressed [ 765.235797][ T1690] netlink: 'syz.4.7600': attribute type 32 has an invalid length. [ 765.252753][ T1690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7600'. [ 765.317683][ T1690] bond2: option coupled_control: invalid value (255) [ 765.326355][ T1690] bond2 (unregistering): Released all slaves [ 765.407534][ T1698] gre1: entered promiscuous mode [ 765.412857][ T1698] gre1: entered allmulticast mode [ 765.485060][ T1700] bond5: entered promiscuous mode [ 765.493292][ T1700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7605'. [ 765.505851][ T1700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7605'. [ 765.574267][ T1706] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 765.646917][ T1707] syzkaller0: entered promiscuous mode [ 765.667569][ T1707] syzkaller0: entered allmulticast mode [ 765.702638][ T1707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7608'. [ 765.722588][ T1707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7608'. [ 765.951997][ T1725] pim6reg: entered allmulticast mode [ 766.037486][ T1737] netlink: 'syz.4.7617': attribute type 1 has an invalid length. [ 766.045630][ T1737] netlink: 'syz.4.7617': attribute type 1 has an invalid length. [ 766.056954][ T1737] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.7617'. [ 766.067603][ T1737] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7617'. [ 766.071968][ T1734] netlink: 'syz.2.7616': attribute type 1 has an invalid length. [ 766.086805][ T1739] netlink: 'syz.4.7617': attribute type 1 has an invalid length. [ 766.096538][ T1739] netlink: 'syz.4.7617': attribute type 1 has an invalid length. [ 766.153734][ T1742] netlink: 'syz.4.7618': attribute type 21 has an invalid length. [ 766.162834][ T1742] netlink: 'syz.4.7618': attribute type 4 has an invalid length. [ 766.171433][ T1742] netlink: 'syz.4.7618': attribute type 5 has an invalid length. [ 766.199092][ T1742] netlink: 'syz.4.7618': attribute type 21 has an invalid length. [ 767.201232][ T1804] ip6erspan1: entered promiscuous mode [ 767.547245][ T1834] : entered promiscuous mode [ 768.027477][ T1870] netlink: Conntrack attr has 3 unknown bytes [ 768.573561][ T1889] nbd: must specify at least one socket [ 768.660408][ T1896] 8021q: adding VLAN 0 to HW filter on device bond6 [ 768.750650][ T1896] bridge0: port 3(gretap0) entered blocking state [ 768.757265][ T1896] bridge0: port 3(gretap0) entered listening state [ 768.764099][ T1896] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.771304][ T1896] bridge0: port 2(bridge_slave_1) entered listening state [ 768.778721][ T1896] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.785881][ T1896] bridge0: port 1(bridge_slave_0) entered listening state [ 768.840176][ T1896] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 769.563703][ T1951] vlan2: entered allmulticast mode [ 769.571449][ T1951] bridge4: entered allmulticast mode [ 769.601597][ T1954] bridge4: port 1(bond7) entered blocking state [ 769.608284][ T1954] bridge4: port 1(bond7) entered disabled state [ 769.614900][ T1954] bond7: entered allmulticast mode [ 769.622968][ T1954] bond7: entered promiscuous mode [ 769.647050][ T1957] team0: Port device dummy0 added [ 769.771633][ T1908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 769.787737][ T1963] __nla_validate_parse: 29 callbacks suppressed [ 769.787756][ T1963] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7688'. [ 769.810082][ T1963] xt_policy: neither incoming nor outgoing policy selected [ 770.003582][ T1972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7693'. [ 770.054229][ T1972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7693'. [ 770.221378][ T1982] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7694'. [ 770.261083][ T1986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7696'. [ 770.297730][ T1985] xt_l2tp: v2 tid > 0xffff: 1114244 [ 770.359032][ T1989] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7697'. [ 770.490870][ T1995] validate_nla: 9 callbacks suppressed [ 770.490888][ T1995] netlink: 'syz.3.7700': attribute type 1 has an invalid length. [ 770.543796][ T1998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.571151][ T1993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.729320][ T1995] 8021q: adding VLAN 0 to HW filter on device bond8 [ 770.853968][ T1993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.946748][ T2002] bond8: (slave gretap2): making interface the new active one [ 770.969923][ T2002] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 770.990898][ T2003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7700'. [ 771.011939][ T2003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7700'. [ 771.059514][ T1993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.255234][ T1993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.356804][ T2022] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7706'. [ 771.438771][ T2025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7707'. [ 771.564505][T15147] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.623980][T15147] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.699811][ T3577] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.800115][ T2037] veth0_macvtap: left promiscuous mode [ 771.867334][T15147] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.057472][ T2047] netlink: 'syz.2.7713': attribute type 21 has an invalid length. [ 772.222078][ T2060] netlink: 'syz.4.7717': attribute type 12 has an invalid length. [ 772.466214][ T58] tipc: Subscription rejected, illegal request [ 772.534222][ T2073] tipc: Enabling of bearer rejected, failed to enable media [ 772.677286][ T2091] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 772.849081][ T2096] syzkaller1: entered promiscuous mode [ 772.858038][ T2096] syzkaller1: entered allmulticast mode [ 773.436651][ T2123] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 773.451550][ T2123] bond9 (unregistering): Released all slaves [ 773.676203][ T2143] mac80211_hwsim hwsim81 : renamed from wlan1 [ 773.702171][ T2146] netlink: 'syz.4.7737': attribute type 39 has an invalid length. [ 773.921187][ T2165] netlink: 'syz.2.7741': attribute type 1 has an invalid length. [ 774.021061][ T2168] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 774.034250][ T2168] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 774.330860][ T2193] syzkaller0: entered promiscuous mode [ 774.336409][ T2193] syzkaller0: entered allmulticast mode [ 774.747593][ T2216] tipc: Enabling of bearer rejected, already enabled [ 774.854380][ T2225] __nla_validate_parse: 12 callbacks suppressed [ 774.854400][ T2225] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7760'. [ 774.864462][ T2228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7761'. [ 774.925952][ T2228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7761'. [ 775.109896][ T2238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7760'. [ 775.542600][ T2266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7769'. [ 775.637311][ T2267] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 775.685018][ T2267] bond8: (slave lo): Enslaving as an active interface with an up link [ 775.696320][ T2267] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 775.786571][ T2270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.802249][ T2231] lo speed is unknown, defaulting to 1000 [ 775.827231][ T2278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.122537][ T2298] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7777'. [ 776.166211][ T2298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7777'. [ 776.194589][ T2298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7777'. [ 776.235834][ T2301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7779'. [ 776.283835][ T2301] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 776.490939][ T2316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7784'. [ 776.525208][ T2301] team1: entered promiscuous mode [ 776.557391][ T2301] team1: entered allmulticast mode [ 776.586738][ T2308] netlink: 'syz.4.7783': attribute type 29 has an invalid length. [ 776.606614][ T2320] netlink: 'syz.0.7785': attribute type 1 has an invalid length. [ 776.625897][ T2320] netlink: 'syz.0.7785': attribute type 2 has an invalid length. [ 777.542179][ T2371] netlink: 'syz.4.7795': attribute type 11 has an invalid length. [ 778.526761][ T5507] veth0_macvtap: left promiscuous mode [ 778.821810][ T2471] openvswitch: netlink: Missing key (keys=40, expected=100) [ 778.832318][ T2472] netlink: 'syz.1.7815': attribute type 7 has an invalid length. [ 778.868828][ T2471] sctp: [Deprecated]: syz.2.7813 (pid 2471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 778.868828][ T2471] Use struct sctp_sack_info instead [ 779.836509][ T2564] netlink: 'syz.0.7826': attribute type 11 has an invalid length. [ 780.296049][ T2587] ip6gre1: entered promiscuous mode [ 780.324627][ T2589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 780.347208][ T2587] ip6gre1: entered allmulticast mode [ 780.426245][ T2595] sctp: [Deprecated]: syz.4.7835 (pid 2595) Use of int in max_burst socket option. [ 780.426245][ T2595] Use struct sctp_assoc_value instead [ 780.445398][ T2597] netlink: 'syz.0.7836': attribute type 2 has an invalid length. [ 780.465970][ T2597] __nla_validate_parse: 15 callbacks suppressed [ 780.465988][ T2597] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7836'. [ 780.497443][ T2605] netlink: zone id is out of range [ 780.520727][ T2605] netlink: zone id is out of range [ 780.546442][ T2610] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 780.546905][ T2605] netlink: zone id is out of range [ 780.592405][ T2605] netlink: zone id is out of range [ 780.597692][ T2605] netlink: zone id is out of range [ 780.605686][ T2605] netlink: zone id is out of range [ 780.632095][ T2605] netlink: zone id is out of range [ 780.633924][ T2613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7839'. [ 780.661034][ T2605] netlink: set zone limit has 4 unknown bytes [ 780.674812][ T2613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7839'. [ 780.695621][ T2613] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7839'. [ 780.707673][ T2613] netlink: 320 bytes leftover after parsing attributes in process `syz.4.7839'. [ 780.823748][ T2620] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7842'. [ 780.974103][ T2392] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.995896][ T2392] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.004477][T18069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.023966][ T2626] batman_adv: batadv0: Adding interface: dummy0 [ 781.042941][ T2626] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.076127][ T2626] batman_adv: batadv0: Interface activated: dummy0 [ 781.088415][T18069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.146426][ T2636] netlink: 33 bytes leftover after parsing attributes in process `syz.3.7847'. [ 781.159300][ T2636] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7847'. [ 781.178811][ T2636] netlink: 33 bytes leftover after parsing attributes in process `syz.3.7847'. [ 781.465664][ T2663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7854'. [ 781.475128][ T2663] netlink: 'syz.4.7854': attribute type 5 has an invalid length. [ 781.485179][T18069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.492940][ T2663] geneve3: entered promiscuous mode [ 781.498294][ T2663] geneve3: entered allmulticast mode [ 781.505930][ T6425] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 781.525828][ T6425] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 781.542462][ T6425] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 781.554488][ T6425] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 781.706967][ T2686] syzkaller1: entered promiscuous mode [ 781.713389][ T2686] syzkaller1: entered allmulticast mode [ 781.785391][ T2695] sctp: [Deprecated]: syz.0.7862 (pid 2695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 781.785391][ T2695] Use struct sctp_sack_info instead [ 782.040626][ T2722] netlink: 'syz.0.7869': attribute type 10 has an invalid length. [ 782.065213][ T2722] bond0: (slave ): Enslaving as an active interface with a down link [ 782.434284][ T2741] netlink: 'syz.0.7875': attribute type 75 has an invalid length. [ 782.590256][ T2756] mac80211_hwsim hwsim85 wlan1: Caught tx_queue_len zero misconfig [ 782.814650][ T2778] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 783.046636][ T2794] netlink: 'syz.0.7892': attribute type 1 has an invalid length. [ 783.055508][ T2797] netlink: 'syz.2.7891': attribute type 1 has an invalid length. [ 783.139386][ T2794] bond6: entered promiscuous mode [ 783.157758][ T2794] 8021q: adding VLAN 0 to HW filter on device bond6 [ 783.257095][ T2804] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 783.267538][ T2804] bond6: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 783.285352][ T2804] bond6: (slave vxcan3): making interface the new active one [ 783.293850][ T2804] bond6: (slave vxcan3): Enslaving as an active interface with an up link [ 783.460487][ T2820] netlink: 'syz.1.7896': attribute type 21 has an invalid length. [ 783.489431][ T2820] netlink: 'syz.1.7896': attribute type 1 has an invalid length. [ 783.603204][ T2827] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 783.975258][ T2851] net_ratelimit: 20 callbacks suppressed [ 783.975276][ T2851] openvswitch: netlink: Message has -2 unknown bytes. [ 784.043498][ T2864] netlink: 'syz.4.7907': attribute type 1 has an invalid length. [ 784.270812][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 784.274837][ T2891] x_tables: ip6_tables: REJECT.0 target: invalid size 8 (kernel) != (user) 0 [ 784.278959][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 784.296524][ C0] bridge0: port 3(gretap0) entered learning state [ 784.417361][ T2900] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 784.444338][ T2907] netlink: 'syz.1.7916': attribute type 3 has an invalid length. [ 784.487733][ T2900] team0: Port device dummy0 removed [ 784.534823][ T5849] Bluetooth: hci3: link tx timeout [ 784.543340][ T5849] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 784.556219][ T5849] Bluetooth: hci3: link tx timeout [ 784.562074][ T5849] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 784.613141][ T2913] bond7: invalid ARP target 0.0.0.0 specified for addition [ 784.621221][ T2913] bond7: option arp_ip_target: invalid value (0) [ 784.629123][ T2913] bond7 (unregistering): Released all slaves [ 784.648275][ T2916] erspan0: entered promiscuous mode [ 784.653614][ T2916] erspan0: entered allmulticast mode [ 784.748311][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 786.588272][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 788.668403][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 792.588030][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 799.627977][ C0] bridge0: port 3(gretap0) entered forwarding state [ 799.634607][ C0] bridge0: topology change detected, propagating [ 799.641376][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.648600][ C0] bridge0: topology change detected, propagating [ 799.655016][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.662224][ C0] bridge0: topology change detected, propagating [ 807.948801][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 808.592234][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.668464][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 814.957328][ T2962] __nla_validate_parse: 13 callbacks suppressed [ 814.957350][ T2962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7923'. [ 815.138491][ T2974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7928'. [ 815.502436][ T3001] netem: unknown loss type 0 [ 815.528012][ T3001] netem: change failed [ 815.553634][ T3000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 815.754116][ T3020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7937'. [ 815.798833][ T3024] ip6t_srh: unknown srh invflags 4000 [ 815.820784][ T3026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7937'. [ 815.864785][ T3026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7937'. [ 815.997145][ T3020] 8021q: adding VLAN 0 to HW filter on device bond7 [ 816.000859][ T3041] netlink: 'syz.0.7937': attribute type 10 has an invalid length. [ 816.089303][ T3026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.150691][ T3026] bond7: (slave bond0): making interface the new active one [ 816.186528][ T3026] bond7: (slave bond0): Enslaving as an active interface with an up link [ 816.311613][ T3577] bond0: (slave bridge_slave_1): link status definitely down, disabling slave [ 816.353844][ T3577] bond0: now running without any active interface! [ 816.481581][ T3577] bond7: (slave bond0): link status definitely down, disabling slave [ 816.532666][ T3577] bond7: now running without any active interface! [ 816.536551][ T3061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7945'. [ 816.703846][ T3069] SET target dimension over the limit! [ 816.884611][ T3079] syzkaller0: entered promiscuous mode [ 816.898809][ T3079] syzkaller0: entered allmulticast mode [ 816.958966][ T3086] syzkaller0: entered promiscuous mode [ 816.984467][ T3086] syzkaller0: entered allmulticast mode [ 817.076807][ T3084] : renamed from vxcan1 [ 817.111654][ T3080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7950'. [ 817.153459][ T3080] bridge_slave_1: entered allmulticast mode [ 817.184810][ T3086] erspan0: left allmulticast mode [ 817.663762][ T3117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7959'. [ 817.956395][ T3127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7959'. [ 817.994638][ T3127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7959'. [ 818.273607][ T3138] FAULT_INJECTION: forcing a failure. [ 818.273607][ T3138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.298645][ T3138] CPU: 0 UID: 0 PID: 3138 Comm: syz.1.7962 Not tainted syzkaller #0 PREEMPT(full) [ 818.298671][ T3138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 818.298684][ T3138] Call Trace: [ 818.298691][ T3138] [ 818.298700][ T3138] dump_stack_lvl+0xe8/0x150 [ 818.298732][ T3138] should_fail_ex+0x412/0x560 [ 818.298766][ T3138] _copy_from_user+0x2d/0xb0 [ 818.298788][ T3138] kstrtouint_from_user+0xd6/0x180 [ 818.298817][ T3138] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 818.298860][ T3138] proc_fail_nth_write+0x8e/0x210 [ 818.298881][ T3138] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 818.298907][ T3138] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 818.298929][ T3138] vfs_write+0x29a/0xb90 [ 818.298961][ T3138] ? __pfx_vfs_write+0x10/0x10 [ 818.298985][ T3138] ? __fget_files+0x2a/0x420 [ 818.299009][ T3138] ? __fget_files+0x3a0/0x420 [ 818.299026][ T3138] ? __fget_files+0x2a/0x420 [ 818.299054][ T3138] ksys_write+0x150/0x270 [ 818.299079][ T3138] ? __pfx_ksys_write+0x10/0x10 [ 818.299111][ T3138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.299132][ T3138] do_syscall_64+0x15f/0xf80 [ 818.299156][ T3138] ? trace_irq_disable+0x3b/0x140 [ 818.299179][ T3138] ? clear_bhb_loop+0x40/0x90 [ 818.299203][ T3138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.299221][ T3138] RIP: 0033:0x7f59ad95d60e [ 818.299238][ T3138] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 818.299254][ T3138] RSP: 002b:00007f59ae7c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 818.299273][ T3138] RAX: ffffffffffffffda RBX: 00007f59ae7c46c0 RCX: 00007f59ad95d60e [ 818.299287][ T3138] RDX: 0000000000000001 RSI: 00007f59ae7c40a0 RDI: 0000000000000004 [ 818.299299][ T3138] RBP: 00007f59ae7c4090 R08: 0000000000000000 R09: 0000000000000000 [ 818.299310][ T3138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.299321][ T3138] R13: 00007f59adc16038 R14: 00007f59adc15fa0 R15: 00007ffd27a5ac88 [ 818.299354][ T3138] [ 819.404547][ T3180] vcan1: entered promiscuous mode [ 819.422506][ T3180] vcan1: entered allmulticast mode [ 819.596159][ T3186] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 819.611931][ T3186] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 819.724279][ T3204] sit0: Caught tx_queue_len zero misconfig [ 819.972034][ T3221] __nla_validate_parse: 5 callbacks suppressed [ 819.972051][ T3221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7982'. [ 820.003983][ T3221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7982'. [ 820.089028][ T3225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7983'. [ 820.105279][ T3225] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7983'. [ 820.151472][ T3229] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.7984'. [ 820.175856][ T3229] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.7984'. [ 820.229327][ T3227] bond11: entered promiscuous mode [ 820.371418][ T3234] netlink: 'syz.3.7986': attribute type 12 has an invalid length. [ 820.692843][ T3245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7989'. [ 820.757584][ T3252] 8021q: VLANs not supported on sit0 [ 820.955526][ T3254] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 820.987562][ T3254] bond12 (unregistering): Released all slaves [ 821.227251][ T3286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7996'. [ 821.258173][ T3287] netlink: 'syz.0.7997': attribute type 4 has an invalid length. [ 821.333521][ T3292] netlink: 'syz.4.7998': attribute type 1 has an invalid length. [ 821.359202][ T3292] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7998'. [ 821.370147][ T3289] bond2 (unregistering): Released all slaves [ 821.486799][ T3289] vlan1: entered allmulticast mode [ 821.494676][ T3289] veth0_vlan: entered allmulticast mode [ 821.501996][ T3297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7999'. [ 821.689779][ T3308] netlink: 'syz.2.8002': attribute type 27 has an invalid length. [ 821.727248][ T3313] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 821.940056][ T3328] netlink: 'syz.1.8010': attribute type 4 has an invalid length. [ 822.164046][ T3349] netlink: 'syz.0.8016': attribute type 1 has an invalid length. [ 822.183026][ T3349] 0: renamed from hsr_slave_1 (while UP) [ 822.203054][ T3349] 0: entered allmulticast mode [ 822.211573][ T3349] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 822.945301][ T3404] vlan0: entered allmulticast mode [ 822.982595][ T3370] lo speed is unknown, defaulting to 1000 [ 823.004029][ T3411] netlink: 'syz.3.8033': attribute type 4 has an invalid length. [ 823.230815][ T3420] bond12 (unregistering): Released all slaves [ 823.252684][ T3435] netlink: 'syz.2.8039': attribute type 1 has an invalid length. [ 823.263499][ T3438] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 823.340733][ T3429] mac80211_hwsim hwsim77 syzkaller0: entered promiscuous mode [ 823.380122][ T3429] mac80211_hwsim hwsim77 syzkaller0: entered allmulticast mode [ 823.553794][ T3445] lo: Caught tx_queue_len zero misconfig [ 823.603014][ T3444] openvswitch: netlink: Flow actions attr not present in new flow. [ 824.823805][ T3506] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 824.876145][ T3506] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 824.907177][ T3506] gretap4: entered promiscuous mode [ 824.919997][ T3506] gretap4: entered allmulticast mode [ 825.169939][ T3532] __nla_validate_parse: 11 callbacks suppressed [ 825.169958][ T3532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8063'. [ 825.361102][ T3545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8067'. [ 825.382484][ T3545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8067'. [ 825.435165][ T3548] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8067'. [ 825.644618][ T3564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8072'. [ 825.659724][ T3567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8073'. [ 826.002093][ T3584] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 826.495386][ T3615] netlink: 'syz.3.8086': attribute type 1 has an invalid length. [ 826.546393][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8086'. [ 826.556108][ T3615] 8021q: adding VLAN 0 to HW filter on device bond12 [ 826.567277][ T3616] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 826.637166][ T3629] netlink: 'syz.3.8090': attribute type 12 has an invalid length. [ 826.711039][ T3633] tipc: Enabled bearer , priority 0 [ 826.722043][ T3633] syzkaller0: MTU too low for tipc bearer [ 826.731244][ T3633] tipc: Disabling bearer [ 826.746774][ T3633] block nbd0: reconnected socket [ 826.753087][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8091'. [ 826.764985][T26022] block nbd0: Receive control failed (result -32) [ 826.901928][ T3639] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8093'. [ 827.004792][ T3643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8095'. [ 827.070197][ T3645] ieee802154 phy1 wpan1: encryption failed: -22 [ 827.218267][ T3652] netlink: 'syz.2.8099': attribute type 1 has an invalid length. [ 827.294320][ T3652] bond7: entered promiscuous mode [ 827.300655][ T3652] 8021q: adding VLAN 0 to HW filter on device bond7 [ 827.329832][ T3655] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 827.342577][ T3655] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 827.353359][ T3655] bond7: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 827.516691][ T3663] syzkaller0: entered promiscuous mode [ 827.522408][ T3663] syzkaller0: entered allmulticast mode [ 827.616354][ T3677] netlink: 'syz.4.8105': attribute type 1 has an invalid length. [ 827.627383][ T3677] netlink: 'syz.4.8105': attribute type 2 has an invalid length. [ 827.638968][ T3677] netlink: 'syz.4.8105': attribute type 1 has an invalid length. [ 830.027112][ T3708] netlink: 'syz.0.8112': attribute type 9 has an invalid length. [ 830.274715][ T3726] netlink: 'syz.2.8114': attribute type 1 has an invalid length. [ 830.328986][ T3727] __nla_validate_parse: 4 callbacks suppressed [ 830.329002][ T3727] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8114'. [ 830.579344][ T3745] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8119'. [ 830.760166][ T3762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8123'. [ 830.798274][ T3762] netlink: 'syz.2.8123': attribute type 1 has an invalid length. [ 830.809340][ T3766] netlink: 'syz.3.8124': attribute type 1 has an invalid length. [ 830.840169][ T3762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8123'. [ 830.850495][ T3772] veth0: entered promiscuous mode [ 830.865719][ T3771] veth0: left promiscuous mode [ 830.880294][ T3775] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8126'. [ 830.902648][ T3762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8123'. [ 831.046207][ T3779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8127'. [ 831.461786][ T3813] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8135'. [ 831.475782][ T3812] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8135'. [ 831.486569][ T3812] ip6tnl0: Caught tx_queue_len zero misconfig [ 831.514057][ T3814] vlan2: entered allmulticast mode [ 831.525401][ T3814] bond0: entered allmulticast mode [ 831.537657][ T3814] bond_slave_0: entered allmulticast mode [ 831.541373][ T3815] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8136'. [ 831.554036][ T3814] bond_slave_1: entered allmulticast mode [ 831.585929][ T3817] sctp: [Deprecated]: syz.0.8137 (pid 3817) Use of int in max_burst socket option. [ 831.585929][ T3817] Use struct sctp_assoc_value instead [ 831.632051][ T3821] validate_nla: 1 callbacks suppressed [ 831.632068][ T3821] netlink: 'syz.1.8139': attribute type 39 has an invalid length. [ 831.667610][ T3815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.697067][ T3815] bond_slave_0: left allmulticast mode [ 831.726689][ T3815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.744720][ T3828] netlink: 'syz.2.8138': attribute type 1 has an invalid length. [ 831.766954][ T3828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 831.777448][ T3815] bond_slave_1: left allmulticast mode [ 831.790047][ T3815] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 831.812677][ T3815] bond0 (unregistering): Released all slaves [ 832.033511][ T3835] netlink: 'syz.4.8143': attribute type 11 has an invalid length. [ 832.048958][ T3835] netlink: 'syz.4.8143': attribute type 11 has an invalid length. [ 832.703377][ T3880] gtp0: entered promiscuous mode [ 832.711664][ T3880] gtp0: entered allmulticast mode [ 832.798410][ T3889] netlink: 'syz.3.8157': attribute type 1 has an invalid length. [ 832.815734][ T3893] netlink: 'syz.1.8159': attribute type 12 has an invalid length. [ 832.831444][ T3888] sctp: [Deprecated]: syz.0.8158 (pid 3888) Use of int in maxseg socket option. [ 832.831444][ T3888] Use struct sctp_assoc_value instead [ 833.052171][ T3906] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 833.333036][ T3917] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 833.663666][ T3931] gretap3: entered promiscuous mode [ 833.673414][ T3931] batman_adv: batadv0: Adding interface: gretap3 [ 833.673492][ T3939] netlink: 'syz.2.8176': attribute type 2 has an invalid length. [ 833.692349][ T3931] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.735422][ T3931] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 834.136881][ T3973] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 834.229429][ T3976] netlink: 'syz.1.8186': attribute type 64 has an invalid length. [ 834.272493][ T5906] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 834.327090][ T3984] pim6reg: entered allmulticast mode [ 834.335195][ T3984] pim6reg: left allmulticast mode [ 835.148354][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 835.420223][ T4042] __nla_validate_parse: 15 callbacks suppressed [ 835.420242][ T4042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8202'. [ 835.740429][ T4057] ksmbd: Unknown IPC event: 8, ignore. [ 836.183100][ T4088] netlink: 348 bytes leftover after parsing attributes in process `syz.2.8211'. [ 836.185330][ T4090] netlink: 'syz.3.8213': attribute type 1 has an invalid length. [ 836.209698][ T4093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8214'. [ 836.224347][ T4093] tc_dump_action: action bad kind [ 836.264715][ T4095] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8215'. [ 836.280072][ T4091] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8213'. [ 836.338791][ T4090] bond13: entered promiscuous mode [ 836.345107][ T4090] 8021q: adding VLAN 0 to HW filter on device bond13 [ 836.579477][ T4109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8218'. [ 836.809270][ T4131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8223'. [ 836.833984][ T4131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8223'. [ 836.874187][ T4123] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 837.433213][ T4165] netlink: 'syz.1.8236': attribute type 15 has an invalid length. [ 837.496537][ T4165] lo: left promiscuous mode [ 837.501765][ T4165] lo: entered allmulticast mode [ 837.511163][ T4165] tunl0: entered allmulticast mode [ 837.516561][ T4165] gre0: entered allmulticast mode [ 837.525031][ T4165] ip_vti0: entered allmulticast mode [ 837.531447][ T4165] ip6_vti0: entered allmulticast mode [ 837.542773][ T4175] netlink: 'syz.4.8237': attribute type 51 has an invalid length. [ 837.552852][ T4165] sit0: left promiscuous mode [ 837.560983][ T4165] sit0: entered allmulticast mode [ 837.573631][ T4165] ip6tnl0: entered allmulticast mode [ 837.592851][ T4165] ip6gre0: entered allmulticast mode [ 837.635136][ T4165] bridge0: entered allmulticast mode [ 837.658401][ T4165] bond0: entered allmulticast mode [ 837.673061][ T4165] bond_slave_0: entered allmulticast mode [ 837.684845][ T4165] bond_slave_1: entered allmulticast mode [ 837.692039][ T4165] team0: entered allmulticast mode [ 837.697412][ T4165] team_slave_0: entered allmulticast mode [ 837.703907][ T4165] team_slave_1: entered allmulticast mode [ 837.712273][ T4165] nlmon0: entered allmulticast mode [ 837.718241][ T4165] caif0: entered allmulticast mode [ 837.723610][ T4165] batadv0: entered allmulticast mode [ 837.729808][ T4165] vxcan0: entered allmulticast mode [ 837.735246][ T4165] vxcan1: entered allmulticast mode [ 837.746798][ T4165] veth0: entered allmulticast mode [ 837.755171][ T4165] veth1: entered allmulticast mode [ 837.760993][ T4165] wg1: entered allmulticast mode [ 837.766552][ T4165] wg2: entered allmulticast mode [ 837.773494][ T4165] veth0_to_bridge: entered allmulticast mode [ 837.783832][ T4165] veth1_to_bridge: entered allmulticast mode [ 837.794012][ T4165] veth1_to_bond: entered allmulticast mode [ 837.800590][ T4165] veth0_to_team: entered allmulticast mode [ 837.806968][ T4165] veth1_to_team: entered allmulticast mode [ 837.814158][ T4165] veth0_to_batadv: entered allmulticast mode [ 837.820890][ T4165] batadv_slave_0: entered allmulticast mode [ 837.827096][ T4165] veth1_to_batadv: entered allmulticast mode [ 837.840371][ T4165] batadv_slave_1: entered allmulticast mode [ 837.846710][ T4165] xfrm0: entered allmulticast mode [ 837.852849][ T4165] veth0_to_hsr: entered allmulticast mode [ 837.860406][ T4165] hsr_slave_0: entered allmulticast mode [ 837.866817][ T4165] veth1_to_hsr: entered allmulticast mode [ 837.875024][ T4165] hsr_slave_1: entered allmulticast mode [ 837.881762][ T4165] hsr0: entered allmulticast mode [ 837.887421][ T4165] veth1_virt_wifi: entered allmulticast mode [ 837.895020][ T4165] veth0_virt_wifi: entered allmulticast mode [ 837.903289][ T4165] virt_wifi0: entered allmulticast mode [ 837.909274][ T4165] veth1_vlan: entered allmulticast mode [ 837.915261][ T4165] veth0_vlan: entered allmulticast mode [ 837.921698][ T4165] vlan0: entered allmulticast mode [ 837.927228][ T4165] vlan1: entered allmulticast mode [ 837.933550][ T4165] macvlan0: left promiscuous mode [ 837.939275][ T4165] macvlan0: entered allmulticast mode [ 837.944990][ T4165] macvlan1: entered allmulticast mode [ 837.954834][ T4165] ipvlan0: entered allmulticast mode [ 837.962281][ T4165] ipvlan1: entered allmulticast mode [ 837.969569][ T4165] veth1_macvtap: entered allmulticast mode [ 837.975756][ T4165] veth0_macvtap: entered allmulticast mode [ 837.982391][ T4165] macvtap0: entered allmulticast mode [ 837.988947][ T4165] macsec0: entered allmulticast mode [ 837.994577][ T4165] geneve0: entered allmulticast mode [ 838.001028][ T4165] geneve1: entered allmulticast mode [ 838.006707][ T4165] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 838.038711][ T4165] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 838.079836][ T4165] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 838.113762][ T4165] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 838.148161][ T4165] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 838.205693][ T4165] mac80211_hwsim hwsim76 wlan0: entered allmulticast mode [ 838.219074][ T4165] mac80211_hwsim hwsim77 wlan1: entered allmulticast mode [ 838.236238][ T4165] vxlan0: entered allmulticast mode [ 838.244602][ T4165] sit1: left promiscuous mode [ 838.249616][ T4165] bond1: entered allmulticast mode [ 838.254956][ T4165] @: entered allmulticast mode [ 838.260353][ T4165] syztnl1: entered allmulticast mode [ 838.265856][ T4165] mac80211_hwsim hwsim79 wlan2: entered allmulticast mode [ 838.273260][ T4165] ip6tnl1: entered allmulticast mode [ 838.280674][ T4165] gtp0: entered allmulticast mode [ 838.285953][ T4165] erspan1: entered allmulticast mode [ 838.292386][ T4165] ip6erspan0: left promiscuous mode [ 838.298287][ T4165] ip6erspan0: entered allmulticast mode [ 838.304025][ T4165] rose0: entered allmulticast mode [ 838.311300][ T4165] bond2: left promiscuous mode [ 838.316117][ T4165] veth0_to_bond: left promiscuous mode [ 838.322649][ T4165] bridge1: entered allmulticast mode [ 838.328525][ T4165] ip6tnl2: left promiscuous mode [ 838.333636][ T4165] ip6tnl2: entered allmulticast mode [ 838.340088][ T4165] bond3: entered allmulticast mode [ 838.346370][ T4165] bridge2: entered allmulticast mode [ 838.352608][ T4165] bond4: entered allmulticast mode [ 838.368755][ T4165] gretap1: entered allmulticast mode [ 838.374269][ T4165] vlan2: entered allmulticast mode [ 838.380824][ T4165] geneve2: entered allmulticast mode [ 838.386236][ T4165] ipip0: entered allmulticast mode [ 838.392266][ T4165] bridge3: entered allmulticast mode [ 838.397665][ T4165] bond5: entered allmulticast mode [ 838.404315][ T4165] mac80211_hwsim hwsim77 syzkaller0: left promiscuous mode [ 838.412547][ T4165] netdevsim0.3: entered allmulticast mode [ 838.418660][ T4165] hsr1: left promiscuous mode [ 838.423384][ T4165] hsr1: entered allmulticast mode [ 838.429314][ T4165] bond6: entered allmulticast mode [ 838.434742][ T4165] bond7: left promiscuous mode [ 838.439772][ T4165] bridge4: left promiscuous mode [ 838.445083][ T4165] macvlan2: entered allmulticast mode [ 838.451527][ T4165] gretap2: left promiscuous mode [ 838.459080][ T4165] vxlan1: entered allmulticast mode [ 838.464772][ T4165] bond8: entered allmulticast mode [ 838.470689][ T4165] team1: left promiscuous mode [ 838.475932][ T4165] ip6gre1: left promiscuous mode [ 838.482741][ T4165] bridge5: entered allmulticast mode [ 838.488482][ T4165] bond9: entered allmulticast mode [ 838.493680][ T4165] geneve3: entered allmulticast mode [ 838.500291][ T4165] veth2: entered allmulticast mode [ 838.505621][ T4165] veth3: entered allmulticast mode [ 838.671428][ T4209] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 838.748781][ T4214] sctp: [Deprecated]: syz.1.8242 (pid 4214) Use of int in max_burst socket option. [ 838.748781][ T4214] Use struct sctp_assoc_value instead [ 838.792606][ T4212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 838.851896][ T4212] netlink: 'syz.3.8243': attribute type 10 has an invalid length. [ 838.894459][ T4212] team0: Device vxcan1 is of different type [ 839.065120][ T4226] xt_cgroup: path and classid specified [ 839.235441][ T4233] syzkaller0: entered promiscuous mode [ 839.246712][ T4238] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8251'. [ 839.259328][ T4233] syzkaller0: entered allmulticast mode [ 839.363069][ T4237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8251'. [ 839.533585][ T4256] netlink: 'syz.3.8255': attribute type 1 has an invalid length. [ 840.001214][ T4282] bond14: option mode: invalid value (133) [ 840.133647][ T4282] bond14 (unregistering): Released all slaves [ 840.538146][ T4311] bond14: option min_links: invalid value (18446744073709551614) [ 840.579940][ T4311] bond14: option min_links: allowed values 0 - 2147483647 [ 840.599710][ T4311] bond14 (unregistering): Released all slaves [ 840.805920][ T4329] netlink: 'syz.1.8270': attribute type 12 has an invalid length. [ 840.846706][ T4329] __nla_validate_parse: 1 callbacks suppressed [ 840.846724][ T4329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8270'. [ 840.917440][ T4335] syzkaller1: entered promiscuous mode [ 840.925789][ T4335] syzkaller1: entered allmulticast mode [ 840.933335][ T4340] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 841.114491][ T4352] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8275'. [ 841.215072][ T4358] Unsupported ieee802154 address type: 0 [ 841.247334][ T4359] Unsupported ieee802154 address type: 0 [ 841.420302][ T4376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8283'. [ 841.518805][ T4382] mac80211_hwsim hwsim77 syzkaller0: entered promiscuous mode [ 841.522640][ T4385] x_tables: duplicate underflow at hook 3 [ 841.932789][ T4406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8293'. [ 841.947662][ T4406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8293'. [ 842.383551][ T4432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8298'. [ 842.417581][ T4432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8298'. [ 842.453644][ T4432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8298'. [ 842.466932][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8299'. [ 842.746235][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8304'. [ 842.813474][ T4454] IPv6: Can't replace route, no match found [ 842.834664][ T4454] IPv6: Can't replace route, no match found [ 842.912523][ T24] IPVS: starting estimator thread 0... [ 842.986345][ T4470] netlink: 'syz.1.8309': attribute type 10 has an invalid length. [ 843.013515][ T4470] bridge_slave_1: left allmulticast mode [ 843.028448][ T4463] IPVS: using max 28 ests per chain, 67200 per kthread [ 843.031359][ T4470] bridge_slave_1: left promiscuous mode [ 843.044683][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.075744][ T4470] bridge_slave_1: entered promiscuous mode [ 843.082169][ T4470] bridge_slave_1: entered allmulticast mode [ 843.089335][ T4470] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 843.115234][ T4477] IPv6: sit3: Disabled Multicast RS [ 843.126852][ T4477] sit3: entered allmulticast mode [ 843.169193][ T4475] bridge0: port 1(ipvlan2) entered blocking state [ 843.177102][ T4475] bridge0: port 1(ipvlan2) entered disabled state [ 843.184461][ T4475] ipvlan2: entered allmulticast mode [ 843.192811][ T4475] bridge0: entered allmulticast mode [ 843.201319][ T4475] ipvlan2: left allmulticast mode [ 843.207273][ T4475] bridge0: left allmulticast mode [ 843.223150][ T4482] veth0_to_bridge: entered promiscuous mode [ 843.274765][ T4482] veth0_to_bridge: left promiscuous mode [ 843.884772][ T4541] netlink: 'syz.2.8327': attribute type 1 has an invalid length. [ 843.991520][ T4541] 8021q: adding VLAN 0 to HW filter on device bond8 [ 844.041800][ T4541] batman_adv: batadv0: Adding interface: ip6gretap1 [ 844.072844][ T4541] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 844.125899][ T4541] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 844.194775][ T4553] delete_channel: no stack [ 844.280626][ T4562] syzkaller0: entered promiscuous mode [ 844.293279][ T4562] syzkaller0: entered allmulticast mode [ 844.323929][ T4562] syzkaller0: tun_net_xmit 64726 [ 844.759697][ T4605] netlink: 'syz.4.8344': attribute type 12 has an invalid length. [ 844.952192][ T4622] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 845.115508][ T4631] bridge_slave_1: default FDB implementation only supports local addresses [ 845.659850][ T4664] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 846.059189][ T4681] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 846.289108][ T4693] __nla_validate_parse: 18 callbacks suppressed [ 846.289126][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8372'. [ 846.330151][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8372'. [ 846.485463][ T4707] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8376'. [ 846.496030][ T4707] netlink: 'syz.4.8376': attribute type 1 has an invalid length. [ 846.506161][ T4707] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8376'. [ 846.876287][ T4723] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8383'. [ 846.887939][ T4723] netlink: 'syz.4.8383': attribute type 4 has an invalid length. [ 847.056089][ T4738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8387'. [ 847.129390][ T4743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 847.421214][ T4759] : mtu greater than device maximum [ 847.811364][ T4769] xt_socket: unknown flags 0x50 [ 847.816787][ T4769] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8394'. [ 849.966611][ T4731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.172140][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8401'. [ 850.173463][ T4793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.284668][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8401'. [ 850.551065][ T4816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8404'. [ 850.585275][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 850.602919][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 850.614013][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 850.625448][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 850.640353][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 850.688318][ T4817] tipc: Resetting bearer [ 851.040384][ T4835] openvswitch: netlink: Flow actions attr not present in new flow. [ 851.050252][ T4835] sctp: [Deprecated]: syz.1.8410 (pid 4835) Use of int in max_burst socket option. [ 851.050252][ T4835] Use struct sctp_assoc_value instead [ 851.456054][ T4817] lo speed is unknown, defaulting to 1000 [ 851.484731][ T4861] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 851.575802][ T4870] Bluetooth: MGMT ver 1.23 [ 851.673500][ T4873] mac80211_hwsim hwsim84 wlan0: entered promiscuous mode [ 851.699984][ T4878] netlink: 'syz.3.8424': attribute type 21 has an invalid length. [ 851.700642][ T4873] mac80211_hwsim hwsim84 wlan0: left allmulticast mode [ 851.823574][ T4876] bond10: option lp_interval: invalid value (0) [ 851.831419][ T4879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 851.835169][ T4892] __nla_validate_parse: 3 callbacks suppressed [ 851.835202][ T4892] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8425'. [ 851.842545][ T4895] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8426'. [ 851.850665][ T4876] bond10: option lp_interval: allowed values 1 - 2147483647 [ 851.876655][ T4876] bond10 (unregistering): Released all slaves [ 851.909701][ T4878] netlink: 'syz.3.8424': attribute type 6 has an invalid length. [ 851.917677][ T4878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8424'. [ 852.192030][ T4817] chnl_net:caif_netlink_parms(): no params data found [ 852.230815][ T6411] nci: nci_ntf_packet: unsupported ntf opcode 0xf3c [ 852.265363][ T4912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.286747][ T4908] syzkaller0: entered promiscuous mode [ 852.299738][ T4908] syzkaller0: entered allmulticast mode [ 852.471343][ T4817] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.490670][ T4817] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.508849][ T4817] bridge_slave_0: entered allmulticast mode [ 852.516925][ T4817] bridge_slave_0: entered promiscuous mode [ 852.526645][ T4817] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.535034][ T4817] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.543772][ T4817] bridge_slave_1: entered allmulticast mode [ 852.552722][ T4817] bridge_slave_1: entered promiscuous mode [ 852.575519][ T4898] lo speed is unknown, defaulting to 1000 [ 852.612579][ T4817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.633108][ T4817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.675573][ T4817] team0: Port device team_slave_0 added [ 852.687169][ T4817] team0: Port device team_slave_1 added [ 852.760337][ T5849] Bluetooth: hci1: command tx timeout [ 852.786824][ T4817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.794766][ T4817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.821753][ T4817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.836932][ T4817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.844018][ T4817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.871624][ T4817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.958625][ T4904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 853.010251][ T4817] hsr_slave_0: entered promiscuous mode [ 853.040652][ T4817] hsr_slave_1: entered promiscuous mode [ 853.311123][ T4817] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.322862][ T4817] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.429318][ T4817] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.440747][ T4817] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.493841][ T4817] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.504501][ T4817] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.556468][ T4817] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.566565][ T4817] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.694861][ T4817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 853.703944][ T4817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 853.712543][ T4817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 853.722325][ T4817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 853.730238][ T4817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 853.741079][ T4817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.749051][ T4817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 853.758969][ T4817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.820164][ T4817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.839589][ T4817] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.851705][ T2392] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.858806][ T2392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.875674][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.882795][ T6425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.036318][ T4817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.080449][ T4817] veth0_vlan: entered promiscuous mode [ 854.090813][ T4817] veth1_vlan: entered promiscuous mode [ 854.116520][ T4817] veth0_macvtap: entered promiscuous mode [ 854.126894][ T4817] veth1_macvtap: entered promiscuous mode [ 854.148057][ T4817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.161581][ T4817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.174380][ T2390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.183634][ T2390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.195777][ T2390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.205490][ T2390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.322981][ T2390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.331556][ T2390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.364336][ T2392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.372558][ T2392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.421364][ T4938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8402'. [ 854.828372][ T5849] Bluetooth: hci1: command tx timeout [ 856.910186][ T5849] Bluetooth: hci1: command tx timeout [ 858.989277][ T5849] Bluetooth: hci1: command tx timeout [ 870.032386][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.042069][ T1313] clip:clip_start_xmit: skb_dst(skb) == NULL [ 885.406880][ T2392] vlan1: left allmulticast mode [ 885.413285][ T2392] veth0_vlan: left allmulticast mode [ 885.581366][ T2392] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 885.769289][ T2392] bond2 (unregistering): (slave geneve2): Releasing active interface [ 885.777377][ T2392] geneve2 (unregistering): left allmulticast mode [ 885.922560][ T2392] bond0 (unregistering): Released all slaves [ 885.936486][ T2392] bond1 (unregistering): Released all slaves [ 885.956391][ T2392] bond2 (unregistering): Released all slaves [ 885.971682][ T2392] bond3 (unregistering): Released all slaves [ 885.988063][ T2392] bond4 (unregistering): Released all slaves [ 886.007027][ T2392] bond5 (unregistering): Released all slaves [ 886.035453][ T2392] bond6 (unregistering): Released all slaves [ 886.049624][ T2392] bond7 (unregistering): Released all slaves [ 886.064871][ T2392] bond8 (unregistering): Released all slaves [ 886.085480][ T2392] bond9 (unregistering): Released all slaves [ 886.099736][ T2392] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 886.110359][ T2392] bond10 (unregistering): Released all slaves [ 886.134724][ T2392] bond11 (unregistering): Released all slaves [ 886.288877][ T2392] tipc: Disabling bearer [ 886.302579][ T2392] tipc: Left network mode [ 886.752800][ T2392] hsr_slave_0: left promiscuous mode [ 886.769219][ T2392] veth1_macvtap: left promiscuous mode [ 886.775120][ T2392] veth1_vlan: left promiscuous mode [ 886.781114][ T2392] veth0_vlan: left promiscuous mode [ 887.199678][ T2392] IPVS: stop unused estimator thread 0... [ 890.527586][ T3577] dvmrp0: left allmulticast mode [ 890.533634][ T3577] pimreg: left allmulticast mode [ 890.684605][ T3577] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 890.815841][ T3577] bond12 (unregistering): (slave geneve3): Releasing active interface [ 890.835706][ T3577] bond10 (unregistering): (slave geneve2): Releasing active interface [ 890.902569][ T3577] team0: Port device bridge1 removed [ 891.052868][ T3577] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 891.061224][ T3577] bridge4 (unregistering): left promiscuous mode [ 891.212568][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.223592][ T3577] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 891.235097][ T3577] bond0 (unregistering): Released all slaves [ 891.246124][ T3577] bond1 (unregistering): (slave veth3): Releasing active interface [ 891.256818][ T3577] bond1 (unregistering): Released all slaves [ 891.270782][ T3577] bond2 (unregistering): Released all slaves [ 891.285101][ T3577] bond3 (unregistering): Released all slaves [ 891.298293][ T3577] bond4 (unregistering): Released all slaves [ 891.316140][ T3577] bond5 (unregistering): Released all slaves [ 891.336379][ T3577] bond6 (unregistering): Released all slaves [ 891.350094][ T3577] bond7 (unregistering): Released all slaves [ 891.363047][ T3577] bond8 (unregistering): Released all slaves [ 891.384416][ T3577] bond9 (unregistering): (slave veth7): Releasing active interface [ 891.394682][ T3577] bond9 (unregistering): (slave veth9): Releasing active interface [ 891.404644][ T3577] bond9 (unregistering): Released all slaves [ 891.418246][ T3577] bond10 (unregistering): Released all slaves [ 891.435984][ T3577] bond11 (unregistering): Released all slaves [ 891.451532][ T3577] bond12 (unregistering): Released all slaves [ 891.624824][ T3577] : left promiscuous mode [ 891.691463][ T3577] : left promiscuous mode [ 891.863349][ T3577] IPVS: stopping backup sync thread 24642 ... [ 892.296639][ T3577] hsr_slave_0: left promiscuous mode [ 892.304722][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.312575][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.324426][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.332038][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.341509][ T3577] veth1_vlan: left allmulticast mode [ 892.346922][ T3577] veth1_macvtap: left promiscuous mode [ 892.353377][ T3577] veth0_macvtap: left promiscuous mode [ 892.359817][ T3577] veth1_vlan: left promiscuous mode [ 892.602371][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 892.617538][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 892.998704][ T3577] IPVS: stop unused estimator thread 0... [ 905.532447][ T4957] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.8436'. [ 905.551120][ T4957] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.8436'. [ 905.683585][ T4964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8437'. [ 905.808859][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8438'. [ 905.907258][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8439'. [ 905.937967][ T4968] nbd: must specify at least one socket [ 905.976365][ T4977] team0 (unregistering): Port device team_slave_0 removed [ 906.014698][ T4977] team0 (unregistering): Port device team_slave_1 removed [ 906.084023][ T4987] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.103352][ T4987] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 906.207564][ T2390] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 906.246743][ T4965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.399805][ T4998] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8444'. [ 906.431530][ T4998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8444'. [ 906.597000][ T5005] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8446'. [ 906.995650][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8452'. [ 906.995650][ T5031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8452'. [ 907.474692][ T5055] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.544792][ T5507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 907.579860][ T5055] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.644490][ T5063] netlink: 'syz.1.8461': attribute type 1 has an invalid length. [ 907.648838][ T5055] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.817966][ T5063] bond10: entered promiscuous mode [ 907.833440][ T5063] 8021q: adding VLAN 0 to HW filter on device bond10 [ 907.851855][ T5064] bond10: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 907.867318][ T5064] bond10: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 907.879562][ T5064] bond10: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 907.918780][ T5055] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.991146][ T5082] bond0: entered allmulticast mode [ 908.002497][ T5082] bond_slave_0: entered allmulticast mode [ 908.008816][ T5082] bond_slave_1: entered allmulticast mode [ 908.014590][ T5082] dummy0: entered allmulticast mode [ 908.029489][ T5082] bridge0: entered allmulticast mode [ 908.126255][ T3577] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.184039][ T2390] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.226816][ T2390] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.246207][ T5100] netlink: 'syz.1.8472': attribute type 4 has an invalid length. [ 908.283416][ T5100] .`: renamed from bond0 [ 908.290403][ T2390] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.364865][ T5106] netlink: 'syz.3.8474': attribute type 2 has an invalid length. [ 908.710989][ T5134] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.735029][ T5138] netlink: 'syz.4.8480': attribute type 1 has an invalid length. [ 908.757096][ T5139] xt_hashlimit: size too large, truncated to 1048576 [ 911.401132][ T5111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 911.684928][ T5154] __nla_validate_parse: 4 callbacks suppressed [ 911.684948][ T5154] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8483'. [ 911.707298][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8486'. [ 911.805743][ T5171] bond0: option xmit_hash_policy: invalid value (64) [ 911.841835][ T5171] bond0 (unregistering): Released all slaves [ 911.874263][ T5154] syzkaller0: entered promiscuous mode [ 911.883650][ T5188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 911.893752][ T5154] syzkaller0: entered allmulticast mode [ 912.023142][ T5190] bond1: Unable to set down delay as MII monitoring is disabled [ 912.050604][ T5190] bond1 (unregistering): Released all slaves [ 912.181574][ T5194] bond1: Unable to set down delay as MII monitoring is disabled [ 912.198427][ T5194] bond1 (unregistering): Released all slaves [ 912.258620][ T5207] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8492'. [ 912.272979][ T5223] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8493'. [ 912.314995][ T5210] geneve4: entered promiscuous mode [ 912.374178][ T2390] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 56839 - 0 [ 912.391520][ T2390] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 56839 - 0 [ 912.415536][ T2390] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 56839 - 0 [ 912.686484][ T5239] netlink: 'syz.0.8500': attribute type 9 has an invalid length. [ 912.705046][ T5239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8500'. [ 912.753189][ T5239] netlink: 'syz.0.8500': attribute type 9 has an invalid length. [ 912.753230][ T2390] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.785555][ T2390] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.797887][ T5239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8500'. [ 912.802768][ T2390] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.817057][ T2390] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 931.471304][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.480008][ T1313] clip:clip_start_xmit: skb_dst(skb) == NULL [ 970.487313][ T5257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8503'. [ 970.501391][ T5253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8506'. [ 970.548478][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8504'. [ 970.606309][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8504'. [ 970.835410][ T5268] bridge5: entered promiscuous mode [ 970.849605][ T5268] bridge5: entered allmulticast mode [ 970.860328][ T5268] team0: Port device bridge5 added [ 970.890384][ T5273] bridge0: port 4(team0) entered blocking state [ 970.925886][ T5273] bridge0: port 4(team0) entered disabled state [ 970.944445][ T5273] team0: entered allmulticast mode [ 970.950363][ T5273] team_slave_0: entered allmulticast mode [ 970.956310][ T5273] team_slave_1: entered allmulticast mode [ 970.978651][ T5273] team0: entered promiscuous mode [ 970.983772][ T5273] team_slave_0: entered promiscuous mode [ 970.989960][ T5273] team_slave_1: entered promiscuous mode [ 970.997508][ T5273] bridge0: port 4(team0) entered blocking state [ 971.003958][ T5273] bridge0: port 4(team0) entered listening state [ 971.130961][ T5300] netlink: 51 bytes leftover after parsing attributes in process `syz.1.8516'. [ 971.327652][ T5315] netlink: 'syz.4.8519': attribute type 1 has an invalid length. [ 971.349138][ T5318] netlink: 'syz.2.8522': attribute type 1 has an invalid length. [ 971.357040][ T5318] netlink: 'syz.2.8522': attribute type 1 has an invalid length. [ 971.375945][ T5315] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 971.386927][ T5315] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 971.404487][ T5315] bond0: (slave ip6gre1): making interface the new active one [ 971.413942][ T5315] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 973.846945][ T5293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 974.028863][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8531'. [ 974.234767][ T5371] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8534'. [ 974.245318][ T5371] nbd: illegal input index -8454144 [ 974.434453][ T5375] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8537'. [ 974.472019][ T5377] netlink: 1760 bytes leftover after parsing attributes in process `syz.4.8539'. [ 974.484374][ T5375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8537'. [ 974.517101][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 974.718440][ T5393] veth1_to_bond: entered allmulticast mode [ 974.768138][ T5393] veth1_to_bond: left allmulticast mode [ 975.112947][ T5426] bridge0: port 5(syz_tun) entered blocking state [ 975.128757][ T5426] bridge0: port 5(syz_tun) entered disabled state [ 975.135506][ T5426] syz_tun: entered allmulticast mode [ 975.176718][ T5426] syz_tun: entered promiscuous mode [ 975.193605][ T5426] bridge0: port 5(syz_tun) entered blocking state [ 975.200221][ T5426] bridge0: port 5(syz_tun) entered listening state [ 975.481659][ T5448] bridge0: port 3(gretap0) entered blocking state [ 975.488281][ T5448] bridge0: port 3(gretap0) entered forwarding state [ 975.500713][ T5448] 8021q: adding VLAN 0 to HW filter on device .` [ 975.509773][ T5448] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.520454][ T5448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 975.537084][ T5419] __nla_validate_parse: 13 callbacks suppressed [ 975.537099][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8552'. [ 975.611150][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8552'. [ 975.686874][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8552'. [ 975.743712][ T5465] bond11: option resend_igmp: invalid value (32767) [ 975.751301][ T5465] bond11: option resend_igmp: allowed values 0 - 255 [ 975.762404][ T5465] bond11 (unregistering): Released all slaves [ 975.815308][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8552'. [ 975.831009][ T5470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8566'. [ 975.930655][ T5472] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 975.943299][ T5472] bond1 (unregistering): Released all slaves [ 976.206214][ T5496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8575'. [ 976.216514][ T5496] openvswitch: netlink: Flow key attr not present in new flow. [ 976.228987][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8573'. [ 976.256895][ T5489] syzkaller0: entered promiscuous mode [ 976.276063][ T5489] syzkaller0: entered allmulticast mode [ 976.347295][ T5502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8576'. [ 976.391025][ T5502] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8576'. [ 976.711192][ T5541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8583'. [ 977.333365][ T5584] netlink: 'syz.4.8594': attribute type 21 has an invalid length. [ 977.343455][ T5585] netlink: 'syz.4.8594': attribute type 16 has an invalid length. [ 977.351514][ T5585] netlink: 'syz.4.8594': attribute type 17 has an invalid length. [ 977.361300][ T5585] lo: entered promiscuous mode [ 977.366160][ T5585] lo: entered allmulticast mode [ 977.374602][ T5585] tunl0: entered promiscuous mode [ 977.380335][ T5585] tunl0: entered allmulticast mode [ 977.387167][ T5585] gre0: entered promiscuous mode [ 977.393008][ T5585] gre0: entered allmulticast mode [ 977.400605][ T5585] gretap0: entered promiscuous mode [ 977.405921][ T5585] gretap0: entered allmulticast mode [ 977.416499][ T5585] erspan0: entered promiscuous mode [ 977.422475][ T5585] erspan0: entered allmulticast mode [ 977.438056][ T5585] ip_vti0: entered promiscuous mode [ 977.447289][ T5585] ip_vti0: entered allmulticast mode [ 977.456395][ T5585] ip6_vti0: entered promiscuous mode [ 977.463229][ T5585] ip6_vti0: entered allmulticast mode [ 977.475309][ T5585] sit0: entered promiscuous mode [ 977.481922][ T5585] sit0: entered allmulticast mode [ 977.492608][ T5585] ip6tnl0: entered promiscuous mode [ 977.497949][ T5585] ip6tnl0: entered allmulticast mode [ 977.504182][ T5585] ip6gre0: entered promiscuous mode [ 977.509744][ T5585] ip6gre0: entered allmulticast mode [ 977.515741][ T5585] syz_tun: entered promiscuous mode [ 977.523715][ T5585] ip6gretap0: entered promiscuous mode [ 977.529533][ T5585] ip6gretap0: entered allmulticast mode [ 977.536518][ T5585] vcan0: entered promiscuous mode [ 977.541889][ T5585] vcan0: entered allmulticast mode [ 977.555720][ T5585] team0: entered promiscuous mode [ 977.562141][ T5585] team_slave_0: entered promiscuous mode [ 977.568428][ T5585] team_slave_1: entered promiscuous mode [ 977.574220][ T5585] team0: entered allmulticast mode [ 977.579648][ T5585] team_slave_0: entered allmulticast mode [ 977.585417][ T5585] team_slave_1: entered allmulticast mode [ 977.592940][ T5585] dummy0: entered promiscuous mode [ 977.598493][ T5585] dummy0: entered allmulticast mode [ 977.604551][ T5585] nlmon0: entered promiscuous mode [ 977.610056][ T5585] nlmon0: entered allmulticast mode [ 977.616530][ T5585] caif0: entered promiscuous mode [ 977.621609][ T5585] caif0: entered allmulticast mode [ 977.626720][ T5585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 977.647577][ T5591] vlan3: entered allmulticast mode [ 979.160819][ T5490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 979.373691][ T29] audit: type=1107 audit(1777181744.972:22): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 979.427536][ T5611] netlink: 'syz.0.8598': attribute type 13 has an invalid length. [ 979.912931][ T5644] mac80211_hwsim hwsim77 syzkaller0: left allmulticast mode [ 980.466670][ T5685] tipc: Enabling of bearer rejected, failed to enable media [ 980.603672][ T5692] netlink: 'syz.4.8628': attribute type 12 has an invalid length. [ 980.673635][ T5692] bond2: option primary_reselect: invalid value (255) [ 980.738075][ T5692] bond2 (unregistering): Released all slaves [ 980.798038][ T5712] bond0: Error: Cannot enslave bond to itself. [ 980.845778][ T5716] __nla_validate_parse: 19 callbacks suppressed [ 980.845796][ T5716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8633'. [ 980.962981][ T5723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8636'. [ 981.174951][ T5739] netlink: 'syz.4.8641': attribute type 1 has an invalid length. [ 981.209007][ T5744] netlink: 146824 bytes leftover after parsing attributes in process `syz.3.8640'. [ 981.221919][ T5739] 8021q: adding VLAN 0 to HW filter on device bond2 [ 981.235684][ T5746] netlink: 146824 bytes leftover after parsing attributes in process `syz.3.8640'. [ 981.256461][ T5750] bond2: (slave gretap1): making interface the new active one [ 981.265753][ T5750] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 981.318492][ T5739] netlink: 'syz.4.8641': attribute type 1 has an invalid length. [ 981.437906][ T5758] netlink: 196 bytes leftover after parsing attributes in process `syz.1.8646'. [ 981.637675][ T5777] netlink: zone id is out of range [ 981.643248][ T5777] netlink: zone id is out of range [ 981.649360][ T5777] netlink: zone id is out of range [ 981.656864][ T5777] netlink: zone id is out of range [ 981.665341][ T5777] netlink: zone id is out of range [ 981.671351][ T5777] netlink: zone id is out of range [ 981.676575][ T5777] netlink: zone id is out of range [ 981.682015][ T5777] netlink: zone id is out of range [ 981.687241][ T5777] netlink: zone id is out of range [ 981.695236][ T5777] netlink: zone id is out of range [ 981.702639][ T5781] tipc: Failed to remove unknown binding: 66,0,0/0:1062234518/1062234520 [ 981.712499][ T5781] tipc: Failed to remove unknown binding: 66,0,0/0:1062234518/1062234519 [ 981.723197][ T5777] tipc: Failed to remove unknown binding: 66,0,0/0:1062234518/1062234520 [ 981.733624][ T5777] tipc: Failed to remove unknown binding: 66,0,0/0:1062234518/1062234519 [ 982.076762][ T5803] syzkaller1: entered promiscuous mode [ 982.097440][ T5803] syzkaller1: entered allmulticast mode [ 982.104937][ T5806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8659'. [ 982.117452][ T5806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8659'. [ 982.133580][ T5806] block nbd0: reconnected socket [ 982.139491][ T5806] block nbd0: Unsupported socket: should be TCP or UNIX. [ 982.155204][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8660'. [ 982.166815][ T5808] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8660'. [ 982.630820][T26022] block nbd0: Receive control failed (result -32) [ 982.885748][ T5852] netlink: 'syz.2.8669': attribute type 1 has an invalid length. [ 982.946769][ T5852] bond9: (slave gretap4): making interface the new active one [ 982.956134][ T5852] bond9: (slave gretap4): Enslaving as an active interface with an up link [ 983.058472][ T5863] tipc: Started in network mode [ 983.063407][ T5863] tipc: Node identity 7efd11ca2ba5, cluster identity 4711 [ 983.071950][ T5863] tipc: Enabled bearer , priority 0 [ 983.087276][ T5865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8672'. [ 983.105569][ T5861] tipc: Disabling bearer [ 983.162394][ T5867] tipc: Enabled bearer , priority 0 [ 983.272640][ T5867] syzkaller0: entered promiscuous mode [ 983.282288][ T5867] syzkaller0: entered allmulticast mode [ 983.289057][ T5867] tipc: Resetting bearer [ 983.354878][ T5866] tipc: Resetting bearer [ 983.698727][ T5909] netlink: 'syz.3.8678': attribute type 4 has an invalid length. [ 983.935039][ T5914] netlink: 'syz.4.8686': attribute type 1 has an invalid length. [ 985.736531][ T5866] tipc: Disabling bearer [ 985.755566][ T5913] kthread_run failed with err -4 [ 985.769521][ T5914] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 985.930250][ T5926] __nla_validate_parse: 3 callbacks suppressed [ 985.930270][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8687'. [ 985.930606][ T5933] tls_set_device_offload: netdev not found [ 985.963821][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8687'. [ 985.987556][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8687'. [ 986.382567][ T5951] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.8695'. [ 986.462081][ T5962] syzkaller1: entered promiscuous mode [ 986.486269][ T5962] syzkaller1: entered allmulticast mode [ 986.507862][ C1] bridge0: port 4(team0) entered learning state [ 986.599321][ T5972] netlink: 'syz.4.8698': attribute type 15 has an invalid length. [ 987.112672][ T6000] netlink: 'syz.0.8707': attribute type 1 has an invalid length. [ 987.157033][ T6000] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8707'. [ 987.566143][ T6035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8716'. [ 987.590110][ T6028] netlink: 'syz.0.8713': attribute type 4 has an invalid length. [ 987.654030][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8718'. [ 987.669870][ T6041] bridge_slave_1: default FDB implementation only supports local addresses [ 987.693655][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8719'. [ 988.076499][ T6060] netlink: 'syz.4.8722': attribute type 13 has an invalid length. [ 988.209690][ T6068] xt_TCPMSS: Only works on TCP SYN packets [ 988.362569][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8722'. [ 988.507525][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8727'. [ 988.675577][ T6092] xt_l2tp: missing protocol rule (udp|l2tpip) [ 988.716111][ T6091] syzkaller0: entered promiscuous mode [ 988.741302][ T6091] syzkaller0: entered allmulticast mode [ 988.766581][ T6096] lo: left allmulticast mode [ 988.781353][ T6097] netlink: 'syz.1.8733': attribute type 10 has an invalid length. [ 988.805555][ T6096] tunl0: left allmulticast mode [ 988.839152][ T6096] gre0: left allmulticast mode [ 989.360602][ T6096] gretap0: left allmulticast mode [ 989.383113][ T6096] erspan0: left promiscuous mode [ 989.429415][ T6096] erspan0: left allmulticast mode [ 989.471344][ T6096] ip_vti0: left allmulticast mode [ 989.489478][ T6096] ip6_vti0: left allmulticast mode [ 989.508823][ T6096] sit0: left allmulticast mode [ 989.521633][ T6096] ip6tnl0: left allmulticast mode [ 989.530547][ T6096] ip6gre0: left allmulticast mode [ 989.538406][ T6096] bridge0: left allmulticast mode [ 989.545261][ T6096] vcan0: left allmulticast mode [ 989.551318][ T6096] nlmon0: left allmulticast mode [ 989.556364][ T6096] caif0: left allmulticast mode [ 989.561688][ T6096] batadv0: left allmulticast mode [ 989.566845][ T6096] vxcan0: left allmulticast mode [ 989.572425][ T6096] : left allmulticast mode [ 989.577061][ T6096] veth0: left allmulticast mode [ 989.582954][ T6096] veth1: left allmulticast mode [ 989.588080][ T6096] wg0: left allmulticast mode [ 989.593092][ T6096] wg1: left allmulticast mode [ 989.598302][ T6096] wg2: left allmulticast mode [ 989.610312][ T6096] veth0_to_bridge: left allmulticast mode [ 989.618357][ T6096] net_ratelimit: 133 callbacks suppressed [ 989.618372][ T6096] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 989.665441][ T5906] lo speed is unknown, defaulting to 1000 [ 989.672224][ T6105] lo: entered allmulticast mode [ 989.677354][ T6105] lo: left allmulticast mode [ 989.685545][ T6104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 989.698622][ T5906] syz0: Port: 1 Link DOWN [ 989.845589][ T6131] syzkaller1: entered promiscuous mode [ 989.852325][ T6131] syzkaller1: entered allmulticast mode [ 989.889858][ T6139] netlink: 'syz.1.8739': attribute type 5 has an invalid length. [ 990.050318][ T6153] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 990.088592][ T6155] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 990.275847][ T6171] netlink: 'syz.1.8747': attribute type 2 has an invalid length. [ 990.347825][ C1] bridge0: port 5(syz_tun) entered learning state [ 990.510400][ T6182] bond14: entered promiscuous mode [ 990.543410][ T6182] bond14: entered allmulticast mode [ 990.544570][ T6191] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 990.576943][ T6182] 8021q: adding VLAN 0 to HW filter on device bond14 [ 990.770297][ T6209] netlink: 'syz.0.8755': attribute type 1 has an invalid length. [ 990.821643][ T6215] netlink: 'syz.0.8755': attribute type 1 has an invalid length. [ 990.847019][ T6212] netlink: 'syz.1.8756': attribute type 5 has an invalid length. [ 991.026699][ T5507] veth1_macvtap: left promiscuous mode [ 991.033807][ T6222] netlink: 'syz.0.8759': attribute type 1 has an invalid length. [ 991.153887][ T6222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 991.235151][ T6231] bond1: (slave geneve2): making interface the new active one [ 991.256289][ T6231] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 991.325292][ T6248] __nla_validate_parse: 7 callbacks suppressed [ 991.325311][ T6248] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.8764'. [ 991.374697][ T6245] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8761'. [ 991.918988][ T6304] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 991.929650][ T6425] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca [ 991.983205][ T6293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 992.193689][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8776'. [ 992.205501][ T6322] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 992.441803][ T6335] pimreg3: entered allmulticast mode [ 992.490336][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8783'. [ 992.516307][ T6341] netlink: 'syz.0.8783': attribute type 2 has an invalid length. [ 992.551077][ T6341] netlink: 'syz.0.8783': attribute type 5 has an invalid length. [ 992.832932][ T6364] IPv6: sit3: Disabled Multicast RS [ 992.871095][ T6364] sit3: entered allmulticast mode [ 992.914958][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.926138][ T1313] clip:clip_start_xmit: skb_dst(skb) == NULL [ 993.041295][ T6371] nbd4: detected capacity change from 0 to 63 [ 993.086052][ T6377] block nbd4: NBD_DISCONNECT [ 993.126872][ T6377] block nbd4: Disconnected due to user request. [ 993.201871][ T6377] block nbd4: shutting down sockets [ 993.240233][ C1] blk_print_req_error: 138 callbacks suppressed [ 993.240254][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.255677][ C1] buffer_io_error: 138 callbacks suppressed [ 993.255696][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.270412][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.279505][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 993.287328][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.296418][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 993.304223][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.313321][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 993.345334][ T5484] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.379189][ T6393] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 993.385794][ T5484] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.419089][ T5484] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.432856][ T6393] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 993.457408][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8796'. [ 993.472369][ T5484] Buffer I/O error on dev nbd4, logical block 1, async page read [ 993.490581][ T5484] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.519216][ T6404] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8797'. [ 993.540042][ T6401] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 993.577887][ T5484] Buffer I/O error on dev nbd4, logical block 2, async page read [ 993.589610][ T6401] bond10 (unregistering): Released all slaves [ 993.599440][ T5484] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.631455][ T5484] Buffer I/O error on dev nbd4, logical block 3, async page read [ 993.670524][ T5484] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.710888][ T5484] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.733886][ T5484] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 993.754849][ T5484] Buffer I/O error on dev nbd4, logical block 1, async page read [ 993.786948][ T5484] ldm_validate_partition_table(): Disk read failed. [ 993.802979][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8802'. [ 993.819564][ T5484] Dev nbd4: unable to read RDB block 0 [ 993.821680][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8802'. [ 993.841035][ T5484] nbd4: unable to read partition table [ 993.855412][ T6409] syzkaller0: entered promiscuous mode [ 993.874125][ T6409] syzkaller0: entered allmulticast mode [ 993.893380][ T5484] ldm_validate_partition_table(): Disk read failed. [ 993.904248][ T5484] Dev nbd4: unable to read RDB block 0 [ 993.915612][ T5484] nbd4: unable to read partition table [ 994.312151][ T6452] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8810'. [ 994.337422][ T6452] netem: invalid attributes len -24 [ 994.343319][ T6452] netem: change failed [ 994.375770][ T6452] netlink: 'syz.1.8810': attribute type 4 has an invalid length. [ 994.555437][ T6460] IPVS: Scheduler module ip_vs_sip not found [ 994.631821][ T6471] syzkaller0: entered promiscuous mode [ 994.637909][ T6471] syzkaller0: entered allmulticast mode [ 994.721162][ T6471] lo: Caught tx_queue_len zero misconfig [ 995.293362][ T6518] [ 995.295729][ T6518] ====================================================== [ 995.302748][ T6518] WARNING: possible circular locking dependency detected [ 995.309779][ T6518] syzkaller #0 Not tainted [ 995.314200][ T6518] ------------------------------------------------------ [ 995.321214][ T6518] syz.2.8831/6518 is trying to acquire lock: [ 995.327191][ T6518] ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 995.336678][ T6518] [ 995.336678][ T6518] but task is already holding lock: [ 995.344025][ T6518] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 995.353589][ T6518] [ 995.353589][ T6518] which lock already depends on the new lock. [ 995.353589][ T6518] [ 995.363984][ T6518] [ 995.363984][ T6518] the existing dependency chain (in reverse order) is: [ 995.372983][ T6518] [ 995.372983][ T6518] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 995.380880][ T6518] _raw_spin_lock_bh+0x36/0x50 [ 995.386165][ T6518] nr_rt_ioctl+0x40c/0xf90 [ 995.391095][ T6518] sock_do_ioctl+0x101/0x320 [ 995.396218][ T6518] sock_ioctl+0x5c6/0x7f0 [ 995.401077][ T6518] __se_sys_ioctl+0xfc/0x170 [ 995.406192][ T6518] do_syscall_64+0x15f/0xf80 [ 995.411301][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.417715][ T6518] [ 995.417715][ T6518] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 995.425716][ T6518] _raw_spin_lock_bh+0x36/0x50 [ 995.431002][ T6518] nr_rt_ioctl+0x215/0xf90 [ 995.435934][ T6518] sock_do_ioctl+0x101/0x320 [ 995.441040][ T6518] sock_ioctl+0x5c6/0x7f0 [ 995.445894][ T6518] __se_sys_ioctl+0xfc/0x170 [ 995.451013][ T6518] do_syscall_64+0x15f/0xf80 [ 995.456132][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.462547][ T6518] [ 995.462547][ T6518] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 995.470365][ T6518] __lock_acquire+0x15a5/0x2cf0 [ 995.475739][ T6518] lock_acquire+0x106/0x350 [ 995.480765][ T6518] _raw_spin_lock_bh+0x36/0x50 [ 995.486046][ T6518] nr_rt_device_down+0xbe/0x860 [ 995.491408][ T6518] nr_device_event+0x137/0x150 [ 995.496691][ T6518] notifier_call_chain+0x1ad/0x3d0 [ 995.502320][ T6518] __dev_notify_flags+0x16d/0x310 [ 995.507861][ T6518] netif_change_flags+0xe8/0x1a0 [ 995.513313][ T6518] dev_change_flags+0x130/0x270 [ 995.518671][ T6518] dev_ioctl+0x7b4/0x1150 [ 995.523520][ T6518] sock_do_ioctl+0x23e/0x320 [ 995.528635][ T6518] sock_ioctl+0x5c6/0x7f0 [ 995.533483][ T6518] __se_sys_ioctl+0xfc/0x170 [ 995.538592][ T6518] do_syscall_64+0x15f/0xf80 [ 995.543697][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.550105][ T6518] [ 995.550105][ T6518] other info that might help us debug this: [ 995.550105][ T6518] [ 995.560317][ T6518] Chain exists of: [ 995.560317][ T6518] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 995.560317][ T6518] [ 995.574130][ T6518] Possible unsafe locking scenario: [ 995.574130][ T6518] [ 995.581565][ T6518] CPU0 CPU1 [ 995.586912][ T6518] ---- ---- [ 995.592263][ T6518] lock(nr_neigh_list_lock); [ 995.596929][ T6518] lock(&nr_node->node_lock); [ 995.604201][ T6518] lock(nr_neigh_list_lock); [ 995.611477][ T6518] lock(nr_node_list_lock); [ 995.616060][ T6518] [ 995.616060][ T6518] *** DEADLOCK *** [ 995.616060][ T6518] [ 995.624187][ T6518] 2 locks held by syz.2.8831/6518: [ 995.629286][ T6518] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 995.638786][ T6518] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 995.650376][ T6518] [ 995.650376][ T6518] stack backtrace: [ 995.657851][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.2.8831 Not tainted syzkaller #0 PREEMPT(full) [ 995.657889][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 995.657907][ T6518] Call Trace: [ 995.657916][ T6518] [ 995.657925][ T6518] dump_stack_lvl+0xe8/0x150 [ 995.657956][ T6518] print_circular_bug+0x2e1/0x300 [ 995.657977][ T6518] check_noncircular+0x12e/0x150 [ 995.657999][ T6518] __lock_acquire+0x15a5/0x2cf0 [ 995.658027][ T6518] ? __lock_acquire+0x6b5/0x2cf0 [ 995.658052][ T6518] ? dsa_user_netdevice_event+0x495/0x2850 [ 995.658072][ T6518] ? packet_notifier+0x121/0xf70 [ 995.658094][ T6518] ? nr_rt_device_down+0xbe/0x860 [ 995.658108][ T6518] lock_acquire+0x106/0x350 [ 995.658131][ T6518] ? nr_rt_device_down+0xbe/0x860 [ 995.658148][ T6518] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 995.658170][ T6518] ? nr_rt_device_down+0xbe/0x860 [ 995.658184][ T6518] _raw_spin_lock_bh+0x36/0x50 [ 995.658204][ T6518] ? nr_rt_device_down+0xbe/0x860 [ 995.658219][ T6518] nr_rt_device_down+0xbe/0x860 [ 995.658233][ T6518] ? nr_device_event+0x12f/0x150 [ 995.658260][ T6518] nr_device_event+0x137/0x150 [ 995.658283][ T6518] notifier_call_chain+0x1ad/0x3d0 [ 995.658305][ T6518] __dev_notify_flags+0x16d/0x310 [ 995.658323][ T6518] ? __pfx___dev_notify_flags+0x10/0x10 [ 995.658338][ T6518] ? __dev_change_flags+0x5a0/0x7e0 [ 995.658357][ T6518] ? __pfx___dev_change_flags+0x10/0x10 [ 995.658373][ T6518] ? full_name_hash+0x92/0xe0 [ 995.658391][ T6518] netif_change_flags+0xe8/0x1a0 [ 995.658410][ T6518] dev_change_flags+0x130/0x270 [ 995.658428][ T6518] dev_ioctl+0x7b4/0x1150 [ 995.658453][ T6518] sock_do_ioctl+0x23e/0x320 [ 995.658476][ T6518] ? __pfx_sock_do_ioctl+0x10/0x10 [ 995.658496][ T6518] ? do_futex+0x333/0x420 [ 995.658518][ T6518] sock_ioctl+0x5c6/0x7f0 [ 995.658544][ T6518] ? __pfx_sock_ioctl+0x10/0x10 [ 995.658563][ T6518] ? __fget_files+0x2a/0x420 [ 995.658579][ T6518] ? __fget_files+0x3a0/0x420 [ 995.658594][ T6518] ? __fget_files+0x2a/0x420 [ 995.658611][ T6518] ? bpf_lsm_file_ioctl+0x9/0x20 [ 995.658634][ T6518] ? __pfx_sock_ioctl+0x10/0x10 [ 995.658653][ T6518] __se_sys_ioctl+0xfc/0x170 [ 995.658674][ T6518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.658691][ T6518] do_syscall_64+0x15f/0xf80 [ 995.658713][ T6518] ? trace_irq_disable+0x3b/0x140 [ 995.658734][ T6518] ? clear_bhb_loop+0x40/0x90 [ 995.658752][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.658768][ T6518] RIP: 0033:0x7f3355b9cdd9 [ 995.658785][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.658800][ T6518] RSP: 002b:00007f3356af1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 995.658819][ T6518] RAX: ffffffffffffffda RBX: 00007f3355e16090 RCX: 00007f3355b9cdd9 [ 995.658832][ T6518] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 995.658843][ T6518] RBP: 00007f3355c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 995.658854][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 995.658864][ T6518] R13: 00007f3355e16128 R14: 00007f3355e16090 R15: 00007ffec6a358e8 [ 995.658884][ T6518] [ 1001.867950][ C1] bridge0: port 4(team0) entered forwarding state [ 1001.874436][ C1] bridge0: topology change detected, propagating