last executing test programs: 5.594969395s ago: executing program 3 (id=3170): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000280000000000000000000040000ea000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000880), 0x10, r1}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000040)=[{0x0, 0x1, {0x1, 0x0, 0x4}, {0x1}, 0xff, 0xfe}], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.465966161s ago: executing program 3 (id=3173): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000002000000", 0x10) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_emit_ethernet(0x86, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000780000000000019078ac1e0001ac1414aa05009078e00000e0470000000000000000110023ac1414aaac1414aa07030089079d0000000044ffff030a01012f00100000e000000100000000ac1e000100000000ac1414aa00000000000000eeffffff00ac1414000000000000000000000000000000e9fcf0285a8a7f9e00ddde8b31a646e1d1004838c2b6e3ad98bbf2b80077977401d5318067fd8d868902aa11cb4b063f6b76ae584e4ec1d89682c6f1a9479e986f5815dbdd56354bc965030000000000007b47366cb9f47eb18ef12d4aa3aa1cc6060024cf2674ccedc0d0f0ef23991376df010328f2fc3d661ab42a1fb9a36a807a18991dd1292e07626cf14bcd03636431365730e8dca66c7ec74ea6f8fd1213afa79c"], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x7}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r4, 0x7ff}, 0x8) (async, rerun: 32) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) (rerun: 32) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in6=@mcast2, 0x4e22, 0x6, 0x4e23, 0x0, 0x2, 0x20, 0x120, 0x84, r2, r5}, {0x2, 0x63f, 0x1, 0xcccc, 0x3, 0x1ff, 0xea7, 0x53c}, {0x80000000, 0x5, 0x4, 0x7}, 0x9, 0x6e6bbb, 0x2, 0x1, 0x3, 0x3}, {{@in=@multicast2, 0x4d3, 0xff}, 0xa, @in6=@local, 0x3502, 0x1, 0x0, 0x9, 0x3, 0xf4, 0xfffffbff}}, 0xe8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800048004000500080000003e"], 0x44}}, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) 5.298889927s ago: executing program 3 (id=3175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0xffff, @broadcast}, {0x0, @local}, 0x38, {0x2, 0x0, @rand_addr=0x64010101}, 'veth0\x00'}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, r2, 0x400, 0x2, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x80, 0xcf, 0x400000]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_emit_ethernet(0x72, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x7, 0x100, {0x12, 0x4, 0x0, 0x4, 0x11d, 0x64, 0x8, 0xf3, 0x89, 0x1, @private=0xa010101, @rand_addr=0x64010102, {[@ssrr={0x89, 0x13, 0xdc, [@remote, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}]}, @lsrr={0x83, 0xf, 0xed, [@multicast2, @loopback, @broadcast]}, @noop, @end, @noop, @generic={0x83, 0xe, "0b70e9494bda3bca5a9d11c7"}]}}}}}}}, 0x0) setsockopt(r0, 0x3ff, 0xffffffff, &(0x7f0000000180)="b30a0645dff5b7b85c3bf8364aeb5764d3bbad9e08537b45ea4f9db183a542e4aca444af4d1a399ae414b1ab45e18bd4b55394ffc1e165fd649799fdeca5217791cde7bd71a6dd3e6dd1a27da71188e39c8bf8ba2578724552b86cbe67dc8f", 0x5f) 5.147744978s ago: executing program 3 (id=3177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r3, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r6, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x4, 0xa) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x80, 0x9c, &(0x7f0000000340)=""/156, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x8000, 0xff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580)=[r0], &(0x7f00000005c0)=[{0x2, 0x4, 0x3, 0xc}, {0x0, 0x1, 0x2, 0x4}, {0x2, 0x4, 0xe, 0xa}, {0x0, 0x3, 0x5, 0x5}], 0x10, 0x5}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r5, r1, 0x4, r7}, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PORT={0x49, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.913943909s ago: executing program 3 (id=3180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000003c0)={'macvlan0\x00', 0x7}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="00000000000011cd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x20, 0x46, &(0x7f0000000100)="ec9f8105e2002c5fa0f252868420d7021b385abb04b2528f4405262057cc99e8", &(0x7f0000000140)=""/70, 0x3, 0x0, 0x7a, 0xfc, &(0x7f00000001c0)="e5eab11852fed0f6f1ba2e159235edaa630f0e265ad9304de688b481da7bb72de4fcc77992d0da9cd44309212ab9cc79d6aff6b209d5614da119f15d7de85d6ae0b72908f0dec4e361b7eb4c300e830570b7031c025c622d9257a75267ddf11d8ce66bf30aee51963b859ffed9f6d73ee38f97877a3cadb7389e", &(0x7f0000000240)="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", 0x0, 0x0, 0x7}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xffffffffffffff23}}, 0x0) 4.744198672s ago: executing program 3 (id=3183): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000007ca102638c0007da2779b8770050000000200000004"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711031000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x43, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x68, 0x24, 0x1, 0x400, 0x0, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xfff}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6e8}]}}]}, 0x68}}, 0x880) 3.467616093s ago: executing program 0 (id=3193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18) r1 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x31) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200230500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000efff002100010007031c000a"], 0x70}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000180)=0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x68, r5, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) write(r1, &(0x7f00000002c0)="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", 0xfc) 3.188935738s ago: executing program 0 (id=3196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x40000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [{{0x254, 0x1, {{0x1, 0x3ff}, 0x37, 0x38, 0x8, 0x3, 0xf, 'syz1\x00', "dbf7e8cb456dbb138d48b110c4876dd8c2f0e64872e5b70c6a67123d10768233", "ecbfbd67d866272afe8f46b108bcd20937ac2d7c6eb3b1d8f1cdbade76e58b64", [{0x1, 0x3, {0x1, 0x8c}}, {0x0, 0x3, {0x0, 0xb}}, {0x8, 0x2, {0x3, 0x8}}, {0xb, 0x0, {0x0, 0x800}}, {0x1, 0x3, {0x1, 0x5}}, {0x7ff, 0x7, {0x1, 0x9}}, {0x2, 0x3, {0x3, 0x3}}, {0x24, 0x3e, {0x1, 0x983}}, {0x7, 0x800, {0x0, 0x8}}, {0x2, 0x8, {0x3, 0x101}}, {0x8, 0x6, {0x0, 0xfffffffb}}, {0x9, 0xf, {0x3, 0x2}}, {0x4, 0x0, {0x3}}, {0x4, 0x6, {0x1, 0x40}}, {0x0, 0xf51e, {0x0, 0x98}}, {0x7, 0xb1ce, {0x0, 0x5a}}, {0x9, 0xcce, {0x1}}, {0x101, 0xf5dd, {0x3, 0xe}}, {0x8, 0x81f4, {0x3, 0x6f}}, {0x4, 0x7, {0x1, 0x6}}, {0x0, 0x7, {0x3, 0x4}}, {0x40, 0x5b8, {0x3, 0x8001}}, {0x400, 0x3, {0x0, 0x4}}, {0x7, 0xf800, {0x1, 0x4}}, {0x5, 0x4e0, {0x1}}, {0x4, 0x8, {0x0, 0x4}}, {0x2, 0xff59, {0x2, 0x200}}, {0x4, 0x6, {0x2, 0xfffffffb}}, {0x7f, 0x3ff, {0x0, 0x9}}, {0xa, 0x2, {0x3, 0x7ff}}, {0x9, 0x5, {0x1}}, {0x5, 0xb355, {0x3, 0x6}}, {0xe1, 0x6, {0x3}}, {0x7, 0xd}, {0x40, 0x11, {0x2, 0x8}}, {0xfffc, 0x8, {0x2}}, {0xf, 0x7f, {0x1, 0xf}}, {0xf, 0x81, {0x0, 0x7}}, {0x3, 0xfff7, {0x0, 0x9}}, {0x4, 0x7ff, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x80000000}, 0x98, 0x0, 0x8, 0x1, 0x13, 'syz0\x00', "bed64579067e46e7499812155343fb6f0faee165f9437fc7e4d12885a2311e2f", "97e4c5c72fc473fe5fa81bc0436016c4d6a3b6084904a758d53f1f6c424f3b38", [{0x401, 0x4, {0x0, 0x7}}, {0x6, 0x8, {0x3, 0x5}}, {0x1000, 0x9, {0x2}}, {0x7e02, 0x7, {0x0, 0x639c2516}}, {0x7, 0x3b, {0x2, 0x3}}, {0x6, 0x7}, {0x1, 0x3, {0x3, 0x356b21fa}}, {0x280, 0x4, {0x2}}, {0x400, 0xd, {0x1, 0x2}}, {0x1000, 0x0, {0x2, 0x1000}}, {0x50ca, 0x1ff, {0x0, 0xf34}}, {0x2c, 0xf4bd, {0x0, 0x8}}, {0x8001, 0x8001, {0x2, 0x4}}, {0x8, 0x88f8, {0x0, 0x7}}, {0x8, 0x4, {0x1, 0x3}}, {0x72, 0x4, {0x0, 0x6}}, {0xfff, 0x9, {0x1, 0xd569}}, {0x100, 0xf096, {0x0, 0x9}}, {0xec3, 0x81, {0x2, 0x4}}, {0x6850, 0x4, {0x2, 0x1}}, {0xa, 0xfff, {0x0, 0x80}}, {0x7, 0x8, {0x3, 0x4}}, {0x3, 0x2, {0x0, 0x9}}, {0x74f6, 0x7f, {0x1, 0x2}}, {0xfffd, 0xffff, {0x0, 0x80}}, {0x86, 0x3c00, {0x3, 0xbfb}}, {0x9, 0x1, {0x1, 0x1}}, {0x92cf, 0x7, {0x1, 0x4}}, {0x4, 0x6, {0x1, 0x3}}, {0x0, 0x9, {0x3, 0x2}}, {0x1, 0x800, {0x0, 0xd}}, {0x0, 0x5, {0x2, 0x2}}, {0xfffa, 0x1, {0x3, 0x6}}, {0x4a5, 0x200}, {0x360, 0x2, {0x1}}, {0x98c1, 0xb3d4, {0x1, 0x40}}, {0x7, 0xfffe, {0x1, 0x1}}, {0xf5, 0x8001, {0x1, 0x7fffffff}}, {0xdf22, 0x1bb8, {0x3, 0x7fffffff}}, {0x6, 0x9, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x8a, 0x18, 0x7fff, 0x7, 0xe, 'syz0\x00', "456d264a8098d23e22e2ac4b005ce815b1be52d1c8f7a63d6c582db024ea4b33", "6d8fbb177008d7e7134ca753d5d64344b26a0987a69be9a7be663ac0706d5579", [{0x1c, 0xfffd, {0x1, 0x7}}, {0x8, 0x4, {0x3, 0x7}}, {0x67ce, 0x7ff, {0x2, 0x3}}, {0x8, 0x7, {0x0, 0x1}}, {0x3ff, 0x7, {0x3, 0xfffffff9}}, {0x6, 0x101, {0x0, 0x1ab}}, {0xf, 0xe000, {0x6, 0xfffffff7}}, {0x200, 0xff, {0x3, 0x9}}, {0xa, 0x7}, {0x0, 0x1, {0x0, 0x6}}, {0x3ec, 0x4, {0x0, 0xffffffff}}, {0x9, 0xfffd, {0x2, 0x9fd}}, {0x0, 0x10, {0x3, 0xde9}}, {0x37de, 0x100, {0x0, 0x6}}, {0x7, 0x1, {0x0, 0x1}}, {0x10, 0x100, {0x3, 0x3a}}, {0x2, 0xf, {0x3, 0x4}}, {0x10, 0x6, {0x0, 0xad6}}, {0x8e13, 0x3, {0x3, 0xc}}, {0xa, 0x80, {0x1, 0x800}}, {0x7fff, 0x0, {0x0, 0x3}}, {0x8, 0x1, {0x1, 0x2}}, {0x2000, 0x1000, {0x0, 0x5}}, {0xff, 0x1, {0x2, 0x79dd}}, {0xb4a, 0x4, {0x2, 0x100}}, {0x6f4, 0xaedd, {0x1, 0xfff}}, {0x0, 0x81, {0x2, 0x8001}}, {0x5, 0x800, {0x3, 0x1}}, {0x2, 0x401, {0x1, 0x5f42}}, {0x0, 0x0, {0x0, 0xfffffff7}}, {0xc, 0x7, {0x3, 0x5}}, {0x0, 0x24, {0x1, 0x3}}, {0x8001, 0xfffd, {0x1, 0x7}}, {0x2, 0x10, {0x3, 0xfff}}, {0x9, 0x4, {0x1, 0x7a1}}, {0x0, 0xffff, {0x0, 0x5}}, {0x0, 0x5, {0x0, 0x401}}, {0x2, 0xc, {0x2, 0x7}}, {0x8, 0xf021, {0x0, 0x1}}, {0x4, 0x1, {0x3, 0x4}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 2.95255851s ago: executing program 0 (id=3198): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004a2815636000d80"], 0x18}, 0x1, 0x0, 0x0, 0xc01c}, 0x20000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x204, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8820}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7524088c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x155}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe20e}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6fb00200}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.879428824s ago: executing program 2 (id=3199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a010400000000000000000200000009000002800900020073797a3200000000140000001100010000000000000000000000000a00000000000000"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r3, 0x3fcb7000) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09e1ffffff000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) 2.691542876s ago: executing program 0 (id=3200): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) write$nci(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="710505cd030606018be8a1976e193c27010466dc77f0b1b54773ee6a19222755d2deac4f088f76bf3c93682f07d04b7bdccfa9d3d690cc68a8388ff2dfc30c6b960d016f65f015a1f19d83de68de15d94d698293bddfc4a2c323752cbeabab060f"], 0x61) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf250203000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x120840}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0xb0, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x87, 0x6, "c3548a78004dea8ab14f46a769a49648082b8cec85cdb61aff764e6e8904d03c0c3256185b84fd6eebf2f3d3bd028dc979d6c3ffe6d765403e5e6e10278f671984651900c5c1ff0b29f6e569f960e4ef8b94111a90225c5a5efc1bcb6a1e7c445511e29ba44ae2081277528b29377d7f839c4ce10b9c2a15a33f36783d869d7524a1ac"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x114, 0x16, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x144, 0x16, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x100, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'bridge0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x401}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x42c}, 0x1, 0x0, 0x0, 0x10040800}, 0x40000) (async) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7505050403050603ac0408025d9ac5613540eda5070406f803a4797d"], 0x1c) 2.643762724s ago: executing program 2 (id=3201): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x20}}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x20) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000003000000080002"], 0x1c}}, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0xf7}, @val={0x2, 0x1, 0x4, 0x81, 0x9}, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@val={0x88a8, 0x2}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x18, 0x1, 0x0, 0x0, "9920c0dc2c2ea171e384dd74360a53f909f2e2595886de72dfa5d6c4963a6e3623c24662c396d7440d9f702e3c6e7826b5a6783becdf58adef27dc0df23490a5"}}}}}, 0x6c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) 2.616985905s ago: executing program 1 (id=3202): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in={0x2, 0x4e23, @multicast1}], 0x3c) listen(r0, 0x7) 2.520301609s ago: executing program 1 (id=3203): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x1, 0x101, 0x5}) 1.698925631s ago: executing program 0 (id=3205): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd7fd24001613802b}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r3, &(0x7f0000000040), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="4bd679cfd566da36d700000000", @ANYRES32=0x0, @ANYBLOB="0a000080976b64086860000004000180"], 0x28}], 0x1}, 0x0) 805.601163ms ago: executing program 1 (id=3206): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) 703.680211ms ago: executing program 2 (id=3207): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x45, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) gettid() sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf252800000008000300", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x200080c0}, 0x44004) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000309000000000000020000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='l', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) socket$inet6_mptcp(0xa, 0x1, 0x106) 699.48866ms ago: executing program 4 (id=3208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) 687.734167ms ago: executing program 0 (id=3209): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000240)={@mcast1, r4}, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$int_out(r5, 0x5460, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r9 = socket$inet6(0xa, 0x3, 0xff) r10 = socket$inet(0xa, 0x801, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @local, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x1, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3b8) close(r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x90) 535.955589ms ago: executing program 1 (id=3210): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000100)="a137685fbe624fa82cba41ca1f52923e392d8037d6839b85a03cced2d989c15cb8f7fec12b67007ab4eecffc6b7fd5cc446aabadf69d9782ee3895c10acb50cb59f6761588759d452b7138bfc91f91e896f7072ebae2ea9f568a92ddbe9fbc4c56b952f503ae9ad67a74469f2856623c158e60ac1b604fa749cea024b2c22f75dcf4c7d38848babcd7d0301b4408b4d5a4fc4ae9d7c2818a29b2192690969939864043a1da8897f6ad0dbf4cdf4cdbe0036f54d8a4ffbd27aa89f7", &(0x7f0000000040)=@tcp6=r1, 0x2}, 0x20) 534.673544ms ago: executing program 4 (id=3211): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000100)=0x30) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb0000002000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c20000000000100007800a0011"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="f00014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x140}], 0x1, 0x3) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280548211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x40400d0}, 0x24048800) 462.123105ms ago: executing program 2 (id=3212): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000001000)={0xa, 0x4e21, 0xa, @empty, 0x85}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r1 = socket(0x2a, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe40c}, &(0x7f00000000c0)=0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x48, 0x2c, 0x800, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008080}, 0x804) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 375.147237ms ago: executing program 2 (id=3213): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x11, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_FLAGS={0x0, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r4 = accept4(r0, &(0x7f0000000040)=@rc, &(0x7f0000000180)=0x80, 0x80800) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x68}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x1, 0x7ff, 0xc, 0x14400, 0x1, 0x2, '\x00', 0x0, r6, 0x2, 0x2, 0x4, 0x6, @void, @value, @value=r6}, 0x50) r8 = socket$caif_seqpacket(0x25, 0x5, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x0, 0x1, 0x2, 0x2, {0xa, 0x4e23, 0x4, @remote, 0x7}}}, 0x32) 303.746432ms ago: executing program 1 (id=3214): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@delchain={0x27c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x240, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8000001}, @TCA_BPF_ACT={0x170, 0x1, [@m_ctinfo={0x128, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0x44, 0x4, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 302.678694ms ago: executing program 4 (id=3215): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000180)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) connect$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=[@ip_tos_int={{0x6b, 0x29, 0x2}}, @ip_retopts={{0x100007f00000000, 0x8, 0x7, {[@end, @generic={0x0, 0x0, "34366567f22197875664"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x6b}, 0x0) 217.818538ms ago: executing program 4 (id=3216): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) 209.165321ms ago: executing program 1 (id=3217): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x5, {{0x2, 0x4e22, @private=0xa010101}}}, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x9) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x8044010) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x28, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x28}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) 58.073551ms ago: executing program 4 (id=3218): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 57.332535ms ago: executing program 2 (id=3219): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=""/160, &(0x7f00000000c0)=0xa0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000100)={'nat\x00', 0x4e, "89b7dc267a205e61bb819d0475df8f0f3c3776c1d273dee0ddae4fb2b5bc4cef895003bcf07457b51d65192fcacb78247de41c5780011ff9048ede1a5f1d10c3250f4087a766e92c74a2d6e759be"}, &(0x7f0000000180)=0x72) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000001c0)={0x32, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x401}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x7}]}, 0x18) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0xb773, 0x5, 0x4, 0x7}, {0x6, 0xd, 0xe, 0x4}, {0x8, 0x8, 0x29, 0x9}, {0x7, 0x1, 0x4, 0x9fa1}, {0x9, 0xa, 0x2, 0xbba}, {0x9, 0x9, 0x9, 0x401}]}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)={0x2b, 0x1e, '\x00', [@generic={0xf7, 0xa7, "1167f61114cf9696ec291d164cc20cf11c425cdbb9fd4e64a1cd6f340cbd7475e29c2297ca6f6a2ddccbbdb02656f070df90dda5c2c77244772c83b16f73b05e6123b441967507d2e30e03772ce636e43a40e971ff9f141c7f9557f85878bdddbf17559b9b827c05a7bff356ff7e1ed1e03c0b1faa24922db3fd5ed3b868f9ed6d7b731238110607ffbe5cfdfa302f7c1e6dfaa320678074d4812855fa90a0399347efdc0fa576"}, @hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x9}}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x6, 0x1, [0x80000000, 0x1, 0x10000]}}]}, 0x100) r2 = socket$isdn(0x22, 0x3, 0x11) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000740)={&(0x7f0000000440)="66b5130552c1c83f514799d83d54e10953d30140e309d08b7650c76ddfaaef5bb6d67d94b1710ecc42c2b0db408405dcd4697020814c90a8fc2a1f6ba7f4f4e6bf20ede2fa3d3316ea0b648e1ec362131e6fa4cae779c3c35766b994910066ae06b80deee4bc6c9d81b451fde757d83cdc2718c1aac304ac0ea91fcaa154062a9f6745a2cae3a06aa6c2df52d7b5e3885dbc659b120873c7beb959e606", &(0x7f0000000500)=""/169, &(0x7f00000005c0)="8edcae0332a69be2f442e7977d774bc2c5803bdb3f2755c53213b3521bf1b5beed7f2ca191c5829e621cc5f24a31176a82d820adcd0bbcb0dae0479146c58f5bde432f48afd65582dc31d43c52ae2e59ef28276f5eaef9861cc22b198fedd40f9bef59ec04814012fc2e47edf233a1c9aee6bb16e3d562df24e8fdfb", &(0x7f0000000640)="9e7c00ddf0eeb5fe36199b458cfba40342c110b4bf9bee72e7114835520463536ee77eaad0cc41bf377819ae1f90cd2c0783f3db66c64d0ee6f4a2c5d4ca0a308474617e65ece06eb27ba1821ca80be1720b3d485e390cb5c10f715c3a745f74f1882cd89fcf6abecf76ba12349607452a0c140e5acded573152033517063d9f52dba2e4ec81cb36e540", 0x10000000, r3}, 0x38) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e4, &(0x7f0000000780)="9fef983b075b0a326dbd43507b88e0206c2a09b7e0095c66ff4068b0c35eb704cad72c4f137c6b6884418a3efe657e937e493856e5e6683eb755382bc5d1e687ba31803c8e8ed02e7be2141bcab45eeaa49adb86b7d8bd1629315cfbd9fa43b3cf04b9636d33c1a1ed37b5958b82629433db04e692f7540dd48ef7c2551435bfb21a9d417ea78f4c8645e0315a45bb1bb70ee6e6234883ce279d0c71677d3109dc3da7db922591ded27e8976237c4b15a0fcbc91019476380edecf9573d5bc809cfa8a2a766baff9f3b7f527244a482544d852e64f1565493676e16a395566") ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000880)={0x6, 0x5, 0x1, 0x7fff, 0x2, [0x4, 0x3]}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000008c0)=0xfffffeff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r3, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'ip6gre0\x00', 0x0, 0x12, 0x72, 0xcc, 0x70, 0x63, @loopback, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x40, 0x80, 0x5c9, 0x10}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0x20, &(0x7f0000000d80)={&(0x7f0000000cc0)=""/50, 0x32, 0x0, &(0x7f0000000d00)=""/99, 0x63}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r2, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x15, 0x24, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4e4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x6, 0x8, 0x9, 0x0, 0x1ff}, @ldst={0x3, 0x1, 0x4, 0x7, 0x7, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @map_val={0x18, 0x7, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x2, 0x2, 0xa, 0x0, 0xfffffffffffffffe, 0x10}]}, &(0x7f0000000ac0)='GPL\x00', 0x100, 0x44, &(0x7f0000000b00)=""/68, 0x41100, 0x12, '\x00', r8, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x2, 0xe, 0x5, 0x8}, 0x10, r9, 0xffffffffffffffff, 0x1, &(0x7f0000000ec0)=[r3, r10, r1, r3, r3, r3], &(0x7f0000000f00)=[{0x4, 0x2, 0x5, 0x7}], 0x10, 0xffffe8b2}, 0x94) recvmsg$can_raw(r6, &(0x7f0000002680)={&(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000001080)=""/95, 0x5f}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/54, 0x36}, {&(0x7f0000002140)=""/10, 0xa}, {&(0x7f0000002180)=""/153, 0x99}, {&(0x7f0000002240)=""/231, 0xe7}, {&(0x7f0000002340)=""/102, 0x66}, {&(0x7f00000023c0)=""/129, 0x81}, {&(0x7f0000002480)=""/64, 0x40}, {&(0x7f00000024c0)=""/56, 0x38}], 0xa, &(0x7f00000025c0)=""/170, 0xaa}, 0x20) bind$inet6(r0, &(0x7f00000026c0)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x401}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000002700)={0x0, 0xa5, "880ea95a54a3b12c36c5a5a3f660858206a54c901226e315ec1dc7a68361ac0ed323634cc8bb54dd29ffbeaaaf9b2329a134d7143f65a828d750cd821e4bd0f90d763f55f2389435683019750c810b630803d23362c408e848a6411d7f7205f10305d7895a056c77135a64973cea282ed24865000d5f2943a158ef46aea1422a1eafbff1c8df6385ba457220d1b9859d4df62084e570b607656e103b766601f74b7b61bde4"}, &(0x7f00000027c0)=0xad) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000002800)={r12, @in6={{0xa, 0x4e22, 0x1, @mcast2, 0x4}}}, &(0x7f00000028c0)=0x84) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), r7) sendmsg$NL80211_CMD_DEL_PMKSA(r11, &(0x7f0000002a40)={&(0x7f0000002900), 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x7c, r13, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x11}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x50}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "7039d54721d4ce57a2a316e3e866452f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "4d6a50ba877b6d79df3019afd922b045"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20048010}, 0x20008040) 0s ago: executing program 4 (id=3220): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x20, 0x0, 0x0, 0x0, 0x1, 0x2c, 0x9, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}}]}, 0x8c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x3c, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)={0xb5c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x13c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x234}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0xa5c, 0x11, 0x0, 0x1, @range={{0xa}, @val={0xa4c, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_RANGE_FROM_DATA={0xf8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x96, 0x1, "cedf6cf1852a3ef729a4f294684ecf4f12c98f114626381c2f524c41fa4e0a97e5d5499c2fe71536b40ef50bbff5e895c319c0b4ebbb933bfc6eae17a3e1cfd167a3fbc310ced8cbfcc0d3ddfe4cb425f2aeaf86399e25a00ffff9170461ea58e7bfb7018ce0d945ec324ac1c898c7243ae93fbd3cdef8e30f892dc47e6cbb440ff594e070ef05e35d6d5b639fea76a6789f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RANGE_TO_DATA={0xd8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "bac8b5e9e541dc8e80bb6ec467a752e8af06b6c94e254d237096b1934bb49df48d8613fc1adf9bd96acfbfa359e9da2742f993ed15407971b7cb4f42068fca579c4c07deafe49cc3d8c97e7cc934efef618476bdf03dacb3080a36b9fa319ddea296656984aee1b3c55692ed5c9db69408e0d99eb6823cb29a65e22b3e054fd9c545ec2d98d690ed297cdba85ec7999a4dae86f3268f13aa506a9e54e426120696a8e2f1fca6f6419a6aa285af29c44cb46f36356d66d1f5267c4d0728ea2629ceaebf9e30586ea210f406c63d"}]}, @NFTA_RANGE_TO_DATA={0x35c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd9, 0x1, "774633d97cd3244a262b3eb4250adb123959f82c1cc9e2b8c86ca2989d1a0d28a73d591b2c851c4ffb067df10af4a27f4a07a1f7df257ee89d8b2ccfd1fa3757f85566c3446a74a38741c4578080c0d1c23c55a6c86c68054ec379aa6fcd3286fa7a61c02758e91cdd2ec9b1173d4fdb89283e0b65c13af56d3e54585173d22922d492ff6fce5e7e8ef352562ae1c3d7f10034dbab8f99ecadf2a82ef995f507ebe186e53a9e97049f9fc5aee752b124c7d019f12149c444c25a0806ed4cc24c8064794956756b7a6a1f152aefea9fe1831c675e28"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xf4, 0x1, "f3e8a9dded954d9af30490f401dbdd285f807438e7b900da5ba4a135df720ec1cca3de9f2d6877dc1212f8ddf912bf77a4532d54bfd7aa5ffecff39c44d82148125e0b0e05924ce89207c15e69c16b0d4c2f45878e7ca1b367f19c927d54c59b3a27308af706d0037a8310deb7ab401a16772899815c4a6eef7216fed74869fb3ec756cfd81d0b5b3e28f3f4038ff4be22283a9a2d0153e49098faa7c1b60e8544bca17c7705346da3947f8f49832773c1eec20e956e60d7ab85e0ce14c5d9fe328cdaef61c368ef16131f80eba16191c939b8ea8a109b15fee0427e4664ccffe0dd06679b9da8ecbad5618fc69fc7f5"}, @NFTA_DATA_VALUE={0x39, 0x1, "a5ebf828d63f355c360510ab0c7829218d16b297a684a1c37803dd2080806ddbbeca759c62588d9b288cae53a7034b920a6b79af88"}, @NFTA_DATA_VALUE={0xa7, 0x1, "bea085966e02e17f97c222a246c62eaedac19325b5fe27ac06f7dec26ea7cf07b08e647da7a340ef59441dcfd5dcdb8cef368e9864f3e7e7416e70b6c87af0daee4c3a6609402afba79fd9c07074acbcaf1442a6a90488c80b9e9c1a26436f792fd14b72576813fd35071872ec2c80ebf2f934d185faa84b53dc641b653e4f499b3d213c49c870c34a5cecf84ed2eaec6c5e8f401b69da386bac38b731a208c7e4a418"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_RANGE_FROM_DATA={0x250, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "2c57e290815f9ab8b18d7cfaca4296447f4d46f8adfe3b5c00271e47993f4e8b89774ee2c5894794b98e7aa2dde5533cf48599ec80e71900e903d31a51090357bba7e3753c6e55cd853ed6debe3ffa1bbe9471daddf978af307988b07238629ae8e559b9e10178767a2634280d4c43f3d42814983868e9611406dfec8b8a594c4f6a8380202de0cf1eb37c364a988b"}, @NFTA_DATA_VALUE={0xb4, 0x1, "9f31c81fbcb92d0f98c207a2a511c7ea4a377df2b37eec5ee1323da025ca7450250fa85f5db3249462cc0c52ac773ab1382e62a6aef422933d00715023a491aa774f0dc5ce98ddded05a04863e383c9007e725a840de2e4a19d0fb34679eeab39bc3e97172e2580a16ce6632604ce687ce8c7d911cf05113ee360135b1f9a508843dbb3832fb57b894b833a6d7dbe22039ac8f030472b15204b8fe1451be34eb7c2c05343e24e9a5bf65ebff1728dfb2"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x99, 0x1, "c1c13a89689c308b23c1548e3e27b8e416e407c177053a94d3ba14f0c8b4cea57d9a8d1e18473a117c07ef9ecf8d6e9b38b98a64a8ddb9ff1306beec316f246b22ea31de869f4a5d7198f28b4c104d785954961afe2f50591e2c8f6b52bef33a667c259150386d39120826a66d799188acc9a73786e25d994b10f0473e3b701fd9ba25fadf2bdb9121c90675b5b3dcd878257e9be4"}]}, @NFTA_RANGE_FROM_DATA={0x54, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_FROM_DATA={0x204, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "6b0e0dcf62c118185d2b4e7747e312987853553214676214dfbb9d4a0501778952ccfc3ec1a3787eb00ef9ef3dfd14f8c279a5ae255781309c2682e7db2a5ae7bbeba23c0b85d5be881dc682f436c9fbdd8c3966a28e26d1127c2e511f9be5d3541bff655e054867cd4cd2ab7cca33f030db8b479ae17647169870bc4a3ad0469edb5940e2e8bf11c03ff90512da7b3be26ffd5fb7a5577be857ef62e453850ee05eb65eba2beccf8d84c6b1c3f1b998740cf87548f1019a993fd248afad668c4a4ee74d6fefbee903c457ab4316ef43853d935ad73370ee73fd5a8d309d1a794bea857d88f54af281198c02b659b0e3f1fafb"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x33, 0x1, "b979cb21e97cc57ab036a95b972d5b249860f57554e674c3852da6345ce256278e33333ca6c9127d2e70cc3ead4ca7"}, @NFTA_DATA_VALUE={0x80, 0x1, "ce2987ec5693945ebc9ec7c2ce3ebfb1f5d4d1bc8f4753c9e93922c1dc633fdd3a8861c2733199d86dca68aa60e11c88c41e880f8cd8a96c7e5766bde9bfa1bf24c6fee63682fee75dcca1dce557f0b4ed81497baff5a0fe6834f5d05cea7c45eeba14320481e4f4fef13289c5815f3aaca16578b6293eef3913f51e"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x50, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}, @NFTA_SET_DESC={0xc8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0f}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x88b}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x331b6625}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x4000}, 0x840) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000000)=@generic={0x3, 0x5, 0xc}) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r8, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): [ 274.940554][T10822] proc_fail_nth_read+0x1b3/0x220 [ 274.940587][T10822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.940621][T10822] ? rw_verify_area+0x2a6/0x4d0 [ 274.940649][T10822] ? __lock_acquire+0xab9/0xd20 [ 274.940669][T10822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.940700][T10822] vfs_read+0x200/0xa30 [ 274.940729][T10822] ? fdget_pos+0x247/0x320 [ 274.940756][T10822] ? __pfx___mutex_lock+0x10/0x10 [ 274.940798][T10822] ? __pfx_vfs_read+0x10/0x10 [ 274.940831][T10822] ? __fget_files+0x2a/0x420 [ 274.940858][T10822] ? __fget_files+0x3a0/0x420 [ 274.940877][T10822] ? __fget_files+0x2a/0x420 [ 274.940909][T10822] ksys_read+0x145/0x250 [ 274.940943][T10822] ? __pfx_ksys_read+0x10/0x10 [ 274.940979][T10822] ? do_syscall_64+0xbe/0xfa0 [ 274.941016][T10822] do_syscall_64+0xfa/0xfa0 [ 274.941047][T10822] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.941078][T10822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.941100][T10822] ? clear_bhb_loop+0x60/0xb0 [ 274.941128][T10822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.941149][T10822] RIP: 0033:0x7f797378e15c [ 274.941168][T10822] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 274.941188][T10822] RSP: 002b:00007f7974550030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.941212][T10822] RAX: ffffffffffffffda RBX: 00007f79739e6090 RCX: 00007f797378e15c [ 274.941228][T10822] RDX: 000000000000000f RSI: 00007f79745500a0 RDI: 0000000000000008 [ 274.941242][T10822] RBP: 00007f7974550090 R08: 0000000000000000 R09: 0000000000000000 [ 274.941256][T10822] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000001 [ 274.941269][T10822] R13: 00007f79739e6128 R14: 00007f79739e6090 R15: 00007fff68318368 [ 274.941308][T10822] [ 275.256856][T10826] geneve2: entered promiscuous mode [ 275.549146][T10845] netlink: 'syz.1.1407': attribute type 11 has an invalid length. [ 275.748127][T10853] macvlan2: entered promiscuous mode [ 275.781224][T10853] macvlan2: entered allmulticast mode [ 275.807455][T10853] bond0: (slave macvlan2): Opening slave failed [ 275.825662][T10870] netlink: 'syz.0.1411': attribute type 4 has an invalid length. [ 276.577530][T10910] lo: entered promiscuous mode [ 276.582564][T10910] netlink: 'syz.3.1425': attribute type 2 has an invalid length. [ 276.609883][T10914] block nbd0: not configured, cannot reconfigure [ 276.639448][T10910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.358544][T10954] __nla_validate_parse: 25 callbacks suppressed [ 277.358565][T10954] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1435'. [ 277.517250][T10960] netlink: 'syz.2.1437': attribute type 4 has an invalid length. [ 277.561725][T10960] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1437'. [ 277.606585][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1439'. [ 277.658707][ T13] nci: nci_rsp_packet: unknown rsp opcode 0xc [ 277.790624][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 277.890897][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 278.267374][T11006] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 278.395973][T10964] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1439'. [ 278.912992][T11038] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 279.439319][T11064] netlink: 'syz.4.1458': attribute type 1 has an invalid length. [ 279.475181][T11062] netlink: 'syz.3.1457': attribute type 17 has an invalid length. [ 279.476535][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1460'. [ 279.483066][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 279.549119][T11062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1457'. [ 279.628287][T11062] erspan0: entered promiscuous mode [ 279.631366][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 279.651601][T11062] erspan0: left promiscuous mode [ 280.114259][T11097] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 280.132190][T11097] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 280.182850][T11099] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.206181][T11099] bond6: (slave lo): Enslaving as a backup interface with an up link [ 280.215757][T11099] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 280.234180][ T8742] lo speed is unknown, defaulting to 1000 [ 280.240823][ T8742] sz1: Port: 1 Link ACTIVE [ 280.247982][ T1211] lo speed is unknown, defaulting to 1000 [ 280.458219][T11105] veth7: entered promiscuous mode [ 280.469433][T11120] IPVS: set_ctl: invalid protocol: 695 137.161.169.227:19322 [ 280.484898][T11105] veth7: entered allmulticast mode [ 280.496307][T11108] caif0: mtu less than device minimum [ 280.796728][T11128] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 280.849570][T11128] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 281.441231][T11163] syzkaller0: create flow: hash 3593051050 index 2 [ 281.645346][ T35] syzkaller0: tun_net_xmit 76 [ 281.650619][ T35] syzkaller0: tun_net_xmit 48 [ 281.667581][ T7494] syzkaller0: tun_net_xmit 76 [ 281.702371][T11155] syzkaller0: delete flow: hash 3593051050 index 2 [ 283.090039][T11181] bridge5: entered promiscuous mode [ 283.095749][T11181] bridge5: entered allmulticast mode [ 283.106282][T11184] tipc: Started in network mode [ 283.111215][T11184] tipc: Node identity e0000002, cluster identity 4711 [ 283.122321][T11184] tipc: Enabling of bearer rejected, failed to enable media [ 283.230696][T11198] bridge6: entered promiscuous mode [ 283.244835][T11198] bridge6: entered allmulticast mode [ 283.661079][T11224] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 283.686041][T11227] __nla_validate_parse: 6 callbacks suppressed [ 283.686061][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1507'. [ 283.795767][T11230] netlink: 'syz.1.1510': attribute type 21 has an invalid length. [ 284.202612][T11250] team0: No ports can be present during mode change [ 284.249601][T11246] netlink: 'syz.4.1516': attribute type 5 has an invalid length. [ 284.396428][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 284.648428][T11263] netlink: 'syz.3.1523': attribute type 10 has an invalid length. [ 284.714651][T11270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1520'. [ 284.824879][T11263] lo speed is unknown, defaulting to 1000 [ 284.871391][T11274] netlink: 'syz.2.1527': attribute type 1 has an invalid length. [ 284.903682][T11277] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1526'. [ 285.206595][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 285.220282][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 285.849904][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 285.878754][T11324] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1537'. [ 286.135855][T11335] SET target dimension over the limit! [ 286.182662][T11337] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 286.197702][T11338] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 286.211587][T11337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.331280][T11338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.726459][T11356] tipc: Enabled bearer , priority 0 [ 286.744273][T11356] syzkaller0: entered promiscuous mode [ 286.753570][T11356] syzkaller0: entered allmulticast mode [ 286.770278][T11356] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 286.872847][T11356] tipc: Resetting bearer [ 286.897948][T11365] : entered promiscuous mode [ 286.903405][T11354] tipc: Resetting bearer [ 286.913666][T11364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.934441][T11354] tipc: Disabling bearer [ 287.075046][T11375] geneve2: entered promiscuous mode [ 287.078640][T11377] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1554'. [ 287.082877][ T8273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 287.099034][ T8273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 287.111775][ T8273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 287.135837][ T8273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 287.204286][T11382] netlink: 'syz.1.1556': attribute type 10 has an invalid length. [ 287.212976][T11382] bridge_slave_1: left allmulticast mode [ 287.219360][T11382] bridge_slave_1: left promiscuous mode [ 287.226058][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.519262][T11399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1563'. [ 287.640954][T11406] netlink: 'syz.2.1564': attribute type 11 has an invalid length. [ 287.957469][T11420] sctp: [Deprecated]: syz.1.1570 (pid 11420) Use of int in maxseg socket option. [ 287.957469][T11420] Use struct sctp_assoc_value instead [ 287.972103][T11423] vxcan1 speed is unknown, defaulting to 1000 [ 287.974324][T11423] vxcan1 speed is unknown, defaulting to 1000 [ 287.996515][T11423] vxcan1 speed is unknown, defaulting to 1000 [ 288.280743][T11423] infiniband syz2: set down [ 288.285369][T11436] ip6t_srh: unknown srh invflags 4000 [ 288.291048][ T7494] vxcan1 speed is unknown, defaulting to 1000 [ 288.298176][T11423] infiniband syz2: added vxcan1 [ 288.359915][T11423] RDS/IB: syz2: added [ 288.366790][T11440] ip6gretap1: entered allmulticast mode [ 288.368105][T11423] smc: adding ib device syz2 with port count 1 [ 288.380550][T11423] smc: ib device syz2 port 1 has no pnetid [ 288.405082][T11441] ip6gretap1: entered allmulticast mode [ 288.428389][ T8742] vxcan1 speed is unknown, defaulting to 1000 [ 288.448872][T11439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.479930][T11423] vxcan1 speed is unknown, defaulting to 1000 [ 288.784071][T11451] xt_TPROXY: Can be used only with -p tcp or -p udp [ 288.801994][T11423] vxcan1 speed is unknown, defaulting to 1000 [ 289.152177][T11423] vxcan1 speed is unknown, defaulting to 1000 [ 289.208676][T11466] __nla_validate_parse: 6 callbacks suppressed [ 289.208696][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1586'. [ 289.436443][T11483] netlink: 'syz.3.1590': attribute type 1 has an invalid length. [ 289.541109][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 289.560133][T11483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.583082][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 289.592458][T11489] openvswitch: netlink: Missing key (keys=40, expected=80) [ 289.600473][T11488] openvswitch: netlink: Missing key (keys=40, expected=80) [ 289.897299][T11423] vxcan1 speed is unknown, defaulting to 1000 [ 290.123381][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 290.318657][T11537] caif0: mtu less than device minimum [ 293.307327][T11547] netlink: 'syz.1.1605': attribute type 12 has an invalid length. [ 293.325168][T11547] netlink: 'syz.1.1605': attribute type 29 has an invalid length. [ 293.343546][T11547] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1605'. [ 293.364065][T11547] netlink: 'syz.1.1605': attribute type 1 has an invalid length. [ 293.384843][T11547] netlink: 'syz.1.1605': attribute type 2 has an invalid length. [ 293.436976][T11423] vxcan1 speed is unknown, defaulting to 1000 [ 293.718339][T11559] bond1: down delay (2) is not a multiple of miimon (4098), value rounded to 0 ms [ 294.094907][T11581] syz.1.1618 (11581) used obsolete PPPIOCDETACH ioctl [ 294.349890][T11599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1624'. [ 294.359297][T11599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1624'. [ 294.685308][T11615] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1627'. [ 294.694448][T11615] block nbd0: not configured, cannot reconfigure [ 294.822646][T11617] netlink: 'syz.0.1629': attribute type 29 has an invalid length. [ 294.833372][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 294.866625][T11619] netlink: 'syz.2.1630': attribute type 30 has an invalid length. [ 294.900559][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1630'. [ 294.985156][T11627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.368398][T11648] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1637'. [ 296.605031][T11659] netlink: 'syz.0.1643': attribute type 4 has an invalid length. [ 296.672024][T11662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1642'. [ 296.724491][T11664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1645'. [ 296.751790][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1645'. [ 297.490073][T11685] IPVS: Scheduler module ip_vs_sip not found [ 297.520758][T11696] netlink: 'syz.3.1654': attribute type 2 has an invalid length. [ 297.533883][T11696] netlink: 'syz.3.1654': attribute type 11 has an invalid length. [ 297.543528][T11685] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1651'. [ 297.561351][T11698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.761014][T11707] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 298.136195][T11722] netlink: 'syz.1.1661': attribute type 30 has an invalid length. [ 298.247945][T11722] bond7: option arp_missed_max: invalid value (0) [ 298.254959][T11722] bond7: option arp_missed_max: allowed values 1 - 255 [ 298.293330][T11722] bond7 (unregistering): Released all slaves [ 298.771765][T11770] xt_TCPMSS: Only works on TCP SYN packets [ 299.190705][T11787] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20003 [ 299.310042][T11794] gre1: entered promiscuous mode [ 299.315843][T11794] gre1: entered allmulticast mode [ 299.522897][T11793] netlink: 'syz.3.1684': attribute type 12 has an invalid length. [ 299.531266][T11793] netlink: 'syz.3.1684': attribute type 29 has an invalid length. [ 299.544286][T11793] __nla_validate_parse: 6 callbacks suppressed [ 299.544307][T11793] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1684'. [ 299.597015][ T61] tipc: Subscription rejected, illegal request [ 299.604267][T11793] netlink: 'syz.3.1684': attribute type 2 has an invalid length. [ 299.653670][T11793] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1684'. [ 300.003917][T11833] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 300.028014][T11833] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 300.099153][T11833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1692'. [ 300.305040][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.674009][T11859] syzkaller0: entered promiscuous mode [ 300.680599][T11859] syzkaller0: entered allmulticast mode [ 300.692642][T11859] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 301.273735][T11885] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 301.431350][T11898] bridge5: entered promiscuous mode [ 301.441405][T11898] bridge5: entered allmulticast mode [ 301.450191][T11896] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1707'. [ 301.592945][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 301.620411][T11907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1710'. [ 301.642953][T11907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1710'. [ 301.683042][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 301.705324][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1710'. [ 301.714427][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1710'. [ 301.786222][T11915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.875751][T11920] netlink: 'syz.3.1714': attribute type 1 has an invalid length. [ 301.944125][T11881] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 302.203800][T11933] x_tables: duplicate underflow at hook 2 [ 302.232756][T11929] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.235696][T11942] SET target dimension over the limit! [ 302.344400][T11950] netlink: 'syz.4.1720': attribute type 4 has an invalid length. [ 302.413536][T11956] netlink: 'syz.4.1720': attribute type 4 has an invalid length. [ 302.630575][T11973] ipt_ECN: cannot use operation on non-tcp rule [ 302.636524][T11958] bond5 (unregistering): Released all slaves [ 302.750385][T11964] IPVS: Error connecting to the multicast addr [ 302.908941][T11982] netlink: 'syz.0.1726': attribute type 15 has an invalid length. [ 303.193984][T11999] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 303.247115][T11999] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 303.269371][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 303.317545][T11999] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 303.326930][T11999] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 303.336298][T11999] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 303.346910][T11999] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 303.355902][T11999] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 303.365313][T11999] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 303.374487][T11999] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 303.383755][T11999] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 303.770150][T12031] dvmrp6: entered allmulticast mode [ 303.783634][T12026] tipc: Enabled bearer , priority 0 [ 303.815714][T12036] syzkaller0: entered promiscuous mode [ 303.833728][T12036] syzkaller0: entered allmulticast mode [ 304.335003][T12025] tipc: Resetting bearer [ 304.387915][T12025] tipc: Disabling bearer [ 304.712421][T12070] batman_adv: batadv0: Adding interface: dummy0 [ 304.734888][T12070] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.834929][T12070] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 304.935301][T12078] netlink: 'syz.3.1750': attribute type 1 has an invalid length. [ 304.953615][T12085] __nla_validate_parse: 78 callbacks suppressed [ 304.953635][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 304.964176][T12078] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1750'. [ 305.016132][T12092] netlink: 'syz.0.1754': attribute type 12 has an invalid length. [ 305.033767][T12092] netlink: 'syz.0.1754': attribute type 29 has an invalid length. [ 305.062048][T12092] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1754'. [ 305.099676][T12092] netlink: 'syz.0.1754': attribute type 2 has an invalid length. [ 305.124572][T12092] netlink: 'syz.0.1754': attribute type 3 has an invalid length. [ 305.156612][T12092] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1754'. [ 305.331006][T12109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1756'. [ 305.357902][T12112] netlink: 408 bytes leftover after parsing attributes in process `syz.2.1759'. [ 305.391893][T12097] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 305.477647][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'. [ 305.586342][T12121] sit0: entered promiscuous mode [ 305.591660][T12121] netlink: 'syz.4.1760': attribute type 1 has an invalid length. [ 305.601341][T12121] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1760'. [ 305.727344][T12132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1763'. [ 305.749393][T12133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1763'. [ 306.050512][T12144] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 306.073621][T12144] bond3 (unregistering): Released all slaves [ 306.436322][T12163] bridge_slave_0: invalid flags given to default FDB implementation [ 307.679201][T12206] syzkaller1: entered promiscuous mode [ 307.685093][T12206] syzkaller1: entered allmulticast mode [ 307.880390][T12218] validate_nla: 5 callbacks suppressed [ 307.880440][T12218] netlink: 'syz.3.1790': attribute type 1 has an invalid length. [ 307.896614][T12218] netlink: 'syz.3.1790': attribute type 2 has an invalid length. [ 308.121385][T12238] netlink: 'syz.0.1796': attribute type 21 has an invalid length. [ 308.918087][T12253] tipc: Enabled bearer , priority 0 [ 308.949045][T12254] syzkaller0: entered allmulticast mode [ 309.045837][T12254] tipc: Resetting bearer [ 309.095441][T12254] tipc: Disabling bearer [ 309.198413][T12271] C: renamed from team_slave_0 [ 309.226966][T12271] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 309.274824][T12271] net_ratelimit: 55 callbacks suppressed [ 309.274844][T12271] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 309.561201][T12290] netlink: 'syz.4.1809': attribute type 1 has an invalid length. [ 309.766839][T12306] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 310.164522][T12332] openvswitch: netlink: Missing valid actions attribute. [ 310.180337][T12332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.212942][T12335] netlink: 'syz.3.1821': attribute type 6 has an invalid length. [ 310.228797][T12335] netlink: 'syz.3.1821': attribute type 6 has an invalid length. [ 310.239677][T12332] syzkaller0: entered promiscuous mode [ 310.255226][T12332] syzkaller0: entered allmulticast mode [ 310.491100][T12342] __nla_validate_parse: 12 callbacks suppressed [ 310.491122][T12342] netlink: 544 bytes leftover after parsing attributes in process `syz.4.1826'. [ 310.499072][T12344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.851262][T12365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1833'. [ 311.174603][T12380] netlink: 544 bytes leftover after parsing attributes in process `syz.3.1840'. [ 311.183020][T12385] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1843'. [ 311.211631][T12383] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1842'. [ 311.318228][T12390] C: renamed from lo (while UP) [ 311.603634][T12402] bond2: entered promiscuous mode [ 311.612549][T12402] bond2: entered allmulticast mode [ 311.622000][T12402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.110408][T12421] netlink: 544 bytes leftover after parsing attributes in process `syz.3.1854'. [ 312.452172][T12439] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1859'. [ 312.463258][T12439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1859'. [ 312.638510][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1861'. [ 312.664913][T12446] netlink: 'syz.2.1861': attribute type 1 has an invalid length. [ 312.685007][T12448] netlink: 'syz.4.1862': attribute type 6 has an invalid length. [ 312.737245][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1861'. [ 313.251366][T12480] netlink: 'syz.2.1871': attribute type 83 has an invalid length. [ 313.519352][T12487] hsr_slave_1 (unregistering): left promiscuous mode [ 314.054082][T12508] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 314.066740][T12508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.205653][T12512] ip6t_srh: unknown srh invflags 4000 [ 314.213985][T12512] netlink: 'syz.1.1883': attribute type 21 has an invalid length. [ 314.231447][T12512] netlink: 'syz.1.1883': attribute type 22 has an invalid length. [ 314.255264][T12512] netlink: 'syz.1.1883': attribute type 23 has an invalid length. [ 314.284931][T12512] netlink: 'syz.1.1883': attribute type 25 has an invalid length. [ 314.298494][T12512] IPv6: NLM_F_CREATE should be specified when creating new route [ 314.563467][T12521] netlink: 'syz.1.1886': attribute type 1 has an invalid length. [ 314.605586][T12521] tipc: Enabling of bearer rejected, failed to enable media [ 314.841839][T12536] veth0_to_bond: entered allmulticast mode [ 314.881184][T12539] Cannot find set identified by id 65534 to match [ 315.117607][T12555] tipc: Enabled bearer , priority 0 [ 315.133237][T12555] syzkaller0: entered promiscuous mode [ 315.139397][T12555] syzkaller0: entered allmulticast mode [ 315.192461][T12555] tipc: Resetting bearer [ 315.212204][T12554] tipc: Resetting bearer [ 315.260747][T12554] tipc: Disabling bearer [ 315.315002][T12553] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 315.322593][T12553] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 315.669757][T12567] __nla_validate_parse: 7 callbacks suppressed [ 315.669778][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1901'. [ 315.694905][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1901'. [ 315.896702][T12573] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 315.904366][T12573] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 316.025955][T12586] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1906'. [ 316.308566][T12594] syzkaller1: entered promiscuous mode [ 316.314113][T12594] syzkaller1: entered allmulticast mode [ 316.592463][T12601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1910'. [ 316.618449][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 316.632715][T12601] bond0: entered promiscuous mode [ 316.649364][T12601] dummy0: entered promiscuous mode [ 316.663860][T12601] gretap0: entered promiscuous mode [ 316.682482][T12601] hsr1: entered promiscuous mode [ 316.703403][T12601] only policy match revision 0 supported [ 316.703427][T12601] unable to load match [ 316.730007][T12617] netlink: 544 bytes leftover after parsing attributes in process `syz.1.1912'. [ 316.873453][T12620] lo: left promiscuous mode [ 316.889693][T12620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.916770][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 316.945060][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.097352][T12374] Set syz1 is full, maxelem 65536 reached [ 317.112725][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 319.243745][T12689] netlink: 544 bytes leftover after parsing attributes in process `syz.3.1928'. [ 319.326875][T12694] IPVS: Unknown mcast interface: nicvf0 [ 319.389968][T12697] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 319.429018][T12697] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 319.603145][T12705] geneve2: entered promiscuous mode [ 319.658448][T12705] geneve2: entered allmulticast mode [ 319.679333][ T175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.706044][ T175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.726576][T12722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1939'. [ 319.736602][ T175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.758898][ T175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.875463][T12732] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 319.883259][T12732] netlink: 'syz.4.1941': attribute type 2 has an invalid length. [ 320.165552][T12755] netlink: 'syz.4.1946': attribute type 21 has an invalid length. [ 320.190143][T12747] ip6gre1: left allmulticast mode [ 320.212052][T12747] bond2: left promiscuous mode [ 320.217602][T12747] bond2: left allmulticast mode [ 320.238664][T12747] bridge5: left promiscuous mode [ 320.243970][T12747] bridge5: left allmulticast mode [ 320.303504][T12747] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 320.325010][T12747] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 320.592906][T12765] netlink: 'syz.1.1950': attribute type 11 has an invalid length. [ 320.699407][T12769] netlink: 'syz.1.1953': attribute type 30 has an invalid length. [ 321.079455][T12790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.228609][T12793] netlink: 'syz.3.1962': attribute type 3 has an invalid length. [ 321.335582][T12802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.360324][T12800] gtp0: entered promiscuous mode [ 321.383078][T12800] gtp0: entered allmulticast mode [ 321.540970][T12809] openvswitch: netlink: Message has 592 unknown bytes. [ 321.572412][T12809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.634325][T12821] netlink: 'syz.2.1971': attribute type 1 has an invalid length. [ 321.647805][T12823] __nla_validate_parse: 5 callbacks suppressed [ 321.647825][T12823] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1969'. [ 321.768438][T12821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.966520][T12832] Cannot find del_set index 49151 as target [ 322.006763][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1975'. [ 322.034278][T12837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1976'. [ 322.426954][T12863] netlink: 'syz.0.1982': attribute type 1 has an invalid length. [ 322.709370][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.715840][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.757994][T12881] netlink: 544 bytes leftover after parsing attributes in process `syz.0.1989'. [ 322.808214][T12879] netlink: 'syz.1.1987': attribute type 3 has an invalid length. [ 322.825136][T12887] netlink: 'syz.4.1991': attribute type 33 has an invalid length. [ 322.846590][T12879] netlink: 'syz.1.1987': attribute type 1 has an invalid length. [ 322.854481][T12879] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1987'. [ 323.188797][T12908] syzkaller1: entered promiscuous mode [ 323.205049][T12908] syzkaller1: entered allmulticast mode [ 323.288496][T12916] netlink: 'syz.0.1998': attribute type 11 has an invalid length. [ 323.505258][T12933] netlink: 544 bytes leftover after parsing attributes in process `syz.0.2003'. [ 351.385545][T12943] netlink: 'syz.3.2007': attribute type 12 has an invalid length. [ 351.448694][T12943] bond5: option primary_reselect: invalid value (255) [ 351.477508][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 351.494324][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2006'. [ 351.521465][T12953] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2009'. [ 351.545027][T12943] bond5 (unregistering): Released all slaves [ 351.690948][T12958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2006'. [ 351.714846][T12958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2006'. [ 351.838902][T12961] bond7: option mode: invalid value (133) [ 351.867648][T12961] bond7 (unregistering): Released all slaves [ 351.893542][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2015'. [ 351.930814][T12977] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2016'. [ 352.001805][T12974] netlink: 544 bytes leftover after parsing attributes in process `syz.3.2014'. [ 352.028117][T12978] tipc: Enabled bearer , priority 0 [ 352.046079][T12969] syzkaller0: entered promiscuous mode [ 352.094891][T12969] syzkaller0: entered allmulticast mode [ 352.145067][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.183637][T12991] gtp0: entered promiscuous mode [ 352.198799][T12991] gtp0: entered allmulticast mode [ 352.215295][T12969] tipc: Resetting bearer [ 352.230866][T12992] bridge: RTM_NEWNEIGH with invalid ether address [ 352.246668][T12992] openvswitch: netlink: Key type 64 is out of range max 32 [ 352.255662][T12968] tipc: Resetting bearer [ 352.265944][T12992] netlink: 'syz.3.2020': attribute type 10 has an invalid length. [ 352.274058][T12992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2020'. [ 352.293977][T12968] tipc: Disabling bearer [ 352.328212][T12992] team0: Port device geneve0 added [ 352.348590][ T8273] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 352.358238][ T8273] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 352.375370][ T8273] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 352.394588][ T8273] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 352.461146][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2024'. [ 353.144686][T13039] gtp0: entered promiscuous mode [ 353.170900][T13039] gtp0: entered allmulticast mode [ 353.301368][T13052] netlink: 'syz.1.2035': attribute type 30 has an invalid length. [ 353.761985][T13079] dummy0: left allmulticast mode [ 353.769766][T13079] dummy0: left promiscuous mode [ 353.775376][T13079] bridge0: port 3(dummy0) entered disabled state [ 353.929144][T13079] bridge_slave_0: left allmulticast mode [ 353.954881][T13079] bridge_slave_0: left promiscuous mode [ 353.968051][T13079] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.027601][T13079] bridge_slave_1: left allmulticast mode [ 354.042123][T13079] bridge_slave_1: left promiscuous mode [ 354.059176][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.109858][T13079] `: (slave bond_slave_0): Releasing backup interface [ 354.170721][T13079] `: (slave bond_slave_1): Releasing backup interface [ 354.221878][T13079] team0: Port device team_slave_0 removed [ 354.246396][T13079] team0: Port device team_slave_1 removed [ 354.259535][T13079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.276999][T13079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.300153][T13079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.357550][T13101] gtp0: entered promiscuous mode [ 354.364810][T13101] gtp0: entered allmulticast mode [ 355.276686][T13152] netlink: 'syz.4.2060': attribute type 33 has an invalid length. [ 355.401699][T13152] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 355.439657][T13152] bond4 (unregistering): Released all slaves [ 355.483426][T13162] nbd: must specify at least one socket [ 355.550862][T13164] gtp0: entered promiscuous mode [ 355.564831][T13164] gtp0: entered allmulticast mode [ 355.757617][T13175] netlink: 'syz.0.2068': attribute type 17 has an invalid length. [ 355.776876][T13175] netlink: 'syz.0.2068': attribute type 1 has an invalid length. [ 355.777287][T13178] netlink: 'syz.1.2070': attribute type 11 has an invalid length. [ 355.787243][T13175] netlink: 'syz.0.2068': attribute type 4 has an invalid length. [ 355.795976][T13179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.811684][T13179] batman_adv: batadv0: Removing interface: dummy0 [ 356.160667][T13195] bond5: ARP target 1.0.0.0 is already present [ 356.168567][T13195] bond5: option arp_ip_target: invalid value (1) [ 356.184467][T13195] bond5 (unregistering): Released all slaves [ 356.569215][T13214] __nla_validate_parse: 16 callbacks suppressed [ 356.569239][T13214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2083'. [ 356.625249][T13222] veth1_to_bond: entered allmulticast mode [ 356.687542][T13224] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2084'. [ 356.710864][T13214] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2083'. [ 356.720728][T13214] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2083'. [ 356.735240][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2081'. [ 356.799168][T13222] bond0: (slave bond_slave_1): Releasing backup interface [ 356.811799][T13222] bond_slave_1 (unregistering): left promiscuous mode [ 356.871960][T13222] veth1_to_bond (unregistering): left allmulticast mode [ 356.873726][T13232] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2088'. [ 356.935383][T13235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2089'. [ 356.957568][T13235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2089'. [ 356.978470][T13235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2089'. [ 357.055019][T13242] netlink: 'syz.3.2091': attribute type 11 has an invalid length. [ 357.073456][T13242] netlink: 'syz.3.2091': attribute type 11 has an invalid length. [ 357.090829][T13242] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2091'. [ 357.149863][T13246] gtp1: entered promiscuous mode [ 357.156120][T13246] gtp1: entered allmulticast mode [ 357.619132][T13269] netlink: 'syz.2.2097': attribute type 29 has an invalid length. [ 357.666298][T13269] netlink: 'syz.2.2097': attribute type 29 has an invalid length. [ 357.720226][T13283] netlink: 'syz.2.2097': attribute type 29 has an invalid length. [ 357.773220][T13269] netlink: 'syz.2.2097': attribute type 19 has an invalid length. [ 357.840384][T13284] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 357.887886][T13284] bond3: (slave lo): Enslaving as a backup interface with an up link [ 357.896839][T13284] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 357.913447][T13283] netlink: 'syz.2.2097': attribute type 29 has an invalid length. [ 358.201323][T13310] gtp1: entered promiscuous mode [ 358.234917][T13310] gtp1: entered allmulticast mode [ 359.182207][T13366] gtp1: entered promiscuous mode [ 359.195131][T13366] gtp1: entered allmulticast mode [ 359.274550][T13371] netlink: 'syz.1.2124': attribute type 15 has an invalid length. [ 359.388782][T13371] netlink: 'syz.1.2124': attribute type 15 has an invalid length. [ 359.388854][ T8273] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 359.429898][ T8273] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 359.457404][ T8273] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 359.494867][ T8273] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 360.140743][T13431] bridge_slave_0: invalid flags given to default FDB implementation [ 360.212041][T13433] gtp2: entered promiscuous mode [ 360.242273][T13433] gtp2: entered allmulticast mode [ 360.491509][T13447] bond5: entered promiscuous mode [ 360.509915][T13447] bond5: entered allmulticast mode [ 360.517837][T13447] 8021q: adding VLAN 0 to HW filter on device bond5 [ 360.620307][T13461] gre0: entered promiscuous mode [ 360.649522][T13461] gre0: entered allmulticast mode [ 360.787065][T13469] netlink: 'syz.4.2152': attribute type 29 has an invalid length. [ 360.857112][T13469] netlink: 'syz.4.2152': attribute type 29 has an invalid length. [ 360.998453][T13479] netlink: 'syz.0.2156': attribute type 11 has an invalid length. [ 361.251609][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.261614][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.280870][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.337824][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.361289][T13498] team0: Device geneve3 is up. Set it down before adding it as a team port [ 361.586605][T13509] __nla_validate_parse: 18 callbacks suppressed [ 361.586629][T13509] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2167'. [ 361.603227][T13507] veth0: entered promiscuous mode [ 361.611479][T13512] ieee802154 phy0 wpan0: encryption failed: -22 [ 361.611931][T13513] bridge0: entered allmulticast mode [ 361.846383][T13506] veth0: left promiscuous mode [ 362.061033][T13542] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2173'. [ 362.074994][T13542] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2173'. [ 362.379781][T13570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.513633][T13576] IPv6: sit2: Disabled Multicast RS [ 362.534351][T13576] sit2: entered allmulticast mode [ 362.892745][T13603] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2193'. [ 362.939503][T13603] validate_nla: 6 callbacks suppressed [ 362.939526][T13603] netlink: 'syz.4.2193': attribute type 1 has an invalid length. [ 363.112556][T13603] bond4: entered promiscuous mode [ 363.130452][T13603] 8021q: adding VLAN 0 to HW filter on device bond4 [ 363.174208][T13615] tc_dump_action: action bad kind [ 363.208558][T13621] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 363.318673][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2198'. [ 363.329129][T13625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.620091][T13648] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2205'. [ 363.652012][T13648] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 363.787725][T13660] bond0: Error: Cannot enslave bond to itself. [ 363.900298][T13663] team0: Device geneve3 is up. Set it down before adding it as a team port [ 364.194446][T13675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2212'. [ 364.818332][T13695] netlink: 'syz.2.2219': attribute type 6 has an invalid length. [ 365.116685][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2224'. [ 365.123850][T13709] tipc: Enabled bearer , priority 0 [ 365.272937][T13709] syzkaller0: entered promiscuous mode [ 365.285566][T13709] syzkaller0: entered allmulticast mode [ 365.297212][T13709] tipc: Resetting bearer [ 365.447090][ T37] tipc: Resetting bearer [ 365.447940][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2229'. [ 365.463783][T13708] tipc: Resetting bearer [ 365.909198][T13743] ip6t_srh: unknown srh match flags 4000 [ 366.396578][T13749] netlink: 'syz.0.2233': attribute type 1 has an invalid length. [ 367.082054][T13708] tipc: Disabling bearer [ 367.093475][T13736] tipc: Enabled bearer , priority 0 [ 367.106197][ T5841] Bluetooth: hci4: link tx timeout [ 367.112436][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 367.121309][ T7494] tipc: Node number set to 3758096386 [ 367.232183][T13753] netlink: 'syz.0.2236': attribute type 1 has an invalid length. [ 367.240300][T13753] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2236'. [ 367.297151][T13755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2235'. [ 367.403510][T13758] pim6reg527: entered allmulticast mode [ 367.431721][T13760] netlink: 'syz.2.2235': attribute type 11 has an invalid length. [ 367.436269][T13764] netlink: 'syz.4.2239': attribute type 1 has an invalid length. [ 367.486878][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'. [ 367.518526][T13768] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2239'. [ 367.550529][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2235'. [ 367.622042][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 367.689947][T13776] ip6gre1: entered promiscuous mode [ 367.697706][T13776] ip6gre1: entered allmulticast mode [ 367.706682][T13776] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.127800][T13798] openvswitch: netlink: Missing valid actions attribute. [ 368.141911][T13798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.156132][T13801] IPVS: ip_vs_add_dest(): server weight less than zero [ 368.381719][T13806] netlink: 'syz.0.2249': attribute type 1 has an invalid length. [ 368.409502][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2251'. [ 368.711190][ T175] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.731442][ T175] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.740265][ T7494] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.782697][T13830] sctp: [Deprecated]: syz.1.2255 (pid 13830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.782697][T13830] Use struct sctp_sack_info instead [ 368.810753][T13830] sctp: [Deprecated]: syz.1.2255 (pid 13830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.810753][T13830] Use struct sctp_sack_info instead [ 368.835654][ T7494] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.915953][T13835] tipc: Enabled bearer , priority 0 [ 368.926712][T13835] syzkaller0: entered promiscuous mode [ 368.932262][T13835] syzkaller0: entered allmulticast mode [ 368.955798][ T7494] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.981816][T13835] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 369.068845][T13843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2262'. [ 369.079763][T13835] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2260'. [ 369.100009][T13835] tipc: Resetting bearer [ 369.109026][T13833] tipc: Resetting bearer [ 369.115438][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2262'. [ 369.179277][T13833] tipc: Disabling bearer [ 369.185388][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 369.779906][T13870] syz.3.2266 (13870) used greatest stack depth: 17824 bytes left [ 369.841169][T13886] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 371.193195][T13955] xt_NFQUEUE: number of total queues is 0 [ 371.307579][T13957] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 371.490598][T13961] bond7: ARP target 1.0.0.0 is already present [ 371.511331][T13961] bond7: option arp_ip_target: invalid value (1) [ 371.569452][T13961] bond7 (unregistering): Released all slaves [ 372.164593][T14006] tap0: tun_chr_ioctl cmd 1074025676 [ 372.188122][T14006] tap0: owner set to 0 [ 372.337491][T14018] __nla_validate_parse: 8 callbacks suppressed [ 372.337513][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2307'. [ 372.464917][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.509205][T14031] netlink: 'syz.2.2310': attribute type 2 has an invalid length. [ 372.549301][T14031] netlink: 'syz.2.2310': attribute type 1 has an invalid length. [ 372.560108][T14033] netlink: 544 bytes leftover after parsing attributes in process `syz.4.2311'. [ 372.795273][T14046] netlink: 'syz.1.2315': attribute type 25 has an invalid length. [ 373.078408][T14065] netlink: 'syz.1.2319': attribute type 10 has an invalid length. [ 373.135161][T14065] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 373.157647][T14074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2322'. [ 373.218205][T14078] netlink: 'syz.0.2323': attribute type 21 has an invalid length. [ 373.249187][T14078] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.378437][T14085] ksmbd: Unknown IPC event: 3, ignore. [ 373.436920][T14090] netlink: 544 bytes leftover after parsing attributes in process `syz.1.2324'. [ 373.761361][T14105] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 373.770684][T14105] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 373.802042][T14108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2329'. [ 373.891409][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 373.913783][T14112] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2330'. [ 373.943205][T14111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2331'. [ 374.004382][T14117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2332'. [ 374.080794][T14123] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 374.185265][T14129] veth1_to_team: entered allmulticast mode [ 374.219661][T14133] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 374.446366][T14145] bridge8: entered promiscuous mode [ 374.460641][T14145] bridge8: entered allmulticast mode [ 374.515837][T14149] netlink: 544 bytes leftover after parsing attributes in process `syz.1.2341'. [ 374.797847][T14155] ip6gre1: entered allmulticast mode [ 374.813245][T14159] netlink: 'syz.2.2345': attribute type 8 has an invalid length. [ 374.815917][T14160] netlink: 'syz.1.2344': attribute type 21 has an invalid length. [ 375.926054][T14233] netlink: 'syz.1.2365': attribute type 1 has an invalid length. [ 375.973714][T14233] 8021q: adding VLAN 0 to HW filter on device bond8 [ 376.229123][T14251] nbd: illegal input index 2958377 [ 376.346751][T14259] tipc: Enabled bearer , priority 0 [ 376.363189][T14259] syzkaller0: entered promiscuous mode [ 376.379611][T14259] syzkaller0: entered allmulticast mode [ 376.399452][T14259] tipc: Resetting bearer [ 376.411827][T14259] syzkaller0: tun_net_xmit 90 [ 376.422065][T14258] tipc: Resetting bearer [ 376.499446][T14258] tipc: Disabling bearer [ 376.586177][T14273] tunl0: entered promiscuous mode [ 376.591596][T14273] netlink: 'syz.4.2379': attribute type 3 has an invalid length. [ 376.798672][T14287] netlink: 'syz.3.2383': attribute type 2 has an invalid length. [ 376.807186][T14287] netlink: 'syz.3.2383': attribute type 1 has an invalid length. [ 376.881748][T14292] pimreg: entered allmulticast mode [ 377.294789][T14322] bond0: entered promiscuous mode [ 377.319209][T14322] gretap2: entered promiscuous mode [ 377.341160][T14322] bond0: entered allmulticast mode [ 377.373159][T14322] gretap2: entered allmulticast mode [ 377.392190][T14322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.499033][T14335] tipc: Enabling of bearer rejected, already enabled [ 377.521166][T14341] __nla_validate_parse: 9 callbacks suppressed [ 377.521186][T14341] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2401'. [ 377.551519][T14335] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 377.572921][T14335] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 377.621052][T14335] syzkaller0: mtu greater than device maximum [ 377.640600][T14335] IPVS: Unknown mcast interface: nicvf0 [ 377.648088][T14335] netlink: 'syz.4.2400': attribute type 29 has an invalid length. [ 377.657968][T14335] netlink: 'syz.4.2400': attribute type 29 has an invalid length. [ 377.668150][T14335] netlink: 'syz.4.2400': attribute type 29 has an invalid length. [ 377.679563][T14335] netlink: 'syz.4.2400': attribute type 29 has an invalid length. [ 377.782029][T14352] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 377.850540][T14359] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 377.975606][T14375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.218713][T14389] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2415'. [ 378.229765][T14390] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2415'. [ 378.447502][T14408] netlink: 544 bytes leftover after parsing attributes in process `syz.2.2417'. [ 378.503088][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 378.775924][T14424] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2423'. [ 378.963505][T14442] IPv6: sit2: Disabled Multicast RS [ 378.971592][T14442] sit2: entered allmulticast mode [ 379.100951][T14449] ip6gre0: Master is either lo or non-ether device [ 379.353123][T14469] netlink: 544 bytes leftover after parsing attributes in process `syz.2.2435'. [ 379.500616][T14476] bond3: entered promiscuous mode [ 379.506031][T14476] bond3: entered allmulticast mode [ 379.511573][T14476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 379.818733][T14495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.824149][T14497] x_tables: duplicate underflow at hook 3 [ 379.826584][T14495] IPv6: NLM_F_CREATE should be set when creating new route [ 379.826686][T14495] IPv6: NLM_F_CREATE should be set when creating new route [ 379.826714][T14495] IPv6: NLM_F_CREATE should be set when creating new route [ 379.969112][T14502] gtp3: entered promiscuous mode [ 379.974180][T14502] gtp3: entered allmulticast mode [ 379.989814][T14505] netlink: 544 bytes leftover after parsing attributes in process `syz.1.2448'. [ 380.033071][T14506] gtp1: entered promiscuous mode [ 380.051059][T14506] gtp1: entered allmulticast mode [ 380.084491][T14507] FAULT_INJECTION: forcing a failure. [ 380.084491][T14507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.124858][T14507] CPU: 1 UID: 0 PID: 14507 Comm: syz.3.2449 Not tainted syzkaller #0 PREEMPT(full) [ 380.124891][T14507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.124906][T14507] Call Trace: [ 380.124915][T14507] [ 380.124925][T14507] dump_stack_lvl+0x189/0x250 [ 380.124964][T14507] ? __pfx____ratelimit+0x10/0x10 [ 380.124997][T14507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.125028][T14507] ? __pfx__printk+0x10/0x10 [ 380.125066][T14507] should_fail_ex+0x414/0x560 [ 380.125108][T14507] _copy_to_user+0x31/0xb0 [ 380.125141][T14507] simple_read_from_buffer+0xe1/0x170 [ 380.125182][T14507] proc_fail_nth_read+0x1b3/0x220 [ 380.125215][T14507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.125248][T14507] ? rw_verify_area+0x2a6/0x4d0 [ 380.125278][T14507] ? __lock_acquire+0xab9/0xd20 [ 380.125297][T14507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.125328][T14507] vfs_read+0x200/0xa30 [ 380.125357][T14507] ? fdget_pos+0x247/0x320 [ 380.125384][T14507] ? __pfx___mutex_lock+0x10/0x10 [ 380.125419][T14507] ? __pfx_vfs_read+0x10/0x10 [ 380.125462][T14507] ? __fget_files+0x2a/0x420 [ 380.125488][T14507] ? __fget_files+0x3a0/0x420 [ 380.125508][T14507] ? __fget_files+0x2a/0x420 [ 380.125540][T14507] ksys_read+0x145/0x250 [ 380.125575][T14507] ? __pfx_ksys_read+0x10/0x10 [ 380.125610][T14507] ? do_syscall_64+0xbe/0xfa0 [ 380.125647][T14507] do_syscall_64+0xfa/0xfa0 [ 380.125677][T14507] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.125709][T14507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.125731][T14507] ? clear_bhb_loop+0x60/0xb0 [ 380.125758][T14507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.125780][T14507] RIP: 0033:0x7f797378e15c [ 380.125800][T14507] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 380.125820][T14507] RSP: 002b:00007f7974550030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.125845][T14507] RAX: ffffffffffffffda RBX: 00007f79739e6090 RCX: 00007f797378e15c [ 380.125861][T14507] RDX: 000000000000000f RSI: 00007f79745500a0 RDI: 0000000000000005 [ 380.125875][T14507] RBP: 00007f7974550090 R08: 0000000000000000 R09: 0000000000000000 [ 380.125889][T14507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.125902][T14507] R13: 00007f79739e6128 R14: 00007f79739e6090 R15: 00007fff68318368 [ 380.125941][T14507] [ 380.344980][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 380.408466][T14512] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2452'. [ 380.573557][T14516] IPv6: NLM_F_REPLACE set, but no existing node found! [ 380.816272][T14546] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2460'. [ 380.886349][T14553] xt_hashlimit: overflow, try lower: 3/0 [ 381.263514][T14580] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 381.278084][T14580] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 381.756519][T14611] tipc: Resetting bearer [ 381.810477][T14616] warn_alloc: 1 callbacks suppressed [ 381.810515][T14616] syz.3.2479: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 381.835615][T14616] CPU: 0 UID: 0 PID: 14616 Comm: syz.3.2479 Not tainted syzkaller #0 PREEMPT(full) [ 381.835647][T14616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.835662][T14616] Call Trace: [ 381.835672][T14616] [ 381.835683][T14616] dump_stack_lvl+0x189/0x250 [ 381.835725][T14616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.835759][T14616] ? __pfx__printk+0x10/0x10 [ 381.835784][T14616] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 381.835818][T14616] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 381.835853][T14616] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 381.835889][T14616] warn_alloc+0x214/0x310 [ 381.835926][T14616] ? stack_depot_save_flags+0x40/0x860 [ 381.835968][T14616] ? __pfx_warn_alloc+0x10/0x10 [ 381.836005][T14616] ? kasan_save_track+0x3e/0x80 [ 381.836037][T14616] ? __kasan_kmalloc+0x93/0xb0 [ 381.836072][T14616] ? xsk_setsockopt+0x4dc/0x8d0 [ 381.836099][T14616] ? do_sock_setsockopt+0x17c/0x1b0 [ 381.836121][T14616] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 381.836143][T14616] ? do_syscall_64+0xfa/0xfa0 [ 381.836175][T14616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.836211][T14616] __vmalloc_node_range_noprof+0x125/0x12d0 [ 381.836292][T14616] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 381.836333][T14616] ? __kasan_kmalloc+0x93/0xb0 [ 381.836377][T14616] vmalloc_user_noprof+0xad/0xf0 [ 381.836412][T14616] ? xskq_create+0xbf/0x170 [ 381.836445][T14616] xskq_create+0xbf/0x170 [ 381.836487][T14616] xsk_init_queue+0xb0/0x110 [ 381.836521][T14616] xsk_setsockopt+0x4dc/0x8d0 [ 381.836555][T14616] ? __pfx_xsk_setsockopt+0x10/0x10 [ 381.836589][T14616] ? __pfx_aa_sk_perm+0x10/0x10 [ 381.836626][T14616] ? aa_sock_opt_perm+0xff/0x1b0 [ 381.836665][T14616] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 381.836687][T14616] ? __pfx_xsk_setsockopt+0x10/0x10 [ 381.836718][T14616] do_sock_setsockopt+0x17c/0x1b0 [ 381.836748][T14616] __x64_sys_setsockopt+0x13f/0x1b0 [ 381.836780][T14616] do_syscall_64+0xfa/0xfa0 [ 381.836814][T14616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.836835][T14616] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 381.836858][T14616] ? clear_bhb_loop+0x60/0xb0 [ 381.836887][T14616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.836910][T14616] RIP: 0033:0x7f797378f749 [ 381.836929][T14616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.836947][T14616] RSP: 002b:00007f7974571038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 381.836971][T14616] RAX: ffffffffffffffda RBX: 00007f79739e5fa0 RCX: 00007f797378f749 [ 381.836987][T14616] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 381.837001][T14616] RBP: 00007f7973813f91 R08: 0000000000000004 R09: 0000000000000000 [ 381.837016][T14616] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.837031][T14616] R13: 00007f79739e6038 R14: 00007f79739e5fa0 R15: 00007fff68318368 [ 381.837070][T14616] [ 381.837152][T14616] Mem-Info: [ 382.175611][T14616] active_anon:3894 inactive_anon:0 isolated_anon:0 [ 382.175611][T14616] active_file:3467 inactive_file:39973 isolated_file:0 [ 382.175611][T14616] unevictable:768 dirty:148 writeback:0 [ 382.175611][T14616] slab_reclaimable:12040 slab_unreclaimable:107520 [ 382.175611][T14616] mapped:29169 shmem:1366 pagetables:1002 [ 382.175611][T14616] sec_pagetables:0 bounce:0 [ 382.175611][T14616] kernel_misc_reclaimable:0 [ 382.175611][T14616] free:1322412 free_pcp:15376 free_cma:0 [ 382.208980][T14632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.250473][T14616] Node 0 active_anon:15676kB inactive_anon:0kB active_file:13868kB inactive_file:159692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116676kB dirty:588kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13384kB pagetables:3748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 382.289390][T14616] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 382.326370][T14616] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.385638][T14638] sctp: [Deprecated]: syz.0.2487 (pid 14638) Use of int in maxseg socket option. [ 382.385638][T14638] Use struct sctp_assoc_value instead [ 382.405671][T14616] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 382.417170][T14616] Node 0 DMA32 free:1389580kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15604kB inactive_anon:0kB active_file:13868kB inactive_file:159692kB unevictable:1536kB writepending:588kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:41180kB local_pcp:20040kB free_cma:0kB [ 382.485023][T14616] lowmem_reserve[]: 0 0 0 0 0 [ 382.490580][T14616] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.544407][T14616] lowmem_reserve[]: 0 0 0 0 0 [ 382.549434][T14616] Node 1 Normal free:3884660kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20960kB local_pcp:10720kB free_cma:0kB [ 382.625416][T14616] lowmem_reserve[]: 0 0 0 0 0 [ 382.647593][T14616] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 382.675499][T14616] Node 0 DMA32: 1263*4kB (UME) 836*8kB (UM) 503*16kB (UME) 606*32kB (UM) 244*64kB (UME) 106*128kB (UME) 35*256kB (UME) 23*512kB (UME) 18*1024kB (UME) 4*2048kB (UME) 311*4096kB (UM) = 1389580kB [ 382.729034][T14616] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 382.753079][T14616] Node 1 Normal: 209*4kB (UE) 56*8kB (UME) 35*16kB (UME) 66*32kB (UME) 38*64kB (UME) 7*128kB (UME) 6*256kB (UME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 945*4096kB (M) = 3884660kB [ 382.806706][T14616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.850077][T14616] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 382.903261][T14616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.930481][T14616] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 382.993261][T14616] 44803 total pagecache pages [ 383.012570][T14616] 0 pages in swap cache [ 383.021540][T14616] Free swap = 124996kB [ 383.094703][T14616] Total swap = 124996kB [ 383.098936][T14616] 2097051 pages RAM [ 383.124988][T14616] 0 pages HighMem/MovableOnly [ 383.130210][T14616] 424122 pages reserved [ 383.135753][T14616] 0 pages cma reserved [ 383.179224][T14677] __nla_validate_parse: 5 callbacks suppressed [ 383.179246][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2498'. [ 383.308900][T14689] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2500'. [ 383.390894][T14689] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 383.459473][T14689] bond7 (unregistering): Released all slaves [ 383.483827][T14703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.527575][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2503'. [ 383.556974][T14707] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 383.577175][T14703] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2504'. [ 383.621102][T14703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2504'. [ 383.631094][T14711] vcan0: entered allmulticast mode [ 383.925409][T14727] gre0: entered promiscuous mode [ 384.040828][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2512'. [ 384.156984][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.163449][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.181311][T14741] nbd: device at index 4 is going down [ 384.220176][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2513'. [ 384.273284][T14749] sctp: [Deprecated]: syz.3.2519 (pid 14749) Use of int in max_burst socket option deprecated. [ 384.273284][T14749] Use struct sctp_assoc_value instead [ 384.337561][T14751] sctp: [Deprecated]: syz.3.2519 (pid 14751) Use of int in maxseg socket option. [ 384.337561][T14751] Use struct sctp_assoc_value instead [ 384.563102][T14765] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2524'. [ 384.601923][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'. [ 384.661077][T14774] validate_nla: 21 callbacks suppressed [ 384.661098][T14774] netlink: 'syz.1.2526': attribute type 8 has an invalid length. [ 384.902601][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2530'. [ 385.132061][T14802] netlink: 'syz.4.2535': attribute type 3 has an invalid length. [ 385.141162][T14803] netlink: 'syz.4.2535': attribute type 3 has an invalid length. [ 385.885184][T14840] syzkaller0: entered promiscuous mode [ 385.890759][T14840] syzkaller0: entered allmulticast mode [ 386.167089][T14857] syzkaller0: entered promiscuous mode [ 386.182981][T14857] syzkaller0: entered allmulticast mode [ 386.268811][T14869] pim6reg: left allmulticast mode [ 386.584093][T14888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.767575][T14899] syzkaller0: entered promiscuous mode [ 386.777481][T14899] syzkaller0: entered allmulticast mode [ 386.784032][T14902] sctp: [Deprecated]: syz.1.2563 (pid 14902) Use of int in maxseg socket option. [ 386.784032][T14902] Use struct sctp_assoc_value instead [ 386.957177][T14908] net veth1_virt_wifi .: renamed from virt_wifi0 [ 387.032540][T14916] netlink: 'syz.0.2567': attribute type 30 has an invalid length. [ 387.192033][T14921] lo speed is unknown, defaulting to 1000 [ 387.407724][T14935] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 387.434693][T14921] vxcan1 speed is unknown, defaulting to 1000 [ 387.687412][T14942] bond7: (slave geneve3): making interface the new active one [ 387.710034][T14942] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 387.721242][ T13] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 20004 - 0 [ 387.802254][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 387.867849][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 387.914869][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 388.128442][T14970] netlink: 'syz.4.2581': attribute type 19 has an invalid length. [ 388.227796][T14973] netlink: 'syz.0.2580': attribute type 11 has an invalid length. [ 388.462804][T14985] __nla_validate_parse: 16 callbacks suppressed [ 388.462827][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2585'. [ 388.480209][T14983] syzkaller1: entered promiscuous mode [ 388.486584][T14983] syzkaller1: entered allmulticast mode [ 388.499649][T14987] openvswitch: netlink: IP tunnel dst address not specified [ 388.798945][T15002] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2589'. [ 388.844787][T15003] IPVS: length: 34 != 24 [ 388.877874][T15002] netlink: 'syz.0.2589': attribute type 1 has an invalid length. [ 388.886047][T15002] netlink: 'syz.0.2589': attribute type 3 has an invalid length. [ 388.893829][T15002] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2589'. [ 388.932042][T15002] NCSI netlink: No device for ifindex 813332851 [ 388.955482][T15006] netlink: 4152 bytes leftover after parsing attributes in process `syz.0.2589'. [ 389.142090][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 389.156563][T15018] veth0: entered promiscuous mode [ 389.330233][T15033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.386323][T15035] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.2599'. [ 389.396540][T15035] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.2599'. [ 389.428524][T15018] veth0: left promiscuous mode [ 389.572850][T15048] netlink: 'syz.1.2601': attribute type 2 has an invalid length. [ 389.582476][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2601'. [ 389.590323][T15047] pimreg: left allmulticast mode [ 389.598257][T15047] dvmrp6: left allmulticast mode [ 389.669109][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2605'. [ 389.721029][T15055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2606'. [ 389.741270][T15053] tipc: Enabling of bearer rejected, failed to enable media [ 390.115949][T15071] netlink: 'syz.3.2611': attribute type 58 has an invalid length. [ 390.147815][T15074] openvswitch: netlink: Unknown nsh attribute 0 [ 390.177231][T15076] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 390.185990][T15076] netlink: ct family unspecified [ 390.191012][T15076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.210467][T15074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.275396][T15079] netlink: 'syz.3.2611': attribute type 3 has an invalid length. [ 390.284338][T15079] netlink: 'syz.3.2611': attribute type 2 has an invalid length. [ 390.856824][T15079] gretap2: entered promiscuous mode [ 390.868259][T15079] gretap2: entered allmulticast mode [ 390.878503][T15074] syzkaller0: entered promiscuous mode [ 390.885345][T15074] syzkaller0: entered allmulticast mode [ 391.148930][T15099] x_tables: duplicate underflow at hook 2 [ 391.284717][T15105] ipt_REJECT: TCP_RESET invalid for non-tcp [ 391.298445][T15103] netlink: 'syz.0.2619': attribute type 1 has an invalid length. [ 391.345051][T15103] netlink: 'syz.0.2619': attribute type 1 has an invalid length. [ 391.354208][T15111] netlink: 'syz.2.2622': attribute type 23 has an invalid length. [ 391.363214][T15103] netlink: 'syz.0.2619': attribute type 2 has an invalid length. [ 391.414817][T15103] netlink: 'syz.0.2619': attribute type 1 has an invalid length. [ 391.427647][T15109] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 391.471341][T15117] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 391.599498][T15129] xt_nat: multiple ranges no longer supported [ 391.680565][T15129] x_tables: ip_tables: DNAT target: only valid in nat table, not [ 391.959963][T15157] ip6gre3: entered promiscuous mode [ 391.975370][T15157] ip6gre3: entered allmulticast mode [ 392.025308][ T35] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 392.033477][ T35] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 392.045007][ T44] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 392.198652][T15171] veth0: entered promiscuous mode [ 392.204059][T15171] veth0: entered allmulticast mode [ 392.674939][ T44] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 392.706960][ T44] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 392.794359][T15209] netlink: 'syz.3.2646': attribute type 12 has an invalid length. [ 392.854288][T15209] bond7: option primary_reselect: invalid value (255) [ 392.886126][T15209] bond7 (unregistering): Released all slaves [ 392.896706][T15214] openvswitch: netlink: Missing key (keys=40, expected=80) [ 393.039898][T15224] netlink: 'syz.0.2651': attribute type 7 has an invalid length. [ 393.108942][T15224] erspan0: entered promiscuous mode [ 393.123928][T15224] batadv_slave_1: entered promiscuous mode [ 393.134980][T15224] batadv_slave_1: left promiscuous mode [ 393.160245][T15224] erspan0: left promiscuous mode [ 393.200215][T15234] bridge0: left allmulticast mode [ 393.238612][T15234] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 393.258912][T15233] openvswitch: netlink: IP tunnel dst address not specified [ 393.445822][T15250] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 393.457187][T15251] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 393.466713][T15250] xt_TCPMSS: Only works on TCP SYN packets [ 393.607649][T15258] __nla_validate_parse: 18 callbacks suppressed [ 393.607671][T15258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2661'. [ 393.825378][ T13] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.833998][ T13] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 20004 - 0 [ 393.843681][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.853318][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 393.882862][T15258] bond0: entered promiscuous mode [ 393.890618][T15258] gretap0: entered promiscuous mode [ 393.901774][T15258] debugfs: 'hsr1' already exists in 'hsr' [ 393.909187][T15258] Cannot create hsr debugfs directory [ 393.915911][T15258] hsr1: entered promiscuous mode [ 393.957539][T15244] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 393.970206][T15244] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 393.981578][T15244] bond7: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 394.028616][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.038349][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 394.049682][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.066222][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 394.092588][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2663'. [ 394.470912][T15291] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 394.564176][T15299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2668'. [ 394.800712][T15317] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2673'. [ 394.821217][T15311] 8021q: adding VLAN 0 to HW filter on device bond8 [ 394.828486][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2670'. [ 394.838039][T15317] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2673'. [ 394.900677][T15312] 8021q: adding VLAN 0 to HW filter on device bond9 [ 394.943522][T15314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.401268][T15351] validate_nla: 6 callbacks suppressed [ 395.401289][T15351] netlink: 'syz.3.2683': attribute type 2 has an invalid length. [ 395.507859][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2683'. [ 395.882571][T15374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2689'. [ 395.987594][T15378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2691'. [ 396.003018][T15378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2691'. [ 396.220958][T15393] IPv6: sit1: Disabled Multicast RS [ 396.250646][T15393] sit1: entered allmulticast mode [ 396.305140][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 396.344289][T15397] netlink: 'syz.0.2699': attribute type 21 has an invalid length. [ 396.467780][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 396.549806][T15412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.050597][T15447] netlink: 'syz.2.2712': attribute type 1 has an invalid length. [ 397.187359][T15452] netlink: 'syz.2.2714': attribute type 4 has an invalid length. [ 397.196849][T15452] netlink: 'syz.2.2714': attribute type 1 has an invalid length. [ 397.290292][T15460] netlink: 'syz.4.2718': attribute type 11 has an invalid length. [ 397.298873][T15460] netlink: 'syz.4.2718': attribute type 11 has an invalid length. [ 397.347533][T15463] lo: entered promiscuous mode [ 397.353091][T15463] gre0: entered promiscuous mode [ 397.361544][T15463] erspan0: left allmulticast mode [ 397.367845][T15463] ip_vti0: entered promiscuous mode [ 397.791901][T15482] netlink: 'syz.1.2726': attribute type 39 has an invalid length. [ 397.822828][T15484] sctp: [Deprecated]: syz.3.2727 (pid 15484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.822828][T15484] Use struct sctp_sack_info instead [ 398.353417][T15520] unsupported nlmsg_type 40 [ 398.511245][T15522] syzkaller0: entered promiscuous mode [ 398.534986][T15522] syzkaller0: entered allmulticast mode [ 398.565679][T15535] netlink: 'syz.0.2743': attribute type 1 has an invalid length. [ 398.616679][T15546] __nla_validate_parse: 10 callbacks suppressed [ 398.616701][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2741'. [ 398.630685][T15522] tipc: Enabled bearer , priority 0 [ 398.781564][T15529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2741'. [ 398.797232][T15535] 8021q: adding VLAN 0 to HW filter on device bond10 [ 398.857714][T15521] tipc: Resetting bearer [ 398.929868][T15521] tipc: Disabling bearer [ 398.991002][T15559] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 399.007515][T15559] bond11 (unregistering): Released all slaves [ 399.018991][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2745'. [ 399.151354][T15571] netlink: 'syz.4.2751': attribute type 1 has an invalid length. [ 399.160702][T15571] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2751'. [ 399.274476][T15575] pim6reg1: entered promiscuous mode [ 399.285535][T15575] pim6reg1: entered allmulticast mode [ 399.462594][T15592] netlink: 'syz.3.2756': attribute type 39 has an invalid length. [ 399.539924][T15598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2756'. [ 399.675238][T15600] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 399.689019][T15600] bond5 (unregistering): Released all slaves [ 399.741274][T15609] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 399.976499][T15621] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2763'. [ 400.009939][T15623] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 400.045311][T15623] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 400.065755][T15623] gretap0: entered promiscuous mode [ 400.074769][T15623] gretap0: entered allmulticast mode [ 400.102853][T15627] x_tables: unsorted underflow at hook 2 [ 400.159682][T15627] gre0: left promiscuous mode [ 400.164592][T15627] gre0: left allmulticast mode [ 400.226173][T15627] veth0: left promiscuous mode [ 400.247196][T15627] veth0: left allmulticast mode [ 400.288764][T15627] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 400.455812][T15651] netlink: 'syz.2.2774': attribute type 15 has an invalid length. [ 400.464581][T15651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2774'. [ 400.611170][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2775'. [ 400.620400][T15657] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 400.628149][T15657] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2775'. [ 401.279912][T15691] netlink: 'syz.3.2784': attribute type 3 has an invalid length. [ 401.288135][T15691] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2784'. [ 401.727492][T15714] netlink: 'syz.3.2792': attribute type 83 has an invalid length. [ 401.737325][T15722] netlink: 'syz.4.2791': attribute type 10 has an invalid length. [ 401.746646][T15722] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 401.771466][T15719] netlink: 'syz.3.2792': attribute type 83 has an invalid length. [ 401.784482][T15722] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 401.835708][T15722] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 401.900255][T15734] netlink: 'syz.3.2798': attribute type 10 has an invalid length. [ 401.925706][T15734] netlink: 'syz.3.2798': attribute type 10 has an invalid length. [ 402.059452][T15743] x_tables: duplicate underflow at hook 3 [ 402.130279][T15748] 8021q: VLANs not supported on lo [ 402.198678][T15751] bridge0: entered allmulticast mode [ 402.254326][T15751] bridge_slave_1: left allmulticast mode [ 402.266862][T15751] bridge_slave_1: left promiscuous mode [ 402.278641][T15751] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.319769][T15751] bridge_slave_0: left allmulticast mode [ 402.327225][T15751] bridge_slave_0: left promiscuous mode [ 402.333237][T15751] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.644039][T15778] netlink: 'syz.2.2810': attribute type 1 has an invalid length. [ 402.675441][T15778] netlink: 'syz.2.2810': attribute type 1 has an invalid length. [ 403.132245][T15809] netlink: 'syz.0.2817': attribute type 9 has an invalid length. [ 403.587511][T15836] lo speed is unknown, defaulting to 1000 [ 403.685090][T15847] SET target dimension over the limit! [ 403.735143][T15808] __nla_validate_parse: 15 callbacks suppressed [ 403.735166][T15808] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2817'. [ 403.842417][T15836] vxcan1 speed is unknown, defaulting to 1000 [ 403.909581][T15808] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2817'. [ 404.164346][T15861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2828'. [ 404.212260][T15859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2830'. [ 404.280387][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2831'. [ 404.309890][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2830'. [ 404.552129][T15868] syzkaller1: entered promiscuous mode [ 404.553692][T15889] x_tables: duplicate underflow at hook 1 [ 404.574763][T15868] syzkaller1: entered allmulticast mode [ 404.683093][T15893] netlink: 'syz.4.2837': attribute type 11 has an invalid length. [ 404.705313][T15893] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.2837'. [ 404.808260][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2840'. [ 404.808890][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2838'. [ 404.888120][T15898] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2838'. [ 405.315751][T15924] xt_hashlimit: overflow, try lower: 3/0 [ 405.595170][T15932] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 405.596111][T15939] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 405.612334][T15939] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 405.646594][T15939] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 405.672491][T15939] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 405.736436][T15939] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 405.745381][T15939] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 405.754130][T15939] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 405.763400][T15939] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 405.814880][T15939] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 405.853895][T15939] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 405.904857][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 406.193672][T15965] SET target dimension over the limit! [ 406.599842][T15970] syzkaller0: entered promiscuous mode [ 406.627246][T15970] syzkaller0: entered allmulticast mode [ 406.672035][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 406.685673][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 406.694908][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 406.703448][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 406.714150][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.511601][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 408.383038][T15986] lo speed is unknown, defaulting to 1000 [ 408.697180][T16025] team0: No ports can be present during mode change [ 408.784894][ T5835] Bluetooth: hci3: command tx timeout [ 408.883973][T15986] vxcan1 speed is unknown, defaulting to 1000 [ 408.956551][T16038] __nla_validate_parse: 9 callbacks suppressed [ 408.956571][T16038] netlink: 544 bytes leftover after parsing attributes in process `syz.4.2887'. [ 409.069852][T16049] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2889'. [ 409.227426][T16054] validate_nla: 2 callbacks suppressed [ 409.227448][T16054] netlink: 'syz.3.2892': attribute type 1 has an invalid length. [ 409.356153][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2894'. [ 409.370831][T16066] netlink: 187468 bytes leftover after parsing attributes in process `syz.0.2893'. [ 409.384035][T16059] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 409.419485][T16059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2892'. [ 409.443046][T16054] veth11: entered promiscuous mode [ 409.481236][T16054] bond8: (slave veth11): Enslaving as a backup interface with a down link [ 409.749235][T16085] netlink: 544 bytes leftover after parsing attributes in process `syz.3.2900'. [ 409.887283][T15986] chnl_net:caif_netlink_parms(): no params data found [ 409.940781][T16095] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 409.952156][T16095] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 409.968739][T16099] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2903'. [ 410.865858][ T5835] Bluetooth: hci3: command tx timeout [ 411.001654][T16128] set match dimension is over the limit! [ 411.034362][T16130] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003 [ 411.210086][T15986] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.225732][T15986] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.237712][T16139] netlink: 'syz.1.2914': attribute type 10 has an invalid length. [ 411.245969][T15986] bridge_slave_0: entered allmulticast mode [ 411.248201][T15986] bridge_slave_0: entered promiscuous mode [ 411.263140][T15986] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.267047][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2915'. [ 411.270673][T15986] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.287869][T15986] bridge_slave_1: entered allmulticast mode [ 411.295791][T15986] bridge_slave_1: entered promiscuous mode [ 411.308390][T16139] netlink: 'syz.1.2914': attribute type 10 has an invalid length. [ 411.320130][T16139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2914'. [ 411.333198][T16143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2916'. [ 411.387121][T16139] batadv0: entered promiscuous mode [ 411.392487][T16139] batadv0: entered allmulticast mode [ 411.404459][T16139] bridge0: port 2(batadv0) entered blocking state [ 411.415674][T16139] bridge0: port 2(batadv0) entered disabled state [ 411.431120][T15986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.461318][T15986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.561634][T15986] team0: Port device team_slave_0 added [ 411.569522][T16154] ieee802154 phy0 wpan0: encryption failed: -126 [ 411.594489][T15986] team0: Port device team_slave_1 added [ 411.600679][T16155] x_tables: unsorted underflow at hook 4 [ 411.678032][T15986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.686202][T15986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.745467][T15986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.767641][ T13] batman_adv: batadv0: IGMP Querier appeared [ 411.773719][ T13] batman_adv: batadv0: MLD Querier appeared [ 411.810244][T15986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.826724][T15986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.887455][T15986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.141922][T15986] hsr_slave_0: entered promiscuous mode [ 412.157227][T15986] hsr_slave_1: entered promiscuous mode [ 412.172094][T15986] debugfs: 'hsr0' already exists in 'hsr' [ 412.188344][T15986] Cannot create hsr debugfs directory [ 412.747605][T16212] 8021q: adding VLAN 0 to HW filter on device bond9 [ 412.801799][T16213] 8021q: adding VLAN 0 to HW filter on device bond9 [ 412.802935][T16224] net_ratelimit: 27 callbacks suppressed [ 412.802955][T16224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.835921][T16213] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 412.852009][T16213] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 412.939523][T16223] ip6erspan1: entered promiscuous mode [ 412.945826][ T5835] Bluetooth: hci3: command tx timeout [ 412.954358][T16223] ip6erspan1: entered allmulticast mode [ 413.143312][T16237] recent_mt_check: 55 callbacks suppressed [ 413.143336][T16237] xt_recent: Unsupported userspace flags (000000b1) [ 413.167144][T16243] netlink: 'syz.1.2943': attribute type 1 has an invalid length. [ 413.186579][T16237] netlink: 'syz.3.2940': attribute type 15 has an invalid length. [ 413.269391][T16243] bond10 (unregistering): Released all slaves [ 413.368325][T16253] tipc: Enabled bearer , priority 0 [ 413.393458][T16253] syzkaller0: entered promiscuous mode [ 413.407166][T16253] syzkaller0: entered allmulticast mode [ 413.503660][T16254] tipc: Resetting bearer [ 413.524192][T16261] netlink: 'syz.4.2948': attribute type 1 has an invalid length. [ 413.548076][T16254] tipc: Disabling bearer [ 413.616401][T16261] bond7: entered promiscuous mode [ 413.622134][T16261] 8021q: adding VLAN 0 to HW filter on device bond7 [ 413.652733][T16277] xt_hashlimit: max too large, truncated to 1048576 [ 414.058906][T16295] tipc: Enabling of bearer rejected, already enabled [ 414.060846][T16297] __nla_validate_parse: 18 callbacks suppressed [ 414.060868][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2957'. [ 414.098675][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'. [ 414.101922][T16295] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 414.126679][T16295] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 414.140256][T16297] netlink: 'syz.3.2957': attribute type 12 has an invalid length. [ 414.145030][T15986] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 414.168572][T15986] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 414.175627][T16297] netlink: 'syz.3.2957': attribute type 11 has an invalid length. [ 414.189202][T15986] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 414.190569][T16300] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2958'. [ 414.254993][T15986] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 414.363621][T16312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2962'. [ 414.538556][T15986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.588887][T16324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2966'. [ 414.601073][T16325] netlink: 544 bytes leftover after parsing attributes in process `syz.3.2965'. [ 414.609717][T15986] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.610736][T16324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2966'. [ 414.649342][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.656853][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.715364][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.723045][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.797718][T16330] tipc: Enabling of bearer rejected, already enabled [ 414.873265][T16334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2970'. [ 415.024989][ T5835] Bluetooth: hci3: command tx timeout [ 415.145255][T15986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.185091][T16352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2975'. [ 415.257368][T16355] netlink: 'syz.3.2974': attribute type 3 has an invalid length. [ 415.288392][T15986] veth0_vlan: entered promiscuous mode [ 415.309372][T16355] tipc: Enabled bearer , priority 0 [ 415.343506][T15986] veth1_vlan: entered promiscuous mode [ 415.455617][T15986] veth0_macvtap: entered promiscuous mode [ 415.471294][T16372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2974'. [ 415.502605][T15986] veth1_macvtap: entered promiscuous mode [ 415.590785][T15986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.644508][T15986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.706939][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.715959][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.777152][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.806367][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.927216][T16389] bridge0: port 1(batadv0) entered disabled state [ 415.953822][T16353] tipc: Disabling bearer [ 416.180303][T16407] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.191051][T16407] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.200502][T16407] ` (unregistering): Released all slaves [ 416.383531][T16411] 8021q: adding VLAN 0 to HW filter on device bond9 [ 416.475459][T16414] bond9 (unregistering): Released all slaves [ 416.680793][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.693768][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.777822][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.795931][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.939411][T16432] netlink: 'syz.3.2992': attribute type 1 has an invalid length. [ 416.978425][T16438] Cannot find map_set index 0 as target [ 417.117801][T16440] 8021q: adding VLAN 0 to HW filter on device bond10 [ 417.127035][T16440] bond9: (slave bond10): making interface the new active one [ 417.135985][T16440] bond9: (slave bond10): Enslaving as an active interface with an up link [ 417.167309][T16432] bond9: (slave gretap3): Enslaving as a backup interface with an up link [ 417.206155][T16448] 8021q: adding VLAN 0 to HW filter on device bond9 [ 417.347406][T16432] vlan4: entered promiscuous mode [ 417.386522][T16432] bond9: entered promiscuous mode [ 417.409214][T16432] bond10: entered promiscuous mode [ 417.893116][T16460] bond12: Unable to set up delay as MII monitoring is disabled [ 417.972998][T16460] bond12 (unregistering): Released all slaves [ 418.011961][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.024277][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.052781][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.078698][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.094341][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.096034][T16470] bridge_slave_0: left allmulticast mode [ 418.136036][T16470] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.150798][T16470] bridge_slave_1: left allmulticast mode [ 418.160541][T16470] bridge_slave_1: left promiscuous mode [ 418.167731][T16470] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.183503][T16470] team0: Port device team_slave_0 removed [ 418.204240][T16470] team0: Port device team_slave_1 removed [ 418.211205][T16470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 418.239836][T16481] netlink: 'syz.1.3003': attribute type 1 has an invalid length. [ 418.364129][T16481] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 418.416146][T16472] lo speed is unknown, defaulting to 1000 [ 418.416186][T16489] caif0: mtu less than device minimum [ 418.605702][T16495] openvswitch: netlink: IP tunnel dst address not specified [ 418.959716][T16472] vxcan1 speed is unknown, defaulting to 1000 [ 419.138603][T16528] __nla_validate_parse: 21 callbacks suppressed [ 419.138624][T16528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3014'. [ 419.209683][T16528] 8021q: VLANs not supported on sit0 [ 419.531301][T16541] team_slave_0: entered promiscuous mode [ 419.537425][T16541] team_slave_1: entered promiscuous mode [ 419.577579][T16541] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 419.625965][T16544] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 419.676958][T16547] x_tables: duplicate underflow at hook 1 [ 419.697031][T16548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3020'. [ 419.739071][T16551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3022'. [ 419.753251][T16539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.908999][T16562] netlink: 544 bytes leftover after parsing attributes in process `syz.1.3024'. [ 419.972717][T16566] netlink: 'syz.0.3026': attribute type 1 has an invalid length. [ 420.023527][T16566] 8021q: adding VLAN 0 to HW filter on device bond12 [ 420.057276][T16566] macvlan4: entered promiscuous mode [ 420.063119][T16566] macvlan4: entered allmulticast mode [ 420.071222][T16566] bond12: entered allmulticast mode [ 420.077369][T16566] bond12: entered promiscuous mode [ 420.084433][T16566] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 420.093796][T16566] team0: Port device macvlan4 added [ 420.100136][T16472] chnl_net:caif_netlink_parms(): no params data found [ 420.145265][ T5835] Bluetooth: hci5: command tx timeout [ 420.249290][T16578] netlink: 'syz.0.3028': attribute type 4 has an invalid length. [ 420.368500][T16583] veth0: entered promiscuous mode [ 420.385821][T16583] veth0: left promiscuous mode [ 420.391091][T16472] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.401343][T16472] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.410047][T16472] bridge_slave_0: entered allmulticast mode [ 420.418741][T16472] bridge_slave_0: entered promiscuous mode [ 420.427749][T16587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3031'. [ 420.428740][T16588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3031'. [ 420.477632][T16583] bond13: Unable to set up delay as MII monitoring is disabled [ 420.490705][T16583] bond13 (unregistering): Released all slaves [ 420.523946][T16472] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.532030][T16472] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.539821][T16472] bridge_slave_1: entered allmulticast mode [ 420.550276][T16472] bridge_slave_1: entered promiscuous mode [ 420.579720][T16586] delete_channel: no stack [ 420.586820][T16586] delete_channel: no stack [ 420.639434][T16472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.653174][T16472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.723630][T16472] team0: Port device team_slave_0 added [ 420.733334][T16472] team0: Port device team_slave_1 added [ 420.775614][T16472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.783023][T16472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.810549][T16472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.824044][T16472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.833255][T16472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.861103][T16472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.915988][T16472] hsr_slave_0: entered promiscuous mode [ 420.922779][T16472] hsr_slave_1: entered promiscuous mode [ 420.930403][T16472] debugfs: 'hsr0' already exists in 'hsr' [ 420.936374][T16472] Cannot create hsr debugfs directory [ 421.096163][T16472] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.162440][T16472] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.210031][T16472] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.305760][T16472] bond0: (slave netdevsim0): Releasing backup interface [ 421.313804][T16472] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 421.325431][T16472] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.338095][T16592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.498026][T16608] ip6t_srh: unknown srh invflags 4000 [ 421.757092][T16472] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.779130][T16472] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.824267][T16472] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.863428][T16472] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.941063][T16637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3043'. [ 421.942749][T16636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3044'. [ 422.045021][T16637] openvswitch: netlink: Key type 31 is not supported [ 422.072178][T16637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3043'. [ 422.206222][T16655] vcan0: entered allmulticast mode [ 422.225777][ T5835] Bluetooth: hci5: command tx timeout [ 422.243414][T16655] vcan0: left allmulticast mode [ 422.271220][T16472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.278937][T16657] SET target dimension over the limit! [ 422.303146][T16472] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.319852][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.327091][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.378641][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.385879][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.862539][T16687] syzkaller1: entered promiscuous mode [ 422.869447][T16687] syzkaller1: entered allmulticast mode [ 422.892145][T16472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.932605][T16692] x_tables: duplicate underflow at hook 3 [ 422.949397][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3056'. [ 423.111882][T16700] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 423.146037][T16700] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 423.184823][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 423.432251][T16472] veth0_vlan: entered promiscuous mode [ 423.447957][T16472] veth1_vlan: entered promiscuous mode [ 423.493921][T16472] veth0_macvtap: entered promiscuous mode [ 423.507297][T16472] veth1_macvtap: entered promiscuous mode [ 423.533808][T16472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.563151][T16472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.612731][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.635455][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.700129][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.754502][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.991714][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.017435][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.068851][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.078128][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.266692][T16749] sch_fq: defrate 1024 ignored. [ 424.296763][T16754] netlink: 'syz.4.2995': attribute type 18 has an invalid length. [ 424.305434][ T5835] Bluetooth: hci5: command tx timeout [ 424.548914][T16761] netlink: 'syz.3.3076': attribute type 4 has an invalid length. [ 424.557598][T16761] __nla_validate_parse: 1 callbacks suppressed [ 424.557617][T16761] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3076'. [ 424.770784][T16768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3079'. [ 425.091837][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 425.103188][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 425.110789][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.136328][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.164230][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.172145][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.226011][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'. [ 425.349553][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 425.359066][T16798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3089'. [ 425.383630][T16783] lo speed is unknown, defaulting to 1000 [ 425.492338][T16802] netlink: 'syz.2.3091': attribute type 12 has an invalid length. [ 425.502476][T16802] netlink: 'syz.2.3091': attribute type 29 has an invalid length. [ 425.510509][T16802] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3091'. [ 425.520419][T16802] netlink: 'syz.2.3091': attribute type 2 has an invalid length. [ 425.537575][T16802] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3091'. [ 425.667116][T16811] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.924354][T16783] vxcan1 speed is unknown, defaulting to 1000 [ 425.956000][T16825] netlink: 'syz.2.3098': attribute type 10 has an invalid length. [ 425.985482][T16825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3098'. [ 425.994525][T16825] batadv0: entered promiscuous mode [ 426.027018][T16829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3100'. [ 426.029542][T16825] batadv0: entered allmulticast mode [ 426.047166][T16829] block nbd0: Unsupported socket: should be TCP or UNIX. [ 426.074573][T16825] bridge0: port 3(batadv0) entered blocking state [ 426.106753][T16825] bridge0: port 3(batadv0) entered disabled state [ 426.138872][T16825] bridge0: port 3(batadv0) entered blocking state [ 426.145653][T16825] bridge0: port 3(batadv0) entered forwarding state [ 426.325219][ T61] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 426.334494][ T61] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 426.385402][ T5841] Bluetooth: hci5: command tx timeout [ 426.649538][T16851] netlink: 'syz.2.3109': attribute type 3 has an invalid length. [ 426.672822][T16851] netlink: 'syz.2.3109': attribute type 1 has an invalid length. [ 426.744877][T16851] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3109'. [ 426.827090][T16855] syzkaller0: entered promiscuous mode [ 426.832649][T16855] syzkaller0: entered allmulticast mode [ 426.970275][T16783] chnl_net:caif_netlink_parms(): no params data found [ 427.025954][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.272180][ T5841] Bluetooth: hci2: command tx timeout [ 427.307797][T16887] netlink: 'syz.4.3119': attribute type 1 has an invalid length. [ 427.430116][T16783] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.458112][T16783] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.465734][T16783] bridge_slave_0: entered allmulticast mode [ 427.473871][T16783] bridge_slave_0: entered promiscuous mode [ 427.488558][T16783] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.496378][T16783] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.503924][T16783] bridge_slave_1: entered allmulticast mode [ 427.523174][T16783] bridge_slave_1: entered promiscuous mode [ 427.633064][T16783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.682185][T16783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.725385][T16903] netlink: 'syz.2.3123': attribute type 11 has an invalid length. [ 427.823798][T16919] rdma_op ffff88807af569f0 conn xmit_rdma 0000000000000000 [ 427.889537][T16783] team0: Port device team_slave_0 added [ 427.910951][T16783] team0: Port device team_slave_1 added [ 428.143765][T16783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.156236][T16783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.184451][T16783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.243774][T16937] vlan2: entered allmulticast mode [ 428.250381][T16937] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 428.262438][T16783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.284038][T16783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.356426][T16783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.481176][T16933] syzkaller0: entered promiscuous mode [ 428.486943][T16933] syzkaller0: entered allmulticast mode [ 429.357779][ T5841] Bluetooth: hci2: command tx timeout [ 429.886153][T16783] hsr_slave_0: entered promiscuous mode [ 429.894263][T16783] hsr_slave_1: entered promiscuous mode [ 429.901129][T16783] debugfs: 'hsr0' already exists in 'hsr' [ 429.907725][T16783] Cannot create hsr debugfs directory [ 429.918061][T16958] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 430.014131][T16963] validate_nla: 2 callbacks suppressed [ 430.014155][T16963] netlink: 'syz.0.3137': attribute type 32 has an invalid length. [ 430.096073][T16967] __nla_validate_parse: 4 callbacks suppressed [ 430.096095][T16967] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3138'. [ 430.286250][T16980] netlink: 'syz.2.3142': attribute type 9 has an invalid length. [ 430.503349][T16783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.538044][T16783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 430.542505][T16988] Bluetooth: MGMT ver 1.23 [ 430.572633][T16783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.731053][T16783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.759929][T16783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 430.788254][T16783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.878637][T17006] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 430.911655][T16783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.936968][T16783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 430.947592][T16783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.062546][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3152'. [ 431.079122][T16783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.100493][T17015] netlink: 'syz.4.3153': attribute type 3 has an invalid length. [ 431.104822][T16783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 431.121309][T16783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.126472][T17015] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3153'. [ 431.267923][T17021] netlink: 'syz.4.3155': attribute type 1 has an invalid length. [ 431.323418][T17023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.357634][T17026] netlink: 'syz.3.3156': attribute type 10 has an invalid length. [ 431.357821][T16783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 431.378802][T17023] netlink: 'syz.2.3157': attribute type 23 has an invalid length. [ 431.401583][T16783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.423952][T17022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.424881][ T5841] Bluetooth: hci2: command tx timeout [ 431.450485][T16783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 431.462184][T16783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 431.671826][T16783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.716612][T16783] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.744438][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.751709][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.793386][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.800633][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.850444][T17050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.130902][T17063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3167'. [ 432.394305][T16783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.550718][T16783] veth0_vlan: entered promiscuous mode [ 432.583525][T16783] veth1_vlan: entered promiscuous mode [ 432.612618][T17084] netlink: 'syz.2.3171': attribute type 11 has an invalid length. [ 432.667372][T17084] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.3171'. [ 432.677081][T16783] veth0_macvtap: entered promiscuous mode [ 432.686170][T16783] veth1_macvtap: entered promiscuous mode [ 432.746359][T16783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.793360][T16783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.829902][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.846534][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.874177][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.908830][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.926089][T17098] x_tables: unsorted underflow at hook 1 [ 432.932627][T17098] netlink: 'syz.4.3176': attribute type 2 has an invalid length. [ 432.941969][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 432.952364][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'. [ 433.093666][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.124545][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.188829][T17107] netlink: 'syz.4.3181': attribute type 11 has an invalid length. [ 433.200103][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.219102][T17107] netlink: 'syz.4.3181': attribute type 11 has an invalid length. [ 433.235851][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.248878][T17107] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3181'. [ 433.505121][ T5841] Bluetooth: hci2: command tx timeout [ 433.650836][T17122] netlink: 'syz.2.3185': attribute type 1 has an invalid length. [ 433.676793][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3185'. [ 433.736747][T17122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.754377][T17121] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 433.783305][T17121] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3185'. [ 433.870101][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.879967][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.889141][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.897663][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.907680][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.986423][T17129] lo speed is unknown, defaulting to 1000 [ 434.155878][T17134] syzkaller0: entered promiscuous mode [ 434.185914][T17134] syzkaller0: entered allmulticast mode [ 434.582934][T17129] vxcan1 speed is unknown, defaulting to 1000 [ 434.658811][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.673784][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 434.686367][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 434.728526][T17150] team_slave_0: entered promiscuous mode [ 434.734309][T17150] team_slave_1: entered promiscuous mode [ 434.746704][T17150] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 434.758099][T17156] netlink: 'syz.0.3193': attribute type 12 has an invalid length. [ 434.855786][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.885988][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 434.915864][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 435.028300][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.040823][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 435.054373][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 435.096979][T17174] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 435.168826][T17177] __nla_validate_parse: 6 callbacks suppressed [ 435.168846][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3199'. [ 435.189902][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.201615][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 435.212118][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 435.262906][T17169] 8021q: VLANs not supported on sit0 [ 435.707364][ T61] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 435.716528][ T61] bond8 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 7a:e4:55:a7:e9:d4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 435.847858][ T61] bond9 (unregistering): (slave gretap3): Releasing backup interface [ 435.912471][ T61] dvmrp0 (unregistering): left allmulticast mode [ 435.974293][ T61] team0: Port device geneve0 removed [ 435.986328][ T5835] Bluetooth: hci1: command tx timeout [ 436.435892][ T61] bond0 (unregistering): Released all slaves [ 436.542698][ T61] bond1 (unregistering): (slave veth5): Releasing backup interface [ 436.554119][ T61] bond1 (unregistering): Released all slaves [ 436.569494][ T61] bond2 (unregistering): Released all slaves [ 436.672475][ T61] bond3 (unregistering): Released all slaves [ 436.768040][ T61] bond4 (unregistering): Released all slaves [ 436.866645][ T61] bond5 (unregistering): Released all slaves [ 436.882025][ T61] bond6 (unregistering): Released all slaves [ 436.896784][ T61] bond7 (unregistering): Released all slaves [ 436.913452][ T61] bond8 (unregistering): (slave veth11): Releasing backup interface [ 436.924895][ T61] bond8 (unregistering): Released all slaves [ 437.038858][ T61] bond9 (unregistering): (slave bond10): Releasing backup interface [ 437.047222][ T61] bond10 (unregistering): left promiscuous mode [ 437.054364][ T61] bond9 (unregistering): Released all slaves [ 437.154429][ T61] bond10 (unregistering): Released all slaves [ 437.388486][T17129] chnl_net:caif_netlink_parms(): no params data found [ 437.397106][T17223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3207'. [ 437.723561][T17243] netlink: 'syz.2.3213': attribute type 12 has an invalid length. [ 437.733364][T17247] netlink: 'syz.1.3214': attribute type 11 has an invalid length. [ 437.754055][T17247] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3214'. [ 437.760789][T17243] netlink: 'syz.2.3213': attribute type 29 has an invalid length. [ 437.804774][T17243] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3213'. [ 437.813946][T17243] netlink: 'syz.2.3213': attribute type 1 has an invalid length. [ 437.832077][T17243] netlink: 39 bytes leftover after parsing attributes in process `syz.2.3213'. [ 437.844323][T17129] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.852790][T17129] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.860427][T17129] bridge_slave_0: entered allmulticast mode [ 437.867913][T17251] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3217'. [ 437.885866][T17129] bridge_slave_0: entered promiscuous mode [ 437.894777][T17251] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3217'. [ 437.907517][T17129] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.915878][T17251] netlink: 'syz.1.3217': attribute type 5 has an invalid length. [ 437.923659][T17251] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3217'. [ 437.938867][T17129] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.955781][T17129] bridge_slave_1: entered allmulticast mode [ 437.971414][T17129] bridge_slave_1: entered promiscuous mode [ 437.985124][ T1211] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 437.997073][ T1211] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 438.005538][ T1211] CPU: 1 UID: 0 PID: 1211 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 438.015563][ T1211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 438.025638][ T1211] Workqueue: events l2cap_info_timeout [ 438.031147][ T1211] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 438.037056][ T1211] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 c0 b4 23 09 cc 66 66 66 66 66 66 2e [ 438.056886][ T1211] RSP: 0018:ffffc90003dcf788 EFLAGS: 00010202 [ 438.062975][ T1211] RAX: dffffc0000000000 RBX: ffffffff891f26f8 RCX: bad9408dee040b00 [ 438.070974][ T1211] RDX: 0000000000000000 RSI: ffffffff891f26f8 RDI: 000000000000004c [ 438.078955][ T1211] RBP: ffffffff8a502205 R08: 0000000000000001 R09: 0000000000000000 [ 438.087028][ T1211] R10: dffffc0000000000 R11: ffffffff8a5021c0 R12: 0000000000000000 [ 438.095019][ T1211] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 438.103190][ T1211] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 438.112221][ T1211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.118841][ T1211] CR2: 000000110c29b213 CR3: 000000007e1a6000 CR4: 00000000003526f0 [ 438.126913][ T1211] Call Trace: [ 438.130208][ T1211] [ 438.133254][ T1211] __kasan_check_byte+0x12/0x40 [ 438.138124][ T1211] lock_acquire+0x8d/0x360 [ 438.142556][ T1211] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.147778][ T1211] ? __cancel_work+0x254/0x2e0 [ 438.152709][ T1211] lock_sock_nested+0x48/0x100 [ 438.157577][ T1211] ? l2cap_sock_ready_cb+0x45/0x140 [ 438.162891][ T1211] l2cap_sock_ready_cb+0x45/0x140 [ 438.167950][ T1211] l2cap_conn_start+0x76d/0xe50 [ 438.172828][ T1211] ? __pfx_l2cap_conn_start+0x10/0x10 [ 438.178218][ T1211] ? __lock_acquire+0xab9/0xd20 [ 438.183082][ T1211] ? __pfx___mutex_lock+0x10/0x10 [ 438.188130][ T1211] ? process_scheduled_works+0x9ef/0x17b0 [ 438.193876][ T1211] l2cap_info_timeout+0x68/0xa0 [ 438.198780][ T1211] ? process_scheduled_works+0x9ef/0x17b0 [ 438.204516][ T1211] process_scheduled_works+0xae1/0x17b0 [ 438.210094][ T1211] ? __pfx_process_scheduled_works+0x10/0x10 [ 438.216273][ T1211] worker_thread+0x8a0/0xda0 [ 438.220880][ T1211] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 438.227242][ T1211] ? __kthread_parkme+0x7b/0x200 [ 438.232220][ T1211] kthread+0x711/0x8a0 [ 438.236316][ T1211] ? __pfx_worker_thread+0x10/0x10 [ 438.241441][ T1211] ? __pfx_kthread+0x10/0x10 [ 438.246231][ T1211] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.251489][ T1211] ? lockdep_hardirqs_on+0x9c/0x150 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 438.256726][ T1211] ? __pfx_kthread+0x10/0x10 [ 438.261331][ T1211] ret_from_fork+0x4bc/0x870 [ 438.265955][ T1211] ? __pfx_ret_from_fork+0x10/0x10 [ 438.271081][ T1211] ? __switch_to_asm+0x39/0x70 [ 438.275853][ T1211] ? __switch_to_asm+0x33/0x70 [ 438.280646][ T1211] ? __pfx_kthread+0x10/0x10 [ 438.285265][ T1211] ret_from_fork_asm+0x1a/0x30 [ 438.290048][ T1211] [ 438.293088][ T1211] Modules linked in: [ 438.298266][ T1211] ---[ end trace 0000000000000000 ]--- [ 438.335367][ T5835] Bluetooth: hci1: command tx timeout [ 438.341228][ T1211] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 438.347789][ T1211] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 c0 b4 23 09 cc 66 66 66 66 66 66 2e [ 438.367768][ T1211] RSP: 0018:ffffc90003dcf788 EFLAGS: 00010202 [ 438.373888][ T1211] RAX: dffffc0000000000 RBX: ffffffff891f26f8 RCX: bad9408dee040b00 [ 438.390551][ T1211] RDX: 0000000000000000 RSI: ffffffff891f26f8 RDI: 000000000000004c [ 438.399009][ T1211] RBP: ffffffff8a502205 R08: 0000000000000001 R09: 0000000000000000 [ 438.407257][ T1211] R10: dffffc0000000000 R11: ffffffff8a5021c0 R12: 0000000000000000 [ 438.415568][ T1211] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 438.423861][ T1211] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 438.433494][ T1211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.440307][ T1211] CR2: 00007f9f21cc3f98 CR3: 000000007cb68000 CR4: 00000000003526f0 [ 438.463752][ T1211] Kernel panic - not syncing: Fatal exception [ 438.470193][ T1211] Kernel Offset: disabled [ 438.474536][ T1211] Rebooting in 86400 seconds..