last executing test programs: 3.101923571s ago: executing program 2 (id=7380): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001180)='rose0\x00', 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) (async) sendmsg$inet_sctp(r1, &(0x7f0000000580)={&(0x7f0000000200)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)="75f2b58ddf64d698f37fe5c0793250dc1edbdee60a123878", 0x18}, {&(0x7f0000000280)="9d8a60dc0bd76cd7a2863261fb5eb7fd0dc9c0b44608d2be09e22a5b3519205188b6e7629cc375696da38e1b3cec549d7b5ad73a0015b7bd8c0343e7bc2ff58ca18cdb8d4ad74c033649f266c75e86d2130788f3de6c565ea3a20ca9506f0b57fcea7ae6f8ea7c8938ea2c370a8e", 0x6e}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f0000000300)="a8adbbf67312cb2a09b0595c631fd1e1a899af60bdc3a3c9", 0x18}, {&(0x7f00000003c0)="29a05eee1464c56062d1b186c78aeacaac74ac133025692ae7b6df9af92d04b6cee6bc43afb2158adbfb3e63027a2fcc6828281a5cbf02674ff54fcc540aa1a33c81375887cf7925dceda7304fca4a5a14ec5a96ca749ee38c22dcecdf7a0c089f695a8dfb81fe3af73761bbee85656bc0c53f8083f5dbefdfbb5526ff97f5e9b59d8202cc9f03ce", 0x88}], 0x5, &(0x7f0000000500)=[@authinfo={0x18, 0x84, 0x6, {0xfffe}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0xfff8, 0x201, 0x8, 0x10001, 0xe0000, 0x5, 0x0, r4}}, @authinfo={0x18, 0x84, 0x6, {0x6}}], 0x60, 0x40040}, 0x80) (async) r5 = socket(0x2, 0x800, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) (async) accept$packet(r5, 0x0, &(0x7f0000000180)) (async) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) (async) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DONE(r6, 0x29, 0xc9, 0x12, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="8cb4d2b31c0f5c1c79596f6abf6b9f00362359496a4cf2267501f005d72f0d056600aec8e8be673a72eca79bfd87d5f98098919b1fd26ae4bcd6f02396d4afe7c22c9b690dced466d0056de132de6db86663b9df767981faf5c1fef0fa21d765b6784a6a26c7a9cfea2816a97a5e6269b352569a61c5f2f8908d7517d571d165630b730f9c0852a5816002ad66b65381", 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x44101) 2.900333439s ago: executing program 2 (id=7384): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x178, 0x1a, 0x633, 0x70bd28, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in=@multicast2, 0x0, 0x0, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in=@empty, {0x323, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x92be, 0x6}, {0x0, 0x40000, 0x0, 0x3}, {0xfffffffb, 0x3, 0xca09}, 0x70bd29, 0x3502, 0x2, 0x0, 0x0, 0x10}, [@encap={0x1c, 0x4, {0x1, 0x4e21, 0xfffc, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in6=@mcast2}}, @replay_thresh={0x8, 0xb, 0x1}]}, 0x178}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=@newtaction={0xa0, 0x30, 0x101, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_connmark={0x88, 0x1, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x4, 0x800, 0x8}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x1, 0x0, 0x10000}, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x4080000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x6) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2.265050465s ago: executing program 4 (id=7391): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418000000120800040043000000a80016000a0001400600d4c140e99d5a57dfcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8004cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed92d2f52eb233dcb9ef3d93452a", 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000c00)=ANY=[@ANYBLOB="085ba718a377a437bb0800000000000000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000417f00000100186371ae9b1c0351a4a4d483f1ffd142760384967710db2393167c69c14816dd8bc029fe0417d7535fdac23d4016438b95e3b4a9aa7618a403824b866a5469b1efb6bb879f4d8a52a02e8335ed11b34d572af305f54d3c8c9b685c365f7d0000000000000000"], 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0x3f4, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x46, 0x45, "29d5085efeecca84e0175d6c6d7b823f642b8b781c476f14350476bbb03aae3abb0538d810c1c996dda40eb25370047a326874a004dbeede72f7d1388e48ac4aeb3d"}, @NL80211_ATTR_TESTDATA={0x68, 0x45, "01b977d24e571fc41d58d3b99bfa4e2deaec42064c9ea3e5ae57b92e5004beadc9ed00e6b8a9a80e5aeb3ff15c6d05ce61f17c3a82da8e6d459acfb7c521f1cf74108ef8553ded86c3df86f725be305005fad2d868aa49ce8e1ee034329f02a9f97eacaf"}, @NL80211_ATTR_TESTDATA={0x84, 0x45, "ad21166b91e1b9ee0bf360c31357b4c59c9d2487822d4d028003fe878b911684e7c6b327ed05857557438cc05df52e77485d8167a499f6057b54b9bbb469e1fc936c9806732356b91132757ce38120bd188a2accf7394850d5a0b8d57010b2a3c70b02a6efc8bf6f6c6c1c2a6646ad7b30f9ac7cc9dc5f151fb1a18728431a42"}, @NL80211_ATTR_TESTDATA={0x5c, 0x45, "f47d6fd312297927ebf78eafc1898e203a1f8d4344926e34dc741a7da6e8ff239d777ef868e31005c4f88770fb60ed9330ed84d6fa805194eb322e182da75cbd766ebf97dcfa052b5f00ce1259d32b7fd08bbd5ac06ae433"}, @NL80211_ATTR_TESTDATA={0x62, 0x45, "efd1b727234df97be32ef296497a244908ad7884fc381c1dc887acd7bd6a17a4e4ccfac5354ef73b646c627e2cb38eb3ae5e6970cd447d9c61680eb9de6cf045cda9872468a6f6759fc1266922d5c9f37444d32fd82f873ccb2527b7c092"}, @NL80211_ATTR_TESTDATA={0x1a, 0x45, "98a5695f9460b0d34096fd990459b8ed0804e19a249b"}, @NL80211_ATTR_TESTDATA={0x5c, 0x45, "5d864529ede171205760c314ebb2e2bd237b9e64797a6143e0831b4408f05a87b401aa2b978a1db8c85e8b3c8b5555718a3971155e0c338cec7bfcb8a730da7767bfd72a8587afdad49709e5d3196a706cdf3bfbe4eb73eb"}, @NL80211_ATTR_TESTDATA={0xa7, 0x45, "b86a742398a7a93510a8ba0d99240a3fd9f73e3a6185201208e0743894d4a0d2ee48b29d76a2c44ca26cb4cf701b6af6a70ac3f18a2ef972a5193f0186c64fe5757376f299ba8b49d6bf0276df65050d6fd651aebafbabedf7a049bf58a26f89219381104fe6ab4f1e0b09a702dd70a38de21541ba161dbde3e4fb62a0ad614793fa447a3fa60741d9d00a5a4407ebf2328f39048de0c676913efab0e15df557018e7b"}, @NL80211_ATTR_TESTDATA={0xcc, 0x45, "f4f2d961d0732a4c1386ab89c62dec69fdb16de5aadb9edacfc3a8f0f6a7053abf390efa64a18a57ff21aa07267f5146d121a95a1ea9235cc994e0f38247d389160e0d381442d2fdd2b1af10acca3e5c20eb873bd1f0d6bf59392c4fa7670115da32d0f061491c1f8147d339b7584bbc38ecd450ce3da4f12f4f32b7d158333c82075f302284625b7d68ecbd04e608df11a090448b9911dea62e606908266255b51e04f90d364b466307a6e01d9085c92853eda90e7d33b4cb93c81c799387e8fdcba9bf26b5c95d"}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x84}, 0x20008810) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r9, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x20}}, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xc8, 0x0, 0xc000000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000380)='ip6tnl0\x00') ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 2.137172748s ago: executing program 2 (id=7393): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/55, 0x37}, {0x0, 0x38}], 0x2}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0x0, 0xfffffffffffffffd}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x6, 0x0, 0x0, 0x0, "e31db80000d3382f"}, 0xb}}]}, 0x34}}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001dc0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000540)=""/18, 0x12}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/181, 0xb5}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000780)=""/229, 0xe5}, {&(0x7f0000000880)=""/133, 0x85}], 0x8, &(0x7f00000009c0)=""/193, 0xc1}, 0x6}, {{&(0x7f0000001bc0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000001c40)=""/190, 0xbe}, 0x8}], 0x3, 0x2040000, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1000, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x29, 0x5, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req={0xb8, 0x32, 0x7, 0x4c5}, 0x10) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000080)=0xc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18b15d20205bbb7d28580a48dc52540000000000000000000000000000006110"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.749419846s ago: executing program 4 (id=7397): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000000e4e200000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000c4b60000000000000000000000000000d309000000000000ffffffff000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000fdffffffb56b6e000000000000000000d9c59e089b164dcbf393a4d1b281cec8571d1547a1b6611689c42a7fc94653ec14fd705e7251e81e8a978f6abee121b4bebc2825b5f05d85324c3c4c1bcbd4ad2cf80bfdf10dc39b6128ad8308a7"], 0xb8}}, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) r4 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000001c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r4, &(0x7f0000000140)='THAWED\x00', 0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x74, 0x13, 0x20, 0x0, 0x7d, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x40, 0x1a, 0x0, 0x1, [@AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7f}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111c300000000008510000002000000850000000000000095000000000000009500b0059d350000f8eb70c3d9330b16491e095815635bf7490c180e3be703966bd8fdc277008531ccb9d9ae8dc9e78d9dc5311486fd1d2bfab99b08b4d46852f103d4ed539d04b034d645e2ea69674b1749efdc6a03ab8d5c3d2a2ed722271db8f4b166d4a579abbfc27974"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xfff1}, {0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) recvmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x6037}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4d, &(0x7f0000000000)=0x48, 0x4) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002900)=@newtfilter={0x15cc, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0x3}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x159c, 0x2, [@TCA_BASIC_EMATCHES={0x1598, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xec, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0xbc, 0x5, "941ac40db34a93d7b7c58583a8d3cce34201a0baa9d5575ebc69feffeb7f5bfdeeedc7794c1a08a00a7dfd9123822a81c26e5996c090fb8e74089d13032c8274801b6ff1015ebdd47ee0d86de291cf3bbf2aae708290591c11fff9ae07b4f3054f55488018e7d765db7a770172d6242e273059457cc48be1a7a734c1f78d8b9804a97bd82df5a540330c45391863ea65d654e766ac69bc5ab9debbff095a7991779a2de669d1620bbb9fe63a2571ac86fdfda2b01c65afc2"}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x3}, {{0x1ffffff8, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x1110, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x5}, {0x9fad, 0x1, 0x2, "94"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x3}, {0x401, 0xfffffff9, 0x7, 0x3, 0x7, 0x0, 0x2}}}, @TCF_EM_META={0xac, 0x2, 0x0, 0x0, {{0x7ff, 0x4, 0x100}, [@TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="89", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="43b1", @TCF_META_TYPE_VAR="7a03fa9a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xf6, 0x1}, {0x5f1, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="c1b3", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="81c1d43a6ebd0fb1", @TCF_META_TYPE_VAR="8d", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="dd6862255426959fb1"]}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="ecdeedb19a0739ae6c", @TCF_META_TYPE_VAR='J', @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="4f506b4315ccea83", @TCF_META_TYPE_VAR="f70f114b", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xd, 0x1}, {0x9, 0x40}}}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x9261, 0x2, 0xfffe}, {0x5, 0x3, 0x0, "0a15a1"}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0xff, 0x0, 0x189}, "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"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x8b, 0x2, 0x2}, {0x7ff, 0x2, 0x1, '?Q'}}}]}, @TCA_EMATCH_TREE_LIST={0x380, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x6}, {0x1ff, 0x9, 0x1, "cf6f02c3aca2ca400f"}}}, @TCF_EM_CONTAINER={0xc0, 0x1, 0x0, 0x0, {{0x8}, "553e5bc7e83d114918828a16fceb3afbaf14363eff169ea3af9176ac515de9b68e99fe08c77d7442a719b2ccb038da9d73694b6b3b3e5aa8114e9050d59872af5b3c2c12238be8f26aae28e331047afe9023408ce8620449b99c6c81fbb2e02e8f1555cbc1356e69bc4642cfd29ec6f04ba5d27ed36b4892de64cf95be6a7d99211cf4c1e4d25366c3330fb33fa0fc86d4f93f645355f995aab34d1d287c651830a808163dc72e5c6b23218085af43d6fa9d2c41"}}, @TCF_EM_U32={0x1c, 0x782, 0x0, 0x0, {{0x9, 0x3, 0x200}, {0x2, 0x5, 0x3ff, 0x5}}}, @TCF_EM_IPT={0x1d4, 0x1, 0x0, 0x0, {{0xfe00, 0x9, 0xfff9}, [@TCA_EM_IPT_MATCH_DATA={0x102, 0x5, "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"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x82, 0x5, "11552cbb2e6f6000334a3ecffea3f73fd1efe957a6a181443cb52bf3cb20dc0c25bfd85ec779ab4b7c318e5d2bb8adc6a65dd77f9ad322da21935ca9c2bb5acf1f8a516a6dbe5e61607a119ca663247e65ba34ff74b5a369d99794beba26713073d3d333728eadfd867a5d65d04ff188a1c319b0fa812ed5d7da81aadf1a"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x200}, {{}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x3}, {{0x2}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x60, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xd4, 0x1}, {0x7f, 0x7, 0x3}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc000, 0x7, 0x2}, {0xfffe, 0xa, 0x1}}}, @TCA_EM_META_LVALUE={0x32, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="aa991d4d1457a24841a3", @TCF_META_TYPE_VAR="4507a96e4d5511", @TCF_META_TYPE_VAR="4244f3e049f5eebf", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="2ffcf59f639a", @TCF_META_TYPE_VAR="d0bafb", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x6}, {0xff, 0x8, 0x1, "053005ba499a90ca"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa}, {0xffffffffffffffff, 0x6, 0x4}}}]}]}]}}]}, 0x15cc}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.748151308s ago: executing program 3 (id=7398): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$packet(0x11, 0x2, 0x300) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x40, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000210000000000000000"], 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0xe682, 0x8, 0xa3, 0x8}, {0x4, 0x8, 0x5, 0x1}, {0x2, 0x81, 0x9, 0x9}]}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.632252303s ago: executing program 2 (id=7399): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$rds(0x15, 0x5, 0x0) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0xf0, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0xfdb7) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x29, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r3, @ANYBLOB="0c000200"], 0x28}}, 0x48000) vmsplice(r3, &(0x7f0000000780)=[{&(0x7f0000000240)="38c47c60d83a029e568d31698c2e6a277fe8", 0x12}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="6633d421d4cc8e752407b02a41cafe1bc5e53c053f3d57f098da48bb99732ddc9273cf0dbbfeade7ac0509b245364e0efae699fdb49ec367103fcb0e589910391e9139ce622a785efb453e6056016487da99afbba0be4865a10f6cb7449842b40ec58740e34ae00faab2bd5a3faf0b12c7fe1ef49938b5f87245aa183a68f3e2d7d9942042ee661256ce4c767f9584a8de8304de498c20118d66941f6486b581ec2851c98b0dabe8cfebf88b57c1c3f6a45143d0c25ea709620a495b44ffa9c961", 0xc1}, {&(0x7f00000005c0)="c7f6e903f16abea1a4b77a4aa4e0cf714f4e967c87bf75b45b276198ce1438a90b351a2ffeeaad2e8ea1d6f8fc74871a95235def4d608b7ee716f6590829ac86c9c69be98012e0eca31f57f4439673ed2a0ed8daa34990d55b98fe6cb38fb8a14ecbb9ed18196d1d7a3953a11412e9e59a3e0ec25de070a75652f78f79f51f2b7089065eeb9189192181a19f122edb6010bb975bec42b2e0008c77ab3cc31d91a48fe6cad7192608ef", 0xa9}, {&(0x7f0000000680)="4b49200e0721ac9809e7a61e1078c271f44eabf4aa89180168fa86217ef16af7d4374d40e4b611bff589ca41078644fdfca977f672e1377209413b7b21b65045f530a7934838dfa6e0bc84d8db844bf3bf72ef56dea2a5113f8fbc2279ad31d8fd537f53185dae34088eaedbf817df2144e714be029c038768", 0x79}, {&(0x7f0000000700)="ee467a8a4295c1b7083099aef3a4f4ab6345b453278b3290e05b910446fbad29e0568e2fc13f095e7b74fedc4fdef55ebcac71c785c41fa7cb2e14eb0e5fb0989fbd79423689184d433bc408aaf12bc14ef931b5184dd1dc512a504786da4149e259f14e1caa5eab59dab0854653b3d542524208d2e750af2c9e31bb", 0x7c}], 0x6, 0x3) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0xc055}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004804d}, 0x20048011) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r7, 0xcc071acbf25dbf8f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000200000000000000070000950000000000000000"], &(0x7f0000000100)='GPL\x00', 0x7, 0x57, &(0x7f0000000140)=""/87, 0x41000, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) 1.619814004s ago: executing program 1 (id=7400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4}]}}}]}, 0x64}}, 0x0) (async) 1.262090569s ago: executing program 3 (id=7402): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0000000000000011424203008f"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x13, 0x5105, 0x8, 0x5, 0x881, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r2, 0x1000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x8, 0x5, 0x1200, 0x18107, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000300)}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) writev(r6, &(0x7f0000000080)=[{0x0}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xb, 0xffffffff, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r3, r4, r5, r6], 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b000100677265746170", @ANYBLOB], 0x4c}}, 0x0) 1.122476579s ago: executing program 3 (id=7403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x14, 0x11, 0x0, @private1, @mcast2, {[@fragment={0x88, 0x0, 0x85, 0x0, 0x0, 0x8, 0x65}], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x14, 0x11, 0x0, @private1, @mcast2, {[@fragment={0x88, 0x0, 0x85, 0x0, 0x0, 0x8, 0x65}], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.04876578s ago: executing program 1 (id=7404): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000001100)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000001100)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x5, 0x80000000, 0x46f, 0xfff, 0x5, 0x200}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE={0x14, 0x6, {0xff, 0x2, 0x6, 0x401}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x14, r9, 0x1, 0x0, 0x0, {0x34}}, 0x14}}, 0x2004c004) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000089f8fda698b036f004f08004400000069ec009078e000000200000000014424183164010100050000030a01010100007640000000000000ffffac1414aa0000000110000008004e20000890784215bbdb47c184666949b86c6efd7a37a4a4418c3325a81d507b919854f5744c9dd02c3c8004748838fec665573f735eed87b2e639f1d2"], 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000006c0)={&(0x7f0000000280)=@ll={0x11, 0xf5, r7, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000000440)="b2339211fd61169c66387d5e2014a46ce2c8a9edf510cf8c0f0e2567e94f621d062ca9824c7f18917947fac9449e4cd1461485e540f563c842250b5b3ebf6d93ebb5bb392ce9f9e116cae96ee96821fe40d6b0975cb821d464ad43d46252a7411b6a2f32b4b888679aeab89324c46f0b55d9c4fe63f11f8a50053e1583d6e3c380", 0x81}, {&(0x7f00000001c0)="c8fe28a6dd30ef49d785de79bde92b07f0059ae516388007c0ae946262f294c6625073", 0x23}, {&(0x7f0000000340)}, {&(0x7f0000000500)="b859e8da0f695b3b20963085edf9dd81749c42467c1fb8508b5113eaa3105479cca1bd45a724eb9ba9ef81ae10ed4b7ee3b89fd3dae98da233fe4c26289f5dce726fffa13806e777a60a2b462a2340e419ed24a3f88385d3939c5888d73f4a660ba382fb726033", 0x67}, {&(0x7f0000000600)="eb8b13be2daf86283450e0012ad0277a2e", 0x11}], 0x6}, 0x4000000) (async) sendmsg$kcm(r0, &(0x7f00000006c0)={&(0x7f0000000280)=@ll={0x11, 0xf5, r7, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000002740)="8ee52d57c9ebefd8988415089f2043cb98f3419cded8846d7ebb2f7ffe791f19370dfe67b33c90f53eaebc62f4a2268e7134853b2a0dc575753b61095a11fc947ee60e7ce73bfb6808f9b3be2abaaadf03411fb633a5d05918c2739d7d123c3107d40ac52bbab88da4922aac8e80e4bb40f8c8d6346df8cf862635f0663282dac7ca2859f937b6c09a1a3cc4868a35745dc543648df2693048a20e3c8d7779078190bc209faae5aa8971d477d4e70213d8f9bbe902640d8ec495d7bb47331491332255edf8ea313d74f6eed4bc044b345884a515ecd98c7f7a2b2cc80741bb8a66b3a54ad25884111b861ff62752540345bfbbd52f4dd79b11dd32afd14e1822344fd354652a7958a9d5b982a0a6bb694cba616705127e8f99f5b3b1413f1d16fb6a6618d0f38f67ffad4b61c564b8d7f9db728f6dbb52aaedf6ca75ede793bf5ff9667638b8ff5a966df5beb206d20846ccb7a4d67925acb9821b5727aa0d72cbe207c0792829452758d2120eaa1aa50e1eb47e43d23101a5fc9e49133707f8e86733c8091baed869999dcff08487bf9f41a4cda4e1655cbe7625d336960fc48805dc2f623800abb5970e79cdd7daae30b49589d6569b1e2bb9bd6e79a7d12d0e883b49f3be2e67b9cfd0da8128a07f867ac16c240b491b9e12400012c32a390a1ff490688f3b92c68631031e0c11e45334b45fbfd156b91e1a2104c8fcdf0d19b0d91caf3b9fa18d2dbd3ddceaa4cd653b778032fc52ea72a3de736b6b29e7e08ea378d09dd6d961fc201b919b09a9e63f2860a0fe40a517abcd61692157acf33ede260c9cd8248463a234d451c17ef32a1d08f6090ba84b48326279449b60ee7323808fc651be30cf8abb776b75a5660c7ee698fe96a80156d7d08b2dc452b20c8567bad3c770b0625f92eb3ac6792c6ea25ed5cf902414caa3f8e1ec1806a5aebe8b089f496d567134508ee1751205a8bb0fd43392196e29348b8c0908e1833b79c1448fe440b055654bef5e621225d65e6fb6ec8eb58eefc0370d0302674aafd4bba3dacbe336dad7c68b473887ff4d838282d2bf8434d4c3be7b981392740f54530aa57be02af391f5ebca0fb807d59adc81bdc9643764e80570f17bd8efba28706b643ac7e061779a77b69f826b86a490525c1c50048dc5285d4d25705d8c89fbb8250f5b2c37a2f5b4be259c6cae130e74e337ea01b7127482ec74f5cec67e83327061b57e04cbd20934ade71b4fda29930e56eab3e381cbfa95817110cc244fda276695564db89d354304bd2d259bf3230c7eb4677ad74d7a7ff9257393e4da17d5292791098955feb3f55ed25d5294042e4c02ef72c95cfa9c5440f50d683538fe79b972403b4336a6af160038b9bc937591893d4e9f7883f7564a79589f678a65c5f74e2bbeb0bb95c3a2a8ee7c789c08378a5a5cae0d5c9a0bc08cdb7ce6ba837d751b424e90955546444609992aa9a5c3a799e7610b9dbdf81e40421e8d9bb0248234073f6a2d11700252b1274d7bb580d8d921618a5ea2f0aaa260170c1f8eeee3d73691e4356e3179a411eb49cc0fde2d754d3b6af293cc3e4d46cbc3491485c417bff4ef5e27bad9314547b17f855ad4585d77363e331c8e76bec8abc66ae7b7e6d4ff1266043f67b0382dc54d1acd7e4123ae22bf8df0f8fc0c4ca88ffb31031709aeac9f3cfdec50909bdbe4227e7470c46b02999914e3d2f6dde25a56ec7cd27a2d41c76f42ba4d73f30034cfa67b0f4a11c670faf9622385a074905ae541eb9ce18bb2497083b81cb774371b89d9c2f123a09dd39b6850677a8518e5768dfb8eac3defd1ad116847ea511a4d9cec9f50ceda999e37ca7fbfcbddba8ee674fdff325169ffcf1df59eb2d47a2965b271f43e4c6e2f78bab1276dcb274698b7b3b0e8edd19729eff726e399dedf1223b89af40c7c4900a588f865f6ef48ef082007432735024cd313e7224d801279bc2900c465e0daffaa935ab5b216ba4c3b36d0f7efedddb588151a4f1a07e3baec45acfc5c608c749cf43a34e6ea5c76f9b5e31962e0e42a5ca7101ac08cc6e533ba2a7e31991332cbb2ce13ce4b46d8fc783b97743647812f33ac1f71f0b041a060534527d649e0528672c2ce289a64fcc8c7e7470a75b82787bf78c3810e0f4cbbc3ea5b0bac6ee4179df7ce4960421be24b47215492326ec6a3fb7eb464e865ffc5eba7d94312a21ed07d234f93060e2cda93048148b43702397c5e534b1823c29c77b548c049487694063c393f20b3de30a5fae231d121a82e9f09d35fd0f21362be4487dd57b5ca740d9e1c5c552e66062a8a61c38d46af21230f9bb3ef88f08212e0e42d208c163175bdfda594adc4686af17651dd525cbba731679693265d975a5691dd8758e92c276ea8f6c69222d69032cb920518aee08300f5c889ec47f14d0cf6ac2377a373d364d5118bfdf2ae1add5953ec6311fa809354a61a3059f071d5a753d6f8eefb57e6dbd76828756066ac2b15b1908bb33710e8f518a62076e9a6d4fa6eb433d36708beb21127566a6f89980998be74b378dbf0c8d5b2df4e4ee0bb68750564a38556d5a0e1bae02d06b2171cfd5f1512d1b1f2f60f15583ea104ff7aaad8bda2ad0cb9388c03c0a3282affb94302652d093d57c318e3a501d142ce7d9a228822b4b8ef4aeccc81c09fae1635eec0fdb5c527ebb948f47e35e0c328998d0d067afedd9d8227ec8822d37cdfb34b162bc806efe6625806a103b5d920ef0b8f79c986cf77004e47d745852cedbacd7f7eccc6064ebb1a7f2c17e20c7bcb388d1114d67348e5d1aaf38a18830e427f375fc5c054764eceb4feb614fbb759fe80bdc7ac964ea1e2510151df5fb35ddbec133d165fca96c4add471bdc638a0b2a5cabf99226c5fefce893ad9c98bfe5616c44e94f3cea4e5cc51d49c089ccad54b8d8882c421c9c44eee76c285283d98a8b1841575071641420e2554ddfcf76e84d2d8e0fa4c57f2d7dd4085ab79b7a1319736652f1ac88548c7aaff33d66d9d5ba05cfb539e9adefb2fec2325d400ec60c584a1681dd7afec916c6879f129d70d917bd915bbf1c875cf1139620bddd18f4782d95229b6a6ea89ffd81c3c29fcc2ab3104402f0715373747fd970af210b4bd19d35a2e48f362a9968a0d09457098f48c6ae362a4e9808556a144cf0812e7af35237226386ec12c066afdb12fcf9569d483bdfa0bfb921d68a88a4c94ab5a3b65f8142de1c740e85ba8713c3ab5c5183aacbe569028e68464a388593eb861854ec08febf64b36bfd746d076ae76fa8998b269055aa2d77b6bb2f55c892de6450e1cd66b3cfa1e3e604b6ad8ff3587a4096bf14d6f3eb6a274d280f3ad88fa3709e9c9f065fd134ec7e759a5e86cd505fe3e24e12cefdcb33734973c6f2c120e1838ec1b734dbd497dccdf8e4a0651044ada7708fe928f19981f7f95ef89ed1f622ccb0bca0721b3701539dcb6b68f32f58e928ab5ba668eb22ad7d5802c61efb46f5c0348ebba390889cb14a41499d771d2c2a41b1474224844a142f7066e4dbab3559cab9867b5661acadd5d161862ae12c1f44d25f6e400834ab1fc45fa5e6fc46a1f53129d95d241c97958242524c23470157b289f856e88952c0aba3491de40fb7a700f55fd67701f5391ccca755bc10874bca13fc0d85b5513f6e5d5bf49ec29b7d30ea08e8f67694e5a09ebaef2a56a774e8dfb6f1ebffec8b4eb48c5ba693588121d12285f3b0b20a65253b9d02c5528df33874e28917258fcfe302399f20dc9c7f841b14f3fd16111baba9b90dd5ab5e0c13b340c02f51d26f3b7d519c0e18e4a40a0b56e761c7704735bc5005d7922fea2e561381b8ff07ee74dc59824a95b10fe81118de5014573dcccbeeb070df7e1431aa65d2d5dcc0105da1e79d9ef9a5408a6e18bc236ca190497e926cf6e4765206779efc826a8afed5d9b3b003b779a37aff6bd1cbf73adbff02c62aff372358a49e493694cbb8a0de13ff71c62b808ddd235107b91db9da2aec0fbc1a39f63f195ac9fab402866797bff98cde741e27ecd452bd60c84e28b4eaa4306e734b3652b093719b3fefab54550a706d34c3f8e7657178ffc397e7904837179bfc6b0f8a177cce89449d907d8a17960174c7416f35f95f80720cef687c9d602f7676b9e73ad63449c5a8ff8ffc8b8674897b0fe009c8077dbf552ae97c1410b0e51cc00e31587ef69c9fffeab64aec94dde2011f0ac4992c0785c54ec4c04bc05d64aedb1b8462522707286ebe5f6d82381449f8d98733cbba8d2520924f8f1e2ed2de4213f010a5726530624fa16f2db394f86d4d78f28a5dc5e3e1f522acd8bf13101c5612195f240a00faea59bbfb33c5df0c3516e5e7ef1d024e55312bac07ecd7d001a7ab1bd88e10bef6974515e4e38cba7fbc66a899d3e7fdb2a125ac13566d963cec8758709cadceabe6ead263a4651fbfe4b00930c2220d90785171b4e75df14e4dfadbb06f4b30ae2c36cf330d606f608e7eb3b2516a37c336382d4d3edb3d6cbbaea0bfd06a3b6d0b6ffbacb760b2d0214cd93f6637ba6f16e22df9725ab6d1e5b7f3f8fe19b73512b7693206edf2942509210101c52b87c9004f22c12a860183dbbeabd768d77863e1185ccce8c9f01f81787332b2c227cc2518e034280d39a9a695ae29b8a2723e5da7f2d2ecd9990b51e815b9aaecc24579015d9db34e80df31f1923c3ab03b777d4289cf0b312534722da661d6dce9aada9b6947f7897207ecc2b7ff6aa425f2d01541586745f8cdcb17cd68d78f51638e399c36f9f4497c4ed12388a9c1a162a4dd25c6c16cf20ea88e935c8bb094d6d62205cc48f368e6897bc1d19045fd123e8d0242c47142460708858a8a37406a4660c57216bb296b42813a29e92a215014bc3b752bbf802a2c66fee89544df9d79d336e31a214641cc8cc8daca8cb4df8416f1f259c0385ae57b9be08e51ee5cbea3d44180f56f52be4dce917f5f432dca75166420507f51144dcb8b3fd574e883679f06b423903459571162c2af5dae30be83e01431c5411755fac90324c692ef32b4c2d11e321801fe7815a45137beea46e36ebcbe1319fb4977677b0f808747caa7389a16c587869934dec0852c473d02afa340c100b5d3a74fdd100cf3b500fef81f9a8b3619634d8d0ddb1730c09141ce8494477d4c069c97177aaef45e4b53f045d3277f0b5ddc989447760a40c209e7d4c87e1a4ede6898d42ff57718be4669ea12d618fd61df96a64980ce85802b54422c96779003dc5522179bcb470c3802a90b589c17729d039cb7313bca7fdd77ac02da06065afd4eead86af5165148fe4fe3981e2326a5ead7113c8e251be1b134a0f183ee0660af28d932958b4b07b3f1919d1c1df1d42e25c6ace0d4d4302f0fc99454ed0d88cd592d31c63fdc3a20dea6f6278d351054048048477e0c213992b575433b4902f04d412c2a480e0d180de4be41eec8a710d04ef363619fa4978ff29a36470ff9dbe790f84151501d46d7b08a6ab75b71c1088f924b415cf3d1d4f9338697f1890727fa9d6ca9c1eedf81d32516bf3d98d8d1d7b6166190c512fb76f85bf139043e6f612120d4ec2b51ef6e4a8607118667f38845e8473e0f9ec1201b93e4152f486e35aaf45cbf1c525e367602c6613764fee3c90e602421fed405fd5744a605e98f4d4c0801fc75a9c0af6bc09f721cdeef30c57d3393538bc2b135de153bbc30650e51a6c495d153d7ffda5cc66f408a9842fa92aa47868cdfb121b73884e0bcb37a963", 0x1000}, {&(0x7f0000000440)="b2339211fd61169c66387d5e2014a46ce2c8a9edf510cf8c0f0e2567e94f621d062ca9824c7f18917947fac9449e4cd1461485e540f563c842250b5b3ebf6d93ebb5bb392ce9f9e116cae96ee96821fe40d6b0975cb821d464ad43d46252a7411b6a2f32b4b888679aeab89324c46f0b55d9c4fe63f11f8a50053e1583d6e3c380", 0x81}, {&(0x7f00000001c0)="c8fe28a6dd30ef49d785de79bde92b07f0059ae516388007c0ae946262f294c6625073", 0x23}, {&(0x7f0000000340)}, {&(0x7f0000000500)="b859e8da0f695b3b20963085edf9dd81749c42467c1fb8508b5113eaa3105479cca1bd45a724eb9ba9ef81ae10ed4b7ee3b89fd3dae98da233fe4c26289f5dce726fffa13806e777a60a2b462a2340e419ed24a3f88385d3939c5888d73f4a660ba382fb726033", 0x67}, {&(0x7f0000000600)="eb8b13be2daf86283450e0012ad0277a2e", 0x11}], 0x6}, 0x4000000) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x12}]}, 0x38}}, 0x0) 968.812003ms ago: executing program 0 (id=7405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 967.903201ms ago: executing program 3 (id=7406): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket(0x2b, 0x80801, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711071000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, &(0x7f0000000bc0)) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) bind$tipc(r0, 0x0, 0x0) 913.144368ms ago: executing program 0 (id=7407): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x9, 0x1, 0x969f, 0x0, 0x2, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x10001, 0x6b8, 0x7, 0x1c000000, 0x3a5e, 0x1}}]}}}]}, 0x78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000000)=0x100000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) 825.088944ms ago: executing program 0 (id=7408): r0 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x1, 0x0, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x5) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018140100000000000000000008003d000400000008001d"], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}}, 0x0) 765.933117ms ago: executing program 1 (id=7409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="480000001400190d09004beafd0d8c562c84ed7a060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c700"/72, 0x48}], 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0xc}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0xffffffff, 0x0, 0x0, 0x12}, @union]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) r5 = socket$inet(0x2, 0x80002, 0xfc2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast1, @dev={0xac, 0x14, 0x14, 0x17}, 0x1f, 0x7}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05050000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000340000001c0a010100000000000000000100000008000940000000000900020073797a323a0000000900010073797a30"], 0xa8}}, 0x0) 760.878666ms ago: executing program 4 (id=7410): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x32}, {0xcdef, 0x2, 0x3fffffffffffffd}, {}, 0x1, 0x6e6bbc, 0x2}, {{@in=@local, 0x4d5, 0x3c}, 0x0, @in6=@remote, 0x2, 0x2, 0x0, 0x3, 0x0, 0x0, 0x800}}, 0xe8) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) recvfrom(r1, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) recvmsg(r5, &(0x7f00000007c0)={&(0x7f00000003c0)=@isdn, 0x80, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/146, 0x92}, {&(0x7f0000000580)=""/112, 0x70}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000440)=""/49, 0x31}], 0x4, &(0x7f0000000740)=""/73, 0x49}, 0x20) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, r6, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x28}}, 0x2400c090) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000000c0)={r11}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$key(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x5, 0xb, 0x9, 0x3, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_nat_t_type={0x1}]}, 0x18}}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 731.39705ms ago: executing program 2 (id=7411): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x10, 0x0, 0x0, 0xfffffffb, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x67, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @remote, {[@end, @timestamp={0x44, 0x14, 0x7c, 0x0, 0x9, [0xf, 0x2, 0x10001, 0x8]}, @timestamp_addr={0x44, 0xc, 0x23, 0x1, 0x2, [{@rand_addr=0x64010100, 0xf8af}]}, @end]}}}}}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000500)={0xffffffffffffffff, 0x1, 0x9, r0, 0xfffff800}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf2505000000080002000570"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1f40, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102}}}}) r10 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x4000002}, {0x3, 0xc, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="f40100008000000000000000fdc7df25000000002a04264ecdd0aeea8eaf256a53", @ANYRES32=r7, @ANYBLOB="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"], 0x1f4}}, 0x0) 605.818154ms ago: executing program 1 (id=7412): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000400), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x2, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 602.906862ms ago: executing program 0 (id=7413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r4, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x12, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe3e8, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x2, 0x9, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x7df7}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r5) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e, 0x2e, 0x61, 0x30]}}, 0x0, 0x39}, 0x20) 564.011492ms ago: executing program 2 (id=7414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050025bd7000fcdbdf251a00000006002100620000000800228004000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r5) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r8, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="08009e00dd5c5e0d09be74f68345100300"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x22000000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc001) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES16=r7, @ANYRES16=r2, @ANYBLOB="040029bd7000fea2a985fd00000000000000", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x43fcd6a93cedf08f}, 0x8000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0xff], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x8, 0xa, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xfe1, 0x80, 0xfffffffe, 'snmp_trap\x00', {0x80}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xffffff00], '\x00', 'rose0\x00', {0xff}, {0xff}, 0x6, 0x40, 0x5, 0x47}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x4}, {0x9, 0x7}, {0x8, 0x5000000000000}, 0x800}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) recvfrom(r0, &(0x7f0000000200)=""/15, 0xf, 0x0, &(0x7f0000000400)=@pptp={0x18, 0x2, {0x3, @loopback}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2c0040, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 453.750095ms ago: executing program 1 (id=7415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000080) 450.996807ms ago: executing program 4 (id=7416): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x32, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) pwrite64(r4, &(0x7f00000003c0)="9289f03223605f82be17a60f9a8feada3f9712261aa21b4c1d9108095a9035a37ab2652699e97ce292450d92a6aa79294b3fb21588a72e947bd3b4dddaf4af955930877236a371f32a9ec67578a202bdea7856ba2810e3b00e68e0772ebbe01780e67056d577e66a200ffa5f57ea9b1542d22fb2ad8d", 0x76, 0x8) (rerun: 64) sendmsg(r5, &(0x7f0000000180)={&(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="9a9865844c436a3a41ca27b019e30c49b09581eeb0255c", 0x17}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000580)="ce15abded90d68289cb43edfe5c02b78424aeda9a45ea7f26a48944f97df169a3b3f98d43452b4c9b82a438e0537fa0617df8d7974a0d7093198acc6233ae6d5e2ffb3973f05717823daa669befe8d6ba4a6a95c0a24b4f3034dffb077748d29d1f27212d0901ff9157a5f73af97af31a73eae9ee99bc99f5faecf2806d1ebc793844d2c2f614d2ed2373818567e5ab1f3702272095b5ff529cc5c1604ff1ba2c510a60228", 0xa5}], 0x3, &(0x7f0000001980)=[{0x58, 0x6, 0x452, "571314b63588a41488b9953e668abe5aedf40f44db5d364891ac618b3e047637562c4e2d3d1b3fcef5e2acae6e99c3ce4627d417424ed8df601d82e96b8d74008b11d6424ede01"}, {0xa8, 0x84, 0x0, "ec3a34400294b7f9be1f8ca4dc3c3343fc296918821df220e4f628acbdd2ce0f4c4789ab7ab84989e08beea5c9d70f1f61fd13c3748f44d5b1bca7a363c90e893a8ee18fa26567712757c27a2db8cd72012962a9ea2cc2a1b8b4dbad9df53cf72e8457b9e2fb75b29ab6a110030fd0bad6c6d23ae32e06239a6097fc41cd0f764d7570b1dda88c0885d87c66643767f60398dec714"}, {0x78, 0x103, 0xc, "a41296baefb8365a007a7bf359d0a1b5d1ab15b5920b669fc19b1e9d214f584e1e8f0b561423528e050f6231622ae255780bb19ab8d4d2f4f7cc8cbb6e03122acea6e90965052bd9790c981db940a95617e4f75da1f36a0590946167cee696a407a2ed094f18"}, {0x48, 0x114, 0x8, "c607453204c3f8663f4d0b803eb90e64c9d0461a6ed19a3915627e62f971053079ca14254cce7dc59a7117a71f2fc434842c0365db311730"}, {0x20, 0x111, 0x7, "49b23e17f66d6d5907c5369b9d"}, {0x1010, 0x6, 0x4, "564153e3e998ccec0879da8c4dd6f539e4376285838ef016c9e9660129b2402476b66de77f7e0e1d7801e272dd68d72ffda33cd86f26738431d203be66165e5b412150f5a86af11246316445602cf3ec8dc3eaef9bcb4c0b88652aba9747ff49bc86bd19f7adcc5e335de50e1921895d8e60c4771128b043caf0362f84e767eeffc4c96207549b02ff0e6421ce9f89b39a45d1ff5c221b14890885c1ce5a796449ae26f9ab5a3d2b921ed8d1ebbccf14d8b323e0577ca1657b7b957059f27e5182b895e55d9206eb86e863b447e783fb41303f99da47bc18ec05adec00af06fe8ba7ab409b77d30b05a47890368feb6f59080e12627c4ec51cc543715da39a49aa8d4ac15f05b660be7bf0d1e442a7bd9b25519f2b734346a45103ba173c7bbf11f457c382965264a50dbe17bdd155a3ee843fa776610eb182df720acaa0e305e7cb163e02d2cf5db1f373bc7342c3fb507d197f790023d40dbce4fffc013cf6fc5e7ec0b66d0530398e88c51b2e434116ccfc0a8f675faa06c0656be79588ee94f657c810eff0c449fbeba7e636cc7e1a3f7930061aea55f2b845bf22481a7c0c6ae687d00837d1a7946e248269781786990774183a65933fb57066d7fb1e007703957959632e3c1d504d8a67257f39bf85cbc0b4037b10508b143d2d537fa0b582d996b0be3f19b9e06fb27c95106ecd713d4f473d64dd5a1dfaf6f8bfa943a5455046d86ac180c9e0bdaab0abaf1a87639baf8b304bd0cf901629e646c009b60c2a8119f587699372cfc955885322de40b98c48af9ab740d724ee209c2bfd1c13ac86b438e91bfa341e8900380e3d0dad01b1dbe074592d9ee18cb7720a1a3da461021746ec2c4ee84831d5f13b212e5fe3014fa683ce199f8fb1775b53baf783b37c899d84d7abe93343d3bfc58592d1cfc6ee837421964cba52bd44920ea06b34219af82c318757fda5eb1535a840f75a81521d13c036d24f056c82b3359d43b2fe22e59899f024c489886159ac603c7ba7a10aa6f82c537fd172ce147efe89e7d2144f067b1fb5ade2dcb7061ae5868136b9ccd3c8213fa13d0df6f95a1df36be9aa8568f7fb33efe6b2c7d382f6c926a8c37acf3dfb5f51169d2efc31d31d48f941921bd1b933445e116942023af6a604c9d50e736e405fd0785c86dfca898054031cbaa05cb8675b7e0b0b84052b260f0202fd06e03da57c2d9a81b8ca576f60b6914133d41e70c5ce5e2fa53f8f438d765b8d907d51a2606d50b04c1685236598a20b29dcd7b74d82cdff413e362a29dd974e07b71ef3fde3b7c4ad50a80fd199bee1261509082d948140e38cbaeaae21becc3aee6b56faa6280c3206beb710ef584d4d4ebf976a34b0c3c9029a4e426682909f59568fab1f104feda3b8048c9691ceeff417fb66083f4d2fbe77b9eeecffa5f9336474cf2af6341384cc0e513ff09d7b5d906324a7860d80f4246883231018a7ac6c99c6e2d1c74b868c427f0bf1b6ec8d49e9b83c1c68bcb79eddfdfcbda26c5dce7072b19109f784148c56c309efc754ddf2dc6589ca545108d9c89268f915bd57af5f1b284fb1c95672fe79c482c7e79ee85627ddb5091c6607fa90016210c3eb48560c8f67e6b26a115d83fec420024d1af8e8c1738f8cd0116b15335a4c0001c6d7eaaeca1c55ebbddf62c7b3493bd5a8f336f2f4d15a5159ebb20d170fc4f696c0a09e9b7e87eebc02f40dea1a22379d2bece14a3a91e9c007b7732766edde710fc6886aba4db616d8dfeb5a3c888c99636ae496e1bf727ff2100bb3643cae69b9ab9b4dee9bf39954e619312c50310960e5609f740ade4d606f52b1d44dac96cfa65abbabc3a7238a69bca908cc71f622273b7e28870133e489b2eae2400d1b5c87519b66469e71f14c0338c1220ab14c29b7abef7e054a452296d11006f51affd35fe4e748bcf1834dfb5ff548ac3e6226efaa467af0ff357848017e2738b58584240f89266560498cacd21c44084a5ac04f91a2dc586fda3391723260621d93546fa13d190c251587cfd3b604685c45e3f633cf477bfac0e160cd9487e051d68eb7aabf29c9b2107cf440ec2d34bc651ed044db0dcb7b335e819e686cc4970b7c9c2d61c0b44f58a9c39c033ea42cf4dcc5c9a8f178e0f36f2ef2115a7b8a7d1a2f91e789cf4418b1f131c86e45dcfd3aeb7edaa886a1bb12b2531f98a62baf89f192a633c2ef3db9bca0ff94e417ca7f6924be4512e9890cf95c025e5b1c1533772921e08b8eca7658a2defa3b74239bd58159deff8d5ef0f2fc6c2597dadc435dcb30bb8d578936c0112fa06a19c286e1dfd80cb040149365a20c62e2732133ee3a30d2bd6f0a272e358fc711f0f2a1ece1c62703625c062f192feab47bfbebca4715b668af32e32259c60f533e821d1fc4f245f2d5b77d81e5900eb4c7776d33a7fc26ba7a74856427b4326f3779b344c1c62631c44311df0504d8768bc9f486b6f7451f29fe3122a1a0b586bd80ccef2cb931d120648b030f9d05057c16a2a6e11f94af5743ba23782de7036fc06f0f01eb39e3baf626c801f6bf04057c9cd66a06c8658996c9fdcd755636d11791d42c2390f3c9a6b0e1228dde05f3de53ea2471755ceac8756635e48ff8bf86f9c958e993607e9ed629bcdf8d64f41fbfe9c31c4d77547377211f4c9e2ff8c03ce3d2d50f09eec6dce7955edc363ac01d418ca37f2f3ba9d13d6e6f7d58049b5cb117c13206a2f9bd1211759de26d78433d53276599f5af5f3ff03c3a9b00a5b397b9c61a00aed2c8b53360bc2a5311e101060caf377522b2dc772d3d4c16ee66187922ec25f0f2bd87e34fece7f4bb9ec3cde72b867a50f0e4fb490c22d04b1986289250b4fa5c8fa3540203d21a11ef6d2d45c656e6a8345eba1406614a600cd576299b8f7039a388b7ff0e39d9fd771acf2ab5ecf337ea66b42f2a7c69244de1b178d14399e7186765393aee414eb4bf35ecd8e04c72694de561320bf9cfa41d9216e9554f5af7677890601976dab68ab1e2b8d7782f9007f22b2469622e0b3dc36ca3ef336726ca41b7f2cadf81b2ce890697fe46a7827ce72a43f301ba2a4100d2b568b947a32d3fcdcb9a6e381286d2f74cc0d118525ff10bb11106084dc5973127f2f7e6a15cac16d3157744037ec87453728ae592dae5d3cad5edd9f2c1da12bcf04b098855e8d910b06d49dda1494ce05c301821f216aa60ddd996a87f8af5eb8ee3817f0a14e6fd881ebc15609bdefbffe7de7ee86a645641553730b36073379b0d632a19efc8c8ced9b793b4d29de31503f69ecb3dea6f45b28d4138e1f55b792f0516ef6a8ca5b5465eaa03d9f797fb42ca09ba081ac0f76e0e3ee17966bef844d77679ebea66af219c76863c27c641990a7d70955f93cfd9e6e9b776eac573ce9ef791fdb12f2ae5ff0475448bd12c86fc64f44097eec4e27056def119fa60a5f788a50ac62f36d255a44eb3752e9f312eaed812cec68a2067026a6f6658ca5fa7420f3e7e70a530c5f110e1e4a97b666e08c0a84a45cbd5b327d554d77e413866cd2839c10a05960a1b7f645a42f89a1d46f7c46632144bcafaf4627b528256ed2a3368b38dcd551dd3fca6f08ee03d43c070464f82fe2dd154cf27b6dfaad1af93b149268fa953363937c00faaadbec040a1472c14debc40cf0dd7bfc2d308c07d811a2ad1640150510f200d7cd6ca20ea123877af76015fe4d39529ac9157d26e5ebc0becda095e7c6b263fbda4a07936308df14bb0102e71edb0d7b7367a3c933570a4996dcd5100b8e22bd7b8aab905acc0282e994e32e1b6ed16cf6b139e64c92d7a862f12962f8bcacaf946d30e446d073cd12906767237659ccb7efa2996276972e83c64d7f1b34c283ed0f9efaf343a63e7d2d33b03b57d84d3dce28d3949789b14244d8782b1dbebd5c5e9bbe3b4527cb40cbfc04b1b5219c2fb3f3d4a86c59000a04d5e50cdecaf3c249ba94d1c3e19c494d6a3e26a2dcde286c6de9f6d871964f94330501c447a28698f648a788514fc7c8246f8134a7dfff6b64715297b57dd82279ae11859b71cf2eb29b3932c7a07abfaaacfdb040b9b5f574a2afef836ffcd3217c080b29129936fd6bad8c3134d41123a12dcde5edbca08ca9325f955bf2568a3e2448a93edba2c1808d01fdfea4bfa0f8ae2ae3ea507bec1a8703965de74f7f936baad841112351c586de4ed72f43e5078a8f288c23e1e4a8730576decf3c57dfdae5f2bde648978992c87fc42c2224e8e689e129b0c6ff180ace6698dcdd1d8b047414fb059d9468179e1665ff695a36574cbd54c7abc7161ed7a82b38761640ffe9180b9f42aee165c558b1a21074fc8c03444799ccbddb88c9aafbef55ac8b3c44ed74849f4cf9f47b7cce439ad6a05a4f3c2bc61d05c8dc33a901992869ec65c6d8c759913fd3eda8fae6c294c228e4394ab3a73df165d1c47b9485dc9cda776cb93ecd9a318ba704e7a352c9f87e6e736923bfb43038804fe52bca1784b72d2ec890c9a8a496cda520d337c6537b0b9034d67f57ba99a22faf143ec9c4b1eabf02a146f27a8d3e1e7e8dcdfd3dbcdcce4591569e4a37b1578d1c87b52babc9ee8af2d63b8547b1521a31efc21376bad86166259a11cad09d0206a0f132306719375ca46c6749d41d41402dc00b28e9e5d11bac4f83d10aef46796728dc52f303ec51c208901df68294cacbafed39c749b5dfeb31ec0167fcf3dc87ff8f90315e97214738b7a12f2ef828192305d7d314922b32bd62e1817e2ccf132c0301ce190c987a51cb311e040ee9dd953d2ba18753088b5d75e83046a8f4eb9879df07af2d1d0d51c2c329b350b4e1f00ac38d444ae19b3b742854189b274785defa32a625ffbcb60cd7c0e18face3fe7705ebc4feb7fc2e1a072e7312f905a1646500a71203f531f2f3dc69d029d3e966c2723b68c8a6bb951a6cc18e7b60ff6945b7f5d0eec853f9f7c3e28c613dab564979bfdc47a362d4b7a746ae1c886a0047cf64073d08f72a9edcde9bb6b641e9e06b4af387c88076fe4d7a7b288fad6366d3c226e23efe051aaf59c665bd4c3056e22b900043a6b113137d5153f7138fb82fba07ac2882bb7ec9d7c11ffebcd8661a127857f84650c27f85c7d4f526be1a5be80fa7c8d7257a8f97e42c386d626a4e7b7dd4444177da08c62f476ff3e62d04b982f25b2a3edbad88f85b05608505e24bf6c6d9cb3d4b9cd4af401a8e7b47087ac8cf70e82578a3c0e6eec22e2639497ed1fc0cc27ed91b69f318c55ddaecdcc49c48593c0207a01959e58dd7da58ae4b5ab931f697c4b8480e660660b3ee2f2b7a3652d8374c1f5474d145596dd7c921199092f88c8a37a90e5678c2528368324095f057f9a25cc829d5e2dbd50be8043a8694c390ccce8be2ca708b03d49f6dfc4a8a430db51ccc083925cd6a303519538d807935b6623c664e1ae8f7fa457d1e764bc8fe62653daf41160a9a3a8091102d363a5d9c1bdbde620130ed4f8f517f2cb45f8034dfc0d5f5a5005fa8002d03abe75ca83069c6115b4504c0557e2acd3fdce45f6e5cad80fae74d3dad76ca897e34372b96d8a155704a8500b654897d3e0f917c5c6a84fcc87310565e6b9aa5fb8ce3c9b6e6d0900a0ad53fe44246174c4dd8038ced1a53d0be02797c643fcd1795cf14324e590e457e07b6d207db58681b04c9c188190ce056113441326a1d0571d6f08b64ba7bcc571453a07def20d646afd05d7bb755f244ffc84e4866fa4cc41a5f18157fc12f874740e5a2fa082"}], 0x11f0}, 0x4000000) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219, 0x20904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}}, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000640)={0x8000, 0x7, 0x0, 0x7fff}, 0x10) (rerun: 32) 309.306837ms ago: executing program 4 (id=7417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002200f2ff090001007770616e3100"], 0x20}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000dc0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 212.003147ms ago: executing program 0 (id=7418): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000580)=0x8, 0x6d5a0a95) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 116.927553ms ago: executing program 4 (id=7419): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r4, 0x89e2) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000400)={0xffffffff, {{0xa, 0x4e21, 0x7, @mcast1}}, {{0xa, 0x4620, 0x2, @empty, 0x200009}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r5, &(0x7f0000001880)=""/4096, 0x1000, 0x40, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x30, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r7, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="ae92", 0x2}], 0x1}}], 0x1, 0x8001) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) 105.220626ms ago: executing program 3 (id=7420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_SIZE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x101) 1.695182ms ago: executing program 0 (id=7421): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x0, 0x84) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000740)={0x29c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6d96}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "715257e0a5e230df435fbf7d7efe06fa93e66def633b7a3acbe2a6dc1d"}}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "7281939377d8c36a85de76c681d95c86838a89637ecd0d777948078d350f1e6404fe70f547b8d56887e759e2448daeddf1682b9b5fa0db7bd517bccffc37522e516921bebb083e979a55d42ca8feed04bce86e3eb77b12fe4bcb5cc9ae6da01ca5f3d0cfd483c3e08a5f60eb3e15e7de560a75a585ae5bb7acddc2d6d91ef4040f67297628d4638f8f964be2b76faeb6d2ef5b92595f65f678aa2a5d2bcfc1e35ee7d5b1919ac89dd4e798a4e1bf6874f7d875a6313dd33d11cbdf723c123a9850bc60ac9944d452b8b5ead7119e5ae59ec6"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x10}, 0x400c0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r2, 0x2, 0x1, 0x7, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r6, r4, 0x5, 0x2000, 0x0, @value=r7, @void, @void, @void, r5}, 0x20) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xa7, "d8d0e0fc4e5dd8c1636d6d940ed6194f86f4a362179a9a2dd165ba99e0732e73b7220d2f6992ae762fef94e759ff9c105e1a0d69b3d2eaf4cb096808e97abc2eb4ac6577cbaa2c8215431352ab5460baa0db8afbe3ce7826e0841d16d0759a7c78efa1032e1c0ca866def4dede3be710696b7a57db6aed6830e5fe73c2608e720cc69d4a4d971cb7c717f41d651c03ed3c1ab4a7be7e8a62b54cb0c21906796ed6d88eeb1055c6"}, &(0x7f00000000c0)=0xaf) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x6c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x27, 0x8, "3073edf9fa48951f350a277a3b05861a5e9950e18094de7d5523bce86f92518d7b0d8c"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2004c854}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x48b, 0x8, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xf}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x800) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000480)=0x5) 806.212µs ago: executing program 1 (id=7422): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, 0x141) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0xb, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, 0x0) 0s ago: executing program 3 (id=7423): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x8}]}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x9, 0x4, 0xb1}]}) write(r0, &(0x7f0000000240)="d5631bcbe9774ea18e45e62211d554ad6abdc9587c9152c2493f9eb64ea8cb016c272d9f3f39a7c6c8fc2785ffa5897e55040e3cd9e921176340022d2cb2dbd91216011e860d4bd5edf7e5d0319a5ca6be164a78fd5eaf38bc8fb2a04f914a04012be178fb6a742327ad869eafa6cc5e12fe1f0b561d959973132fb62843e1e424cdb7c1850e194a9bfaa86fae291e37934cfb62d7508f52b4a2a1ca5fa60a49b9a40b4e1ede8c92219a3e4ddaf224157810c5736405d12e0cb1bbe21d66211c257b802c35ada74c2fc78876b00024942f7382bee82d375b428bbc951c5d155c46ad1873ab15841fe362093513e26ea26659bc6c4987", 0xf6) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000cc0)=@add_del={0x3, &(0x7f0000000080)='geneve0\x00'}) write$ppp(r0, &(0x7f0000000540)='|Z', 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711734000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800200000ff000000000008000100ac141400"], 0x2c}}, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xfffffffffffffd1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) kernel console output (not intermixed with test programs): timeout [ 755.605343][T28234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5902'. [ 755.615491][T28225] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 755.629914][T28234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5902'. [ 755.654338][T28225] bond11 (unregistering): Released all slaves [ 755.747948][T28128] hsr_slave_0: entered promiscuous mode [ 755.763773][T28128] hsr_slave_1: entered promiscuous mode [ 755.770382][T28128] debugfs: 'hsr0' already exists in 'hsr' [ 755.776735][T28128] Cannot create hsr debugfs directory [ 756.084928][T28220] lec:lec_atm_close: lec0: Shut down! [ 756.155523][T28128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.268310][T28128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.349292][T28259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5911'. [ 756.431204][T28128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.477254][T28261] veth3: entered promiscuous mode [ 756.558441][T28128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.672707][T28276] : renamed from veth1_vlan (while UP) [ 756.754908][T28279] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 756.945357][T28128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 756.988498][T28128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 757.016180][T28128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 757.046527][T28128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 757.162505][T28308] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5922'. [ 757.180353][T28308] netlink: 'syz.4.5922': attribute type 9 has an invalid length. [ 757.328679][T28128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.354916][T28315] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5925'. [ 757.394842][T28317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5924'. [ 757.431499][T28128] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.458049][T28319] openvswitch: netlink: IP tunnel dst address not specified [ 757.478624][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.485913][ T7713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.514291][T28322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5928'. [ 757.535936][T18409] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.543175][T18409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.676255][ T5830] Bluetooth: hci2: command tx timeout [ 757.724854][T18403] bridge_slave_1: left allmulticast mode [ 757.735102][T18403] bridge_slave_1: left promiscuous mode [ 757.759081][T18403] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.799185][T18403] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.946554][T28338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5934'. [ 758.203862][T18403] bond3 (unregistering): (slave gretap2): Releasing active interface [ 758.257944][T18403] dvmrp0 (unregistering): left allmulticast mode [ 758.778146][T18403] bond1 (unregistering): Released all slaves [ 758.793297][T18403] bond2 (unregistering): Released all slaves [ 758.809247][T18403] bond3 (unregistering): Released all slaves [ 758.982254][T18403] bond4 (unregistering): Released all slaves [ 759.132225][T18403] bond5 (unregistering): (slave veth1): Releasing active interface [ 759.144624][T18403] bond5 (unregistering): Released all slaves [ 759.146976][T28359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5938'. [ 759.163075][T28359] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 759.178550][T18403] bond6 (unregistering): Released all slaves [ 759.322762][T18403] bond0 (unregistering): Released all slaves [ 759.337205][T18403] bond7 (unregistering): Released all slaves [ 759.352847][T18403] bond8 (unregistering): Released all slaves [ 759.368594][T18403] bond9 (unregistering): Released all slaves [ 759.492887][T28341] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 759.544513][T18403] : left promiscuous mode [ 759.689366][T18403] tipc: Left network mode [ 759.713041][T28359] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 759.755391][ T5830] Bluetooth: hci2: command tx timeout [ 759.792566][T28128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.829561][T28373] syzkaller1: entered promiscuous mode [ 759.838115][T28373] syzkaller1: entered allmulticast mode [ 759.946705][T28382] __nla_validate_parse: 1 callbacks suppressed [ 759.946726][T28382] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5944'. [ 759.991039][T28128] veth0_vlan: entered promiscuous mode [ 760.003728][T28386] netlink: 'syz.4.5943': attribute type 23 has an invalid length. [ 760.159462][T28128] veth1_vlan: entered promiscuous mode [ 760.176014][T28389] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5945'. [ 760.211647][T28395] netlink: 'syz.3.5947': attribute type 1 has an invalid length. [ 760.244201][T28395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5947'. [ 760.356347][T28128] veth0_macvtap: entered promiscuous mode [ 760.371468][T28128] veth1_macvtap: entered promiscuous mode [ 760.550090][T28128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.616619][T18403] hsr_slave_0: left promiscuous mode [ 760.622932][T18403] hsr_slave_1: left promiscuous mode [ 760.629711][T18403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.639644][T18403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.647935][T18403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.658537][T18403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.680868][T18403] veth1_macvtap: left promiscuous mode [ 760.686486][T18403] veth0_macvtap: left promiscuous mode [ 760.692410][T18403] veth1_vlan: left promiscuous mode [ 760.697765][T18403] veth0_vlan: left promiscuous mode [ 760.809803][T18403] pimreg3 (unregistering): left allmulticast mode [ 760.837503][T28405] netlink: 'syz.4.5950': attribute type 1 has an invalid length. [ 760.846280][T28405] netlink: 'syz.4.5950': attribute type 2 has an invalid length. [ 760.896747][T18403] pimreg (unregistering): left allmulticast mode [ 760.912044][T28406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5950'. [ 760.968887][T28406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5950'. [ 761.090648][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 761.098806][ C1] lec:lec_tx_timeout: lec0 [ 761.103882][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 761.190777][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 761.262760][T28411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5950'. [ 761.828159][T28404] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 761.831041][ T5830] Bluetooth: hci2: command tx timeout [ 761.863210][T28128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.945492][T26614] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.964842][T26614] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.975026][T26614] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.031880][T26614] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.044180][T28416] FAULT_INJECTION: forcing a failure. [ 762.044180][T28416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.096818][T28416] CPU: 1 UID: 0 PID: 28416 Comm: syz.4.5952 Not tainted syzkaller #0 PREEMPT(full) [ 762.096843][T28416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 762.096854][T28416] Call Trace: [ 762.096861][T28416] [ 762.096870][T28416] dump_stack_lvl+0xe8/0x150 [ 762.096898][T28416] should_fail_ex+0x412/0x560 [ 762.096927][T28416] _copy_to_user+0x31/0xb0 [ 762.096956][T28416] simple_read_from_buffer+0xe1/0x170 [ 762.096983][T28416] proc_fail_nth_read+0x1bb/0x230 [ 762.097015][T28416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 762.097047][T28416] ? rw_verify_area+0x2a6/0x4d0 [ 762.097075][T28416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 762.097104][T28416] vfs_read+0x20c/0xa70 [ 762.097131][T28416] ? fdget_pos+0x246/0x320 [ 762.097160][T28416] ? __pfx___mutex_lock+0x10/0x10 [ 762.097183][T28416] ? __pfx_vfs_read+0x10/0x10 [ 762.097212][T28416] ? __fget_files+0x2a/0x420 [ 762.097237][T28416] ? __fget_files+0x3a0/0x420 [ 762.097258][T28416] ? __fget_files+0x2a/0x420 [ 762.097289][T28416] ksys_read+0x150/0x270 [ 762.097320][T28416] ? __pfx_ksys_read+0x10/0x10 [ 762.097360][T28416] do_syscall_64+0xe2/0xf80 [ 762.097382][T28416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.097401][T28416] ? trace_irq_disable+0x37/0x100 [ 762.097421][T28416] ? clear_bhb_loop+0x60/0xb0 [ 762.097445][T28416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.097492][T28416] RIP: 0033:0x7f8c0635b78e [ 762.097512][T28416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 762.097529][T28416] RSP: 002b:00007f8c072fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 762.097559][T28416] RAX: ffffffffffffffda RBX: 00007f8c072fb6c0 RCX: 00007f8c0635b78e [ 762.097574][T28416] RDX: 000000000000000f RSI: 00007f8c072fb0a0 RDI: 0000000000000005 [ 762.097587][T28416] RBP: 00007f8c072fb090 R08: 0000000000000000 R09: 0000000000000000 [ 762.097603][T28416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.097615][T28416] R13: 00007f8c06616038 R14: 00007f8c06615fa0 R15: 00007ffcd9d40d98 [ 762.097649][T28416] [ 762.407419][T28425] syzkaller0: entered promiscuous mode [ 762.419504][T28425] syzkaller0: entered allmulticast mode [ 762.449516][T28427] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 762.473788][T28433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5957'. [ 762.603123][T18409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.614058][T28436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5958'. [ 762.634578][T18409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.758732][T28440] bond1: Removing last ns target with arp_interval on [ 762.826041][T18403] IPVS: stop unused estimator thread 0... [ 762.833314][T18409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.863421][T18409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.958475][T28440] bond2: Removing last ns target with arp_interval on [ 763.335950][T28459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5875'. [ 763.666402][T28472] openvswitch: netlink: IPv6 tunnel dst address is zero [ 764.052185][T28489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5970'. [ 764.081706][T26614] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 764.452262][T28509] : entered promiscuous mode [ 764.475438][T28518] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 764.594934][T28523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 764.602260][T28523] IPv6: NLM_F_CREATE should be set when creating new route [ 764.609673][T28523] IPv6: NLM_F_CREATE should be set when creating new route [ 764.617021][T28523] IPv6: NLM_F_CREATE should be set when creating new route [ 764.646644][T28517] 8021q: VLANs not supported on syzkaller1 [ 764.671018][T28523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 764.788137][T28519] syzkaller1: entered allmulticast mode [ 766.017262][T28596] __nla_validate_parse: 4 callbacks suppressed [ 766.017285][T28596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5996'. [ 766.110624][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 766.118745][ C1] lec:lec_tx_timeout: lec0 [ 766.263866][T28614] Cannot find set identified by id 0 to match [ 766.297440][T28614] team_slave_1: entered promiscuous mode [ 766.304015][T28614] team_slave_1: entered allmulticast mode [ 766.452774][T28621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.288270][T28659] netlink: 'syz.3.6016': attribute type 1 has an invalid length. [ 767.527864][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 767.539310][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 767.548215][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 767.556733][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 767.566008][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 767.642543][T28681] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6021'. [ 767.664501][T28678] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6023'. [ 767.695451][T28678] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 767.697285][T28681] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6021'. [ 767.757967][T28678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6023'. [ 767.833632][T28678] bridge0: entered allmulticast mode [ 768.104541][T28675] chnl_net:caif_netlink_parms(): no params data found [ 768.172626][T28704] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6029'. [ 768.317415][T28713] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6032'. [ 768.333030][ T7713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.345099][ T7713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 768.358443][ T7713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.712535][ T7713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.723440][ T7713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 768.735235][ T7713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.760962][T28722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6034'. [ 768.872031][ T7713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.889311][ T7713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 768.900420][ T7713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.965220][T28742] netlink: 'syz.3.6038': attribute type 33 has an invalid length. [ 769.093987][ T7713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.105609][ T7713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 769.120299][ T7713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.138990][T28675] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.146657][T28675] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.154616][T28675] bridge_slave_0: entered allmulticast mode [ 769.166729][T28675] bridge_slave_0: entered promiscuous mode [ 769.212681][T28757] netlink: 'syz.2.6044': attribute type 2 has an invalid length. [ 769.221211][T28742] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 769.235579][T28742] bond4 (unregistering): Released all slaves [ 769.262931][T28675] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.272015][T28675] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.279681][T28675] bridge_slave_1: entered allmulticast mode [ 769.288434][T28675] bridge_slave_1: entered promiscuous mode [ 769.352746][T28675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.365899][T28675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.468979][T28765] netlink: 'syz.0.6047': attribute type 1 has an invalid length. [ 769.482459][T28765] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.6047'. [ 769.507030][T28675] team0: Port device team_slave_0 added [ 769.529531][T28675] team0: Port device team_slave_1 added [ 769.544302][T28768] IPv6: NLM_F_CREATE should be specified when creating new route [ 769.595215][ T5148] Bluetooth: hci5: command tx timeout [ 769.602348][T28766] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 769.679057][T28675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.691337][T28675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.751237][T28675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.777047][T28675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.786220][T28675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.828333][T28675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.864568][T28770] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.944512][T28780] C: renamed from lo (while UP) [ 769.964991][T28780] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 770.028846][T28675] hsr_slave_0: entered promiscuous mode [ 770.045756][T28675] hsr_slave_1: entered promiscuous mode [ 770.053148][T28675] debugfs: 'hsr0' already exists in 'hsr' [ 770.058986][T28675] Cannot create hsr debugfs directory [ 770.097923][T28783] syzkaller0: entered promiscuous mode [ 770.104181][T28783] syzkaller0: entered allmulticast mode [ 770.164473][T28789] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6055'. [ 770.219685][T28793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.643339][ T7713] bond5 (unregistering): (slave gretap2): Releasing backup interface [ 770.739409][ T7713] bond8 (unregistering): (slave geneve2): Releasing active interface [ 771.153611][ T7713] bond9 (unregistering): (slave bridge0): Releasing active interface [ 771.287207][ T7713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.299720][ T7713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.311929][ T7713] bond0 (unregistering): Released all slaves [ 771.448088][ T7713] bond1 (unregistering): Released all slaves [ 771.586541][ T7713] bond2 (unregistering): Released all slaves [ 771.674923][ T5148] Bluetooth: hci5: command tx timeout [ 771.725356][ T7713] bond3 (unregistering): Released all slaves [ 771.846345][ T7713] bond4 (unregistering): Released all slaves [ 771.970931][ T7713] bond5 (unregistering): (slave bond6): Releasing backup interface [ 771.979734][ T7713] bond5 (unregistering): Released all slaves [ 772.106370][ T7713] bond6 (unregistering): Released all slaves [ 772.233380][ T7713] bond7 (unregistering): Released all slaves [ 772.354269][ T7713] bond8 (unregistering): Released all slaves [ 772.491042][ T7713] bond9 (unregistering): Released all slaves [ 772.623357][ T7713] bond10 (unregistering): Released all slaves [ 772.668800][T28783] tipc: Started in network mode [ 772.674109][T28783] tipc: Node identity feb0d1aa96e1, cluster identity 4711 [ 772.681813][T28783] tipc: Enabled bearer , priority 0 [ 772.690795][T28798] netlink: 'syz.2.6056': attribute type 1 has an invalid length. [ 772.698652][T28798] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6056'. [ 772.709085][T28797] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 772.731114][T28796] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 772.743141][T28799] tipc: Resetting bearer [ 772.771026][T28799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.842680][T22499] IPVS: starting estimator thread 0... [ 772.866349][T28781] tipc: Resetting bearer [ 772.916900][T28781] tipc: Disabling bearer [ 772.956339][ T7713] : left promiscuous mode [ 772.971878][T28806] IPVS: using max 30 ests per chain, 72000 per kthread [ 773.098935][ T7713] tipc: Disabling bearer [ 773.106453][ T7713] tipc: Left network mode [ 773.472396][T28824] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6064'. [ 773.484040][T28824] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6064'. [ 773.754403][ T5148] Bluetooth: hci5: command tx timeout [ 773.798141][ T7713] hsr_slave_0: left promiscuous mode [ 773.939527][ T7713] veth1_macvtap: left promiscuous mode [ 773.951882][ T7713] veth0_macvtap: left promiscuous mode [ 773.962667][ T7713] veth1_vlan: left promiscuous mode [ 773.984086][ T7713] veth0_vlan: left promiscuous mode [ 774.089957][T28856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6067'. [ 774.229198][ T7713] pim6reg527 (unregistering): left allmulticast mode [ 774.260923][T28863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6067'. [ 775.562167][T28880] netlink: 'syz.2.6071': attribute type 11 has an invalid length. [ 775.581062][T28880] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.6071'. [ 775.779595][T28887] nbd3: detected capacity change from 0 to 127 [ 775.795404][T28895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6074'. [ 775.829303][T28897] netlink: 'syz.3.6076': attribute type 23 has an invalid length. [ 775.847709][ T5830] Bluetooth: hci5: command tx timeout [ 775.983799][T28675] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 776.045440][T28675] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 776.086480][T28675] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 776.095820][T28904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6077'. [ 776.112796][ T7713] IPVS: stop unused estimator thread 0... [ 776.129044][T28675] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 776.519208][T28675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.538166][ T5148] block nbd3: Receive control failed (result -104) [ 776.603957][T28675] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.685079][T18409] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.692354][T18409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.757242][T28940] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 776.793209][T26615] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.800431][T26615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.858270][T28948] netlink: 312 bytes leftover after parsing attributes in process `syz.2.6085'. [ 777.220892][T28960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6088'. [ 777.305375][T28964] vlan2: entered allmulticast mode [ 777.325769][T28964] gretap0: entered allmulticast mode [ 777.708150][T28675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.849307][T28675] veth0_vlan: entered promiscuous mode [ 777.901517][T28675] veth1_vlan: entered promiscuous mode [ 778.001118][T28675] veth0_macvtap: entered promiscuous mode [ 778.042958][T28675] veth1_macvtap: entered promiscuous mode [ 778.103424][T28675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.126416][T28675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.160895][T18406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.173127][ T7713] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.198236][ T7713] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.217577][ T7713] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.274480][T29016] xt_l2tp: wrong L2TP version: 0 [ 778.297410][T29016] __nla_validate_parse: 2 callbacks suppressed [ 778.297428][T29016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6103'. [ 778.353578][T29024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6103'. [ 778.367417][T29024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6103'. [ 778.439894][T26614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.459129][T26614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.527930][T18406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.547737][T18406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.280021][T29063] 8021q: adding VLAN 0 to HW filter on device bond3 [ 779.311692][T29071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6116'. [ 779.338272][T29074] tipc: Enabling not permitted [ 779.352603][T29074] tipc: Enabling of bearer rejected, failed to enable media [ 779.436877][T29075] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 779.449026][T29075] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 779.471274][T29087] Bluetooth: MGMT ver 1.23 [ 779.497806][T29075] bond3: (slave macvlan2): making interface the new active one [ 779.532659][T29091] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6120'. [ 779.547462][T29072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6116'. [ 779.560947][T29075] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 779.638243][T29063] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:98d3:ddff:fead:8df5 error=-28 [ 779.759755][T29098] netlink: 'syz.2.6122': attribute type 10 has an invalid length. [ 779.807495][T29098] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 780.014521][T29063] infiniband syz0: set active [ 780.019649][T29063] infiniband syz0: added bond0 [ 780.061827][T29063] RDS/IB: syz0: added [ 780.066039][T29063] smc: adding ib device syz0 with port count 1 [ 780.073438][T29063] smc: ib device syz0 port 1 has no pnetid [ 780.187783][T29109] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.341322][T29109] team_slave_1: left promiscuous mode [ 780.356739][T29109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.390024][T29109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.623098][T18409] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.653394][T18409] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.679480][T18409] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.698863][T18409] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.054015][T29143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6133'. [ 781.082830][T29143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6133'. [ 781.206516][T29151] openvswitch: netlink: IP tunnel dst address not specified [ 781.236747][T29151] x_tables: duplicate underflow at hook 4 [ 781.256607][T29152] vlan2: entered allmulticast mode [ 781.288284][T29152] veth1: entered allmulticast mode [ 781.344618][T29156] tipc: Failed to obtain node identity [ 781.350259][T29156] tipc: Enabling of bearer rejected, failed to enable media [ 781.398613][T29158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6140'. [ 781.531735][T29165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6143'. [ 781.818288][T29171] netlink: 'syz.2.6145': attribute type 1 has an invalid length. [ 781.827104][T29171] netlink: 'syz.2.6145': attribute type 1 has an invalid length. [ 782.002368][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 782.031046][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 782.041995][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 782.067875][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 782.082238][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 782.345895][T18078] bridge0: port 3(syz_tun) entered disabled state [ 782.398892][T29194] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 782.414926][T18078] syz_tun (unregistering): left allmulticast mode [ 782.432385][T18078] syz_tun (unregistering): left promiscuous mode [ 782.438975][T18078] bridge0: port 3(syz_tun) entered disabled state [ 782.514752][T29197] veth1_macvtap: left promiscuous mode [ 782.739545][T29203] netlink: 'syz.2.6155': attribute type 2 has an invalid length. [ 783.195413][T29220] bond1 (unregistering): Released all slaves [ 783.316907][T29219] __nla_validate_parse: 8 callbacks suppressed [ 783.316927][T29219] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.6159'. [ 783.709650][T29174] chnl_net:caif_netlink_parms(): no params data found [ 783.718754][T29246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6165'. [ 783.764755][T29246] macsec0: entered promiscuous mode [ 783.902321][T29253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 783.948322][T29174] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.976150][T29174] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.000980][T29174] bridge_slave_0: entered allmulticast mode [ 784.016746][T29174] bridge_slave_0: entered promiscuous mode [ 784.051877][T29174] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.069339][T29174] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.079803][T29174] bridge_slave_1: entered allmulticast mode [ 784.100300][T29174] bridge_slave_1: entered promiscuous mode [ 784.151195][ T5830] Bluetooth: hci3: command tx timeout [ 784.197401][T29264] ip6erspan1: entered allmulticast mode [ 784.228412][T29174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.272396][T29174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.406204][T29174] team0: Port device team_slave_0 added [ 784.420331][T29174] team0: Port device team_slave_1 added [ 784.464281][T29274] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 784.502755][T29272] netlink: 'syz.4.6172': attribute type 1 has an invalid length. [ 784.523860][T29174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.551422][T29174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.629071][T29174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.661679][T29174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.668700][T29174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.716473][T29174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.868434][T29290] netlink: 'syz.4.6179': attribute type 1 has an invalid length. [ 784.900859][T29290] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6179'. [ 784.909979][T29290] netlink: 'syz.4.6179': attribute type 1 has an invalid length. [ 784.959073][T29174] hsr_slave_0: entered promiscuous mode [ 784.986276][T29174] hsr_slave_1: entered promiscuous mode [ 785.001777][T29174] debugfs: 'hsr0' already exists in 'hsr' [ 785.011951][T29174] Cannot create hsr debugfs directory [ 785.038602][T29297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6181'. [ 785.057942][T29292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6180'. [ 785.229328][T29303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6183'. [ 785.434636][T29309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6185'. [ 785.461072][T29309] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6185'. [ 785.481649][T29174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.505326][T29174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.527403][T29174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45564 - 0 [ 785.539016][T29174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 785.683773][T29174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.702712][T29174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.715882][T29174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45564 - 0 [ 785.731846][T29174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 785.875983][T29329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6191'. [ 785.938893][T29174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.955718][T29174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.967397][T29174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45564 - 0 [ 785.979506][T29174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 786.009619][T29336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6194'. [ 786.039394][T29336] bond0: entered allmulticast mode [ 786.052631][T29336] bond_slave_0: entered allmulticast mode [ 786.058627][T29336] bond_slave_1: entered allmulticast mode [ 786.065876][T29336] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 786.107074][T29174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.129854][T29174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.149571][T29174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 45564 - 0 [ 786.161459][T29174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 786.242643][ T5830] Bluetooth: hci3: command tx timeout [ 786.531190][T29174] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 786.747452][T29174] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 786.782803][T29174] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 786.807312][T29174] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 786.961913][T29378] netlink: 'syz.4.6203': attribute type 10 has an invalid length. [ 787.021927][T29378] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.029845][T29378] bridge_slave_1: left allmulticast mode [ 787.041978][T29378] bridge_slave_1: left promiscuous mode [ 787.053099][T29378] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.068191][T29378] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 787.239049][T29174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.302587][T29174] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.328007][T29398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.349138][T18409] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.356431][T18409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.426675][T26615] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.434024][T26615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.840428][T29426] vlan3: entered allmulticast mode [ 787.861034][T29426] erspan0: entered allmulticast mode [ 788.071947][T29435] bridge_slave_1: left allmulticast mode [ 788.098216][T29435] bridge_slave_1: left promiscuous mode [ 788.111450][T29435] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.133541][T29435] bridge_slave_0: left allmulticast mode [ 788.149807][T29435] bridge_slave_0: left promiscuous mode [ 788.171318][T29435] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.313729][ T5830] Bluetooth: hci3: command tx timeout [ 788.443533][T29446] veth0_to_bond: entered allmulticast mode [ 788.499046][T29174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.698781][T29463] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 788.720783][T29462] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 788.742260][T29463] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 788.759400][T29463] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 788.772635][T29472] __nla_validate_parse: 4 callbacks suppressed [ 788.772653][T29472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6219'. [ 788.792156][T29174] veth0_vlan: entered promiscuous mode [ 788.822685][T29463] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 788.829389][T29463] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 788.840254][T29174] veth1_vlan: entered promiscuous mode [ 788.885380][T29464] netlink: 'syz.2.6219': attribute type 1 has an invalid length. [ 788.914946][T29464] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6219'. [ 788.961812][T29464] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6219'. [ 789.000030][T29174] veth0_macvtap: entered promiscuous mode [ 789.060230][T29174] veth1_macvtap: entered promiscuous mode [ 789.164903][T29174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.206784][T29174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.215669][T29480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6221'. [ 789.278250][ T1149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.301373][ T1149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.403800][T29480] bond3 (unregistering): Released all slaves [ 789.490018][T29491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6221'. [ 789.531406][ T1149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.540379][ T1149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.608007][T29505] netlink: 'syz.0.6226': attribute type 21 has an invalid length. [ 789.724652][T29510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6228'. [ 789.736454][T29510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6228'. [ 789.863884][T29518] syzkaller0: entered promiscuous mode [ 789.869444][T29518] syzkaller0: entered allmulticast mode [ 789.897068][T18406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.908751][T29521] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6230'. [ 789.943434][T18406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.100683][T26614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.108916][T26614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.122525][T29526] syzkaller0: entered promiscuous mode [ 790.128562][T29526] syzkaller0: entered allmulticast mode [ 790.157230][T29526] tipc: Enabled bearer , priority 0 [ 790.191194][T29524] tipc: Resetting bearer [ 790.218236][T29524] tipc: Disabling bearer [ 790.392286][ T5830] Bluetooth: hci3: command tx timeout [ 790.448854][T29542] netlink: 'syz.4.6235': attribute type 13 has an invalid length. [ 790.824775][T29557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6240'. [ 790.957120][T29557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.967781][T29557] bond_slave_0: left allmulticast mode [ 790.988172][T29557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.019049][T29557] bond_slave_1: left allmulticast mode [ 791.057909][T29557] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 791.077817][T29557] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 791.104278][T29557] bond0 (unregistering): Released all slaves [ 791.281928][T29574] syzkaller0: entered promiscuous mode [ 791.290284][T29574] syzkaller0: entered allmulticast mode [ 791.410435][T29596] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6250'. [ 791.863068][T29620] netlink: 'syz.4.6255': attribute type 3 has an invalid length. [ 793.075097][T29704] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20003 [ 793.431621][T29715] netlink: 'syz.2.6278': attribute type 1 has an invalid length. [ 795.493243][T29729] __nla_validate_parse: 2 callbacks suppressed [ 795.493264][T29729] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6282'. [ 795.609505][T29738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6284'. [ 795.656308][T29738] geneve2: entered allmulticast mode [ 795.672396][T29729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6282'. [ 795.702618][T29738] 8021q: VLANs not supported on syzkaller1 [ 795.842243][T29756] netlink: 'syz.3.6289': attribute type 6 has an invalid length. [ 795.975067][T29755] bond1 (unregistering): Released all slaves [ 796.076009][T29749] bond1 (unregistering): Released all slaves [ 796.121962][T29771] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6291'. [ 796.218328][T29774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6293'. [ 796.231745][T29774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6293'. [ 796.253654][T29774] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6293'. [ 796.441786][T29786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6298'. [ 796.733449][T29806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6305'. [ 796.818166][T29815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6308'. [ 797.094855][T29808] bond2: entered promiscuous mode [ 797.100006][T29808] bond2: entered allmulticast mode [ 797.275248][T29808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 797.319038][T29846] netlink: 'syz.4.6314': attribute type 16 has an invalid length. [ 797.358206][T29846] netlink: 'syz.4.6314': attribute type 17 has an invalid length. [ 797.547870][T29846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.859608][T29878] netlink: 'syz.0.6320': attribute type 33 has an invalid length. [ 797.952475][T29877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 798.016730][T29878] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 798.053812][T29878] bond4 (unregistering): Released all slaves [ 798.339268][T29865] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 799.217007][T29947] Cannot find set identified by id 0 to match [ 799.292728][T29952] Cannot find set identified by id 0 to match [ 799.305785][T29947] syzkaller0: entered promiscuous mode [ 799.330748][T29947] syzkaller0: entered allmulticast mode [ 799.371537][T29950] gretap0: entered promiscuous mode [ 799.390087][T29950] gretap0: left promiscuous mode [ 799.581678][T29962] ipt_REJECT: ECHOREPLY no longer supported. [ 801.637871][T29982] tipc: Enabling of bearer rejected, failed to enable media [ 801.883408][T30010] __nla_validate_parse: 8 callbacks suppressed [ 801.883427][T30010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6350'. [ 801.906054][T30013] openvswitch: netlink: IP tunnel dst address not specified [ 801.939858][T30017] xt_cluster: node mask cannot exceed total number of nodes [ 802.226022][T30035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6359'. [ 802.236108][T30035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6359'. [ 802.273113][T30037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6360'. [ 802.399337][T30047] unsupported nla_type 33542 [ 802.405148][T30043] netlink: 'syz.3.6363': attribute type 3 has an invalid length. [ 802.430339][T30043] netlink: 'syz.3.6363': attribute type 21 has an invalid length. [ 802.448904][T30043] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6363'. [ 802.662375][T30058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6369'. [ 802.691865][T30057] netlink: 424 bytes leftover after parsing attributes in process `syz.2.6368'. [ 803.086410][T30068] syzkaller1: entered promiscuous mode [ 803.146500][T30068] syzkaller1: entered allmulticast mode [ 803.360762][T30079] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6373'. [ 803.598792][T30095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6377'. [ 804.454946][T30131] syzkaller0: entered promiscuous mode [ 804.460500][T30131] syzkaller0: entered allmulticast mode [ 804.507645][T30134] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6392'. [ 804.647446][T30139] sctp: [Deprecated]: syz.0.6384 (pid 30139) Use of int in max_burst socket option deprecated. [ 804.647446][T30139] Use struct sctp_assoc_value instead [ 804.822115][T30150] atomic_op ffff88806b3ce998 conn xmit_atomic 0000000000000000 [ 804.852809][T30150] netlink: 'syz.1.6395': attribute type 1 has an invalid length. [ 805.011695][T30161] bond1: (slave gretap1): making interface the new active one [ 805.073451][T30161] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 805.092593][T30170] netlink: 'syz.2.6399': attribute type 64 has an invalid length. [ 805.513394][T30184] x_tables: duplicate underflow at hook 1 [ 806.020849][T30203] x_tables: duplicate underflow at hook 1 [ 806.314648][ T56] block nbd3: Possible stuck request ffff888025ad0000: control (read@0,1024B). Runtime 30 seconds [ 806.327121][ T56] block nbd3: Possible stuck request ffff888025ad0200: control (read@1024,1024B). Runtime 30 seconds [ 806.340802][ T56] block nbd3: Possible stuck request ffff888025ad0400: control (read@2048,1024B). Runtime 30 seconds [ 806.352845][ T56] block nbd3: Possible stuck request ffff888025ad0600: control (read@3072,1024B). Runtime 30 seconds [ 807.992631][T30165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 808.001887][T30185] __nla_validate_parse: 1 callbacks suppressed [ 808.001908][T30185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6403'. [ 808.200489][T30214] netlink: 'syz.3.6412': attribute type 33 has an invalid length. [ 808.259320][T30214] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 808.274812][T30214] bond1 (unregistering): Released all slaves [ 808.349399][T30220] bond0 (unregistering): Released all slaves [ 808.397622][T30227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.433277][T30225] netlink: 'syz.4.6414': attribute type 10 has an invalid length. [ 808.549681][T30225] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 808.604229][T30250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6414'. [ 808.674557][T30239] bond0: (slave gre0): Error: Device type is different from other slaves [ 808.756564][T30256] syzkaller0: entered promiscuous mode [ 808.764453][T30256] syzkaller0: entered allmulticast mode [ 808.998664][T30263] netlink: 788 bytes leftover after parsing attributes in process `syz.3.6423'. [ 809.034630][T23599] IPVS: starting estimator thread 0... [ 809.101370][T30273] netlink: 'syz.2.6426': attribute type 1 has an invalid length. [ 809.130767][T30270] IPVS: using max 26 ests per chain, 62400 per kthread [ 809.199887][T30279] x_tables: duplicate underflow at hook 1 [ 809.303727][T30285] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 809.722761][T30308] netlink: 'syz.1.6438': attribute type 28 has an invalid length. [ 809.736007][T30308] netlink: 'syz.1.6438': attribute type 3 has an invalid length. [ 809.744459][T30308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6438'. [ 811.935194][T30337] netlink: 'syz.0.6445': attribute type 1 has an invalid length. [ 812.009691][T30337] bond4: entered promiscuous mode [ 812.052385][T30337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 812.108003][T30346] smc: net device team0 applied user defined pnetid SYZ2 [ 812.430858][T30370] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6457'. [ 812.449650][T30355] veth1_vlan (unregistering): left allmulticast mode [ 813.821757][T30424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6467'. [ 814.001840][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 814.007972][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 815.722156][T30425] bridge2: port 1(veth3) entered blocking state [ 815.737209][T30425] bridge2: port 1(veth3) entered disabled state [ 815.771391][T30425] veth3: entered allmulticast mode [ 815.785618][T30425] veth3: entered promiscuous mode [ 815.789971][T30438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6471'. [ 815.846103][T30426] bridge2: port 2(veth0_to_bond) entered blocking state [ 815.891020][T30426] bridge2: port 2(veth0_to_bond) entered disabled state [ 815.917249][T30426] veth0_to_bond: entered allmulticast mode [ 815.933877][T30426] veth0_to_bond: entered promiscuous mode [ 815.967291][T30438] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 815.997451][T30438] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 816.005771][T30438] gretap3: entered promiscuous mode [ 816.014460][T30438] gretap3: entered allmulticast mode [ 816.037997][T30448] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 816.367032][T30473] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6479'. [ 816.508089][T30476] netlink: 294 bytes leftover after parsing attributes in process `syz.1.6482'. [ 816.580807][T30476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.102128][T30522] openvswitch: netlink: Flow key attribute not present in set flow. [ 817.106634][T30520] openvswitch: netlink: Flow key attribute not present in set flow. [ 817.404934][T30534] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6496'. [ 817.440795][T30534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6496'. [ 817.458039][T30539] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 817.692061][T30547] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6499'. [ 817.725893][T30548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6498'. [ 818.066615][T30565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6503'. [ 818.118981][T30565] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 818.225113][T30569] syzkaller1: entered promiscuous mode [ 818.233836][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 818.242255][T30569] syzkaller1: entered allmulticast mode [ 818.260273][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 818.276084][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 818.285396][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 818.295643][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 818.582337][T30583] netlink: 'syz.4.6505': attribute type 1 has an invalid length. [ 818.778039][T30583] bond3: entered promiscuous mode [ 818.854318][T30583] 8021q: adding VLAN 0 to HW filter on device bond3 [ 819.026572][T30588] bond3: (slave bridge3): making interface the new active one [ 819.031146][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 819.042218][ C1] lec:lec_tx_timeout: lec0 [ 819.079593][T30588] bridge3: entered promiscuous mode [ 819.126873][T30588] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 819.258995][T30578] lo speed is unknown, defaulting to 1000 [ 819.300390][T30578] lo speed is unknown, defaulting to 1000 [ 819.314510][T30578] lo speed is unknown, defaulting to 1000 [ 819.339824][T30578] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 819.385034][T30578] lo speed is unknown, defaulting to 1000 [ 819.414983][T30578] lo speed is unknown, defaulting to 1000 [ 819.441869][T30578] lo speed is unknown, defaulting to 1000 [ 819.565080][T30578] lo speed is unknown, defaulting to 1000 [ 819.583384][T30578] lo speed is unknown, defaulting to 1000 [ 819.596294][T30578] lo speed is unknown, defaulting to 1000 [ 819.606010][T30623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6511'. [ 819.627639][T30578] lo speed is unknown, defaulting to 1000 [ 819.636007][T30578] lo speed is unknown, defaulting to 1000 [ 819.643824][T30578] lo speed is unknown, defaulting to 1000 [ 819.792618][T30570] chnl_net:caif_netlink_parms(): no params data found [ 819.916932][T30635] netlink: 'syz.4.6512': attribute type 1 has an invalid length. [ 819.936371][T30635] netlink: 'syz.4.6512': attribute type 1 has an invalid length. [ 819.964312][T30635] netlink: 'syz.4.6512': attribute type 1 has an invalid length. [ 819.972632][T30635] netlink: 'syz.4.6512': attribute type 2 has an invalid length. [ 819.993734][T30635] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6512'. [ 820.052921][T30635] Cannot find add_set index 2 as target [ 820.066943][T30651] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6516'. [ 820.079916][T30651] netlink: 'syz.2.6516': attribute type 1 has an invalid length. [ 820.088479][T30651] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6516'. [ 820.113047][T30648] netlink: 'syz.1.6515': attribute type 10 has an invalid length. [ 820.182181][T30570] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.190070][T30570] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.199319][T30570] bridge_slave_0: entered allmulticast mode [ 820.207669][T30570] bridge_slave_0: entered promiscuous mode [ 820.236297][T30655] netlink: 'syz.3.6517': attribute type 10 has an invalid length. [ 820.247411][T30648] bridge0: port 3(team0) entered blocking state [ 820.258692][T30648] bridge0: port 3(team0) entered disabled state [ 820.266159][T30648] team0: entered allmulticast mode [ 820.274806][T30648] team_slave_0: entered allmulticast mode [ 820.283570][T30648] team_slave_1: entered allmulticast mode [ 820.292792][T30648] team0: entered promiscuous mode [ 820.297968][T30648] team_slave_0: entered promiscuous mode [ 820.304428][T30648] team_slave_1: entered promiscuous mode [ 820.312994][T30648] bridge0: port 3(team0) entered blocking state [ 820.319471][T30648] bridge0: port 3(team0) entered forwarding state [ 820.329916][T30653] batman_adv: batadv0: Adding interface: dummy0 [ 820.336844][T30653] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.373830][T30653] batman_adv: batadv0: Interface activated: dummy0 [ 820.385076][T30570] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.401039][ T5148] Bluetooth: hci1: command tx timeout [ 820.409905][T30570] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.420956][T30570] bridge_slave_1: entered allmulticast mode [ 820.429015][T30570] bridge_slave_1: entered promiscuous mode [ 820.441625][T30655] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.451792][T30655] bridge_slave_1: left allmulticast mode [ 820.458133][T30655] bridge_slave_1: left promiscuous mode [ 820.464974][T30655] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.507476][T30655] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 820.564939][T30570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.623572][T30570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.734675][T30674] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 820.766301][T30570] team0: Port device team_slave_0 added [ 820.787725][T30570] team0: Port device team_slave_1 added [ 820.913475][T30570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.929120][T30687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6526'. [ 820.941444][T30570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.969388][T30570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.981144][T30687] bridge_slave_0: left allmulticast mode [ 820.987872][T30687] bridge_slave_0: left promiscuous mode [ 820.995412][T30687] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.059179][T30687] bridge0 (unregistering): left allmulticast mode [ 821.135186][T30570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.149823][T30570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.218037][T30570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.319668][T30695] syzkaller0: entered promiscuous mode [ 821.326426][T30695] syzkaller0: entered allmulticast mode [ 821.407957][T30570] hsr_slave_0: entered promiscuous mode [ 821.442874][T30570] hsr_slave_1: entered promiscuous mode [ 821.449207][T30570] debugfs: 'hsr0' already exists in 'hsr' [ 821.455739][T30570] Cannot create hsr debugfs directory [ 821.497275][T30715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6530'. [ 821.813487][T30714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6531'. [ 822.068952][T30747] netlink: 294 bytes leftover after parsing attributes in process `syz.1.6539'. [ 822.081160][T30747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 822.267670][T30570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.295551][T30570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.309676][T30570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 822.348065][T30760] netlink: 'syz.3.6542': attribute type 4 has an invalid length. [ 822.436820][T30764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6544'. [ 822.473497][ T5148] Bluetooth: hci1: command tx timeout [ 822.527371][T30766] netlink: 'syz.4.6546': attribute type 13 has an invalid length. [ 822.571075][T30771] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6547'. [ 822.588760][T30771] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 822.639856][T30570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.684623][T30570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.712062][T30570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 822.735978][T30780] xt_l2tp: v2 sid > 0xffff: 1114112 [ 822.752280][T30766] syz_tun: refused to change device tx_queue_len [ 822.758888][T30780] xt_l2tp: v2 sid > 0xffff: 1114112 [ 822.805431][ T9482] lec:lec_start_xmit: lec0:No lecd attached [ 822.829588][T22500] IPVS: starting estimator thread 0... [ 822.848673][T30782] bond1: option resend_igmp: invalid value (32767) [ 822.855886][T30782] bond1: option resend_igmp: allowed values 0 - 255 [ 822.867501][T30782] bond1 (unregistering): Released all slaves [ 822.935490][T30790] IPVS: using max 38 ests per chain, 91200 per kthread [ 822.995158][T30570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.005714][T30570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.022531][T30570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 823.053104][T30796] bond0: (slave gretap1): making interface the new active one [ 823.062444][T30796] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 823.159598][T30570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.203168][T30570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.219647][T30570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 823.493492][T30810] Bluetooth: MGMT ver 1.23 [ 823.506421][T30810] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 823.518790][T30570] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 823.539072][T30570] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 823.554464][T30570] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 823.577482][T30570] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 823.710072][T30570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.762083][T30825] team1: entered promiscuous mode [ 823.771655][T30825] team1: entered allmulticast mode [ 823.802711][T30824] team2: entered promiscuous mode [ 823.807799][T30824] team2: entered allmulticast mode [ 823.832630][T30570] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.851994][T18403] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.859273][T18403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.897352][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.904790][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.030199][T30570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 824.446948][T30854] validate_nla: 1 callbacks suppressed [ 824.446967][T30854] netlink: 'syz.2.6566': attribute type 5 has an invalid length. [ 824.528141][T30570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.551393][ T5148] Bluetooth: hci1: command tx timeout [ 824.592819][T30861] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 824.809947][T30570] veth0_vlan: entered promiscuous mode [ 824.881216][T30875] ipvlan2: entered allmulticast mode [ 824.886590][T30875] batadv_slave_1: entered allmulticast mode [ 824.906811][T30875] batman_adv: batadv0: Adding interface: ipvlan2 [ 824.938161][T30875] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.014352][T30875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.051567][T30875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.070816][T30875] batman_adv: batadv0: Interface activated: ipvlan2 [ 825.152034][T30883] netlink: 'syz.1.6574': attribute type 4 has an invalid length. [ 825.231563][T30893] netlink: 'syz.1.6574': attribute type 4 has an invalid length. [ 825.243695][T30570] veth1_vlan: entered promiscuous mode [ 825.252867][T30890] netlink: 'syz.2.6576': attribute type 2 has an invalid length. [ 825.266070][T30890] __nla_validate_parse: 18 callbacks suppressed [ 825.266092][T30890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6576'. [ 825.315344][T30883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.342858][T30570] veth0_macvtap: entered promiscuous mode [ 825.357720][T30570] veth1_macvtap: entered promiscuous mode [ 825.403550][T30570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.428823][T30895] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 825.438666][T30570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.454419][T30895] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 825.479315][ T1149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.494176][T30898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6577'. [ 825.506643][T30898] openvswitch: netlink: Unknown nsh attribute 0 [ 825.524985][ T1149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.534926][ T1149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.560335][T30899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6578'. [ 825.562655][ T1149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.579447][T30899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6578'. [ 825.719295][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.738804][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.759431][T30903] netlink: 'syz.1.6580': attribute type 17 has an invalid length. [ 825.769219][T30903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6580'. [ 825.809952][T30905] netlink: 'syz.4.6581': attribute type 10 has an invalid length. [ 825.823317][T30903] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6580'. [ 825.859951][T30909] netlink: 'syz.1.6580': attribute type 4 has an invalid length. [ 825.873502][T30909] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6580'. [ 825.962035][ T7713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.969929][ T7713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.002719][T30909] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6580'. [ 826.031816][T30909] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 826.355765][T30927] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6586'. [ 826.433459][T30936] tipc: Enabling of bearer rejected, failed to enable media [ 826.510414][T30939] netlink: 'syz.1.6589': attribute type 12 has an invalid length. [ 826.532573][T30939] netlink: 'syz.1.6589': attribute type 29 has an invalid length. [ 826.552959][T30939] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6589'. [ 826.595753][T30948] netlink: 'syz.0.6592': attribute type 10 has an invalid length. [ 826.635137][ T5148] Bluetooth: hci1: command tx timeout [ 827.151640][ T5148] Bluetooth: hci3: link tx timeout [ 827.158697][ T5148] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 827.455719][T30989] x_tables: duplicate underflow at hook 2 [ 828.071101][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 828.079222][ C1] lec:lec_tx_timeout: lec0 [ 828.175478][ T5148] Bluetooth: hci3: link tx timeout [ 828.185971][ T5148] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 828.553157][T31061] syzkaller0: entered promiscuous mode [ 828.558890][T31061] syzkaller0: entered allmulticast mode [ 829.193725][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 830.780729][T31012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 830.999472][T31113] __nla_validate_parse: 13 callbacks suppressed [ 830.999492][T31113] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6630'. [ 831.024447][T31113] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6630'. [ 831.090318][T31118] syzkaller0: entered promiscuous mode [ 831.096288][T31118] syzkaller0: entered allmulticast mode [ 831.231436][T31129] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6636'. [ 831.320980][T31135] openvswitch: netlink: Actions may not be safe on all matching packets [ 831.374943][ T5830] block nbd4: Receive control failed (result -32) [ 831.653165][T31148] bond1: Unable to set down delay as MII monitoring is disabled [ 831.671971][T31148] bond1 (unregistering): Released all slaves [ 831.859355][T31163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.797922][T31157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 835.158105][T31230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6658'. [ 835.351253][T31243] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6660'. [ 835.556293][T31249] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6662'. [ 835.623689][T31215] lo speed is unknown, defaulting to 1000 [ 835.766238][T31256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6664'. [ 835.845469][T31256] 8021q: adding VLAN 0 to HW filter on device bond4 [ 835.895658][T31259] xt_CT: No such helper "pptp" [ 836.056819][T31256] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 836.191705][T31268] batadv_slave_1: entered promiscuous mode [ 836.199230][T31268] validate_nla: 6 callbacks suppressed [ 836.199249][T31268] netlink: 'syz.0.6666': attribute type 19 has an invalid length. [ 836.228429][T31272] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 836.235399][T31268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6666'. [ 836.319588][ T1149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.329642][T31268] netlink: 'syz.0.6666': attribute type 19 has an invalid length. [ 836.338069][ T1149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.357738][T31268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6666'. [ 836.370976][ T1149] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.402304][ T56] block nbd3: Possible stuck request ffff888025ad0000: control (read@0,1024B). Runtime 60 seconds [ 836.413532][ T56] block nbd3: Possible stuck request ffff888025ad0200: control (read@1024,1024B). Runtime 60 seconds [ 836.424569][ T56] block nbd3: Possible stuck request ffff888025ad0400: control (read@2048,1024B). Runtime 60 seconds [ 836.435858][ T56] block nbd3: Possible stuck request ffff888025ad0600: control (read@3072,1024B). Runtime 60 seconds [ 836.448862][T31223] lo speed is unknown, defaulting to 1000 [ 836.456332][T31229] siw: device registration error -23 [ 836.465789][ T1149] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.508484][T31266] batadv_slave_1: left promiscuous mode [ 836.733095][T31284] dvmrp6: entered allmulticast mode [ 836.749189][T31290] tipc: Enabling of bearer rejected, failed to enable media [ 837.016407][T31296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.260508][T31312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6677'. [ 837.320144][T31312] team0: left allmulticast mode [ 837.338789][T31312] team_slave_0: left allmulticast mode [ 837.345646][T31312] team_slave_1: left allmulticast mode [ 837.356132][T31312] team0: left promiscuous mode [ 837.361186][T31312] team_slave_0: left promiscuous mode [ 837.366917][T31312] team_slave_1: left promiscuous mode [ 837.375427][T31312] bridge0: port 3(team0) entered disabled state [ 837.384088][T31312] bridge_slave_1: left allmulticast mode [ 837.389765][T31312] bridge_slave_1: left promiscuous mode [ 837.395775][T31312] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.407180][T31312] bridge_slave_0: left allmulticast mode [ 837.413605][T31319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6679'. [ 837.423336][T31312] bridge_slave_0: left promiscuous mode [ 837.429158][T31312] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.645288][T31319] team0: Port device team_slave_0 removed [ 838.011789][T31339] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6685'. [ 838.027561][T31339] netlink: 'syz.2.6685': attribute type 1 has an invalid length. [ 838.056076][T31341] netlink: 'syz.2.6685': attribute type 1 has an invalid length. [ 838.070456][T31348] xt_policy: too many policy elements [ 838.098207][T31347] bond1: entered allmulticast mode [ 838.108112][T31339] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 838.109492][T31341] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 838.204532][T31345] bond2: Unable to set down delay as MII monitoring is disabled [ 838.222027][T31363] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6691'. [ 838.283394][T31345] bond2 (unregistering): Released all slaves [ 838.335595][T31368] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6693'. [ 838.352512][T31359] bridge1: entered promiscuous mode [ 838.358006][T31359] bridge1: entered allmulticast mode [ 838.367328][T31359] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 838.400373][T31373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6694'. [ 838.414844][T31372] tipc: Enabling of bearer rejected, failed to enable media [ 838.433708][T31368] bridge_slave_0: left allmulticast mode [ 838.439397][T31368] bridge_slave_0: left promiscuous mode [ 838.448205][T31368] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.472409][T31368] bridge_slave_1: left allmulticast mode [ 838.478317][T31368] bridge_slave_1: left promiscuous mode [ 838.484851][T31368] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.504895][T31368] bond0: (slave bond_slave_0): Releasing backup interface [ 838.519003][T31368] bond0: (slave bond_slave_1): Releasing backup interface [ 838.541433][T31368] team0: Port device team_slave_1 removed [ 838.552058][T31368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.559916][T31368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.571608][T31368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.579170][T31368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.589987][T31368] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 838.914055][T31395] netlink: 'syz.3.6700': attribute type 1 has an invalid length. [ 839.056940][T31395] bond2: entered promiscuous mode [ 839.064832][T31395] 8021q: adding VLAN 0 to HW filter on device bond2 [ 839.260432][T31417] syzkaller0: entered promiscuous mode [ 839.268189][T31417] syzkaller0: entered allmulticast mode [ 839.701731][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6711'. [ 839.837542][T31449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6715'. [ 839.921249][T31455] tunl0: entered promiscuous mode [ 839.937651][T31455] netlink: 'syz.0.6715': attribute type 3 has an invalid length. [ 839.946128][T31457] tipc: Started in network mode [ 839.955842][T31457] tipc: Node identity ac14140f, cluster identity 4711 [ 839.964134][T31457] tipc: New replicast peer: 255.255.255.255 [ 839.971178][T31457] tipc: Enabled bearer , priority 10 [ 840.183005][T31471] openvswitch: netlink: Flow key attr not present in new flow. [ 840.323543][T31452] lo speed is unknown, defaulting to 1000 [ 840.716159][T31492] tipc: Failed to remove unknown binding: 66,0,0/0:2510021804/2510021805 [ 840.801965][T31492] tipc: Failed to remove unknown binding: 66,0,0/0:2510021804/2510021805 [ 841.080777][ T24] tipc: Node number set to 2886997007 [ 841.187081][T31511] netlink: 'syz.2.6732': attribute type 4 has an invalid length. [ 841.247210][T31511] netlink: 'syz.2.6732': attribute type 4 has an invalid length. [ 841.390079][T31519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.406008][ T24] lo speed is unknown, defaulting to 1000 [ 841.660121][T31536] __nla_validate_parse: 7 callbacks suppressed [ 841.660141][T31536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6738'. [ 841.696075][T31533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6740'. [ 841.720873][T31534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6740'. [ 841.729809][T31534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6740'. [ 841.732223][T31533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6740'. [ 841.790387][T18406] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.820895][T18406] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.831846][T31533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6740'. [ 841.840930][T31534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6740'. [ 841.854976][T31533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6740'. [ 841.859033][T18406] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.888721][T18406] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.897930][T31534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6740'. [ 841.934831][T31545] tipc: Enabled bearer , priority 0 [ 841.956173][T31545] syzkaller0: entered promiscuous mode [ 841.982821][T31545] syzkaller0: entered allmulticast mode [ 842.006727][T31545] tipc: Resetting bearer [ 842.085833][T31541] tipc: Resetting bearer [ 842.129714][T31541] tipc: Disabling bearer [ 842.161913][T31557] netlink: 'syz.3.6746': attribute type 2 has an invalid length. [ 842.184118][T31560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6747'. [ 842.237586][T31557] 9: entered promiscuous mode [ 842.860689][T31604] sctp: [Deprecated]: syz.3.6758 (pid 31604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 842.860689][T31604] Use struct sctp_sack_info instead [ 843.349296][T31616] netlink: 'syz.1.6764': attribute type 2 has an invalid length. [ 843.360221][T31616] netlink: 'syz.1.6764': attribute type 1 has an invalid length. [ 843.374141][T31616] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 843.697626][T31634] syzkaller0: entered promiscuous mode [ 843.726184][T31634] syzkaller0: entered allmulticast mode [ 844.037290][T31646] smc: net device erspan0 erased user defined pnetid SYZ0 [ 844.714282][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 844.798875][T31697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.798875][T31695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.547928][T31748] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 845.564019][T31748] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 845.576652][T31748] team0: Failed to send options change via netlink (err -105) [ 845.590784][T31748] team0: Port device batadv1 added [ 845.706657][T31759] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20001 [ 846.092765][T31785] team0: Device gtp0 is up. Set it down before adding it as a team port [ 846.185035][T31792] netlink: 'syz.3.6808': attribute type 7 has an invalid length. [ 846.578080][T31808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 846.612264][T31819] sctp: [Deprecated]: syz.3.6815 (pid 31819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 846.612264][T31819] Use struct sctp_sack_info instead [ 846.867055][T31827] gre0: entered promiscuous mode [ 846.873198][T31827] gre0: entered allmulticast mode [ 846.913671][T31834] netlink: 'syz.0.6817': attribute type 4 has an invalid length. [ 846.921756][T31830] __nla_validate_parse: 19 callbacks suppressed [ 846.921777][T31830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6819'. [ 846.921816][T31830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6819'. [ 847.318287][ T5197] udevd[5197]: worker [28601] /devices/virtual/block/nbd3 is taking a long time [ 847.518374][T31878] IPv6: NLM_F_CREATE should be specified when creating new route [ 847.899858][T31913] netlink: 'syz.1.6841': attribute type 10 has an invalid length. [ 847.957351][T31916] netlink: 'syz.1.6841': attribute type 6 has an invalid length. [ 847.976767][T31913] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.004312][T31913] bond0: (slave team0): Enslaving as an active interface with an up link [ 848.007415][T31916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6841'. [ 848.219107][T31928] IPv6: addrconf: prefix option has invalid lifetime [ 848.265834][T31928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6846'. [ 848.338983][T31937] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.6849'. [ 848.352899][T31937] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.6849'. [ 848.903766][T31967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6855'. [ 849.007139][T31974] syzkaller0: entered promiscuous mode [ 849.021470][T31974] syzkaller0: entered allmulticast mode [ 849.067352][T31974] netlink: 'syz.3.6857': attribute type 1 has an invalid length. [ 849.103922][T31977] geneve2: entered promiscuous mode [ 849.119387][T31977] geneve2: entered allmulticast mode [ 849.495593][T31995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6863'. [ 849.615077][T32007] netlink: 'syz.2.6864': attribute type 1 has an invalid length. [ 849.682639][T32015] netlink: 'syz.1.6868': attribute type 1 has an invalid length. [ 849.834475][T32029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6871'. [ 849.897962][T32035] netlink: 'syz.2.6871': attribute type 39 has an invalid length. [ 849.944107][T32015] bond3: entered promiscuous mode [ 849.949628][T32015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 850.255219][T32048] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6876'. [ 850.478332][T32067] netlink: 'syz.3.6881': attribute type 16 has an invalid length. [ 850.509221][T32067] netlink: 'syz.3.6881': attribute type 17 has an invalid length. [ 850.611720][T32067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 850.678100][T32079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 850.833541][T32083] macvlan2: entered promiscuous mode [ 850.838922][T32083] macvlan2: entered allmulticast mode [ 850.897784][T32083] bond1: entered allmulticast mode [ 850.953184][T32083] bond1: entered promiscuous mode [ 850.971935][T32083] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 850.993628][T32083] team0: Port device macvlan2 added [ 851.506483][T32129] netlink: 'syz.1.6895': attribute type 8 has an invalid length. [ 851.976784][T32152] veth0: entered promiscuous mode [ 851.999280][T32158] veth0: left promiscuous mode [ 852.019375][T32160] __nla_validate_parse: 5 callbacks suppressed [ 852.019397][T32160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6904'. [ 852.475753][T32192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6910'. [ 852.603503][T32203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6912'. [ 852.648564][T32209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6915'. [ 852.682648][T32203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 852.805579][T32212] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 852.958716][T32227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6920'. [ 853.006883][T32227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6920'. [ 853.091185][ T3510] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.100394][ T3510] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.109874][ T3510] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.120694][ T3510] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.230466][T32240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6925'. [ 853.290441][T32245] tipc: Enabled bearer , priority 0 [ 853.298645][T32245] syzkaller0: entered promiscuous mode [ 853.304890][T32245] syzkaller0: entered allmulticast mode [ 853.352013][T32245] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 853.445377][T32245] tipc: Resetting bearer [ 853.492871][T32253] Bluetooth: MGMT ver 1.23 [ 853.521110][T32243] tipc: Resetting bearer [ 853.572390][T32243] tipc: Disabling bearer [ 853.713584][T32261] Cannot find del_set index 4 as target [ 853.794068][T32273] syzkaller0: entered promiscuous mode [ 853.806438][T32273] syzkaller0: entered allmulticast mode [ 853.958404][T32283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6937'. [ 853.992646][T32283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6937'. [ 854.040500][T32283] erspan0: entered promiscuous mode [ 854.052628][T32293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6940'. [ 854.073436][T32283] gretap0: entered promiscuous mode [ 854.095457][T32293] validate_nla: 1 callbacks suppressed [ 854.095482][T32293] netlink: 'syz.0.6940': attribute type 10 has an invalid length. [ 854.129216][T32293] team0: Port device dummy0 added [ 854.210133][T32295] netlink: 'syz.4.6941': attribute type 1 has an invalid length. [ 854.277254][T32295] bond6: (slave gretap1): making interface the new active one [ 854.290654][T32295] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 854.302451][T32295] netlink: 'syz.4.6941': attribute type 21 has an invalid length. [ 854.417376][T32305] can: request_module (can-proto-0) failed. [ 854.618120][T32315] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 854.648944][T32320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 855.189760][T32349] veth0: entered promiscuous mode [ 855.197607][T32347] veth0: left promiscuous mode [ 855.215682][T32350] netlink: 'syz.2.6958': attribute type 11 has an invalid length. [ 855.237509][T32353] netlink: 'syz.3.6960': attribute type 4 has an invalid length. [ 855.247098][T32354] netlink: 'syz.3.6960': attribute type 4 has an invalid length. [ 855.260927][T32350] netlink: 'syz.2.6958': attribute type 11 has an invalid length. [ 855.418671][T32323] lo speed is unknown, defaulting to 1000 [ 855.459140][T32362] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 855.478258][T32361] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 855.487872][T32359] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 856.793466][T32421] x_tables: duplicate underflow at hook 2 [ 857.111740][T26614] wlan1: Trigger new scan to find an IBSS to join [ 857.170445][T32438] __nla_validate_parse: 10 callbacks suppressed [ 857.170468][T32438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6981'. [ 857.254304][T32443] team0: Device ip6gre2 is of different type [ 857.307698][T32445] netlink: 'syz.4.6982': attribute type 8 has an invalid length. [ 862.071011][ T1149] wlan1: Trigger new scan to find an IBSS to join [ 864.312291][T26614] wlan1: Creating new IBSS network, BSSID 9a:18:ac:fc:89:be [ 866.473707][ T56] block nbd3: Possible stuck request ffff888025ad0000: control (read@0,1024B). Runtime 90 seconds [ 866.484565][ T56] block nbd3: Possible stuck request ffff888025ad0200: control (read@1024,1024B). Runtime 90 seconds [ 866.495723][ T56] block nbd3: Possible stuck request ffff888025ad0400: control (read@2048,1024B). Runtime 90 seconds [ 866.507020][ T56] block nbd3: Possible stuck request ffff888025ad0600: control (read@3072,1024B). Runtime 90 seconds [ 875.436658][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 875.442959][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 877.510817][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 880.812116][ T5830] Bluetooth: hci3: link tx timeout [ 880.817306][ T5830] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 881.030717][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 881.038778][ C1] lec:lec_tx_timeout: lec0 [ 882.871178][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 886.863338][ T9482] lec:lec_start_xmit: lec0:No lecd attached [ 892.071461][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5210 ms [ 892.079559][ C1] lec:lec_tx_timeout: lec0 [ 896.551359][ T56] block nbd3: Possible stuck request ffff888025ad0000: control (read@0,1024B). Runtime 120 seconds [ 896.564435][ T56] block nbd3: Possible stuck request ffff888025ad0200: control (read@1024,1024B). Runtime 120 seconds [ 896.575541][ T56] block nbd3: Possible stuck request ffff888025ad0400: control (read@2048,1024B). Runtime 120 seconds [ 896.586626][ T56] block nbd3: Possible stuck request ffff888025ad0600: control (read@3072,1024B). Runtime 120 seconds [ 897.191909][T26614] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 903.110929][ T5148] Bluetooth: hci5: command 0x0406 tx timeout [ 920.111174][T32596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6983'. [ 920.111740][T32597] gre1: entered promiscuous mode [ 920.134604][T32594] netlink: 'syz.1.6984': attribute type 1 has an invalid length. [ 920.143388][T32597] gre1: entered allmulticast mode [ 920.147291][T32599] netlink: 'syz.3.6986': attribute type 1 has an invalid length. [ 920.167413][T32599] netlink: 3992 bytes leftover after parsing attributes in process `syz.3.6986'. [ 920.366565][T32607] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6990'. [ 920.681808][T32638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.776832][T32642] tipc: Started in network mode [ 920.783432][T32639] FAULT_INJECTION: forcing a failure. [ 920.783432][T32639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.805134][T32642] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 920.815843][T32642] tipc: Enabled bearer , priority 10 [ 920.822887][T32639] CPU: 0 UID: 0 PID: 32639 Comm: syz.2.6996 Not tainted syzkaller #0 PREEMPT(full) [ 920.822917][T32639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 920.822931][T32639] Call Trace: [ 920.822940][T32639] [ 920.822950][T32639] dump_stack_lvl+0xe8/0x150 [ 920.822984][T32639] should_fail_ex+0x412/0x560 [ 920.823015][T32639] _copy_from_user+0x2d/0xb0 [ 920.823047][T32639] ___sys_sendmsg+0x1c6/0x360 [ 920.823074][T32639] ? __lock_acquire+0x6b5/0x2cf0 [ 920.823107][T32639] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.823141][T32639] ? kstrtouint+0x6e/0xe0 [ 920.823192][T32639] ? __fget_files+0x2a/0x420 [ 920.823215][T32639] ? __fget_files+0x3a0/0x420 [ 920.823249][T32639] __sys_sendmmsg+0x27c/0x4e0 [ 920.823284][T32639] ? __pfx___sys_sendmmsg+0x10/0x10 [ 920.823316][T32639] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 920.823366][T32639] ? ksys_write+0x242/0x270 [ 920.823404][T32639] ? __pfx_ksys_write+0x10/0x10 [ 920.823441][T32639] __x64_sys_sendmmsg+0xa0/0xc0 [ 920.823472][T32639] do_syscall_64+0xe2/0xf80 [ 920.823494][T32639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.823514][T32639] ? trace_irq_disable+0x37/0x100 [ 920.823535][T32639] ? clear_bhb_loop+0x60/0xb0 [ 920.823560][T32639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.823581][T32639] RIP: 0033:0x7fceb499aeb9 [ 920.823601][T32639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.823620][T32639] RSP: 002b:00007fceb57f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 920.823645][T32639] RAX: ffffffffffffffda RBX: 00007fceb4c16090 RCX: 00007fceb499aeb9 [ 920.823693][T32639] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 000000000000000a [ 920.823708][T32639] RBP: 00007fceb57f2090 R08: 0000000000000000 R09: 0000000000000000 [ 920.823722][T32639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.823735][T32639] R13: 00007fceb4c16128 R14: 00007fceb4c16090 R15: 00007fff1ffda0f8 [ 920.823769][T32639] [ 921.039384][T32646] netlink: 'syz.0.6998': attribute type 4 has an invalid length. [ 921.090426][T32642] netlink: 'syz.0.6998': attribute type 4 has an invalid length. [ 921.100639][T32648] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7000'. [ 921.531106][T32676] ip6gre2: entered promiscuous mode [ 921.536461][T32676] ip6gre2: entered allmulticast mode [ 921.554358][T32677] netlink: 'syz.3.7011': attribute type 1 has an invalid length. [ 921.606949][T32677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 921.654118][T32682] bond3: (slave geneve2): making interface the new active one [ 921.685014][T32682] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 921.708968][T32685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7013'. [ 921.801088][T32687] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 921.840986][T22500] tipc: Node number set to 10005162 [ 922.058891][T32698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7017'. [ 922.142189][T32703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7017'. [ 922.193051][T32698] team1: entered promiscuous mode [ 922.198173][T32698] team1: entered allmulticast mode [ 922.337871][T32709] team0: Device gtp0 is up. Set it down before adding it as a team port [ 922.626132][T32730] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7025'. [ 922.754874][T26615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.775520][T26615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.955379][T32752] netlink: 'syz.0.7029': attribute type 83 has an invalid length. [ 923.243116][T32764] netlink: 'syz.2.7033': attribute type 1 has an invalid length. [ 923.348563][T32764] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 923.418575][ T307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7034'. [ 923.636526][ T314] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7036'. [ 923.802780][ T320] syzkaller0: entered promiscuous mode [ 923.808425][ T320] syzkaller0: entered allmulticast mode [ 924.269433][ T350] netlink: 'syz.3.7044': attribute type 1 has an invalid length. [ 924.636099][ T5830] Bluetooth: hci1: command tx timeout [ 926.640472][ T56] block nbd3: Possible stuck request ffff888025ad0000: control (read@0,1024B). Runtime 150 seconds [ 926.654592][ T56] block nbd3: Possible stuck request ffff888025ad0200: control (read@1024,1024B). Runtime 150 seconds [ 926.666213][T26614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.676730][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.688606][T23574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.698466][ T56] block nbd3: Possible stuck request ffff888025ad0400: control (read@2048,1024B). Runtime 150 seconds [ 926.709747][ T56] block nbd3: Possible stuck request ffff888025ad0600: control (read@3072,1024B). Runtime 150 seconds [ 926.928527][ T384] netlink: 'syz.3.7052': attribute type 21 has an invalid length. [ 926.945753][ T378] netlink: 'syz.0.7048': attribute type 21 has an invalid length. [ 926.965349][ T378] __nla_validate_parse: 2 callbacks suppressed [ 926.965369][ T378] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7048'. [ 926.994961][ T384] netlink: 'syz.3.7052': attribute type 1 has an invalid length. [ 927.224901][ T398] netlink: 59 bytes leftover after parsing attributes in process `syz.1.7054'. [ 927.274211][T26614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.285862][T22500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.296811][T23574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.431659][T22500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.466931][ T413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7058'. [ 927.535488][ T413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7058'. [ 927.564985][ T416] netlink: 'syz.4.7059': attribute type 14 has an invalid length. [ 927.573045][ T416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7059'. [ 927.582774][ T413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7058'. [ 927.637786][ T425] netlink: 'syz.1.7063': attribute type 30 has an invalid length. [ 927.646496][ T422] netlink: 'syz.0.7062': attribute type 1 has an invalid length. [ 927.674407][ T416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7059'. [ 927.688138][ T416] netlink: 'syz.4.7059': attribute type 14 has an invalid length. [ 927.700658][ T416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7059'. [ 927.715003][ T425] bond4: option arp_missed_max: invalid value (0) [ 927.722572][ T425] bond4: option arp_missed_max: allowed values 1 - 255 [ 927.732568][ T425] bond4 (unregistering): Released all slaves [ 928.069512][ T450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7068'. [ 928.116079][ T450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7068'. [ 928.386267][ T461] netlink: 'syz.4.7073': attribute type 1 has an invalid length. [ 928.476803][T22500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.663975][ T470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 928.882854][ T482] netlink: 'syz.0.7078': attribute type 2 has an invalid length. [ 928.989955][ T489] syzkaller0: entered promiscuous mode [ 928.996571][ T489] syzkaller0: entered allmulticast mode [ 929.338498][ T502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.358287][ T500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 929.394327][ T501] SET target dimension over the limit! [ 929.593810][ T515] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 929.666867][ T522] IPVS: set_ctl: invalid protocol: 60319 24.0.0.0:0 [ 929.998437][ T543] blkio.reset_stats is deprecated [ 930.194040][ T555] 8021q: adding VLAN 0 to HW filter on device bond4 [ 930.465478][ T578] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 930.481986][T18404] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 930.717040][ T589] wireguard0: entered promiscuous mode [ 930.737925][ T589] wireguard0: entered allmulticast mode [ 930.784670][ T589] team0: Device wireguard0 is of different type [ 930.882206][ T595] .: renamed from bridge_slave_1 [ 931.200889][ T609] netlink: 'syz.3.7122': attribute type 1 has an invalid length. [ 931.422403][ T631] FAULT_INJECTION: forcing a failure. [ 931.422403][ T631] name failslab, interval 1, probability 0, space 0, times 0 [ 931.456450][ T631] CPU: 0 UID: 0 PID: 631 Comm: syz.3.7126 Not tainted syzkaller #0 PREEMPT(full) [ 931.456481][ T631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 931.456494][ T631] Call Trace: [ 931.456504][ T631] [ 931.456514][ T631] dump_stack_lvl+0xe8/0x150 [ 931.456548][ T631] should_fail_ex+0x412/0x560 [ 931.456581][ T631] should_failslab+0xa8/0x100 [ 931.456609][ T631] __kmalloc_cache_noprof+0x83/0x6e0 [ 931.456634][ T631] ? flow_change+0x459/0x1a90 [ 931.456661][ T631] flow_change+0x459/0x1a90 [ 931.456688][ T631] ? tc_new_tfilter+0x8a0/0x1630 [ 931.456720][ T631] ? __pfx_flow_change+0x10/0x10 [ 931.456739][ T631] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 931.456791][ T631] tc_new_tfilter+0xe1c/0x1630 [ 931.456847][ T631] ? __pfx_tc_new_tfilter+0x10/0x10 [ 931.456892][ T631] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 931.456933][ T631] ? __pfx_tc_new_tfilter+0x10/0x10 [ 931.456960][ T631] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 931.456989][ T631] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 931.457014][ T631] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 931.457037][ T631] ? ref_tracker_free+0x693/0x840 [ 931.457074][ T631] ? __copy_skb_header+0xa3/0x4a0 [ 931.457107][ T631] ? __pfx_ref_tracker_free+0x10/0x10 [ 931.457147][ T631] netlink_rcv_skb+0x232/0x4b0 [ 931.457171][ T631] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 931.457204][ T631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 931.457239][ T631] ? netlink_deliver_tap+0x2e/0x1b0 [ 931.457271][ T631] netlink_unicast+0x80f/0x9b0 [ 931.457318][ T631] ? __pfx_netlink_unicast+0x10/0x10 [ 931.457350][ T631] ? __alloc_skb+0x193/0x390 [ 931.457375][ T631] ? netlink_sendmsg+0x650/0xb40 [ 931.457395][ T631] ? skb_put+0x11b/0x210 [ 931.457426][ T631] netlink_sendmsg+0x813/0xb40 [ 931.457460][ T631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 931.457488][ T631] ? aa_sock_msg_perm+0xf1/0x1b0 [ 931.457516][ T631] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 931.457542][ T631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 931.457564][ T631] ____sys_sendmsg+0xa68/0xad0 [ 931.457594][ T631] ? __might_fault+0xaf/0x130 [ 931.457633][ T631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 931.457672][ T631] ? import_iovec+0x73/0xa0 [ 931.457710][ T631] ___sys_sendmsg+0x2a5/0x360 [ 931.457739][ T631] ? __lock_acquire+0x6b5/0x2cf0 [ 931.457775][ T631] ? __pfx____sys_sendmsg+0x10/0x10 [ 931.457810][ T631] ? kstrtouint+0x6e/0xe0 [ 931.457866][ T631] ? __fget_files+0x2a/0x420 [ 931.457889][ T631] ? __fget_files+0x3a0/0x420 [ 931.457924][ T631] __sys_sendmmsg+0x27c/0x4e0 [ 931.457959][ T631] ? __pfx___sys_sendmmsg+0x10/0x10 [ 931.457986][ T631] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 931.458037][ T631] ? ksys_write+0x242/0x270 [ 931.458078][ T631] ? __pfx_ksys_write+0x10/0x10 [ 931.458114][ T631] __x64_sys_sendmmsg+0xa0/0xc0 [ 931.458141][ T631] do_syscall_64+0xe2/0xf80 [ 931.458162][ T631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.458180][ T631] ? trace_irq_disable+0x37/0x100 [ 931.458197][ T631] ? clear_bhb_loop+0x60/0xb0 [ 931.458219][ T631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.458237][ T631] RIP: 0033:0x7f6e67b9aeb9 [ 931.458255][ T631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.458271][ T631] RSP: 002b:00007f6e68a29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 931.458292][ T631] RAX: ffffffffffffffda RBX: 00007f6e67e16090 RCX: 00007f6e67b9aeb9 [ 931.458306][ T631] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 000000000000000a [ 931.458319][ T631] RBP: 00007f6e68a29090 R08: 0000000000000000 R09: 0000000000000000 [ 931.458330][ T631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.458341][ T631] R13: 00007f6e67e16128 R14: 00007f6e67e16090 R15: 00007ffeee9529c8 [ 931.458372][ T631] [ 931.837698][T18404] net_ratelimit: 3 callbacks suppressed [ 931.837720][T18404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.864395][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.873170][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.911173][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.945451][ T638] set match dimension is over the limit! [ 932.137456][ T650] IPv6: sit1: Disabled Multicast RS [ 932.210439][ T644] __nla_validate_parse: 13 callbacks suppressed [ 932.210465][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7134'. [ 932.298674][ T644] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 932.391405][T26614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.401350][T23574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.410064][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.438200][ T644] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 932.441969][ T656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7135'. [ 932.511953][ T644] gretap1: entered promiscuous mode [ 932.530967][ T656] openvswitch: netlink: Flow actions attr not present in new flow. [ 932.593394][ T644] gretap1: entered allmulticast mode [ 932.649022][ T667] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 932.698877][ T676] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7139'. [ 932.828414][ T683] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7141'. [ 932.896492][ T683] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7141'. [ 932.951040][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.952139][ T683] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7141'. [ 932.985770][ T694] syzkaller0: entered promiscuous mode [ 933.009993][ T694] syzkaller0: entered allmulticast mode [ 933.031699][ T1149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.098241][ T683] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7141'. [ 933.118348][ T683] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7141'. [ 933.128341][ T683] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7141'. [ 933.147781][ T688] netlink: 210960 bytes leftover after parsing attributes in process `syz.2.7144'. [ 933.170403][ T699] FAULT_INJECTION: forcing a failure. [ 933.170403][ T699] name failslab, interval 1, probability 0, space 0, times 0 [ 933.211815][ T699] CPU: 1 UID: 0 PID: 699 Comm: syz.0.7146 Not tainted syzkaller #0 PREEMPT(full) [ 933.211843][ T699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 933.211857][ T699] Call Trace: [ 933.211865][ T699] [ 933.211874][ T699] dump_stack_lvl+0xe8/0x150 [ 933.211904][ T699] should_fail_ex+0x412/0x560 [ 933.211934][ T699] should_failslab+0xa8/0x100 [ 933.211971][ T699] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 933.212004][ T699] ? __alloc_skb+0x193/0x390 [ 933.212027][ T699] ? __alloc_skb+0x1d7/0x390 [ 933.212049][ T699] ? __local_bh_enable_ip+0xd0/0x130 [ 933.212070][ T699] ? __alloc_skb+0x193/0x390 [ 933.212096][ T699] __alloc_skb+0x1d7/0x390 [ 933.212125][ T699] netlink_ack+0x146/0xa50 [ 933.212145][ T699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 933.212187][ T699] netlink_rcv_skb+0x2b6/0x4b0 [ 933.212211][ T699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 933.212238][ T699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 933.212273][ T699] ? netlink_deliver_tap+0x2e/0x1b0 [ 933.212303][ T699] netlink_unicast+0x80f/0x9b0 [ 933.212343][ T699] ? __pfx_netlink_unicast+0x10/0x10 [ 933.212374][ T699] ? __alloc_skb+0x193/0x390 [ 933.212398][ T699] ? netlink_sendmsg+0x650/0xb40 [ 933.212419][ T699] ? skb_put+0x11b/0x210 [ 933.212449][ T699] netlink_sendmsg+0x813/0xb40 [ 933.212481][ T699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.212508][ T699] ? aa_sock_msg_perm+0xf1/0x1b0 [ 933.212536][ T699] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 933.212560][ T699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.212581][ T699] ____sys_sendmsg+0xa68/0xad0 [ 933.212610][ T699] ? __might_fault+0xaf/0x130 [ 933.212649][ T699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 933.212687][ T699] ? import_iovec+0x73/0xa0 [ 933.212730][ T699] ___sys_sendmsg+0x2a5/0x360 [ 933.212757][ T699] ? __lock_acquire+0x6b5/0x2cf0 [ 933.212789][ T699] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.212823][ T699] ? kstrtouint+0x6e/0xe0 [ 933.212874][ T699] ? __fget_files+0x2a/0x420 [ 933.212897][ T699] ? __fget_files+0x3a0/0x420 [ 933.212931][ T699] __sys_sendmmsg+0x27c/0x4e0 [ 933.212974][ T699] ? __pfx___sys_sendmmsg+0x10/0x10 [ 933.213001][ T699] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 933.213052][ T699] ? ksys_write+0x242/0x270 [ 933.213086][ T699] ? __pfx_ksys_write+0x10/0x10 [ 933.213125][ T699] __x64_sys_sendmmsg+0xa0/0xc0 [ 933.213157][ T699] do_syscall_64+0xe2/0xf80 [ 933.213180][ T699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.213200][ T699] ? trace_irq_disable+0x37/0x100 [ 933.213219][ T699] ? clear_bhb_loop+0x60/0xb0 [ 933.213245][ T699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.213266][ T699] RIP: 0033:0x7fe4e199aeb9 [ 933.213287][ T699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.213306][ T699] RSP: 002b:00007fe4e27ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 933.213327][ T699] RAX: ffffffffffffffda RBX: 00007fe4e1c15fa0 RCX: 00007fe4e199aeb9 [ 933.213343][ T699] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000009 [ 933.213359][ T699] RBP: 00007fe4e27ed090 R08: 0000000000000000 R09: 0000000000000000 [ 933.213373][ T699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.213386][ T699] R13: 00007fe4e1c16038 R14: 00007fe4e1c15fa0 R15: 00007ffc5dade6d8 [ 933.213421][ T699] [ 934.008678][ T723] netlink: 'syz.3.7153': attribute type 1 has an invalid length. [ 934.159030][ T723] 8021q: adding VLAN 0 to HW filter on device bond5 [ 934.256199][ T727] bond5: (slave geneve3): making interface the new active one [ 934.288272][ T727] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 934.564239][ T768] FAULT_INJECTION: forcing a failure. [ 934.564239][ T768] name failslab, interval 1, probability 0, space 0, times 0 [ 934.578257][ T768] CPU: 1 UID: 0 PID: 768 Comm: syz.3.7161 Not tainted syzkaller #0 PREEMPT(full) [ 934.578287][ T768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 934.578301][ T768] Call Trace: [ 934.578310][ T768] [ 934.578320][ T768] dump_stack_lvl+0xe8/0x150 [ 934.578354][ T768] should_fail_ex+0x412/0x560 [ 934.578393][ T768] should_failslab+0xa8/0x100 [ 934.578420][ T768] __kmalloc_cache_noprof+0x83/0x6e0 [ 934.578443][ T768] ? tcf_exts_init_ex+0x10e/0x7c0 [ 934.578474][ T768] tcf_exts_init_ex+0x10e/0x7c0 [ 934.578494][ T768] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 934.578524][ T768] flow_change+0x4c3/0x1a90 [ 934.578568][ T768] ? __pfx_flow_change+0x10/0x10 [ 934.578587][ T768] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 934.578639][ T768] tc_new_tfilter+0xe1c/0x1630 [ 934.578698][ T768] ? __pfx_tc_new_tfilter+0x10/0x10 [ 934.578742][ T768] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 934.578785][ T768] ? __pfx_tc_new_tfilter+0x10/0x10 [ 934.578811][ T768] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 934.578841][ T768] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 934.578865][ T768] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 934.578888][ T768] ? ref_tracker_free+0x693/0x840 [ 934.578913][ T768] ? __copy_skb_header+0xa3/0x4a0 [ 934.578945][ T768] ? __pfx_ref_tracker_free+0x10/0x10 [ 934.578984][ T768] netlink_rcv_skb+0x232/0x4b0 [ 934.579013][ T768] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 934.579041][ T768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 934.579076][ T768] ? netlink_deliver_tap+0x2e/0x1b0 [ 934.579109][ T768] netlink_unicast+0x80f/0x9b0 [ 934.579153][ T768] ? __pfx_netlink_unicast+0x10/0x10 [ 934.579184][ T768] ? __alloc_skb+0x193/0x390 [ 934.579210][ T768] ? netlink_sendmsg+0x650/0xb40 [ 934.579232][ T768] ? skb_put+0x11b/0x210 [ 934.579262][ T768] netlink_sendmsg+0x813/0xb40 [ 934.579296][ T768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.579324][ T768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 934.579353][ T768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 934.579379][ T768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.579401][ T768] ____sys_sendmsg+0xa68/0xad0 [ 934.579430][ T768] ? __might_fault+0xaf/0x130 [ 934.579469][ T768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.579509][ T768] ? import_iovec+0x73/0xa0 [ 934.579546][ T768] ___sys_sendmsg+0x2a5/0x360 [ 934.579582][ T768] ? __lock_acquire+0x6b5/0x2cf0 [ 934.579618][ T768] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.579653][ T768] ? kstrtouint+0x6e/0xe0 [ 934.579709][ T768] ? __fget_files+0x2a/0x420 [ 934.579732][ T768] ? __fget_files+0x3a0/0x420 [ 934.579768][ T768] __sys_sendmmsg+0x27c/0x4e0 [ 934.579803][ T768] ? __pfx___sys_sendmmsg+0x10/0x10 [ 934.579830][ T768] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 934.579884][ T768] ? ksys_write+0x242/0x270 [ 934.579918][ T768] ? __pfx_ksys_write+0x10/0x10 [ 934.579959][ T768] __x64_sys_sendmmsg+0xa0/0xc0 [ 934.579997][ T768] do_syscall_64+0xe2/0xf80 [ 934.580020][ T768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.580040][ T768] ? trace_irq_disable+0x37/0x100 [ 934.580061][ T768] ? clear_bhb_loop+0x60/0xb0 [ 934.580087][ T768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.580107][ T768] RIP: 0033:0x7f6e67b9aeb9 [ 934.580128][ T768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.580146][ T768] RSP: 002b:00007f6e68a29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 934.580169][ T768] RAX: ffffffffffffffda RBX: 00007f6e67e16090 RCX: 00007f6e67b9aeb9 [ 934.580185][ T768] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 000000000000000a [ 934.580200][ T768] RBP: 00007f6e68a29090 R08: 0000000000000000 R09: 0000000000000000 [ 934.580214][ T768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.580227][ T768] R13: 00007f6e67e16128 R14: 00007f6e67e16090 R15: 00007ffeee9529c8 [ 934.580260][ T768] [ 935.530440][ T804] netlink: 'syz.1.7168': attribute type 13 has an invalid length. [ 935.966497][ T832] IPVS: set_ctl: invalid protocol: 21 255.255.255.255:20003 [ 936.881545][T22499] net_ratelimit: 8 callbacks suppressed [ 936.881568][T22499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.895194][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 936.905798][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 936.935193][ T872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.119268][T22499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.358416][ T838] lo speed is unknown, defaulting to 1000 [ 937.485448][ T902] __nla_validate_parse: 34 callbacks suppressed [ 937.485473][ T902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7191'. [ 937.594327][ T902] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 937.621184][ T902] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7191'. [ 937.694495][ T912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7194'. [ 937.754642][ T843] bond1: option miimon: invalid value (18446744073709551585) [ 937.778572][ T919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7194'. [ 937.789044][ T843] bond1: option miimon: allowed values 0 - 2147483647 [ 937.797514][ T923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7195'. [ 937.819063][ T843] bond1 (unregistering): Released all slaves [ 937.875344][ T916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7195'. [ 937.901045][ T916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7195'. [ 937.954280][ T928] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 937.973968][ T928] bond7 (unregistering): Released all slaves [ 937.993975][ T937] x_tables: duplicate underflow at hook 4 [ 938.156488][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.176625][ T956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7200'. [ 938.178693][ T1149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.195364][T22499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.208697][ T956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7200'. [ 938.222019][T23574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.450239][ T968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7205'. [ 938.801577][T18410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.815891][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.824827][T23574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.276500][ T1010] IPVS: set_ctl: invalid protocol: 4 100.1.1.0:20003 [ 939.463497][ T1020] netlink: 'syz.1.7223': attribute type 3 has an invalid length. [ 939.477938][ T1020] netlink: 'syz.1.7223': attribute type 2 has an invalid length. [ 939.521840][ T1022] syzkaller1: entered promiscuous mode [ 939.530753][ T1022] syzkaller1: entered allmulticast mode [ 939.553570][ T1025] netlink: 'syz.2.7225': attribute type 64 has an invalid length. [ 939.948242][ T1064] xfrm1: entered allmulticast mode [ 940.175443][ T1075] netlink: 'syz.2.7239': attribute type 1 has an invalid length. [ 940.209260][ T1078] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 940.239042][ T1079] syzkaller0: entered promiscuous mode [ 940.245181][ T1079] syzkaller0: entered allmulticast mode [ 940.345607][ T1075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 940.373333][ T1084] gretap0: entered promiscuous mode [ 940.573173][ T1089] gre0: left promiscuous mode [ 940.577981][ T1089] gre0: left allmulticast mode [ 940.592109][ T1089] gretap0: left promiscuous mode [ 940.899267][ T1097] veth9: entered allmulticast mode [ 941.028574][ T1104] netlink: 'syz.1.7249': attribute type 7 has an invalid length. [ 941.040815][ T1104] netlink: 'syz.1.7249': attribute type 8 has an invalid length. [ 941.077166][ T1104] team0: entered promiscuous mode [ 941.084679][ T1104] team_slave_0: entered promiscuous mode [ 941.126386][ T1104] team_slave_1: entered promiscuous mode [ 941.149247][ T1104] team0: left promiscuous mode [ 941.159866][ T1104] team_slave_0: left promiscuous mode [ 941.165957][ T1104] team_slave_1: left promiscuous mode [ 941.344747][ T1122] netlink: 'syz.2.7254': attribute type 3 has an invalid length. [ 941.424036][ T1128] xt_time: unknown flags 0xf4 [ 941.617071][ T1140] lo: Caught tx_queue_len zero misconfig [ 941.667138][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.757089][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.070723][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5160 ms [ 942.078897][ C1] lec:lec_tx_timeout: lec0 [ 942.316551][T22499] net_ratelimit: 6 callbacks suppressed [ 942.316579][T22499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.154295][ T1191] __nla_validate_parse: 22 callbacks suppressed [ 943.154317][ T1191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7276'. [ 943.172781][ T1195] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 943.183239][ T1191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7276'. [ 943.197462][ T1202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7275'. [ 943.222712][ T1191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7276'. [ 943.295032][ T1203] netlink: 576 bytes leftover after parsing attributes in process `syz.4.7278'. [ 943.357523][T22499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.369058][ T3510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.379108][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.397324][T23574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.561570][ T1218] Bluetooth: MGMT ver 1.23 [ 943.635068][ T1223] openvswitch: netlink: Message has 8 unknown bytes. [ 943.642548][ T1223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.979904][ T1248] x9: renamed from bridge_slave_0 [ 944.009547][ T1250] sctp: [Deprecated]: syz.4.7295 (pid 1250) Use of int in max_burst socket option. [ 944.009547][ T1250] Use struct sctp_assoc_value instead [ 944.052802][ T1253] xt_nat: multiple ranges no longer supported [ 944.157078][ T1260] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 944.213494][ T1265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7297'. [ 944.396352][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.553272][T18404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.669474][ T1300] xt_TPROXY: Can be used only with -p tcp or -p udp [ 944.679332][ T1296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7307'. [ 944.757700][ T1311] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7309'. [ 944.935438][ T1319] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.7313'. [ 944.949483][ T1319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7313'. [ 944.953801][ T1323] netlink: 'syz.0.7314': attribute type 1 has an invalid length. [ 945.298186][ T1340] netlink: 'syz.0.7320': attribute type 1 has an invalid length. [ 945.453981][ T1363] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 945.684644][ T30] audit: type=1804 audit(1770468528.907:11): pid=1376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7329" name="/newroot/227/cgroup.controllers" dev="tmpfs" ino=1176 res=1 errno=0 [ 945.726170][ T30] audit: type=1800 audit(1770468528.907:12): pid=1376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7329" name="cgroup.controllers" dev="tmpfs" ino=1176 res=0 errno=0 [ 946.005984][ T1392] ip6t_rpfilter: unknown options [ 946.125242][ T1396] nbd: must specify at least one socket [ 947.591237][ T24] net_ratelimit: 7 callbacks suppressed [ 947.591257][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.605091][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.641077][ T1493] ip6t_srh: unknown srh invflags 4000 [ 947.649301][ T1491] tipc: Enabling of bearer rejected, failed to enable media [ 948.063535][ T1520] netlink: 'syz.1.7374': attribute type 3 has an invalid length. [ 948.351757][ T1546] __nla_validate_parse: 9 callbacks suppressed [ 948.351777][ T1546] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7379'. [ 948.625249][ T1562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 948.642546][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.786355][ T1578] netlink: 'syz.2.7384': attribute type 32 has an invalid length. [ 948.962664][ T1589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7384'. [ 949.032735][T18406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.041829][T22500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.058509][T23574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.102586][T18404] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 949.383485][ T1612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 949.535921][ T1618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7392'. [ 949.550437][ T1618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.560144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.570168][ T1585] lo speed is unknown, defaulting to 1000 [ 949.834063][ T1625] netlink: 'syz.0.7395': attribute type 21 has an invalid length. [ 949.875767][ T1625] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7395'. [ 949.995468][ T1632] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7397'. [ 950.039724][ T1643] ksmbd: Unknown IPC event: 3, ignore. [ 950.051383][ T1642] netlink: 'syz.1.7400': attribute type 1 has an invalid length. [ 950.075938][ T1642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7400'. [ 950.211971][ T1653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7401'. [ 950.381232][ T1657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7402'. [ 950.390770][ T1657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7402'. [ 950.586425][ T1665] syzkaller0: entered promiscuous mode [ 950.601787][ T1665] syzkaller0: entered allmulticast mode [ 950.856879][ T1678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7408'. [ 951.180839][ T1693] x_tables: duplicate underflow at hook 3 [ 951.193466][ T1694] netlink: 'syz.1.7415': attribute type 13 has an invalid length. [ 951.501355][ T1710] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 951.530426][ T9482] lec:lec_start_xmit: lec0:No lecd attached [ 951.577620][ T1712] netlink: 'syz.4.7419': attribute type 1 has an invalid length. [ 951.630496][ T1718] [ 951.632901][ T1718] ====================================================== [ 951.639951][ T1718] WARNING: possible circular locking dependency detected [ 951.647067][ T1718] syzkaller #0 Not tainted [ 951.651509][ T1718] ------------------------------------------------------ [ 951.658640][ T1718] syz.4.7419/1718 is trying to acquire lock: [ 951.664638][ T1718] ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 951.673840][ T1718] [ 951.673840][ T1718] but task is already holding lock: [ 951.681315][ T1718] ffff888028673c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 951.690597][ T1718] [ 951.690597][ T1718] which lock already depends on the new lock. [ 951.690597][ T1718] [ 951.701028][ T1718] [ 951.701028][ T1718] the existing dependency chain (in reverse order) is: [ 951.710255][ T1718] [ 951.710255][ T1718] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 951.718278][ T1718] _raw_spin_lock_bh+0x36/0x50 [ 951.723799][ T1718] nr_rt_device_down+0x153/0x860 [ 951.729366][ T1718] nr_device_event+0x137/0x150 [ 951.734760][ T1718] notifier_call_chain+0x19d/0x3a0 [ 951.740416][ T1718] __dev_notify_flags+0x16d/0x310 [ 951.745991][ T1718] netif_change_flags+0xe8/0x1a0 [ 951.751574][ T1718] dev_change_flags+0x130/0x260 [ 951.756972][ T1718] dev_ioctl+0x7b4/0x1150 [ 951.761845][ T1718] sock_do_ioctl+0x23e/0x320 [ 951.766973][ T1718] sock_ioctl+0x5c6/0x7f0 [ 951.771856][ T1718] __se_sys_ioctl+0xfc/0x170 [ 951.777021][ T1718] do_syscall_64+0xe2/0xf80 [ 951.782075][ T1718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.788525][ T1718] [ 951.788525][ T1718] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 951.796376][ T1718] _raw_spin_lock_bh+0x36/0x50 [ 951.801699][ T1718] nr_rt_device_down+0xbe/0x860 [ 951.807127][ T1718] nr_device_event+0x137/0x150 [ 951.812434][ T1718] notifier_call_chain+0x19d/0x3a0 [ 951.818215][ T1718] __dev_notify_flags+0x16d/0x310 [ 951.823793][ T1718] netif_change_flags+0xe8/0x1a0 [ 951.829298][ T1718] dev_change_flags+0x130/0x260 [ 951.834695][ T1718] dev_ioctl+0x7b4/0x1150 [ 951.839578][ T1718] sock_do_ioctl+0x23e/0x320 [ 951.844715][ T1718] sock_ioctl+0x5c6/0x7f0 [ 951.849613][ T1718] __se_sys_ioctl+0xfc/0x170 [ 951.854758][ T1718] do_syscall_64+0xe2/0xf80 [ 951.860084][ T1718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.866577][ T1718] [ 951.866577][ T1718] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 951.874529][ T1718] __lock_acquire+0x15a5/0x2cf0 [ 951.879941][ T1718] lock_acquire+0x106/0x330 [ 951.885020][ T1718] _raw_spin_lock_bh+0x36/0x50 [ 951.890432][ T1718] nr_rt_ioctl+0x40c/0xf90 [ 951.895395][ T1718] sock_do_ioctl+0x101/0x320 [ 951.900534][ T1718] sock_ioctl+0x5c6/0x7f0 [ 951.905528][ T1718] __se_sys_ioctl+0xfc/0x170 [ 951.910672][ T1718] do_syscall_64+0xe2/0xf80 [ 951.915721][ T1718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.922161][ T1718] [ 951.922161][ T1718] other info that might help us debug this: [ 951.922161][ T1718] [ 951.932408][ T1718] Chain exists of: [ 951.932408][ T1718] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 951.932408][ T1718] [ 951.946263][ T1718] Possible unsafe locking scenario: [ 951.946263][ T1718] [ 951.953732][ T1718] CPU0 CPU1 [ 951.959115][ T1718] ---- ---- [ 951.964493][ T1718] lock(&nr_node->node_lock); [ 951.969282][ T1718] lock(nr_node_list_lock); [ 951.976409][ T1718] lock(&nr_node->node_lock); [ 951.983737][ T1718] lock(nr_neigh_list_lock); [ 951.988451][ T1718] [ 951.988451][ T1718] *** DEADLOCK *** [ 951.988451][ T1718] [ 951.996620][ T1718] 2 locks held by syz.4.7419/1718: [ 952.001760][ T1718] #0: ffffffff8fb28538 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 952.011298][ T1718] #1: ffff888028673c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 952.021088][ T1718] [ 952.021088][ T1718] stack backtrace: [ 952.027016][ T1718] CPU: 1 UID: 0 PID: 1718 Comm: syz.4.7419 Not tainted syzkaller #0 PREEMPT(full) [ 952.027042][ T1718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 952.027055][ T1718] Call Trace: [ 952.027065][ T1718] [ 952.027079][ T1718] dump_stack_lvl+0xe8/0x150 [ 952.027107][ T1718] print_circular_bug+0x2e1/0x300 [ 952.027129][ T1718] check_noncircular+0x12e/0x150 [ 952.027151][ T1718] __lock_acquire+0x15a5/0x2cf0 [ 952.027180][ T1718] ? kasan_save_track+0x4f/0x80 [ 952.027196][ T1718] ? kasan_save_track+0x3e/0x80 [ 952.027211][ T1718] ? kasan_save_free_info+0x46/0x50 [ 952.027232][ T1718] ? __kasan_slab_free+0x5c/0x80 [ 952.027249][ T1718] ? kfree+0x1be/0x650 [ 952.027271][ T1718] ? tomoyo_path_number_perm+0x501/0x630 [ 952.027289][ T1718] ? security_file_ioctl+0xc3/0x2a0 [ 952.027304][ T1718] ? __se_sys_ioctl+0x47/0x170 [ 952.027326][ T1718] ? do_syscall_64+0xe2/0xf80 [ 952.027344][ T1718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.027364][ T1718] ? nr_rt_ioctl+0x40c/0xf90 [ 952.027386][ T1718] lock_acquire+0x106/0x330 [ 952.027408][ T1718] ? nr_rt_ioctl+0x40c/0xf90 [ 952.027433][ T1718] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 952.027455][ T1718] ? nr_rt_ioctl+0x40c/0xf90 [ 952.027477][ T1718] _raw_spin_lock_bh+0x36/0x50 [ 952.027503][ T1718] ? nr_rt_ioctl+0x40c/0xf90 [ 952.027524][ T1718] nr_rt_ioctl+0x40c/0xf90 [ 952.027552][ T1718] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 952.027579][ T1718] ? apparmor_capable+0x137/0x1a0 [ 952.027608][ T1718] ? capable+0x88/0xe0 [ 952.027623][ T1718] ? nr_ioctl+0x1b1/0x3b0 [ 952.027643][ T1718] sock_do_ioctl+0x101/0x320 [ 952.027661][ T1718] ? __pfx_sock_do_ioctl+0x10/0x10 [ 952.027675][ T1718] ? do_futex+0x395/0x420 [ 952.027705][ T1718] sock_ioctl+0x5c6/0x7f0 [ 952.027731][ T1718] ? __pfx_sock_ioctl+0x10/0x10 [ 952.027757][ T1718] ? __fget_files+0x2a/0x420 [ 952.027776][ T1718] ? __fget_files+0x3a0/0x420 [ 952.027794][ T1718] ? __fget_files+0x2a/0x420 [ 952.027815][ T1718] ? bpf_lsm_file_ioctl+0x9/0x20 [ 952.027836][ T1718] ? __pfx_sock_ioctl+0x10/0x10 [ 952.027860][ T1718] __se_sys_ioctl+0xfc/0x170 [ 952.027885][ T1718] do_syscall_64+0xe2/0xf80 [ 952.027902][ T1718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.027918][ T1718] ? trace_irq_disable+0x37/0x100 [ 952.027934][ T1718] ? clear_bhb_loop+0x60/0xb0 [ 952.027953][ T1718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.027970][ T1718] RIP: 0033:0x7f8c0639aeb9 [ 952.027994][ T1718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.028011][ T1718] RSP: 002b:00007f8c072da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 952.028031][ T1718] RAX: ffffffffffffffda RBX: 00007f8c06616090 RCX: 00007f8c0639aeb9 [ 952.028044][ T1718] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000a [ 952.028055][ T1718] RBP: 00007f8c06408c1f R08: 0000000000000000 R09: 0000000000000000 [ 952.028066][ T1718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.028077][ T1718] R13: 00007f8c06616128 R14: 00007f8c06616090 R15: 00007ffcd9d40d98 [ 952.028099][ T1718] [ 952.445025][ T1726] xt_bpf: check failed: parse error [ 952.711006][T16806] net_ratelimit: 10 callbacks suppressed [ 952.711034][T16806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.353863][T22500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.151542][T18409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.160998][T16806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.170303][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.394177][T22499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.433902][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.752381][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.473757][T22500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.495224][ T5197] udevd[5197]: worker [28601] /devices/virtual/block/nbd3 timeout; kill it [ 956.504505][ T5197] udevd[5197]: seq 30595 '/devices/virtual/block/nbd3' killed [ 956.711303][ T56] block nbd3: Possible stuck request ffff888025ad0000: control (read@0,1024B). Runtime 180 seconds [ 956.722596][ T56] block nbd3: Possible stuck request ffff888025ad0200: control (read@1024,1024B). Runtime 180 seconds [ 956.733803][ T56] block nbd3: Possible stuck request ffff888025ad0400: control (read@2048,1024B). Runtime 180 seconds [ 956.750838][ T56] block nbd3: Possible stuck request ffff888025ad0600: control (read@3072,1024B). Runtime 180 seconds [ 957.030759][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 957.038823][ C1] lec:lec_tx_timeout: lec0 [ 957.515129][T22500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.553980][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.801509][T16806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.593221][T22500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.634381][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog