last executing test programs: 2.766827584s ago: executing program 3 (id=1510): socket$kcm(0x2, 0x4, 0x2) (async) r0 = socket$kcm(0x2, 0x4, 0x2) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) r1 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 2.536086791s ago: executing program 3 (id=1514): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)=""/119, 0x77}], 0x1}, 0x2040) accept4$alg(r0, 0x0, 0x0, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r4, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a030000000000000000000200"], 0x68}}, 0x0) 2.515840819s ago: executing program 3 (id=1517): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) sendmsg$key(r1, &(0x7f0000000400)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x4, 0x0, 0x3, 0x4, 0x0, 0x70bd27, 0x0, [@sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_x_nat_t_type={0x1}]}, 0x20}, 0x1, 0x7}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300), &(0x7f00000001c0), 0xd35, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x2000300, 0xe, 0x30, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) 2.369247172s ago: executing program 3 (id=1520): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x8f, @loopback, 0x1}}, 0x9caa, 0x6, 0x9, 0x3, 0x6}, &(0x7f00000001c0)=0x98) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700), 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x1e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x1, 0x7, 0xa, 0x80000000, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x67, 0x0, 0x4, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x54, 0x52, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x76d}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x14f891bd}, {@loopback, 0x7ca8}, {@loopback, 0xffff8000}, {@broadcast, 0x3}, {@rand_addr=0x64010102, 0xfffffffc}, {@empty, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x7}]}, @timestamp={0x44, 0x20, 0xc6, 0x0, 0x4, [0x7fffffff, 0x72, 0x1, 0x40, 0x0, 0x714, 0x4]}, @cipso={0x86, 0xf, 0x2, [{0x2, 0x2}, {0x0, 0x2}, {0x5, 0x5, "7ccf68"}]}, @ra={0x94, 0x4}, @generic={0x0, 0x10, "874fd14fdcb601f49f0f60fbf846"}, @noop, @ssrr={0x89, 0x13, 0xce, [@private=0xa010102, @local, @multicast2, @multicast1]}, @noop, @timestamp_addr={0x44, 0x14, 0xf3, 0x1, 0x3, [{@local}, {@private=0xa010101, 0x2}]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000440)={@local, 0x0}, &(0x7f00000004c0)=0x14) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x5, 0x7, 0x0, 0x2000009, 0x2d, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x58}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f00000008c0)={'gretap0\x00', 0x0, 0x8, 0x7, 0x1, 0x3, {{0x2f, 0x4, 0x3, 0x3d, 0xbc, 0x64, 0x0, 0x1, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x1d, 0x0, [{0x7, 0x12, "7831bed539d44d17c3e194a3ba2c971c"}, {0x6, 0x3, "a0"}, {0x7, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x60, 0x3, 0x7, [{@multicast2, 0xfffeffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0x4730}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x4}, {@broadcast, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x98, 0x1, 0x7, [{@broadcast, 0x2}, {@private=0xa010100, 0xc93}, {@broadcast, 0xc9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010101, 0x1ff}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0xf8, [@dev={0xac, 0x14, 0x14, 0x42}, @remote, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r12, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000a00)={@mcast2, 0x0}, &(0x7f0000000a40)=0x14) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000a80)={0x0, @loopback, @private}, &(0x7f0000000ac0)=0xc) r15 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r15, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000001880)={'veth0_macvtap\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x1a, r16, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r15, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r16}, 0x14) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000b00)={@private, @dev, 0x0}, &(0x7f0000000b40)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000b80)={0x704, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}]}}, {{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x87ae}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x4c, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xee}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xc4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x485f909d}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r17}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x704}, 0x1, 0x0, 0x0, 0x4a004}, 0x4040085) 2.264130465s ago: executing program 0 (id=1521): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={r5, 0x101}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x10, 0x7, 0x1, 0x10000, 0x401, 0x1000, 0x80000000, 0x6, r5}, &(0x7f0000000040)=0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xabc58ca7eb7d5283}, {0x9, 0xf}, {0x4}}}, 0x24}}, 0x0) 2.249659828s ago: executing program 0 (id=1522): sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x80) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$inet(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003940)="3afc2ecff6f266726cb29b1b1825d9999d6fea2cab9613b3c4ca72ef72a6c02158d7eed64377f1f3f15538e9cef45a0ae59bfb18d50dc887d4d8a3d202655f95e7fc87d49a506ff6726ca8a235b614ad4d14c8e652e43473a6b1af7a3a045dbac8f3b5e571fa11ce17e11e81eb86fe70b234e392b8495c66f3d901c9c34d60", 0x7f}, {&(0x7f00000039c0)="58eda318ade3d6e5c5cfd732f28b98677509ba6c725c1a2e0fb1394633983bb2165140cc5043f79e8c829b5cb1ea7a31de01ab72aae07194a0e4d5ea55085a1a13e71252e986f625ea68e06f318a721d6c515e2de7070eb60029ab5ce1865893cbd2cf5ed3db11c1e96fc0eb58e8606d12ba8252a33bf1e6c2703d7ee701b59f2caa3cc890f634419c9b2585b2d91d4c948ce32d6ab09d0723c22e3021733d210b3ac966ace42d1b04bddbc4ae4a6e355c7ccf564f5e0be6d6f247fcf699ab43a19f2cb470bef71a699cf2f7916f2ff9334eb308", 0xd4}, {&(0x7f0000003ac0)="f9090ea3845041653db38de301c25c180343f1bcbbeaff3157e8c4f242d58321b16c4b690d490319a33c2cb3003a3f021db04ccf587b46eeec592c73c7f7ce7968440cfabdaf7679afe4792c529c8e3e56f49be2ccf105a460428aec50a5c82467e6560cc5c3244b8110fdfb6e1db163ba94ac6fc081bb7f1662be435355b35820ff62eb3ccb6ac7f6b7c647ea292659e23e24bb31f398677899473491914e2d0e2b2d1210441efbe6631345", 0xac}], 0x3}}], 0x1, 0x4000000) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0xc080) 2.168989254s ago: executing program 0 (id=1523): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x8}, 0xc) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="0cf818d1f98cd824e678275918e161293dfa645dbd542eef626a4d8c8e15dbedf5080dbfdfa93338cdec071d617b17781c858c5f245e32011ab7c05ac26829c5ade53e6f18adc999bde766334f8e72f5f1aa1f1142e554f1fc81aa8a18324b42cf2df670648d64b81cd527fc3c1544e7601894b5a0062960117e3928fab5a88a28358f044ccb3484bfbfc254db27e15bf45b6ec9849d7385f08db4d2a40f3f46345b1ec95caeb437cce3476a3a5e1fff65db9cd14215ab495061aaabaaf6ef886ce3f65775a70cf1172a2c959a26339ac44ec27f9c86e44ba3fb3755da0894b7490667500dd2618d1a0990a8939214643ae59ffa50c5d36df2", 0xf9}, {&(0x7f0000000140)="02673f4952e764563eabdfa59521188bcffb114267a2f7f193ea1caa412e02ff1b04fe4adc273217b91c2758", 0x2c}, {&(0x7f0000000180)="e81e9e3b084a479053b52ea95b06ab9873411172a0bb62", 0x17}], 0x3) r1 = accept(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000280)=0x80) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f00000002c0), 0x10, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x3, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "386cb051f6471e24"}, 0x10}, 0x1, 0x0, 0x0, 0x8044}, 0x4008801) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x40, 0x7821, 0x2, 0x5, {{0xb, 0x4, 0x1, 0x2, 0x2c, 0x68, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010100, @multicast2, {[@ssrr={0x89, 0x17, 0xaf, [@remote, @loopback, @broadcast, @empty, @multicast1]}]}}}}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffbff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000005c0), &(0x7f0000000600)=0x30) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000b40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f00000006c0)={0x428, r6, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x348, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xed, 0x4, "d6c193103f350b73723c26b787308a28cb053eab50cb6f5da912823bc3c375b7cc48d79bf7adba7ffbc30332ba04e08895a0d20a5e110cdeb36bc229ef780ecb4fd0dd0bf4f6ab9f1564e3d611e056335a62eb9b2af936d6f628008f79db3a657bc3cc09417eceece76480571faecbde02f25df09443324587395bc4e8aac5380255467d075e64b0e394774ed7268ef6b05bc47971a5f6514deb99c7b1999bf4b7a6c04c4a0515f43c22b7fe2d1f823f2edfc9dd970d5264a04543a5f7592e04458f2b4754ec339b2fbec51337a264000ad5becc46e70f6b4c20ab6f919ace62348bcddf512334c2d4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@,,-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(}:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x7b, 0x4, "2a9a7858eb873d6ebc60a8ae59e75621926b0f83d4380daef8c2a8dd2bb72d418478b548c8d7324f45328c4eed68569adeb76e3494ef2ac22b689884437d66e651a3f12b9ce36139b1e214af2ea921b23894e5d7daec9b92103d03baea668c538492a410fe992ee9c8729a034f851a5548c37b85adbaf3"}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2803}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe5dd7c7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{-\x05\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2400000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0xe9, 0x5, "bb085c7cc6fb33a56bbcc3632b3f8f3f270e3fa96599b1c0493c3e1b24d3b95762b1718e8a680f9d75059e2656a9d882f691942369b5458f45e282385430deb622243783ae14be1caa8e4082e4116ad63557b5b4f509cbbe4a7114996c7ee036a00d87ceaefc1f026f4b59dfc79799e017539b5adceb73f3640981d78a3a0500bdbb54ff409593654a50e21f73639691c47cebc674be7de3e4f15a44333206164dc938eab7aa03cae1f75149227f06702117d2d74a21dfa8c76f20fa7b1cb5492fb5df135feca9ff7d06658300a742c200e91c4e72fefaa45a7d00cc8e81df38d6c2083548"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xa4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3a, 0x4, "de9e112d5d4fa997e2e2c4af2a1284e3bed043fc1a0b854cec23df1b3ed0253dde32d6bf998460cb3643b674ecac4610dc5bc19529a3"}, @ETHTOOL_A_BITSET_MASK={0x63, 0x5, "cb76e189a1088589725f6357d1459f6ec0da96f6c908fb2a4b10867f24e8af7225ec05af9cd419c2d4710ed4963fcddcf8325bef1c613c9db17ccdb89118b4bcb578d0af5897542334cc622aaa1d1a0e85c0693ef885081a7f71b823ce7358"}]}]}, 0x428}, 0x1, 0x0, 0x0, 0x24040000}, 0x40000) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000b80)={0xa, 0xd}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000bc0)={r5}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000c00)={0x0, 0x6, 0x747, 0x0, 0x2, 0x800}, &(0x7f0000000c40)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000890) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000d80)=0x400, 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000dc0)={{0x7}, 0x5}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0xe, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0xc3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x8ff, 0x3, &(0x7f0000000f00)=""/3, 0x0, 0x10, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000f80)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000fc0)=[{0x2, 0x5, 0xd, 0x5}, {0x0, 0x2, 0xe, 0x5}, {0x3, 0x5, 0xa, 0x1}], 0x10, 0x7fffffff}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000010c0)=@generic={&(0x7f0000000e00)='./file0\x00', r8}, 0x18) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x104, r9, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2b}, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "38a0a9f34afd4364c4fa3f32670af18c8f897218616aa29c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e42c1c50ba17737ffa7dec386db898db428bfbc957163389"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4f80e649f1edfe8fd72f7ca5eb5cc0f478e24a284496e500"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x104}, 0x1, 0x0, 0x0, 0x4000090}, 0x24008000) connect$tipc(r2, &(0x7f0000001340)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10) recvmmsg(r7, &(0x7f0000002780)=[{{&(0x7f0000001380)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001400)=""/55, 0x37}, {&(0x7f0000001440)=""/195, 0xc3}, {&(0x7f0000001540)=""/215, 0xd7}, {&(0x7f0000001640)=""/32, 0x20}, {&(0x7f0000001680)=""/220, 0xdc}, {&(0x7f0000001780)=""/83, 0x53}, {&(0x7f0000001800)=""/147, 0x93}], 0x7, &(0x7f0000001940)=""/191, 0xbf}, 0x9}, {{&(0x7f0000001a00)=@rc={0x1f, @none}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001a80)=""/217, 0xd9}, {&(0x7f0000001b80)=""/10, 0xa}, {&(0x7f0000001bc0)=""/15, 0xf}], 0x3, &(0x7f0000001c40)=""/223, 0xdf}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001d40)=""/82, 0x52}, {&(0x7f0000001dc0)=""/106, 0x6a}, {&(0x7f0000001e40)=""/168, 0xa8}, {&(0x7f0000001f00)=""/101, 0x65}, {&(0x7f0000001f80)=""/218, 0xda}, {&(0x7f0000002080)=""/147, 0x93}, {&(0x7f0000002140)=""/135, 0x87}, {&(0x7f0000002200)=""/1, 0x1}], 0x8, &(0x7f00000022c0)=""/76, 0x4c}}, {{&(0x7f0000002340)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002540)=[{&(0x7f00000023c0)=""/120, 0x78}, {&(0x7f0000002440)=""/252, 0xfc}], 0x2, &(0x7f0000002580)=""/18, 0x12}, 0x80000001}, {{&(0x7f00000025c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002640)=""/254, 0xfe}], 0x1}, 0x5}], 0x5, 0x12080, &(0x7f00000028c0)={0x0, 0x3938700}) socket$packet(0x11, 0x3, 0x300) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002940), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000002a80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0x90, r11, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x90}}, 0x48011) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x28, r9, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x32}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x43264b012b4db64a) 2.076105346s ago: executing program 0 (id=1524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) (async) r5 = getuid() sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@delpolicy={0x438, 0x14, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, 0xee00}, 0x8000000}, [@etimer_thresh={0x8, 0xc, 0x9}, @offload={0xc, 0x1c, {r4, 0x3}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd28, 0xffff}}, @tmpl={0x144, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3506, 0x0, 0x1, 0x3, 0xffffff01, 0x8, 0x8000}, {{@in6=@empty, 0x4d2, 0x2b}, 0xa, @in=@multicast2, 0x0, 0x2, 0x3, 0x0, 0x6, 0xd, 0xa}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4d2, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3502, 0x1, 0x1, 0x96, 0x8000, 0x6, 0x1000}, {{@in=@broadcast, 0x4d5, 0x8b}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3505, 0x2, 0x2, 0x4, 0x0, 0x0, 0xd3d9}, {{@in=@loopback, 0x4d3, 0x33}, 0xa, @in6=@empty, 0x3500, 0x2, 0x3, 0x8, 0x7, 0x1, 0x1}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e23, 0x4e24, @in=@rand_addr=0x64010102}}, @algo_aead={0xba, 0x12, {{'morus1280\x00'}, 0x370, 0x200, "f5f8b9179b264c98781f6cad4a1ced1daa6a4d5d63118e76cf95f2745e3cf314c5ce0639c3dec847fced1f237ab6b038ac1066821e66ce5ba708a3ab50a6e667c6974dbbbcba026b62872504f12ca0887819a46f727dab8434c462065943cd4b675d390c8dbb586eae3c35383f5c"}}, @proto={0x5, 0x19, 0x6c}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x101, 0x4e21, 0x400, 0x2, 0x20, 0x80, 0x8, 0x0, 0xee00}, {0x101, 0x5, 0xfffffffffffffffe, 0x9, 0x10000, 0xce63, 0x1000, 0x4}, {0x2, 0x9, 0x8, 0xb}, 0x1, 0x6e6bbb, 0x2, 0x1, 0x1, 0x1}}, @sa={0xe4, 0x6, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xaa2, 0x4e23, 0xf000, 0xa, 0x20, 0x80, 0x6, 0x0, r5}, {@in6=@mcast2, 0x4d2, 0x32}, @in6=@mcast2, {0x5, 0x8000, 0xf, 0x7109, 0x4, 0xb10, 0xa, 0x4}, {0x60, 0xb, 0xa7}, {0x1, 0x2, 0x80000001}, 0x70bd29, 0x3500, 0x2, 0x3, 0x0, 0x91}}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x6}}]}, 0x438}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2.07339625s ago: executing program 0 (id=1525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000fcffffff180100002020782500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800001c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2081}, 0x20004080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a00000000000061117c000000000085000000ce00000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x88b5}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x2f, 0x0, @private=0x1fe1, @local}, {0xa000, 0x86dd, 0x8}}}}}}, 0x2e) 1.676145684s ago: executing program 4 (id=1533): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x2, 0x3, 0x6) (rerun: 64) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.546306477s ago: executing program 4 (id=1538): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f00000013c0)="f0f6daa759c2959b895f53604eb453924733b1b2249e0c8f7b2b44061dd2dc24b6dcd41291c170718cb8700c77e63e392006169dbd94b3e4b1656e0000d10635b246734d", 0x44}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x20000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6ef5, 0x400003a, 0x0, 0x2240, r1, 0xe4, '\x00', 0x0, 0xffffffffffffffff, 0x205, 0x0, 0x4, 0xe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r3}, 0x38) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}]}, &(0x7f0000000080)=0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010326bd7000030000000000000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x59) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r9, 0x0, 0x178}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', 0x0, r1}, 0x50) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r12) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, r13, 0x400, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r14}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r15 = socket(0x840000000002, 0x3, 0x100) connect$inet(r15, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r14, 0x29, 0x2, 0xed, 0xd0, 0x4e, @mcast1, @remote, 0x80, 0x7, 0x2, 0xffffffff}}) setsockopt$inet_mreqsrc(r15, 0x0, 0x25, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.545944809s ago: executing program 1 (id=1539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1403, 0x100, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004000}, 0x20048000) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x560, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0x1c, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x8, 0x38, 0x0, 0x1, [@typed={0x4, 0x7f, 0x0, 0x0, @binary}]}]}, @typed={0x8, 0x800, 0x0, 0x0, @u32=0x280}, @nested={0x10, 0x37, 0x0, 0x1, [@typed={0xc, 0xe4, 0x0, 0x0, @u64=0x7fffffff}]}, @generic="e5f97bc68ab692982b49693af515d11b3e2b028d2bb1b766d9b1c5fb5f426684524297ef352e5db61ad1f08993a742e8b28ad2f2382c3713951d88cabe52ed2ca6d45206ef956f1cb71747437ef299764dd5657c8705f66c70b398e8bd183e19505c4ff294002b53291c3eee66c6f2c66870c1ce81678d752d30835a48aad2213815b50933ddd880be2cb240e015023bacdc7b9236eea1404933dbae1ffcc9e87c18b0f2bec2517634644cb530d9c299b19d238f99484c2cb72c8e5828d6a8f47e313f76d6e5af0919d0e6beab7208963a4c86aaaaa0b747092d73048d5cb30c01aba5", @nested={0x401, 0x75, 0x0, 0x1, [@nested={0xb4, 0x3b, 0x0, 0x1, [@generic="fd1b992869f29a5e4373379d0a51f9e32592c235fb16bd73fc0e27f527fc6afc72cc54a838f7d8c81be58f2611ca880c44b00e8cc48041f90ca1dd8f49d701a307969854dda679244fe61f54ee83aa621cf54403f373054a62d585de62d813f9ee7a0c22d6a22634e7ab8a9f9d949caf8a64bf7cbb097801a431c7e08fcb859b5a7a686c", @nested={0x4, 0x100}, @nested={0xc, 0x123, 0x0, 0x1, [@typed={0x6, 0xb3, 0x0, 0x0, @str=']\x00'}]}, @typed={0x14, 0xec, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x71, 0x0, 0x0, @fd}]}, @nested={0x69, 0xee, 0x0, 0x1, [@nested={0x4, 0x24}, @generic="a5ad7f2ad94479eba9e81c4e76b1dddc49b355498e17987f0ebd78a811c3a3cc67c838af150df6897855a70553484b313e8afc063ee70dbc7b8042337e", @nested={0x4, 0x108}, @nested={0x4, 0x5}, @typed={0x8, 0x95, 0x0, 0x0, @pid}, @typed={0x8, 0xc7, 0x0, 0x0, @fd}, @typed={0xc, 0x21, 0x0, 0x0, @u64=0x80000000}]}, @generic="cf466b1a69c6d8dc3a9c6f55483ecb274567a42ba87c3bf140ac3aa1532411ba0a54c49b353e57e55d143bb429d750f6677db23425df34f700fea6771ecc08c185417317beb01ac97a672d3bf4c1c1e12b943ebda111b09108120337f63fc96b46219c635fc26d7aaa4830aa9a0b6ba665c21ba84547ee0e5620ec76ff2a792e4acaa8edef6a692c993867e52db2ed57d10584317b61c45c470b0f7926e276eb00451cbf346f8a569c2995f3edf89aea1d8077b393c3282bcf75bf24238a3ab38927678f938cd33565d92f3cdedd25113bc4912e82f9cc862bc2539dced2", @generic="776d1cf490cd4b65ad1ce9fa511eae0b112ebc34433f41f8a5869c8c15ebb28f1ed0e537619847d87884f8c44c1a0336d56fa0c553140af9a038c84f3cd1b4cb569833168b8e96fd1f6a90d6849391f0ae0eecdc1aefa7814695937b84ee1b4aaadb5df0481b81063fb4aafe57fe27af20059d53b241b30e05404dbd4d91480d78f6670afbf08c47f41f39649cd4a6d6db14c81191c8a09c860354590de909f181d8e9eabef835431955447036e202512d06c3ab6303e5d989609e88d7cf8d", @nested={0xc, 0x11d, 0x0, 0x1, [@nested={0x4, 0x42}, @nested={0x4, 0x100}]}, @nested={0x131, 0xb, 0x0, 0x1, [@generic="8f9f9122f465662531564fae4b78d4e633754869978a3af986be268417de6f72990b7251a96ab4f38043d2fbcaf00ac7e8812126e67ad0ddca7ccaae3c8a55a5ca651b2e1893fd416632a72daabdbdc5cc83ae9f856e80da550b2fc23a7cc96d274ad3bc481774b7e22b6765cb8095fb83eacac626a6cc216b642e39c452d68de9238d606413aebe7109ee36ce6e1b3b6f632b8f7c507d5a888c8875d7afb1a49fe346ec30398295735e7657dffa9a764a06687625b4d73a2c2baa045087a4b5fdc91fb6f934e991741078f86744c444c474c52d7e4d07c5", @generic="b9fb22206b8a3d3243e518559684bd4024a9a7bed680d396076b8b888e3a4a96d36a921349bd3d1e016e7c40bc2c017a595b1e16a1c7f908bdbc2dcc4c52e443a67f51fc0561953aa4", @typed={0x8, 0xb4, 0x0, 0x0, @u32=0x200}, @nested={0x4, 0xce}]}]}, @generic="b77e3763f2e43857385093f1c33a1f4457b9696f4eec47c64f34cb48c11ea928001d84b2e9e662b7171e21f5335d"]}, 0x560}}, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000c00000004000000fc"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r2}, 0x38) socket$kcm(0x29, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x34, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.503014255s ago: executing program 1 (id=1541): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0xb71, 0x2, 0x0, 0x1, 0x5, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01001159d194aba28f03010000000e0001006e657664657673696d0000000f0002006e657464657673696d000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x6, 0x7}, &(0x7f00000002c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000005400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) ioctl(r1, 0x100, &(0x7f0000000080)="33a5330deb99aae1adc2c000d4ee728001bc3cb0d47d6f9450665c2e01998ff28c808dce6442faca6b4ccb862ed84b75b05fe8a49c67b528da9f67d7597198928633a0534079c5875be57509f5c2d0ea8463fe9ce4c097f314ac23c848edfb848824c182998355f46c623a8ff9ac96b0ad4b915ae8ca960e0ddd192edd862552e7f10dfb712ca405494720062f430f9fd2caaf98d94a7ea482dc9637d6667eec0a5a39b4d5d8d78cbc2cc09d1242") r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_PRIORITY={0x6, 0x6, 0xffff5c04}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) 1.424036365s ago: executing program 3 (id=1542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711875000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000002c0)="a7e3c11073f57f9e4978aafe780ae4f8ae7620312693639f91d0bf5de4a04117e44a1050cc03b8dc9ec3898f6fe8be971a235e2c5b4bed729efd79b53422cad3555a3fea472ba77dcfc36fafb53597b4c1507f9190a4477cc57c169ef4b1e3953659192a1315d362b9697185601352ba2100", &(0x7f0000000340)=""/75, &(0x7f00000003c0)="6adcd3da9edb59240e8971b926407c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f2bc5bd8db70f3b80ca78f5b990c8db9117657cf0cb591f952cee90776c191451b9187caf0f1a600e4b401fad569ae25d4", &(0x7f0000000600)="d8b8554e0d1c686676f67bbefb4ee16c42942a8c43e0c658346dc9986923ceb17a2ef6127fde361aa8d16af81ded9ed06086bd48a6943f0e3993ab3e441b2b866b307d0d4e5acabed95342d9ce0f56481d96384ac6a0bd6dcbc7b3ceec14fa41bf168985127e0ec1bd704712757912095afc44cdde636606f69f55e83e43e019fa60dd8e6b9aa3087857dd2d1ed56f2e868a7c0b5bba892bf7fe2f37468c7fa01b9a318d20b26c3d407a933023079b751749ed22cf7fe6f6f5aa6d6b81504eae68dbfa27615014224736b18f102f2f060c1ca564f4c9beab26e0ec299942490f66bbe76d2c9c276c4e", 0x4, r2, 0x4}, 0x38) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffe}, {0x7d}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@dev}, {{@in=@remote, 0x0, 0x33}, 0x20, @in6=@private1={0xfc, 0x1, '\x00', 0x10}, 0x0, 0x5}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) 1.340084963s ago: executing program 4 (id=1544): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x1, 0x61, 0x11, 0x6e}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0xb, 0x0, '\x00', 0x1, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x1, 0x61, 0x11, 0x6e}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0xb, 0x0, '\x00', 0x1, 0x0}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) (async) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) (async) 1.099840187s ago: executing program 1 (id=1547): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xc, 0x2047b99c8382e78a}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r1, @in={{0x2, 0x4e22, @empty}}}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getneightbl={0x14, 0x42, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x8c0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000002c0)={0x5, 0x1000, 0x6, 0x7, 0x4, 0x0, [{0xa640, 0x6, 0x9, '\x00', 0x2000}, {0x0, 0x8, 0x6, '\x00', 0x102}, {0x611, 0x1000, 0xee, '\x00', 0x3408}, {0x6, 0x1, 0x4, '\x00', 0x1804}]}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='devices.list\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x1411, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x8000) connect$bt_rfcomm(r3, &(0x7f0000000500)={0x1f, @none, 0x6}, 0xa) poll(&(0x7f0000000540)=[{r2, 0x2290}, {r0, 0x4048}, {r3, 0x200}], 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000580)={r1, 0x9, 0x1, 0x4}, &(0x7f00000005c0)=0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000600)={0x0, 0x1, 0x3, 0x3f}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r3) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe8, r6, 0x300, 0xfffffff8, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x94}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x12}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x5) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000980)={r3, &(0x7f0000000840)="7065cb83ee97290c5cc39b883a2464a8d5f203bfa372572917b06ba63c0bdf66ecc5e1699d645a7ed7ef7944", &(0x7f0000000880)=""/233}, 0x20) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f00000009c0)={'gretap0\x00', {0x2, 0x4e22, @multicast1}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r8, 0x10, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30048095}, 0x4000010) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b40), r7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b80)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000bc0)={r5, 0x2}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000c00), r9) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000c40)={@broadcast, @initdev}, &(0x7f0000000c80)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ec0)={r3, 0x58, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x16, 0x13, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe4b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0xa, 0x6, 0x1, 0x20, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x0, 0x9, 0x1, 0x3, 0xfff}, @call={0x85, 0x0, 0x0, 0x5d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d80)='syzkaller\x00', 0x150776e3, 0x79, &(0x7f0000000dc0)=""/121, 0x40f00, 0x1a, '\x00', r10, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0xf, 0xffffff5f, 0xcc}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4], &(0x7f00000011c0)=[{0x3, 0x4, 0x10, 0x4}, {0x5, 0x3, 0xa, 0x8}, {0x3, 0x5, 0x4}, {0x0, 0x1, 0x0, 0x5}, {0x4, 0x5, 0x2, 0x3}], 0x10, 0x2}, 0x94) 417.299301ms ago: executing program 4 (id=1548): unshare(0x22000600) r0 = socket$inet6(0xa, 0x1, 0xfff) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r1, 0x5452, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0x4}, 0x1c) unshare(0x0) 412.033399ms ago: executing program 2 (id=1549): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2b, 0x5, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001880)={0x0, "6d789891052ebb5f975ef3f6ec89680e"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000002880)={r3, 0xd, 0x7}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd00007118540000000000c3640000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1000, 0x5, 0xffffffff}, 0x10}, 0x53) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x33, 0x0, &(0x7f0000000000)=0x4a) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001fbff000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42031763d02899c77f963d140d7a9d3a0700000060917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e35370a000100484d41524b00000008000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r5, 0x8, 0x7}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030069087a300000000060000000060a010400000000000000000500400008000b400000000038000480340001800b00010074756e6e656c0000240002800800034000000000080001400000000908000340000000f5080002400000000c0900010073797a30"], 0xd4}}, 0x0) write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000002c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x1a8, 0x14, 0xa, 0x304, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x6c, 0x8, "c36be0e1d108c581dd96bdd2ac7a077bbf08d102919ffc6a5ae36f86674ce1b297f56affb5fe007df55391612b92022193dcd75b9c389d9bfd7f5c19b065231ba01fe5de689126b5afcac5e1b4627382efcc875bba57e3f8672c5f6be795795692cfa88e94f88450"}, @NFTA_OBJ_USERDATA={0xf7, 0x8, "ee2f3ded5a09edaf101ca7a32d70583c3a988dc4e23bf474df10014152cd8ca998a2975799494ff31750225f628477ed65e7c9a8bc5834fbb0ae950b2d847e001ab405305765d89fae30aef3c5f6540346a31c3450b0faac978ff101007bf1f46ef262a93314c3f9e083d02972a6161c86490c386afaec5863702bb6c15a48d75b933b0d5b3f1119c5f3e6f9cdb10a437f3853f013f4d588b6fee58cf2676289a0963a119abd575684fec2f2835c5fec0453ef5beb44478f2b88b0a2609780cd82a05a9dc53d10b5890765081c5a352d0611194d9e2c4ede73df1c73fa2f11e02fdf0e6b045fb141899cb3e2590a49b240cd9b"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x1f24, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1f00, 0x3, 0x0, 0x1, [{0x4d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xfc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xdb, 0x1, "3aef7278cdf3e385d33a444149c97476939b24209bfcb2911b80920220f7d6efe5992023b3bb506ee091c0910bb8b5aec116f3a385b8dd74496e6b27a8dda403aa93da83fdb08353b786abccc484185a9d94b154aab87a772b23f5f7ec3e3aa5bf1caed9cf5c00a400a39bbff03c0c24331e1f5a858fd311c572499e9e7b85f85144c2f3364455f25afb3818fcde5e3d6a4025697ecef266652e08d09afbbd5f544fc37854f21d403b9a4e48af06d0a350163248b4208e6ad5ecd7eba947df7ca66bf320a927d0852407ba201a63e1a97ce172e239d2d9"}, @NFTA_DATA_VALUE={0x18, 0x1, "3dd9660e523b494aa7b5101f94f57462879ec0fd"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_KEY={0x3a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "37b888e9857ea55172e3a0883f7598afa11425c34a18e69251b6d7bf9cc753d0f18287758a22242fad45dcd3f36ac51f7bae8e44e71c152bcffafb937ba492a3cafd661bbe914457f85aaf4ac1b9280396311f917aaa225bc2bef76377e50be113c25bbe013bcc37be894596de"}, @NFTA_DATA_VALUE={0xad, 0x1, "31e112dee2eec0161962a48ae2c21523daf56454cec42274fb55d6de39ee13c771a62e86d9031f6c7748556ec64a9bd3336c37728403fd6f1ba9b94d0fb8112cedca15a2be6a41aba387c1d0a52eca5c2a1ccf28b9d035c9d304e38057502d7a54fe15429d1674d3d964351fd7f52caa298e7c0167c7ae3f836594b4df2205288001b4c017ae5a9cffee5aadbfeda91b38661525a4e25a409a98a9dbf399629ec00626712443697c4c"}, @NFTA_DATA_VALUE={0xdb, 0x1, "a7cbe08174b9774d1f863fe8719fef10c9d94217f30c33aa7caa5feabf26805462197a778a7de8f40b45a690a74f7b05edd9938b8427ddcc94f48c0b829c7a29cd43b116a7d4ecde3e896698dde1d1f95b7ce2b5f61da59f1b0528ea650f5b557a9cd566cbbb56382e82400a822fe56ca8fd5df214d7227ca91fc81a5bf7938ca878c650e600512e43616f3593a86b09b7820d3b93722903a10ada99f65a34eb304b484fa476d030b4f442263d559d800e1e1e53147dab2a3002ec00c1de95bb6e9fbe7de334037ca3dca9ff30dc374a7c6da2e36e1ea7"}, @NFTA_DATA_VALUE={0x9e, 0x1, "8482731b5bc9b5d54f81844674eb98a28d3c94150f590f3cf62a0661fbbab30dbd9d154411a33ff84bcc238f53e657b03bb6ba2ae3142b2929ca97e114fba1701060ed3f116d6271519dd04a4acf8529657bf97d3804128b70d20b01e63776fdde0803ee725739ddf60b7d55d46924ba24b1a0ed175c97a8f88bc39ddb50b969cf63586ee69e06e4a46282720f6fed0ae1beea9a61b9ea929ab6"}, @NFTA_DATA_VALUE={0xb2, 0x1, "4c2d4c87668ea2490d31d1c66ad9f01ef128b21d2223e8aba9be4892ba477a17a76ac7c7b8bdda7352fb6e9a7fb734478abddd1d115d26319236e6491699cc08ff6bc15a03827221d89f202686d8ca39b0f25c2c14ce4456e6536ff3ec3118c57b770a7ee8a51467721b171ef34719245396af61e6706b743f912c27ce36bb3ed05798bf31df81c90c2bf3d966df3b0b5eea176a4226e5dc0fbfa0fdf488052ea66760e4b95f1692f1d8091b46a8"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x298, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xeb, 0x6, 0x1, 0x0, "f6f6cf39cabd9787fdd1f853245be8a0c643aa6eb4f818f11774c26a1c44a3e03779f27728e288ca65688a211cfcee6c13beb8f6974a44554840eea034c1cc3c9ad4f364b445a71597d06222c5c030852f8c8b2438879175bd22f98c3d74583ec6faaa3514e1446f452169f57311dc5066b6dd84f3ff75375cf6c567a01aa01959b729c00a1adf8b637ca7f3b9e265f0e3ce869cce343af42197e85b4334040731e436f69b7efba3f2afbbd2470a81aa24a68bf28a20e2742c0f604d9ed007ad85b8683491142a44eedab1eef9062b22263c80f9c2fa1cb827bf457e35d2b8451e3fa0136ee2b0"}, @NFTA_SET_ELEM_KEY_END={0x1a8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "83b258082664b43a8690a8cee738ac2a2d408c7e54cf09d5a42f9a307730803e39090e5267e2c3485a25d822b1bcf3bf400face2b052585a9a6426e3b074fd028e7a9933dd09c298d9960f8f5ccf68293bf4794d5a40a57b161bb319dfbf25ea7f59bdf8db105e03efa75217dd396d2bf84de84a66978b83ff103dd92ed4c831355cd858d067a7172bb95cbb36fd73"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xbc, 0x1, "3459706ecb739b044050511315df027f97cbb3691755a26adb0f28cbc1e576101861196956860cbc974cd54e92ee9b58fcbb1e17c7de4d11a0d4cb41e362b71c9f6e8b06df9c968bb3d226d36d67f4ffc9e841b35f05ce8c8e8eebb9d3cf799c38a425b595a632ded27e4d2b2a39e151cfedd1f1352547b2f0685c6ec7e2fbec987c97a5d7a723b80309f2a4019de40915d3ec73c0a973c46ba73ac7361f13c4fe3222928f72774584515a70084a5c7ef8ba4361106b5f25"}, @NFTA_DATA_VALUE={0x2e, 0x1, "756c5840e17628f7c299a7e600c19fa53c39220df23cf756ff5eaf7d9a73d3a7f57277a969af4e4f81b3"}]}]}, {0x768, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x290, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xad, 0x1, "57b849e1c057831bf374052403e22c59444cc9088c23a04c405b27d409a8bea07616003d9bef2c42283dede665c915e299b6aead5738bface1abe1077147608637a594c74a4d3b75e6a80c326906e4b5129bda04b1046bb4cb0589133109978045abc62d8b9ba49bdec2f55c825caf9fdad540aa88f5a88e50f3f2ff1dce2880ab1b17bc099ebe4843f4b639317c8dc07c5caffd427febb62fe4374d1e524d45c99f96953e4a27d0d4"}, @NFTA_DATA_VALUE={0xab, 0x1, "7b5631a8773a9ad6d27a70a4c18270bc5c1ef0fb8f9e19de7f9b9f030e5231e15fa6e4600e15333c2b794c79387b22cd94a9aacc360c3d204152f67a1731f527172cd1567976be08d3f37142362197ec48dc8fd4a70d76c85a7603e5d6dd48916c14fff31018df6a471a269798b3755971de95a73a10d6801f45fb9f89e57508e307f757dcabc664989a691e630f5c8cae8a7fb7704dfc74f8ceee9e1dfec746be36b43f089af1"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x32c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xcf, 0x1, "62fe9eaea2792cabde102c7a11053dc7d3fd4ed3b7a0be4703aa85612be5ad2cf1e5089f0762470bdfcc777f86a33983ee580aaf08fc39a5eaa686694f8a97d6a87a6e727aa580aa3498c6491dbfea879474e955ea3f1264a26b181802b49dd964286ffe147b8f6f9786184d1ffa1a285e9f700ce41f20e04841cb1006cc4177578a10d39a5e14d5873600fdf630bd2084e89942ac7f428328669062dd43348c1df1f26514cc8562d4a619e812a1643598061cf8d4a9d608e985cd12859e6a91afdec965275db98b668af8"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "3705eb47c296e8cdc54d99133ecf22829df2698e97d8163c9108a251e2151251883f2d6420bfb7074d31cc4dc61ed5c1613a65bc2885841d8d3975dedf531f3e8ebd9661a06fe6dfd473c665788e50d84bdaf114faf8df323cfa12d5d11cf873594e8b8a2051e786e7e209fe6bdd7ce745f4c51213573f6cc2254a8afd51c2e09cbec6a82406ab62eac7254f9c15a69fe6f199e5b5f4efdfc16556ffdb00c468cdbecfd77d10dbd936239dd49acf2c0e09bbb0c408f54defd332e3164b8219e36188006130ec4f3b62d1798db333a745afb4b6251c9149fd2f12e27354d4"}]}, @NFTA_SET_ELEM_DATA={0x74, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "49fa0cf63518ceaba057a23da7501ec866e935627ad375d9178b907203cc9af3a7029399047224cb6e607ff9b34012419f52bbb51bfb6e7208239d874422e29e8fa750f45b41bd2f986ca77625fd7edb4b809f0466dd1dc50cc0c7e80d32b00f724115e5419b2b1d5b"}]}, @NFTA_SET_ELEM_KEY_END={0x128, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x15, 0x1, "af376f4b12a24b2ada0dc524492b17087c"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "34bf376fdc8647996fbd57282292cd2ed60535e75223d4497522b64508d377eb3480ec7a495fe3f4d7a8bd04c9e70ae33b1cfaec760609daf4306ae2a0436954dfa084cb8cefbed7c0bee6c67c287163fc1e4ea986f4ce4168fcc2712df820d23009a2f8acd1116fb76840"}]}]}, {0x674, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "752fb6d76766d3a25f361befaf6979af19269feba5080b925d1306b91b11d9cacc0f6ab6d9b798bf117223ef3c6018b91115f43742c172dd0d863d"}, @NFTA_DATA_VALUE={0xa1, 0x1, "4b7b87aec1ac538ec1e96b905c76a01cec4190889bacede4520f0a23f5d840ff696d0dc8083c555b5fb164cffda6dc1ff7be4e7dcc5b91ddc1d52086adf95adb325ddbb75643954af6f4935bafb638ead5cb25246dbb2c19cd21c4fc5f25887b5673c1339f3c32809129cace71bde4355660fd5036bd5c235011a9c605d3acdc8c08b2d997275efb89d795a1ef9b7b1f70c8129178e510f2f5c6832ced"}, @NFTA_DATA_VALUE={0x62, 0x1, "7206bbf300d00ab62da8f25dfa0a5e09e833aa7986568cd125380de1aa534672f7268b8f0383e0f19bffbab3b82e3758c0db382327339f096111c6835f485b22b550c2076e0922e201b7c26757189ee85188d6d0b1b9567df00a6ee62445"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_USERDATA={0xd9, 0x6, 0x1, 0x0, "bbfacc0eecdce3243a8567f93f0e4530508f1b476f401030ff9742190abb1a699d80bce603d56abed750ac843d4b11d6b3f2b60588a7d60a1ade6d1dd13ecc9bd135618141f01ded6581f4ba6619fc533e0f321568d3850a172cb633e495a3e6c437b93c44c340fef77c77e83c310de04dd0a0093eae53eb0e7e4d891427e405397cb634ed72da3ff1bd551614d27065621a2cfe743ba0cce285ece708e8e02f64bea9fae1340e394e50c8d26108447c03dc301336ecb258f2ace71eb0fa6d5f732e5894e81ac2730011755a72ea5cc6ae0d31994a"}, @NFTA_SET_ELEM_KEY={0x170, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xff, 0x1, "12cf3dc6fe0e72c0058bbd4a2a586b0c49bdd543cf18387c52513c344bb81742a244b7b8f39309294849142b3c1235166459a3e77416dde8b7a9f28ef15e1f92fe1fb75440cc7c5f2852252436da048ce7c9a0a7467405275372b6395ffe6d3091dad3c01e82127c29c4c24bab6709c9be221faadb59575a81ef865a724afcf6bb755c04a3de2fbc44f37dc965a9828f767365bbe4be67359e9f725cd333ce2bd17c03d5e12b50bf769828b733a3ba454040b227fe78165a75ee31b3b3f0f5524652028e2ce89dbc5870f72ce0d522a5640b30400d85afcd8e119b42002a5ff9c003ce53997d20afb20c2320053e5f04c1ed6225f65b45dba6aaa6"}, @NFTA_DATA_VALUE={0x6a, 0x1, "eb2dd0653ada8ca811e721ab1d3790759925ca9823467fa2afdf04bd217ef79b4c41b6346a18f22f0a7f738d0b935066c97757c154a5cfada7916f4ef162f81ed262c6c976cda04f0fc1907742e7f662afd80dd230d6eb464c98fa50ddf94b475f46e53c188b"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x1e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "c2085771193da82ff68be7b4f79681b207255174f911dc12e8887fb906776353b2a76d560e4f9a9011c041517141638723e314bab8494acf67fa49c9720e8d0917b9e8669107a1519ef4a2bcce029e1aa16e8f5286e8c626dedc2b48b8b6e69c64e275984e86cb4e48fc64ae152d74f36c0e93251f70a4"}, @NFTA_DATA_VALUE={0x7f, 0x1, "8edbfe2fcd8f82873b17501de748a005a588fd2b5bacbc8ebdc53ca6af563dc09220a8a2e4a8644d55e48170f863c0e57d12b1f5945c3efac5a076d71b44f1dc760397c253bce943081ca316fe7494de31710632bf0211a19669e6d24a68f8648b7de15141aecc9d5efd87523154d2fedc2f341b6be2ff892bf341"}, @NFTA_DATA_VALUE={0xc6, 0x1, "f29929ef100c9b084a8757597df214af5796d6c0758802f310684e799e63ddbb58cd5e6e2f1b331c3187ed41dfda3bf5febec6fda4641283ab9f33f0f0fe9564be2dedcd66a3312bae06b425617f681180e9dc4a8714380d0b7632c9446232672b554e4528d493c79aee2457f285bea6e79a4f54d7c7dea0885a7a309a20078524a1d4423038892ba0e40b6a2260948d291dff592d89438a0a6bea9b07f75311c8a80369bab07d7b20eb3301f531e46b38ad072660beca3982b4e7aad2ef68f66434"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x494, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, @NFTA_SET_ELEM_KEY_END={0x318, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x33, 0x1, "43a4a7ea70c1c451c8fef5220d9ebfab5e52d86239040113368f8791c35aede907e95b53fa4f2fc370e55d27e5965e"}, @NFTA_DATA_VALUE={0x35, 0x1, "d2c6c81d94e0cd93d1874614a73474d3f94bfed8871317e11f0a803388b0a0ff4997bf1e3e60cb0a57d3396d80a54d123c"}, @NFTA_DATA_VALUE={0x24, 0x1, "c58842f134bca151e13d0202197e3bf8b31a327aa0ba22e670d98276a411f8fd"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "652e3805c38f99ecc81e84b7615ea318a5103116f86b4a7422c8f4e04593725b4c7c53ab85f047153b75633211db94404f4f5c69b423bda380c34a791cae979994edfc72fb4d775c5f0367bcbf95624a8c7ba07c5cf7518178a1a9bbee3e17f7c7c4567e4ceefbe0c098e620be69c218658a0bba176f2098fb15eb8b2f142fdbaf2d3fd49ca7ee0b738c5efdf8cc9c5a0e72a3ef893c25467ab03f664f08"}, @NFTA_DATA_VALUE={0xe8, 0x1, "0953cf6556f167439d4fcef002fb4b6b606e417ebe147228c116fd3c9b3a0101956a7d8c89df036daae3f908ca02c117752dd5f5ea46fbef775e3129dcb66630491a0374bbe63296722b7f84d9dc8fa4f1dad7681ca620f550df896dbed67f1cbbf7549db000125a76bcae4376e6459fc9ac407e7f0672d82fcd6d64c0cc006abc058837a3666c9ccbb65536ad147b48cd938e07c199c83c944ae0955485dee4fa787eab8d87ada6cd17fdc75d04d25a99e1e3d5de05c32ff6f0672912a90f8049efc8d8c78c48de2fc13863f6a04c69952e0e0561f32097c0beb259d883c86c8521c6f4"}, @NFTA_DATA_VALUE={0x45, 0x1, "50c3592e14ddf4623031fca748ff4eda0a9e5c27f0dfe83d5757c01a6a614dc0e1b6a96b67b4e12b4d6aa7129d4c5a1680690bbe7d57cccb7c8903a6125ba99611"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xd8, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}, {0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xc3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xdc}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xe}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x510, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "4d616dc8edb60bba7601114f431c6817bead7d8f810b7e"}, @NFTA_SET_ELEM_KEY={0x1a8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "d83bef7aca37f8752e3b13818a181f816483078f39936a6ec97cbe87f46405b89233c86841372d839cfe8def97b9802b4a3b35d3422ab14db2663becf2fcfdc9da3aae7d0d75cc07520d583844c7d9cb985b92"}, @NFTA_DATA_VALUE={0xe7, 0x1, "4300bb7b53eb52878818e8f60eee53cf65c3aeca3c3739e983b03af10d419d95f8945af9fcda3640297eee3ba012855b4148051ad8c7ae49c6687fe2b0e26d022225f41968760869bc83ffb78de136df367e0b84c09ccaef4638b96c6d90be1d93c1be73983946f505ea30202b8e6df05aad301225729732ee620236b553208a2eb8d659b1140474c3d85d61628c5029d179de36335401fc01e3d124caac1a7e5a3700a00fe683c07055bee4e9c017fb65f63735b34b898fda4e098fecd7fdacd31def893d6255a699fbc95dfe3d157ba887112f64bd51176a913992c311a017036ad7"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x87, 0x1, "9f8cb441c8d0baa8385da7f89498c25c27fa5d3129549849186a203c573a13437dd49952c1eabd7b60a54d20905563252bfdc522819c566f972f53449a52c26adffa87d7c6b34d95caceed971ca204df42c456aebe8a6ef28998081bed599f4ac5d92c3e5b14e8b8a7f4875cc10c2030e63ff7dcedf4c69b8addfb8f085329f490bfb0"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xdc, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xb}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x101}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x1bc, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x1a8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xa8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x3c, 0x1, "745583fdaf0b1010ca6066bbadc099b21b6b4529ee9821fe6e00af87676bb093904458fbaacdac8f7fdeb5166c53814afb23d2634d274e1a"}]}, @NFTA_IMMEDIATE_DATA={0x78, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_IMMEDIATE_DATA={0x74, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6e, 0x1, "39052a9ccae6dcdace975d5e4970af2d0c2dee31a71f99d97406830571ac4dc2f8acaf20e1efcd6bfbbc4189cd59ffb2308e01c54e794d7ae2f84ea3937423f8a0a48c86c7dd27f41bff8d28146e523ca3534f0ad575be5ea5942f5452ca639e925e2f9cd7ac228ff1f8"}]}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x21c4}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000014) 410.767312ms ago: executing program 4 (id=1550): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x70, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xa6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x40010) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000814}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000480)=""/162, &(0x7f00000005c0)=0xa2) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060102000000000000000000000000140007800800124000060000080008400000003714000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a31000100000500010007000000"], 0x60}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 403.561777ms ago: executing program 2 (id=1551): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f00000001c0), 0x0}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="f90506000a000200aaaaaaaaaa1c0000f801d3ffa73788cc55e0f65f20668ab8b2c50c29ae834457bf0fd32dd23199e5c78582f72c5c6e3fd73f5068e1130835ef12fd816be9dc31c02e5df970c0fd539c251eb5"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r9, 0x0, 0x7, 0x5) close(r8) r10 = socket$inet_udp(0x2, 0x2, 0x0) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_netprio_ifpriomap(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xd) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x3ff, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d4, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xce}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0xa0) (async) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r10, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) (async) write$cgroup_int(r9, 0x0, 0x0) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000540)="b5", 0x1}], 0x1) 402.771554ms ago: executing program 1 (id=1552): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="93378e0762cf9b48cb5963840100d1730172853a9fa89527996042ab60ae29f9c11dbb35b448a0037ff852007bdc5d1c", 0x30) 373.100411ms ago: executing program 0 (id=1553): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffe5c, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 372.035491ms ago: executing program 1 (id=1554): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r3, 0x5) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES16=r4, @ANYBLOB="01000008000000000000020000000800030082d4035a5523fec712674f3197615e8dc3b216", @ANYRES32=r2, @ANYBLOB="0800a100ba02000008009f00000000000800260080090000"], 0x34}}, 0x4060) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800018000"/20, @ANYRES32=0x0, @ANYBLOB="00010000e180000008001b000b000000"], 0x28}}, 0x0) r6 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@null, @netrom, @null, @remote, @rose, @bcast, @remote, @bcast]}, &(0x7f0000000000)=0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$FICLONE(r6, 0x40049409, r5) 368.680329ms ago: executing program 2 (id=1555): r0 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x22020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r3, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@val={0x8, 0x12b, 0xffffffff}, @val={0x8}, @val={0xc, 0x99, {0x8, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x290, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x250, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x3}, {0x5, 0x7}, {0x1, 0xa}]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x3}, {0x3, 0x6}, {0x4, 0x3}, {0x3, 0x4}, {0x0, 0x6}, {0x1, 0x6}, {0x5, 0x9}, {0x7, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x4, 0xa}, {0x2}, {0x6, 0x4}, {0x2, 0x6}, {0x1, 0x7}, {0x5, 0xa}, {0x1, 0x1}, {0x2, 0x9}, {0x2, 0xa}, {0x1, 0x5}, {0x0, 0x2}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x8}, {0x6, 0x7}, {0x1, 0xa}, {0x3, 0xa}, {0x1, 0x5}, {0x1, 0x3}, {0x6, 0xa}, {0x4, 0x9}, {}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x5, 0x7}, {0x4, 0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x0, 0xa}, {0x2}, {0x0, 0xa}, {0x4, 0x9}, {0x6, 0x6}, {0x7, 0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x1}, {0x3, 0x8}, {0x5}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x2}, {0x0, 0x2}, {0x4, 0x6}, {0x0, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x5}, {0x7, 0x7}, {0x2, 0x9}, {0x2, 0xa}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x8}, {0x6}, {0x6, 0x4}, {0x4, 0xe}, {0x5, 0x7}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x7, 0x4}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x8000, 0xf56c, 0x1f, 0xe4, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x3, 0x24, 0x48]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x800, 0x3, 0xff, 0x101, 0x905a, 0xd, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x0, 0x6c, 0x18, 0x16, 0x16, 0x3, 0xc, 0x2d, 0x6c, 0x1b, 0xc, 0x12, 0xc, 0x2, 0x3, 0x4, 0x36, 0x4, 0x30, 0x7c, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x2, 0x8, 0xa, 0x391a, 0x401, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xe, 0x8, 0x40, 0x35, 0x64, 0x3, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0xe98, 0x0, 0xf09, 0x0, 0x380, 0x6]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xff81, 0x0, 0x0, 0x2, 0x6, 0x455, 0x7]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x7}, {0x3, 0x2}, {0x6, 0x7}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x16, 0x3, 0x3, 0x4, 0x16, 0x3, 0x24, 0x0, 0x6c, 0x1, 0x6c, 0x5, 0x48, 0x0, 0x2, 0x36, 0x1b, 0x30, 0xb, 0x5, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x6, 0x0, 0x1, 0xe6aa, 0x1, 0x9484]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x2, 0x1, 0x400, 0x5204, 0x2000, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x2, 0x0, 0x0, 0x9, 0x63cc, 0x18, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xbbe5, 0x8, 0x8001, 0x3, 0xfab, 0x9, 0x3, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x6c, 0xfe526f5ef194a591, 0x1b, 0x5, 0x3, 0x9, 0x0, 0x16, 0x1b, 0xc8da19c9003747c0, 0x18, 0x24, 0x3, 0x60, 0x1, 0x2, 0x24, 0x12, 0x0, 0x1b, 0x16, 0x6c, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0xb, 0x60, 0x1b, 0x36, 0x41]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x653f, 0x4, 0x7fff, 0x9, 0x4, 0x101, 0x8001]}}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a0}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x290}, 0x1, 0x0, 0x0, 0x4804}, 0x20040080) accept$unix(r2, &(0x7f0000000500)=@abs, &(0x7f0000000140)=0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4f}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00'}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) r8 = accept4$packet(r7, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14, 0x80000) vmsplice(r8, &(0x7f0000000840)=[{&(0x7f00000006c0)="fae06b058b84631e05a2ee5d0f6292f936a67c4fd02b4075d97b4f84097855b1744f0fc78ceeebda5e41fcd7f841186cb9397192d7a87c4e58cc629b2424402d5ea555339196d3e2750d2ab149afb4168b84f5b1b0e5821b3c768b0d7270cc70268410ace6a6e941b0ff02b2dee9e4dfda53586c0d95e63499c0c9bbf9e1399aec4bc474a83d8b48796323900d42ab21d439614f713826fa94", 0x99}, {&(0x7f0000000640)="0695ac", 0x3}, {&(0x7f0000000780)="ccf2940f23ea6e02c9054687b004d792fcb37c9d623820332b37205637f00273e07e9cdf9fa597e190152b8c2dd3bf21e83ca84e5177eeb2de1f0c36e47f39f4f9ce7a9e9011089b64692eef692f75a0d3bfea6af5112fe06985167990d2ecf4b2082096e272bd1c13af4cffb6517b9f8f6f5a2bf1fd9bf86fe0505e1acb9ceb91421d867bc443f585557baea082b215d496a1f04abb2084f2118243818a97a8f0db3a77c9451b3b1bf81ebac7b394b52130b8ac2167", 0xb6}], 0x3, 0x6) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r9, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) connect$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x2}, 0xe) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x40, 0xd, 0x40, @dev={0xfe, 0x80, '\x00', 0x40}, @mcast1, 0x7, 0x700, 0x5, 0x5}}) poll(&(0x7f0000000040)=[{r10, 0x8}], 0x1, 0x7) 366.529149ms ago: executing program 1 (id=1556): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(0xffffffffffffffff, 0x50) socket$inet6(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r10, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000001"], 0x40}, 0x20000000) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 334.157195ms ago: executing program 2 (id=1557): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)={0x8, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x74}}}, 0x90) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r4, 0x0, @inherit={0x78, &(0x7f0000000180)={0x1, 0x6, 0x8, 0x7, {0x20, 0x8, 0x2, 0xff, 0x1263eb7}, [0x9, 0x3, 0x5, 0x7ff, 0x309, 0x9]}}, @name="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"}) (async) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000006c0)={0x0, "2c1a2c3c689e1c386c681447aeaf524e"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000016c0)={{r3}, r4, 0x16, @unused=[0xfffffffffffffff7, 0x5, 0x8, 0x8], @devid=r5}) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000040)=r4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x4004) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="03800000000000ee23fa12800c0008006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r10, @ANYRES16=r9], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 333.431075ms ago: executing program 3 (id=1558): r0 = socket(0x10, 0x803, 0x6) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}]}}}]}, 0x3c}}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x128}}, 0x20030080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@newtaction={0x1d4, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x1c0, 0x1, [@m_csum={0xcc, 0x34, 0x0, 0x0, {{0x9}, {0x4}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xb0, 0x9, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x6, 0x10000000, 0xc69, 0x3}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8001, 0x4, 0x7, 0x87f3, 0x6}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x8000}}, @TCA_ACT_BPF_FD={0x8}]}, {0x2d, 0x6, "a09e88b2fafe2ad0dddad3cdaa9b726cf5b56034a46fe446c7d19b5780d1bd141230a65f0db61f93ab"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x40, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "91ee006b0fddf50a8e24f8dae491288264"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4088, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x44}, {&(0x7f0000000200)=""/63, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000bf03000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_DPORT={0x6}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000002c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "571513a8561f58"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000012c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000022c0)={r6, r7, "700aa1267ea81342f5dff537dafb0cd3f550b14294703e44339b3b253870ac1481a904ae455adf7829d1941dcbb42b1ba08719c807a21ce6849fbe6eb9e2d1b04a8886ca56cab510a8b6b0c44718ce816c3c139dff829110cf56769120d882786566fb34a5f9cb9d7b4594697f7c7671f4ab78a4167b823233ef62d5282b51e4084a460df93054419d04194ac5172b49476d77a07bb757a03b3841f33a575d2fdbb2abd0a59f3f9384bdbdca1426a646e89bd59f52010eda4fb22d56046ae6802bf31ca908041395e5c7460b937a131fbac24f9b4ee70e88d059c417acb52902c4ab480f40e8794b5a8bb79a905450e614504ed729c34c91765168d5f596cb32", "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r4}, 0x10) 332.172256ms ago: executing program 4 (id=1559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000000cc0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xf8a, 0x3a, 0x1, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x8, "7fa117870e3c5193b7c790fbe7846273c2719fd2e9b3f3db613ff25418c7648b0952025b93f2570bdd348feb594ce096988b5a19cc0d46938c89f2c92660e4"}, {0x2, 0x0, 'io'}, {0x22, 0x1e7, "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"}]}}}}}}, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "99f1ca4555c0de3bbddb476e639b22842b6adca30363b162eaa4d09df98e948d", "6688c8d25e4bc14279ee46fd46aa7324cd4e92248f07c6b0c8e531d5a754ab1f", "5d7d90fd27b0b5cbd9364c5ddbb7c26e5e4404d6f888d6ba4575ed82631b926b", "0dd6a13751d8e530a19ada27475195f52ca158f6cacde1da596812a3db1034ac", "700d1c55e7134c6ad4d4cc02d77c2b7b173f3548d50bdc21a2d660379fd06955", "7da45b7c612016d9f65c477e", 0x100, 0x3, 0xc4c5, 0x2, 0x8}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e30000000000000004543336a016791e43052c386d300000008000402"], 0x44}}, 0x0) 179.333557ms ago: executing program 2 (id=1560): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x5) close(0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="140000000000000029000000340000007f0000000000000014000000000000002900000008000000bf000000000000001400000000000000290000000b000000000000020000000024000000000000002900a50032000000fe80000000000000000000000000001c", @ANYRES32=0x0, @ANYBLOB="000000001400000000000000290000003400000000fcffff00000000"], 0x88}}], 0x2, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r4, r6, 0x0, 0x970b) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r8, &(0x7f0000000480), 0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@deltaction={0xb4, 0x31, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2fa}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x25}}]}]}, 0xb4}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="010000002000ffdbdf2501000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542"], 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0xb, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r9, r9, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=1561): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x9, @loopback, @local, {[@cipso={0x86, 0x71, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x7, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc95a70000ffa30900a301c8460000"}, {0x0, 0xc, "c8f46976e79ea788f03d"}]}, @timestamp_prespec={0x44, 0xc, 0xf5, 0x3, 0xa, [{@loopback, 0xf96c}]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r2, @ANYBLOB="0800db00", @ANYRES32=r3, @ANYBLOB="56204163f53e78b03d95ca937f05690c66000057fdb2c4ebcbe6094eb178b275c80926ad799047f508946a952e3d68c69d5c0a2a2a7f08a03b93"], 0x24}}, 0x0) unshare(0x22020600) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000009000100032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011000100"/111, @ANYRESDEC=r4], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x44050}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x194, r7, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x194}}, 0x20000000) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="90da00add1c4ccd9ef", 0x9}], 0x1) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) kernel console output (not intermixed with test programs): 1(bridge_slave_0) entered blocking state [ 77.675797][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.682945][ T5865] bridge_slave_0: entered allmulticast mode [ 77.690593][ T5865] bridge_slave_0: entered promiscuous mode [ 77.706618][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.715905][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.723021][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.730446][ T5859] bridge_slave_0: entered allmulticast mode [ 77.737334][ T5859] bridge_slave_0: entered promiscuous mode [ 77.745105][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.752212][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.759538][ T5859] bridge_slave_1: entered allmulticast mode [ 77.766709][ T5859] bridge_slave_1: entered promiscuous mode [ 77.787095][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.794317][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.801677][ T5865] bridge_slave_1: entered allmulticast mode [ 77.808444][ T5865] bridge_slave_1: entered promiscuous mode [ 77.816666][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.847485][ T5862] team0: Port device team_slave_0 added [ 77.876790][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.887583][ T5862] team0: Port device team_slave_1 added [ 77.895083][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.905249][ T5876] team0: Port device team_slave_0 added [ 77.920150][ T5871] team0: Port device team_slave_0 added [ 77.927303][ T5871] team0: Port device team_slave_1 added [ 77.948720][ T5876] team0: Port device team_slave_1 added [ 77.956283][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.968117][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.026359][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.033313][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.059311][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.071232][ T5859] team0: Port device team_slave_0 added [ 78.092297][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.100907][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.127253][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.138621][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.145938][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.172233][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.184829][ T5859] team0: Port device team_slave_1 added [ 78.191170][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.198170][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.224212][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.236161][ T5865] team0: Port device team_slave_0 added [ 78.242374][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.249398][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.275335][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.286851][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.293816][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.319788][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.342210][ T5865] team0: Port device team_slave_1 added [ 78.371387][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.378703][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.404688][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.426329][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.433291][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.459779][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.471895][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.479123][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.505116][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.516700][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.523773][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.549811][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.618741][ T5865] hsr_slave_0: entered promiscuous mode [ 78.625775][ T5865] hsr_slave_1: entered promiscuous mode [ 78.633858][ T5863] Bluetooth: hci0: command tx timeout [ 78.651914][ T5862] hsr_slave_0: entered promiscuous mode [ 78.658151][ T5862] hsr_slave_1: entered promiscuous mode [ 78.664722][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 78.670483][ T5862] Cannot create hsr debugfs directory [ 78.678833][ T5871] hsr_slave_0: entered promiscuous mode [ 78.685792][ T5871] hsr_slave_1: entered promiscuous mode [ 78.691737][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 78.697597][ T5871] Cannot create hsr debugfs directory [ 78.713598][ T5863] Bluetooth: hci3: command tx timeout [ 78.713604][ T5868] Bluetooth: hci1: command tx timeout [ 78.716296][ T5876] hsr_slave_0: entered promiscuous mode [ 78.730780][ T5876] hsr_slave_1: entered promiscuous mode [ 78.736856][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 78.742586][ T5876] Cannot create hsr debugfs directory [ 78.767867][ T5859] hsr_slave_0: entered promiscuous mode [ 78.774482][ T5859] hsr_slave_1: entered promiscuous mode [ 78.780495][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 78.786389][ T5859] Cannot create hsr debugfs directory [ 78.793598][ T5863] Bluetooth: hci4: command tx timeout [ 78.793825][ T5868] Bluetooth: hci2: command tx timeout [ 79.121036][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.130558][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.143329][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.156872][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.186768][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.197232][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.214959][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.226183][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.260721][ T5876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.271360][ T5876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.281014][ T5876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.292702][ T5876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.359462][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.386629][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.398155][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.407277][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.465458][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.495181][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.502071][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.511870][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.522239][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.531706][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.557744][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.586814][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.615966][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.623074][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.632536][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.639640][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.649170][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.656264][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.683172][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.690341][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.702993][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.756692][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.786367][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.793510][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.802052][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.809195][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.912123][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.939577][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.977461][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.987174][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.013098][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.020282][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.036747][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.043907][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.063172][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.070311][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.112290][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.119433][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.209541][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.283090][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.296807][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.336980][ T5865] veth0_vlan: entered promiscuous mode [ 80.377907][ T5865] veth1_vlan: entered promiscuous mode [ 80.439453][ T5865] veth0_macvtap: entered promiscuous mode [ 80.459347][ T5862] veth0_vlan: entered promiscuous mode [ 80.469938][ T5865] veth1_macvtap: entered promiscuous mode [ 80.487809][ T5862] veth1_vlan: entered promiscuous mode [ 80.523311][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.557468][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.588788][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.600878][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.618751][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.628166][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.666339][ T5862] veth0_macvtap: entered promiscuous mode [ 80.682741][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.702768][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.716257][ T5862] veth1_macvtap: entered promiscuous mode [ 80.717827][ T5868] Bluetooth: hci0: command tx timeout [ 80.778699][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.788518][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.797423][ T5868] Bluetooth: hci1: command tx timeout [ 80.802846][ T5868] Bluetooth: hci3: command tx timeout [ 80.826435][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.841974][ T5876] veth0_vlan: entered promiscuous mode [ 80.857032][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.873775][ T5868] Bluetooth: hci4: command tx timeout [ 80.878756][ T5859] veth0_vlan: entered promiscuous mode [ 80.879206][ T5868] Bluetooth: hci2: command tx timeout [ 80.888220][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.907916][ T3554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.917209][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.926944][ T5871] veth0_vlan: entered promiscuous mode [ 80.937159][ T5876] veth1_vlan: entered promiscuous mode [ 80.945812][ T3554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.956988][ T3554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.978200][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.985988][ T5859] veth1_vlan: entered promiscuous mode [ 81.000918][ T3554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.027222][ T5871] veth1_vlan: entered promiscuous mode [ 81.106890][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.118325][ T5876] veth0_macvtap: entered promiscuous mode [ 81.129593][ T5859] veth0_macvtap: entered promiscuous mode [ 81.136669][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.147969][ T5859] veth1_macvtap: entered promiscuous mode [ 81.162267][ T5876] veth1_macvtap: entered promiscuous mode [ 81.212613][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.229866][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.240574][ T5871] veth0_macvtap: entered promiscuous mode [ 81.248907][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.251913][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.264354][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.277937][ T5981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.298004][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.323761][ T5871] veth1_macvtap: entered promiscuous mode [ 81.334949][ T78] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.348857][ T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.394200][ T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.404069][ T2930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.415258][ T3567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.458442][ T3567] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.480734][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.492180][ T3567] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.501518][ T3567] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.524219][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.542303][ T5988] syzkaller0: entered promiscuous mode [ 81.548624][ T5988] syzkaller0: entered allmulticast mode [ 81.567255][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.576065][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.589338][ T2930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.612967][ T2930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.622599][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.622776][ T2930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.633046][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.664422][ T2930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.713138][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.738320][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.841856][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.850560][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.982003][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.022541][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.115718][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.138199][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.201828][ T6004] syz.4.10 uses obsolete (PF_INET,SOCK_PACKET) [ 82.447438][ T6013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 82.462784][ T6013] openvswitch: netlink: Missing key (keys=40, expected=80) [ 82.644115][ T6021] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.728786][ T6023] netlink: 'syz.0.16': attribute type 3 has an invalid length. [ 82.764463][ T6023] syz_tun: entered allmulticast mode [ 82.770692][ T6008] infiniband syz1: set active [ 82.790839][ T6008] infiniband syz1: added macvlan1 [ 82.797471][ T5868] Bluetooth: hci0: command tx timeout [ 82.866361][ T6023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.870989][ T6008] RDS/IB: syz1: added [ 82.885853][ T5868] Bluetooth: hci3: command tx timeout [ 82.887821][ T5863] Bluetooth: hci1: command tx timeout [ 82.899659][ T6008] smc: adding ib device syz1 with port count 1 [ 82.908564][ T6030] Bluetooth: MGMT ver 1.23 [ 82.909364][ T6031] syz_tun: left allmulticast mode [ 82.933666][ T6008] smc: ib device syz1 port 1 has pnetid [ 82.964507][ T5863] Bluetooth: hci2: command tx timeout [ 82.966308][ T5868] Bluetooth: hci4: command tx timeout [ 82.993353][ T6036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.000667][ T6036] IPv6: NLM_F_CREATE should be set when creating new route [ 83.007958][ T6036] IPv6: NLM_F_CREATE should be set when creating new route [ 83.042937][ T6036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.095793][ T6043] Zero length message leads to an empty skb [ 83.480474][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 83.642094][ T6074] netlink: 44 bytes leftover after parsing attributes in process `syz.1.29'. [ 83.793169][ T6077] tun0: tun_chr_ioctl cmd 2147767520 [ 83.940056][ T6081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.950968][ T6086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.210444][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 84.264151][ T6095] vti0: entered promiscuous mode [ 84.430799][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.34'. [ 84.461540][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'. [ 84.480984][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'. [ 84.509555][ T6099] warning: `syz.1.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.570664][ T6097] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.585782][ T6101] syzkaller0: entered promiscuous mode [ 84.603671][ T6101] syzkaller0: entered allmulticast mode [ 84.640715][ T6101] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 84.694857][ T6105] netlink: 'syz.2.38': attribute type 10 has an invalid length. [ 84.728872][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 84.741097][ T6105] team0: Cannot enslave team device to itself [ 84.807201][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 84.873594][ T5868] Bluetooth: hci0: command tx timeout [ 84.949647][ T6112] bridge_slave_1: left allmulticast mode [ 84.958813][ T6112] bridge_slave_1: left promiscuous mode [ 84.970885][ T5868] Bluetooth: hci1: command tx timeout [ 84.976424][ T5863] Bluetooth: hci3: command tx timeout [ 84.982658][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.041112][ T5868] Bluetooth: hci2: command tx timeout [ 85.047389][ T5863] Bluetooth: hci4: command tx timeout [ 85.086032][ T6112] bridge_slave_0: left allmulticast mode [ 85.108376][ T6112] bridge_slave_0: left promiscuous mode [ 85.146167][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.687342][ T6134] bond0: (slave bond_slave_1): Releasing backup interface [ 85.730299][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 85.917860][ T30] audit: type=1804 audit(1756130380.040:2): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.50" name="/newroot/13/cgroup.controllers" dev="tmpfs" ino=86 res=1 errno=0 [ 86.035421][ T30] audit: type=1800 audit(1756130380.040:3): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.50" name="cgroup.controllers" dev="tmpfs" ino=86 res=0 errno=0 [ 86.129609][ T6169] netlink: 'syz.0.54': attribute type 7 has an invalid length. [ 86.137311][ T6169] netlink: 'syz.0.54': attribute type 8 has an invalid length. [ 86.160449][ T30] audit: type=1800 audit(1756130380.040:4): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.50" name="cgroup.controllers" dev="tmpfs" ino=86 res=0 errno=0 [ 86.166456][ T6169] bond0: entered promiscuous mode [ 86.194378][ T6169] bond_slave_0: entered promiscuous mode [ 86.202916][ T6169] bond0: left promiscuous mode [ 86.209745][ T6169] bond_slave_0: left promiscuous mode [ 86.398572][ T6189] netlink: 'syz.3.58': attribute type 7 has an invalid length. [ 86.426635][ T6191] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 86.454395][ T6193] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 86.511932][ T6195] bridge_slave_0: left allmulticast mode [ 86.542410][ T6195] bridge_slave_0: left promiscuous mode [ 86.543285][ T6197] netlink: 'syz.3.62': attribute type 10 has an invalid length. [ 86.557467][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.580663][ T6195] bridge_slave_1: left allmulticast mode [ 86.587972][ T6195] bridge_slave_1: left promiscuous mode [ 86.602825][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.621957][ T6195] bond0: (slave bond_slave_0): Releasing backup interface [ 86.629099][ T6191] netlink: 'syz.0.60': attribute type 10 has an invalid length. [ 86.649168][ T6203] netlink: 'syz.2.64': attribute type 9 has an invalid length. [ 86.659786][ T6195] team0: Port device team_slave_0 removed [ 86.677313][ T6195] team0: Port device team_slave_1 removed [ 86.687861][ T6195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.695723][ T6195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.706282][ T6195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.714176][ T6195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.731232][ T6197] bridge0: port 3(macsec0) entered blocking state [ 86.738085][ T6197] bridge0: port 3(macsec0) entered disabled state [ 86.746395][ T6197] macsec0: entered allmulticast mode [ 86.751799][ T6197] veth1_macvtap: entered allmulticast mode [ 86.763085][ T6197] macsec0: entered promiscuous mode [ 86.769900][ T6197] bridge0: port 3(macsec0) entered blocking state [ 86.776455][ T6197] bridge0: port 3(macsec0) entered forwarding state [ 86.786778][ T6191] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 86.796925][ T6191] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 86.812935][ T6203] hsr0: entered promiscuous mode [ 86.818106][ T6203] macvlan2: entered promiscuous mode [ 86.825795][ T6203] macvlan2: entered allmulticast mode [ 86.831258][ T6203] hsr0: entered allmulticast mode [ 86.836615][ T6203] hsr_slave_0: entered allmulticast mode [ 86.842354][ T6203] hsr_slave_1: entered allmulticast mode [ 86.853042][ T6201] syz_tun: entered allmulticast mode [ 86.859781][ T6196] syz_tun: left allmulticast mode [ 87.223129][ T44] cfg80211: failed to load regulatory.db [ 87.667989][ T6241] __nla_validate_parse: 20 callbacks suppressed [ 87.668009][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 87.960189][ T6254] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 88.806955][ T6288] geneve0: entered allmulticast mode [ 88.995405][ T6293] netlink: 'syz.0.92': attribute type 3 has an invalid length. [ 89.151923][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 89.194856][ T6298] bridge0: entered promiscuous mode [ 89.200174][ T6298] macsec1: entered promiscuous mode [ 89.443349][ T6282] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 89.563382][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 89.620699][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'. [ 89.901134][ T6328] netlink: 312 bytes leftover after parsing attributes in process `syz.2.100'. [ 89.957382][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.104'. [ 90.006076][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.104'. [ 90.123157][ T6344] netlink: 'syz.0.106': attribute type 6 has an invalid length. [ 90.310691][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 90.328230][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 90.337533][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 90.347619][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.356954][ T6354] netlink: 'syz.0.106': attribute type 18 has an invalid length. [ 90.376297][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.712322][ T6333] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 90.796789][ T5868] Bluetooth: hci0: command 0x0401 tx timeout [ 91.114386][ T6414] tipc: Started in network mode [ 91.178335][ T6414] tipc: Node identity 5e5088754391, cluster identity 4711 [ 91.197762][ T6414] tipc: Enabled bearer , priority 0 [ 91.326814][ T6414] tipc: Disabling bearer [ 91.470953][ T6436] bridge_slave_1: left allmulticast mode [ 91.515568][ T6436] bridge_slave_1: left promiscuous mode [ 91.538964][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.559043][ T6436] bridge_slave_0: left allmulticast mode [ 91.567405][ T6436] bridge_slave_0: left promiscuous mode [ 91.575206][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.586991][ T6457] netlink: 'syz.4.133': attribute type 12 has an invalid length. [ 91.657403][ T6442] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 91.670337][ T6462] netlink: 'syz.0.135': attribute type 10 has an invalid length. [ 91.862136][ T6472] tipc: Enabled bearer , priority 0 [ 91.871370][ T6474] tipc: Enabling of bearer rejected, already enabled [ 91.881588][ T6472] syzkaller0: entered promiscuous mode [ 91.891825][ T6472] syzkaller0: entered allmulticast mode [ 91.902054][ T6474] netlink: 'syz.0.138': attribute type 1 has an invalid length. [ 92.041126][ T6472] bond1: (slave gretap1): making interface the new active one [ 92.057631][ T6472] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 92.153183][ T6479] tipc: Resetting bearer [ 92.226460][ T6506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.237518][ T6479] tipc: Resetting bearer [ 92.267279][ T6479] tipc: Disabling bearer [ 92.332318][ T6516] wlan1: mtu less than device minimum [ 92.339129][ T6519] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 92.381069][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.462200][ T6504] bond1: (slave gretap2): making interface the new active one [ 92.488705][ T6504] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 92.757410][ T6567] __nla_validate_parse: 12 callbacks suppressed [ 92.761825][ T6567] netlink: 148 bytes leftover after parsing attributes in process `syz.3.163'. [ 92.878659][ T5868] Bluetooth: hci0: command 0x0401 tx timeout [ 92.881997][ T6563] netlink: 'syz.2.159': attribute type 10 has an invalid length. [ 92.893842][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.906857][ T6563] bond0: (slave team0): Enslaving as an active interface with an up link [ 92.928976][ T6583] netlink: 'syz.4.166': attribute type 3 has an invalid length. [ 92.943576][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 92.998996][ T6587] bridge0: port 3(macsec0) entered disabled state [ 93.005637][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.013125][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.105491][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.120331][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.176375][ T6587] veth1_macvtap: left allmulticast mode [ 93.203967][ T6593] netlink: 64 bytes leftover after parsing attributes in process `syz.4.170'. [ 93.220978][ T6593] netlink: 64 bytes leftover after parsing attributes in process `syz.4.170'. [ 93.243543][ T2152] syz1: Port: 1 Link DOWN [ 93.248017][ T78] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.258608][ T78] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.288824][ T78] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.314269][ T78] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.338502][ T6600] netlink: 'syz.3.172': attribute type 2 has an invalid length. [ 93.424728][ T6613] netlink: 256 bytes leftover after parsing attributes in process `syz.0.174'. [ 93.437891][ T5948] IPVS: starting estimator thread 0... [ 93.536887][ T6614] IPVS: using max 38 ests per chain, 91200 per kthread [ 93.579511][ T6618] tipc: Started in network mode [ 93.586841][ T6618] tipc: Node identity da48a6b541e5, cluster identity 4711 [ 93.597748][ T6618] tipc: Enabled bearer , priority 0 [ 93.645118][ T6623] syzkaller0: entered promiscuous mode [ 93.665845][ T6623] syzkaller0: entered allmulticast mode [ 93.692793][ T6618] tipc: Resetting bearer [ 93.800649][ T6617] tipc: Resetting bearer [ 93.811313][ T6617] tipc: Disabling bearer [ 94.081166][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 94.081853][ T6647] sch_tbf: burst 4398 is lower than device lo mtu (65499) ! [ 94.099275][ T6645] validate_nla: 1 callbacks suppressed [ 94.099290][ T6645] netlink: 'syz.1.183': attribute type 30 has an invalid length. [ 94.138596][ T3554] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.138674][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 94.153774][ T3554] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.165123][ T6645] netlink: 'syz.1.183': attribute type 30 has an invalid length. [ 94.169854][ T6650] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 94.180912][ T3554] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.193051][ T3554] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.278745][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 94.295342][ T6650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.311939][ T6650] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 94.336125][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.343643][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.394665][ T6652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.409644][ T6652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.522496][ T6653] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 94.535832][ T3567] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 94.569618][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.581329][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.590417][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.599663][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.626356][ T6671] tipc: Started in network mode [ 94.631272][ T6671] tipc: Node identity b6658c2b2f97, cluster identity 4711 [ 94.639029][ T6671] tipc: Enabled bearer , priority 0 [ 94.648344][ T6671] syzkaller0: entered promiscuous mode [ 94.654808][ T6671] syzkaller0: entered allmulticast mode [ 94.664880][ T3567] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 94.686848][ T6671] tipc: Resetting bearer [ 94.694672][ T6670] tipc: Resetting bearer [ 94.703581][ T6670] tipc: Disabling bearer [ 94.758560][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 94.770039][ T6678] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 94.871343][ T6689] netlink: 'syz.3.196': attribute type 23 has an invalid length. [ 94.967555][ T6693] tipc: Enabling of bearer rejected, failed to enable media [ 94.988918][ T6693] ip6_vti0: entered allmulticast mode [ 95.089050][ T6701] netlink: 96 bytes leftover after parsing attributes in process `syz.4.199'. [ 96.207505][ T6733] batadv_slave_1: entered promiscuous mode [ 96.371081][ T6730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.399666][ T6730] batadv_slave_1: left promiscuous mode [ 96.513661][ T6745] ‚: renamed from bond_slave_0 (while UP) [ 96.674244][ T6749] tipc: Started in network mode [ 96.679197][ T6749] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 96.703704][ T6749] tipc: Enabling of bearer rejected, failed to enable media [ 97.263184][ T6795] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 97.284782][ T6795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.436550][ T6804] bond0: (slave 5‚): Releasing backup interface [ 97.459408][ T6804] bond0: (slave bond_slave_1): Releasing backup interface [ 97.490062][ T6804] team0: Port device team_slave_0 removed [ 97.509199][ T6804] team0: Port device team_slave_1 removed [ 97.523874][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.531801][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.540655][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.548529][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.597805][ T6810] tipc: Started in network mode [ 97.602875][ T6810] tipc: Node identity 122b57d30437, cluster identity 4711 [ 97.633846][ T6810] tipc: Enabled bearer , priority 0 [ 97.650712][ T6810] syzkaller0: entered promiscuous mode [ 97.664759][ T6810] syzkaller0: entered allmulticast mode [ 97.705984][ T6810] tipc: Resetting bearer [ 97.724043][ T6809] tipc: Resetting bearer [ 97.766387][ T6809] tipc: Disabling bearer [ 97.799289][ T6821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.804921][ T6817] syzkaller1: entered promiscuous mode [ 97.814027][ T6817] syzkaller1: entered allmulticast mode [ 97.917317][ T6828] __nla_validate_parse: 13 callbacks suppressed [ 97.917338][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 97.942876][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 97.966396][ T6830] tipc: Enabled bearer , priority 0 [ 97.983159][ T6830] syzkaller0: entered promiscuous mode [ 97.991592][ T6830] syzkaller0: entered allmulticast mode [ 97.992700][ T6837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.241'. [ 98.070631][ T6838] macsec2: entered promiscuous mode [ 98.083277][ T6838] macsec2: entered allmulticast mode [ 98.092847][ T6847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'. [ 98.093404][ T6850] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 98.112932][ T6830] tipc: Resetting bearer [ 98.131967][ T6847] netlink: 44 bytes leftover after parsing attributes in process `syz.2.242'. [ 98.156259][ T6829] tipc: Resetting bearer [ 98.178091][ T6854] netlink: 27 bytes leftover after parsing attributes in process `syz.0.244'. [ 98.196327][ T6829] tipc: Disabling bearer [ 98.240686][ T6859] netlink: 'syz.0.244': attribute type 2 has an invalid length. [ 98.250038][ T6859] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.244'. [ 98.283613][ T6860] netlink: 'syz.0.244': attribute type 2 has an invalid length. [ 98.296838][ T6860] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.244'. [ 98.306765][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 98.391330][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'. [ 98.453128][ T6875] tun0: tun_chr_ioctl cmd 2147767520 [ 98.846387][ T6889] bond0: (slave team0): Releasing backup interface [ 98.896933][ T6889] bond0: (slave bond_slave_0): Releasing backup interface [ 98.928703][ T6889] bond0: (slave bond_slave_1): Releasing backup interface [ 98.951972][ T6889] team0: Port device team_slave_0 removed [ 98.964524][ T6889] team0: Port device team_slave_1 removed [ 98.971034][ T6889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.007856][ T6889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.052665][ T6889] bond1: (slave gretap2): Releasing active interface [ 99.118582][ T6889] bond2: (slave ip6gretap1): Removing an active aggregator [ 99.125936][ T37] bond2: Warning: Found an uninitialized port [ 99.132225][ T6889] bond2: (slave ip6gretap1): Releasing backup interface [ 99.174529][ T6914] syz_tun: entered allmulticast mode [ 99.223206][ T6914] dvmrp8: entered allmulticast mode [ 99.233362][ T6912] dvmrp8: left allmulticast mode [ 99.350386][ T6923] syzkaller0: entered promiscuous mode [ 99.397365][ T6923] syzkaller0: entered allmulticast mode [ 99.606960][ T6950] veth0: entered promiscuous mode [ 99.615451][ T6953] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 99.666719][ T6951] veth0 (unregistering): left promiscuous mode [ 99.895140][ T6968] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 100.117758][ T6994] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 100.469507][ T7034] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 100.697299][ T7057] netlink: 'syz.3.287': attribute type 13 has an invalid length. [ 100.735793][ T7057] netlink: 'syz.3.287': attribute type 17 has an invalid length. [ 101.047111][ T7057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.104883][ T7067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.120595][ T7057] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.159356][ T7057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.180284][ T7096] netlink: 'syz.4.294': attribute type 1 has an invalid length. [ 101.219183][ T7094] vxcan1 speed is unknown, defaulting to 1000 [ 101.241976][ T7094] vxcan1 speed is unknown, defaulting to 1000 [ 101.251822][ T7094] vxcan1 speed is unknown, defaulting to 1000 [ 101.646466][ T7094] infiniband syz2: set down [ 101.651917][ T7094] infiniband syz2: added vxcan1 [ 101.657413][ T7094] syz2: rxe_create_cq: returned err = -12 [ 101.673709][ T7094] infiniband syz2: Couldn't create ib_mad CQ [ 101.686910][ T7094] infiniband syz2: Couldn't open port 1 [ 101.694225][ T2152] vxcan1 speed is unknown, defaulting to 1000 [ 101.698950][ T7124] tipc: Enabled bearer , priority 0 [ 101.719428][ T7094] RDS/IB: syz2: added [ 101.723816][ T7122] tipc: Resetting bearer [ 101.725542][ T7094] smc: adding ib device syz2 with port count 1 [ 101.736300][ T7094] smc: ib device syz2 port 1 has pnetid [ 101.775258][ T7122] tipc: Disabling bearer [ 101.797178][ T2152] vxcan1 speed is unknown, defaulting to 1000 [ 101.813746][ T7094] vxcan1 speed is unknown, defaulting to 1000 [ 101.905406][ T7135] bond0: (slave wlan1): Releasing backup interface [ 102.113739][ T7135] syz_tun: entered allmulticast mode [ 102.128976][ T7133] syz_tun: left allmulticast mode [ 102.157261][ T7094] vxcan1 speed is unknown, defaulting to 1000 [ 102.164505][ T7153] tipc: Enabling of bearer rejected, failed to enable media [ 102.547852][ T7094] vxcan1 speed is unknown, defaulting to 1000 [ 102.602648][ T7191] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 103.062218][ T7094] vxcan1 speed is unknown, defaulting to 1000 [ 103.067697][ T7228] __nla_validate_parse: 14 callbacks suppressed [ 103.067717][ T7228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.322'. [ 103.211938][ T7238] netlink: 'syz.0.322': attribute type 10 has an invalid length. [ 103.324533][ T7094] vxcan1 speed is unknown, defaulting to 1000 [ 103.399994][ T7257] netlink: 'syz.2.329': attribute type 58 has an invalid length. [ 103.411993][ T7254] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.327'. [ 103.423882][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.329'. [ 103.510663][ T7094] vxcan1 speed is unknown, defaulting to 1000 [ 103.603850][ T7266] netlink: 'syz.3.331': attribute type 10 has an invalid length. [ 103.622100][ T7266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.827350][ T7266] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 103.904003][ T7272] netlink: 'syz.1.333': attribute type 4 has an invalid length. [ 104.419718][ T7288] netlink: 104 bytes leftover after parsing attributes in process `syz.2.338'. [ 104.581100][ T7290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.613208][ T7304] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 104.772611][ T7329] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.348'. [ 104.818363][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 104.998502][ T7342] netlink: 144 bytes leftover after parsing attributes in process `syz.3.351'. [ 105.028824][ T7340] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.350'. [ 105.116361][ T7345] syzkaller0: entered promiscuous mode [ 105.121891][ T7345] syzkaller0: entered allmulticast mode [ 105.257867][ T7350] validate_nla: 1 callbacks suppressed [ 105.257885][ T7350] netlink: 'syz.3.353': attribute type 12 has an invalid length. [ 105.278026][ T7350] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.353'. [ 105.548542][ T7352] vxcan1 speed is unknown, defaulting to 1000 [ 105.910173][ T7381] Bluetooth: MGMT ver 1.23 [ 106.069985][ T7388] tipc: Enabled bearer , priority 0 [ 106.078522][ T7388] syzkaller0: entered promiscuous mode [ 106.084117][ T7388] syzkaller0: entered allmulticast mode [ 106.106035][ T7388] tipc: Resetting bearer [ 106.127936][ T7394] bond0: entered promiscuous mode [ 106.134883][ T7394] dummy0: entered promiscuous mode [ 106.262100][ T7402] pimreg: entered allmulticast mode [ 106.562655][ T7397] vxcan1 speed is unknown, defaulting to 1000 [ 106.870031][ T7387] tipc: Resetting bearer [ 106.880011][ T7387] tipc: Disabling bearer [ 106.890862][ T7399] vxcan1 speed is unknown, defaulting to 1000 [ 107.140551][ T7416] vxcan1 speed is unknown, defaulting to 1000 [ 107.728809][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 108.016203][ T7458] bridge_slave_1: left allmulticast mode [ 108.021917][ T7458] bridge_slave_1: left promiscuous mode [ 108.093745][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.123224][ T7458] bridge_slave_0: left allmulticast mode [ 108.135247][ T7458] bridge_slave_0: left promiscuous mode [ 108.151269][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.686441][ T7484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.390'. [ 108.777656][ T7487] netlink: 'syz.3.392': attribute type 1 has an invalid length. [ 108.837827][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 108.853675][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 108.926220][ T7487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.017198][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 109.045715][ T7497] veth3: entered promiscuous mode [ 109.071194][ T7497] bond2: (slave veth3): Enslaving as an active interface with a down link [ 109.136443][ T7487] IPVS: Error joining to the multicast group [ 109.254386][ T7502] dvmrp8: entered allmulticast mode [ 109.345066][ T7480] vxcan1 speed is unknown, defaulting to 1000 [ 109.381589][ T7501] dvmrp8: left allmulticast mode [ 109.613781][ T7522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.400'. [ 109.667881][ T7522] netlink: 132 bytes leftover after parsing attributes in process `syz.4.400'. [ 109.911713][ T7540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.405'. [ 110.060466][ T7551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.407'. [ 110.227095][ T7555] netlink: 56 bytes leftover after parsing attributes in process `syz.3.409'. [ 110.523274][ T7576] IPVS: sync thread started: state = MASTER, mcast_ifn = erspan0, syncid = 4, id = 0 [ 110.593960][ T7579] netlink: 32 bytes leftover after parsing attributes in process `syz.3.413'. [ 110.654490][ T2152] IPVS: starting estimator thread 0... [ 110.696708][ T7587] netlink: 'syz.3.415': attribute type 9 has an invalid length. [ 110.732793][ T7587] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 110.755081][ T7585] IPVS: using max 38 ests per chain, 91200 per kthread [ 111.359441][ T7628] netlink: 'syz.1.426': attribute type 1 has an invalid length. [ 111.373058][ T7628] netlink: 'syz.1.426': attribute type 2 has an invalid length. [ 111.406232][ T7631] netlink: 'syz.2.427': attribute type 13 has an invalid length. [ 111.414185][ T7631] netlink: 'syz.2.427': attribute type 17 has an invalid length. [ 111.475353][ T7631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.732862][ T7632] vxcan1 speed is unknown, defaulting to 1000 [ 111.906494][ T7645] netlink: 'syz.3.431': attribute type 9 has an invalid length. [ 112.098318][ T7654] "syz.2.433" (7654) uses obsolete ecb(arc4) skcipher [ 112.285532][ T7668] netlink: 'syz.2.435': attribute type 4 has an invalid length. [ 112.682989][ T7702] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 112.724955][ T7702] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.804025][ T7708] syzkaller1: entered promiscuous mode [ 112.809621][ T7708] syzkaller1: entered allmulticast mode [ 112.939194][ T7718] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 112.947259][ T7716] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 112.956995][ T5927] IPVS: starting estimator thread 0... [ 112.980844][ T7723] netlink: 'syz.2.452': attribute type 6 has an invalid length. [ 113.083917][ T7725] IPVS: using max 36 ests per chain, 86400 per kthread [ 113.332360][ T7735] vxcan1 speed is unknown, defaulting to 1000 [ 114.362464][ T7801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.417512][ T7807] pim6reg1: entered promiscuous mode [ 114.422879][ T7807] pim6reg1: entered allmulticast mode [ 114.511485][ T7815] __nla_validate_parse: 8 callbacks suppressed [ 114.511504][ T7815] netlink: 14 bytes leftover after parsing attributes in process `syz.2.474'. [ 114.530189][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'. [ 114.566324][ T7815] bond0 (unregistering): left promiscuous mode [ 114.573037][ T7815] bond0 (unregistering): Released all slaves [ 114.678478][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 114.998422][ T7842] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 115.011019][ T7842] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.484'. [ 115.213075][ T7849] tipc: Enabled bearer , priority 0 [ 115.237054][ T7849] syzkaller0: entered promiscuous mode [ 115.242571][ T7849] syzkaller0: entered allmulticast mode [ 115.280023][ T7849] tipc: Resetting bearer [ 115.379480][ T7848] tipc: Resetting bearer [ 115.404901][ T7848] tipc: Disabling bearer [ 115.499422][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 115.538136][ T7857] geneve2: entered promiscuous mode [ 115.547677][ T7859] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 115.553870][ T7857] geneve2: entered allmulticast mode [ 115.579093][ T7857] netlink: 56 bytes leftover after parsing attributes in process `syz.0.488'. [ 115.899961][ T7871] netlink: 108 bytes leftover after parsing attributes in process `syz.0.492'. [ 116.197526][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 116.206568][ T7894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.494'. [ 116.362399][ T7878] vxcan1 speed is unknown, defaulting to 1000 [ 116.433106][ T7906] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 116.587361][ T7912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.503'. [ 116.717530][ T7908] hsr0: left allmulticast mode [ 116.722447][ T7908] hsr_slave_0: left allmulticast mode [ 116.730600][ T7908] hsr_slave_1: left allmulticast mode [ 116.802529][ T3567] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.812415][ T7916] netlink: 'syz.0.504': attribute type 4 has an invalid length. [ 116.845764][ T3567] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.866015][ T3567] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.898922][ T3567] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.933084][ T7922] netlink: 'syz.3.507': attribute type 3 has an invalid length. [ 117.075910][ T7934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.132750][ T7943] netlink: 'syz.3.510': attribute type 7 has an invalid length. [ 117.486513][ T7965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.549423][ T7968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.592532][ T7970] netlink: 'syz.2.518': attribute type 27 has an invalid length. [ 117.655942][ T7953] vxcan1 speed is unknown, defaulting to 1000 [ 118.160094][ T7994] vxcan1 speed is unknown, defaulting to 1000 [ 118.237314][ T7983] vxcan1 speed is unknown, defaulting to 1000 [ 118.932361][ T8035] netlink: 'syz.2.532': attribute type 16 has an invalid length. [ 118.978817][ T8035] netlink: 'syz.2.532': attribute type 17 has an invalid length. [ 119.087073][ T8045] trusted_key: syz.3.538 sent an empty control message without MSG_MORE. [ 119.096971][ T8035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.103927][ T8051] netlink: 'syz.1.537': attribute type 10 has an invalid length. [ 119.147647][ T8043] netlink: 'syz.1.537': attribute type 10 has an invalid length. [ 119.228213][ T8051] team0: Port device dummy0 added [ 119.259497][ T8045] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.268863][ T8045] team0: Device ipvlan2 is already an upper device of the team interface [ 119.420010][ T8056] tipc: Enabled bearer , priority 0 [ 119.434131][ T8056] syzkaller0: entered promiscuous mode [ 119.439649][ T8056] syzkaller0: entered allmulticast mode [ 119.567874][ T8086] __nla_validate_parse: 16 callbacks suppressed [ 119.567894][ T8086] netlink: 52 bytes leftover after parsing attributes in process `syz.3.549'. [ 119.583341][ T8086] netlink: 52 bytes leftover after parsing attributes in process `syz.3.549'. [ 119.597231][ T8086] netlink: 52 bytes leftover after parsing attributes in process `syz.3.549'. [ 119.616551][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.549'. [ 119.869925][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.4.547'. [ 119.894336][ T1094] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.926801][ T1094] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.978309][ T8055] tipc: Resetting bearer [ 120.006397][ T8055] tipc: Disabling bearer [ 120.028041][ T1094] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.042036][ T1094] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.052315][ T8076] netlink: 32 bytes leftover after parsing attributes in process `syz.4.547'. [ 120.103178][ T1094] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.111210][ T8106] openvswitch: netlink: IPv4 tunnel dst address is zero [ 120.117014][ T1094] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.148681][ T8077] netlink: 32 bytes leftover after parsing attributes in process `syz.4.547'. [ 120.165201][ T1094] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.183215][ T1094] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.296994][ T8118] netlink: 256 bytes leftover after parsing attributes in process `syz.3.557'. [ 120.310386][ T8117] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 120.399555][ T8127] netlink: 64 bytes leftover after parsing attributes in process `syz.3.560'. [ 120.411434][ T8130] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 120.570387][ T8133] syzkaller0: entered promiscuous mode [ 120.586986][ T8133] syzkaller0: entered allmulticast mode [ 120.625386][ T8153] netlink: 172 bytes leftover after parsing attributes in process `syz.0.566'. [ 121.102119][ T8182] netlink: 'syz.2.573': attribute type 21 has an invalid length. [ 121.118201][ T8160] vxcan1 speed is unknown, defaulting to 1000 [ 121.581305][ T8201] netlink: 'syz.0.578': attribute type 23 has an invalid length. [ 121.608127][ T8205] tipc: Enabled bearer , priority 0 [ 121.701621][ T8192] vxcan1 speed is unknown, defaulting to 1000 [ 122.039908][ T8226] dummy0: mtu less than device minimum [ 122.112193][ T8203] tipc: Disabling bearer [ 122.505440][ T8232] vxcan1 speed is unknown, defaulting to 1000 [ 123.125268][ T8263] vxcan1 speed is unknown, defaulting to 1000 [ 123.298680][ T8305] openvswitch: netlink: Missing key (keys=40, expected=80) [ 123.931034][ T5868] block nbd0: Receive control failed (result -32) [ 124.457113][ T8356] vxcan1 speed is unknown, defaulting to 1000 [ 124.617004][ T8374] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 124.953828][ T8381] vxcan1 speed is unknown, defaulting to 1000 [ 125.079089][ T8404] __nla_validate_parse: 11 callbacks suppressed [ 125.079112][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 125.096924][ T8405] validate_nla: 2 callbacks suppressed [ 125.096943][ T8405] netlink: 'syz.0.631': attribute type 12 has an invalid length. [ 125.503570][ T8395] smc: removing ib device syz2 [ 126.062541][ T8425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.636'. [ 126.103569][ T8425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.636'. [ 126.154407][ T8429] netlink: 'syz.4.637': attribute type 4 has an invalid length. [ 126.233898][ T5863] Bluetooth: hci4: command 0x0405 tx timeout [ 126.616546][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 126.896369][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 126.989407][ T8457] netlink: 'syz.4.644': attribute type 1 has an invalid length. [ 127.023524][ T8457] netlink: 224 bytes leftover after parsing attributes in process `syz.4.644'. [ 128.295693][ T8514] netlink: 'syz.4.659': attribute type 10 has an invalid length. [ 128.314931][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 128.424247][ T8521] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 128.451931][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 128.496619][ T8501] netlink: 'syz.2.655': attribute type 6 has an invalid length. [ 128.531526][ T8527] tap0: tun_chr_ioctl cmd 1074025677 [ 128.539454][ T8527] tap0: linktype set to 270 [ 128.665504][ T8532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.665'. [ 128.804196][ T8535] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 128.839278][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.666'. [ 129.040236][ T8542] macvlan2: entered allmulticast mode [ 129.158462][ T8552] syzkaller1: entered promiscuous mode [ 129.169198][ T8552] syzkaller1: entered allmulticast mode [ 129.388638][ T8566] netlink: 'syz.0.676': attribute type 1 has an invalid length. [ 129.434033][ T8573] sch_tbf: burst 0 is lower than device ip_vti0 mtu (65485) ! [ 130.196797][ T8597] netlink: 'syz.3.684': attribute type 32 has an invalid length. [ 130.252138][ T8599] __nla_validate_parse: 3 callbacks suppressed [ 130.252158][ T8599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.686'. [ 130.295215][ T8599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.686'. [ 130.444163][ T8605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.687'. [ 130.689922][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.690'. [ 130.957919][ T8631] tipc: Enabled bearer , priority 0 [ 130.967050][ T8631] syzkaller0: entered promiscuous mode [ 130.972555][ T8631] syzkaller0: entered allmulticast mode [ 131.070648][ T8631] tipc: Resetting bearer [ 131.084986][ T8628] tipc: Resetting bearer [ 131.098462][ T8628] tipc: Disabling bearer [ 131.555613][ T8664] syzkaller0: entered promiscuous mode [ 131.579146][ T8664] syzkaller0: entered allmulticast mode [ 131.651518][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 131.718501][ T8673] netlink: 132 bytes leftover after parsing attributes in process `syz.4.702'. [ 131.738046][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.700'. [ 131.857983][ T8652] lo speed is unknown, defaulting to 1000 [ 131.883595][ T8652] lo speed is unknown, defaulting to 1000 [ 131.891646][ T8652] lo speed is unknown, defaulting to 1000 [ 131.911057][ T8652] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.969652][ T8652] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 131.980381][ T8687] netlink: 'syz.2.705': attribute type 2 has an invalid length. [ 131.988165][ T8687] netlink: 'syz.2.705': attribute type 8 has an invalid length. [ 132.022938][ T8687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.705'. [ 132.037661][ T8652] lo speed is unknown, defaulting to 1000 [ 132.054747][ T8652] lo speed is unknown, defaulting to 1000 [ 132.088031][ T8652] lo speed is unknown, defaulting to 1000 [ 132.114430][ T8652] lo speed is unknown, defaulting to 1000 [ 132.140035][ T8652] lo speed is unknown, defaulting to 1000 [ 132.176976][ T8652] lo speed is unknown, defaulting to 1000 [ 132.237561][ T8697] netlink: 64 bytes leftover after parsing attributes in process `syz.2.709'. [ 132.248586][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 132.562250][ T8720] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 132.670201][ T8719] syzkaller0: entered promiscuous mode [ 132.676273][ T8719] syzkaller0: entered allmulticast mode [ 132.962414][ T8728] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.028794][ T8716] lo speed is unknown, defaulting to 1000 [ 133.069411][ T8730] netlink: 'syz.4.719': attribute type 11 has an invalid length. [ 133.224524][ T8738] netlink: 'syz.0.722': attribute type 2 has an invalid length. [ 133.360598][ T8738] : entered promiscuous mode [ 133.462859][ T8756] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 133.526568][ T8756] bridge_slave_0: left allmulticast mode [ 133.555084][ T8756] bridge_slave_0: left promiscuous mode [ 133.564911][ T8762] netlink: 'syz.4.729': attribute type 6 has an invalid length. [ 133.574642][ T8756] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.598526][ T8764] netlink: 'syz.3.726': attribute type 10 has an invalid length. [ 133.612025][ T8756] bridge_slave_1: left allmulticast mode [ 133.619757][ T8756] bridge_slave_1: left promiscuous mode [ 133.632293][ T8756] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.671250][ T8756] bond0: (slave bond_slave_0): Releasing backup interface [ 133.693146][ T8756] bond0: (slave bond_slave_1): Releasing backup interface [ 133.720963][ T8756] team0: Port device team_slave_0 removed [ 133.728643][ T8756] team0: Port device team_slave_1 removed [ 133.752343][ T8756] bond0: (slave batadv_slave_0): Releasing backup interface [ 133.791478][ T8756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.813893][ T8756] macsec0: left allmulticast mode [ 133.824804][ T8756] macsec0: left promiscuous mode [ 133.835599][ T8756] bridge0: port 3(macsec0) entered disabled state [ 133.860373][ T8756] bond2: (slave veth3): Releasing active interface [ 133.892416][ T5948] lo speed is unknown, defaulting to 1000 [ 133.911247][ T8764] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 133.927000][ T8764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.937613][ T8764] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.170537][ T8783] tipc: Enabling of bearer rejected, failed to enable media [ 134.274702][ T8788] bond3: entered promiscuous mode [ 134.284579][ T8788] bond3: entered allmulticast mode [ 134.326944][ T8788] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.373761][ T8765] lo speed is unknown, defaulting to 1000 [ 134.413801][ T8800] netlink: 'syz.0.736': attribute type 6 has an invalid length. [ 134.465579][ T8801] netlink: 'syz.0.736': attribute type 1 has an invalid length. [ 134.493913][ T8801] netlink: 'syz.0.736': attribute type 2 has an invalid length. [ 134.527345][ T8780] lo speed is unknown, defaulting to 1000 [ 134.623716][ T8788] lo speed is unknown, defaulting to 1000 [ 135.236731][ T8844] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 135.316965][ T8844] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.401513][ T8852] __nla_validate_parse: 18 callbacks suppressed [ 135.401536][ T8852] netlink: 452 bytes leftover after parsing attributes in process `syz.1.748'. [ 135.433803][ T8854] dummy0: entered promiscuous mode [ 135.439205][ T8854] macsec1: entered promiscuous mode [ 135.444599][ T8854] macsec1: entered allmulticast mode [ 135.450074][ T8854] dummy0: entered allmulticast mode [ 135.456390][ T8854] dummy0: left allmulticast mode [ 135.463646][ T8854] dummy0: left promiscuous mode [ 136.283148][ T8886] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.416829][ T8896] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 136.445298][ T8886] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.496835][ T8901] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.758'. [ 136.547000][ T8884] lo speed is unknown, defaulting to 1000 [ 136.561944][ T8886] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.630798][ T8899] netlink: 'syz.1.759': attribute type 4 has an invalid length. [ 136.665426][ T8886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.757957][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.776720][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.822129][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.852695][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.928932][ T8924] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 137.038762][ T8925] sit1: entered promiscuous mode [ 137.107596][ T8930] bond1: (slave gretap1): making interface the new active one [ 137.133159][ T8930] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 137.166832][ T8921] erspan0: entered allmulticast mode [ 137.175314][ T8937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.765'. [ 137.225375][ T8937] netlink: 76 bytes leftover after parsing attributes in process `syz.4.765'. [ 137.419691][ T8952] netlink: 36 bytes leftover after parsing attributes in process `syz.4.768'. [ 137.709075][ T8963] tipc: Enabled bearer , priority 0 [ 137.723337][ T8963] syzkaller0: entered promiscuous mode [ 137.749507][ T8963] syzkaller0: entered allmulticast mode [ 137.787994][ T8963] tipc: Resetting bearer [ 137.882366][ T8963] tipc: Resetting bearer [ 137.907227][ T8962] tipc: Resetting bearer [ 137.923904][ T8962] tipc: Disabling bearer [ 138.018179][ T8987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.030197][ T8987] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 138.056741][ T8987] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 138.152041][ T8995] bpq0: entered promiscuous mode [ 138.187846][ T8978] lo speed is unknown, defaulting to 1000 [ 138.486667][ T8985] lo speed is unknown, defaulting to 1000 [ 138.571399][ T9009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.785'. [ 138.730224][ T9014] macsec3: entered promiscuous mode [ 138.740450][ T9014] macsec3: entered allmulticast mode [ 138.746191][ T9014] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 139.686328][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.804'. [ 139.733580][ T9075] veth1_to_bond: entered allmulticast mode [ 139.742768][ T9071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.749333][ T9075] bond_slave_1: entered promiscuous mode [ 139.767280][ T9079] vlan0: entered promiscuous mode [ 139.774260][ T9079] lo speed is unknown, defaulting to 1000 [ 139.780763][ T9079] lo speed is unknown, defaulting to 1000 [ 139.789237][ T9079] lo speed is unknown, defaulting to 1000 [ 139.795391][ T9075] bond_slave_1: left promiscuous mode [ 139.812808][ T9075] veth1_to_bond: left allmulticast mode [ 139.929042][ T9090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.965671][ T9092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.809'. [ 140.004650][ T9079] infiniband syz0: set down [ 140.017872][ T9092] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 140.054016][ T9079] infiniband syz0: added lo [ 140.064722][ T9092] netlink: 100 bytes leftover after parsing attributes in process `syz.2.809'. [ 140.096377][ T44] lo speed is unknown, defaulting to 1000 [ 140.097513][ T9079] RDS/IB: syz0: added [ 140.106401][ T9079] smc: adding ib device syz0 with port count 1 [ 140.125765][ T9079] smc: ib device syz0 port 1 has pnetid [ 140.148136][ T9] lo speed is unknown, defaulting to 1000 [ 140.157399][ T9079] lo speed is unknown, defaulting to 1000 [ 140.222802][ T9092] lo speed is unknown, defaulting to 1000 [ 140.244370][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.813'. [ 140.276953][ T9109] pimreg: entered allmulticast mode [ 140.312040][ T9079] lo speed is unknown, defaulting to 1000 [ 140.403784][ T9092] lo speed is unknown, defaulting to 1000 [ 140.511832][ T9079] lo speed is unknown, defaulting to 1000 [ 140.539022][ T9118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.562799][ T9117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.815'. [ 140.719095][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 140.754881][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 140.768614][ T9079] lo speed is unknown, defaulting to 1000 [ 141.116779][ T9079] lo speed is unknown, defaulting to 1000 [ 141.147081][ T9155] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 141.189242][ T9155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.214270][ T9155] bond0: (slave gretap4): making interface the new active one [ 141.222863][ T9155] bond0: (slave gretap4): Enslaving as an active interface with an up link [ 141.266177][ T9162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.830'. [ 141.334462][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.830'. [ 141.408471][ T9162] bond1: entered promiscuous mode [ 141.413603][ T9162] bond1: entered allmulticast mode [ 141.429969][ T9175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.833'. [ 141.441241][ T9175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.833'. [ 141.451190][ T9162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.799861][ T9191] netlink: 256 bytes leftover after parsing attributes in process `syz.0.837'. [ 141.821491][ T9191] netlink: 48 bytes leftover after parsing attributes in process `syz.0.837'. [ 141.879474][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'. [ 141.881663][ T9167] lo speed is unknown, defaulting to 1000 [ 141.897055][ T9167] lo speed is unknown, defaulting to 1000 [ 142.000646][ T9192] ip6_vti0: left allmulticast mode [ 142.033195][ T9196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.065833][ T9192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.211951][ T9191] rdma_rxe: rxe_newlink: failed to add lo [ 142.514962][ T9220] tipc: Enabled bearer , priority 0 [ 142.536005][ T9220] syzkaller0: entered promiscuous mode [ 142.552051][ T9220] syzkaller0: entered allmulticast mode [ 142.594442][ T9220] tipc: Resetting bearer [ 142.641177][ T9219] tipc: Resetting bearer [ 142.670840][ T9219] tipc: Disabling bearer [ 142.819138][ T9227] netlink: 'syz.1.847': attribute type 2 has an invalid length. [ 142.859483][ T9226] syzkaller1: entered promiscuous mode [ 142.867983][ T9226] syzkaller1: entered allmulticast mode [ 142.893557][ T9218] lo speed is unknown, defaulting to 1000 [ 142.904487][ T9218] lo speed is unknown, defaulting to 1000 [ 142.911054][ T9229] netlink: 'syz.0.846': attribute type 83 has an invalid length. [ 143.411533][ T9246] lo speed is unknown, defaulting to 1000 [ 143.455908][ T9246] lo speed is unknown, defaulting to 1000 [ 143.673267][ T9263] lo speed is unknown, defaulting to 1000 [ 143.692383][ T9263] lo speed is unknown, defaulting to 1000 [ 144.001111][ T9282] 8021q: VLANs not supported on xfrm0 [ 144.262423][ T9292] netlink: 'syz.4.867': attribute type 6 has an invalid length. [ 144.361797][ T9304] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 144.497201][ T9310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.556547][ T9313] vlan0: left promiscuous mode [ 144.584868][ T9313] vti0: left promiscuous mode [ 144.692475][ T9320] rdma_rxe: rxe_newlink: failed to add lo [ 144.715771][ T9320] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 144.748696][ T9319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.112018][ T9333] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 145.687749][ T9353] bond5 (unregistering): Released all slaves [ 146.210874][ T9404] __nla_validate_parse: 13 callbacks suppressed [ 146.210894][ T9404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.895'. [ 146.243088][ T9404] netlink: 'syz.3.895': attribute type 2 has an invalid length. [ 146.310799][ T9416] xfrm1: entered allmulticast mode [ 146.313943][ T5868] Bluetooth: hci4: link tx timeout [ 146.322359][ T5868] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.397242][ T9425] netlink: 76 bytes leftover after parsing attributes in process `syz.3.901'. [ 146.550968][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 146.561049][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.905'. [ 146.570430][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 146.582628][ T9439] netlink: 204 bytes leftover after parsing attributes in process `syz.2.905'. [ 146.982581][ T9453] lo speed is unknown, defaulting to 1000 [ 146.989669][ T9453] lo speed is unknown, defaulting to 1000 [ 147.044217][ T9467] tipc: Enabled bearer , priority 0 [ 147.051712][ T9467] syzkaller0: entered promiscuous mode [ 147.057373][ T9467] syzkaller0: entered allmulticast mode [ 147.132130][ T9469] tipc: Resetting bearer [ 147.270687][ T9482] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 147.462472][ T9491] netlink: 104 bytes leftover after parsing attributes in process `syz.2.919'. [ 147.656457][ T9493] netlink: 'syz.2.920': attribute type 1 has an invalid length. [ 147.667780][ T9493] netlink: 'syz.2.920': attribute type 22 has an invalid length. [ 147.688093][ T9493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.920'. [ 147.698975][ T9493] bond0: option ad_select: unable to set because the bond device is up [ 147.860698][ T9502] lo speed is unknown, defaulting to 1000 [ 147.869156][ T9466] tipc: Resetting bearer [ 147.885905][ T9466] tipc: Disabling bearer [ 147.897431][ T9502] lo speed is unknown, defaulting to 1000 [ 147.988241][ T2930] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 148.393815][ T5863] Bluetooth: hci4: command 0x0405 tx timeout [ 148.552709][ T9531] netlink: 'syz.1.927': attribute type 2 has an invalid length. [ 148.579805][ T9533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.928'. [ 148.709198][ T9535] tipc: Enabled bearer , priority 0 [ 148.733303][ T9540] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 148.752490][ T9540] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 148.775389][ T9535] syzkaller0: entered promiscuous mode [ 148.785695][ T9535] syzkaller0: entered allmulticast mode [ 148.799093][ T9548] syzkaller1: entered promiscuous mode [ 148.808638][ T9548] syzkaller1: entered allmulticast mode [ 148.825096][ T30] audit: type=1107 audit(1756130442.940:5): pid=9534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 148.841827][ T9535] tipc: Resetting bearer [ 148.953327][ T9534] tipc: Resetting bearer [ 148.974304][ T9534] tipc: Disabling bearer [ 148.994996][ T9558] netlink: 'syz.4.935': attribute type 8 has an invalid length. [ 149.003050][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'. [ 149.031459][ T9558] bond0: entered promiscuous mode [ 149.048733][ T9558] bond_slave_0: entered promiscuous mode [ 149.070258][ T9558] bond_slave_1: entered promiscuous mode [ 149.078301][ T9558] bond0: left promiscuous mode [ 149.087369][ T9558] bond_slave_0: left promiscuous mode [ 149.088151][ T9579] netlink: 'syz.2.939': attribute type 1 has an invalid length. [ 149.093216][ T9558] bond_slave_1: left promiscuous mode [ 149.102054][ T9579] netlink: 'syz.2.939': attribute type 3 has an invalid length. [ 149.210774][ T9581] netlink: 'syz.0.940': attribute type 10 has an invalid length. [ 149.286861][ T9592] netlink: 'syz.1.943': attribute type 2 has an invalid length. [ 149.294998][ T9595] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 149.351014][ T9592] syzkaller0: entered promiscuous mode [ 149.359328][ T9592] syzkaller0: entered allmulticast mode [ 149.372650][ T9597] : entered promiscuous mode [ 149.501966][ T9606] tipc: Enabled bearer , priority 0 [ 149.511470][ T9606] syzkaller0: entered promiscuous mode [ 149.517246][ T9606] syzkaller0: entered allmulticast mode [ 149.538570][ T9605] tipc: Resetting bearer [ 149.576163][ T9605] tipc: Disabling bearer [ 149.613124][ T9593] lo speed is unknown, defaulting to 1000 [ 149.619782][ T9593] lo speed is unknown, defaulting to 1000 [ 150.226278][ T9617] batadv_slave_0: entered promiscuous mode [ 150.235821][ T9617] batadv_slave_0: entered allmulticast mode [ 150.605114][ T9660] pim6reg1: entered promiscuous mode [ 150.610655][ T9660] pim6reg1: entered allmulticast mode [ 150.769367][ T9665] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.805026][ T9665] team0: Port device bond2 added [ 151.166228][ T9691] netlink: 'syz.4.976': attribute type 7 has an invalid length. [ 151.191440][ T9695] bond0: entered promiscuous mode [ 151.197450][ T9695] gretap4: entered promiscuous mode [ 151.205605][ T9695] batadv0: entered promiscuous mode [ 151.212357][ T9695] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 151.222590][ T9695] hsr2: entered allmulticast mode [ 151.229557][ T9695] bond0: entered allmulticast mode [ 151.234853][ T9695] gretap4: entered allmulticast mode [ 151.240268][ T9695] batadv0: entered allmulticast mode [ 151.248352][ T9695] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 151.256599][ T9695] bond0: left promiscuous mode [ 151.261480][ T9695] gretap4: left promiscuous mode [ 151.267527][ T9695] batadv0: left promiscuous mode [ 151.287872][ T9693] syzkaller1: entered promiscuous mode [ 151.293553][ T9693] syzkaller1: entered allmulticast mode [ 151.490755][ T9700] __nla_validate_parse: 20 callbacks suppressed [ 151.490774][ T9700] netlink: 32 bytes leftover after parsing attributes in process `syz.4.978'. [ 151.604060][ T9698] validate_nla: 1 callbacks suppressed [ 151.604084][ T9698] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 151.619031][ T9698] nbd: error processing sock list [ 151.624406][ T9698] block nbd1: shutting down sockets [ 152.136832][ T9732] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 152.145645][ T9732] netlink: 'syz.4.989': attribute type 11 has an invalid length. [ 152.155230][ T9732] netlink: 220 bytes leftover after parsing attributes in process `syz.4.989'. [ 152.371478][ T44] IPVS: starting estimator thread 0... [ 152.381545][ T9738] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 152.390062][ T9738] tipc: Enabled bearer , priority 10 [ 152.465699][ T9739] IPVS: using max 35 ests per chain, 84000 per kthread [ 152.585492][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 152.717568][ T9758] netlink: 92 bytes leftover after parsing attributes in process `syz.4.996'. [ 152.726840][ T9758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.996'. [ 152.738660][ T9758] netlink: 'syz.4.996': attribute type 10 has an invalid length. [ 152.748378][ T9758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.756769][ T9758] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 152.774532][ T9748] lo speed is unknown, defaulting to 1000 [ 152.781567][ T9748] lo speed is unknown, defaulting to 1000 [ 152.784164][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 152.892697][ T9759] smc: removing ib device syz1 [ 152.903602][ T9738] siw: device registration error -23 [ 153.505956][ T5927] tipc: Node number set to 2582809643 [ 153.644123][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 153.766951][ T9799] netlink: 'syz.4.1008': attribute type 3 has an invalid length. [ 153.851832][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 153.864905][ T9803] bridge_slave_0: default FDB implementation only supports local addresses [ 153.885544][ T9799] ip6gre0: Master is either lo or non-ether device [ 154.198659][ T9820] netlink: 'syz.4.1013': attribute type 10 has an invalid length. [ 154.219143][ T9820] team0: Device hsr_slave_0 failed to register rx_handler [ 154.666389][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'. [ 154.865190][ T9847] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1022'. [ 154.993245][ T9843] syzkaller1: entered promiscuous mode [ 155.007628][ T9843] syzkaller1: entered allmulticast mode [ 155.604176][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 155.622130][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 155.633661][ T5948] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 155.653756][ T5948] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 155.736813][ T9883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.848214][ T9890] tipc: Enabled bearer , priority 0 [ 155.865974][ T9890] syzkaller0: entered promiscuous mode [ 155.875408][ T9890] syzkaller0: entered allmulticast mode [ 155.891738][ T9890] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 155.919119][ T9890] tipc: Resetting bearer [ 155.937372][ T9889] tipc: Resetting bearer [ 155.950456][ T9889] tipc: Disabling bearer [ 156.055185][ T9897] pimreg: entered allmulticast mode [ 156.370568][ T9914] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 156.633907][ T5948] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 158.393685][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 159.489246][ T9948] netlink: 'syz.4.1054': attribute type 4 has an invalid length. [ 159.498569][ T9948] __nla_validate_parse: 35 callbacks suppressed [ 159.498589][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 159.542374][ T9954] netlink: 'syz.0.1050': attribute type 3 has an invalid length. [ 159.552169][ T9954] netlink: 'syz.0.1050': attribute type 1 has an invalid length. [ 159.572987][ T9954] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1050'. [ 159.593563][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 159.628726][ T9965] netlink: 'syz.4.1057': attribute type 1 has an invalid length. [ 159.636769][ T9965] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1057'. [ 159.647973][ T9965] NCSI netlink: No device for ifindex 0 [ 159.684612][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'. [ 159.763377][ T9973] openvswitch: netlink: ufid size 88 bytes exceeds the range (1, 16) [ 159.771658][ T9973] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 159.807053][ T9976] netlink: 'syz.4.1062': attribute type 1 has an invalid length. [ 159.830519][ T9976] bond3: entered promiscuous mode [ 159.836276][ T9976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.852311][ T9976] bond3: (slave bridge0): making interface the new active one [ 159.860168][ T9976] bridge0: entered promiscuous mode [ 159.866501][ T9976] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 160.011710][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 160.034587][T10000] team1: entered promiscuous mode [ 160.039675][T10000] team1: entered allmulticast mode [ 160.045542][T10000] 8021q: adding VLAN 0 to HW filter on device team1 [ 160.058448][T10001] lo speed is unknown, defaulting to 1000 [ 160.066359][T10001] lo speed is unknown, defaulting to 1000 [ 160.091822][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'. [ 160.101546][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'. [ 160.316029][T10021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.422220][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 160.438621][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 160.540541][T10033] netlink: 'syz.1.1080': attribute type 1 has an invalid length. [ 160.825999][T10052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1085'. [ 160.867938][T10054] netlink: 'syz.4.1086': attribute type 10 has an invalid length. [ 160.879678][T10054] team0: Port device dummy0 added [ 160.888236][T10054] netlink: 'syz.4.1086': attribute type 10 has an invalid length. [ 160.896800][T10054] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 160.912852][T10054] team0: Failed to send options change via netlink (err -105) [ 160.921386][T10054] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 160.930756][T10054] team0: Port device dummy0 removed [ 160.939149][T10054] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.242940][T10066] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 161.589024][T10100] tipc: Enabled bearer , priority 0 [ 161.603309][T10100] syzkaller0: entered promiscuous mode [ 161.620888][T10100] syzkaller0: entered allmulticast mode [ 161.658261][T10100] tipc: Resetting bearer [ 161.689629][T10099] tipc: Resetting bearer [ 161.710033][T10099] tipc: Disabling bearer [ 161.731603][T10104] lo speed is unknown, defaulting to 1000 [ 161.743589][T10110] lo speed is unknown, defaulting to 1000 [ 161.748488][T10114] netlink: 'syz.0.1102': attribute type 26 has an invalid length. [ 161.757374][T10104] lo speed is unknown, defaulting to 1000 [ 161.902936][T10110] lo speed is unknown, defaulting to 1000 [ 162.472436][T10149] netlink: 'syz.4.1114': attribute type 12 has an invalid length. [ 162.578329][T10154] tipc: Enabled bearer , priority 0 [ 162.587939][T10154] syzkaller0: entered promiscuous mode [ 162.595321][T10154] syzkaller0: entered allmulticast mode [ 162.609649][T10154] tipc: Resetting bearer [ 162.626170][T10153] tipc: Resetting bearer [ 162.644979][T10153] tipc: Disabling bearer [ 162.728474][T10162] veth1: entered allmulticast mode [ 162.876451][T10188] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20003 [ 163.341237][T10232] tipc: Enabling of bearer rejected, failed to enable media [ 163.531429][T10249] tipc: New replicast peer: 255.255.255.255 [ 163.549940][T10249] tipc: Enabled bearer , priority 10 [ 163.763002][T10266] vlan2: entered promiscuous mode [ 163.888617][T10274] pim6reg: entered allmulticast mode [ 163.899614][T10274] pim6reg: left allmulticast mode [ 163.978456][T10285] rdma_rxe: rxe_newlink: failed to add lo [ 163.999430][T10284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.088533][T10280] lo speed is unknown, defaulting to 1000 [ 164.107896][T10280] lo speed is unknown, defaulting to 1000 [ 164.515991][T10315] lo speed is unknown, defaulting to 1000 [ 164.522834][T10315] lo speed is unknown, defaulting to 1000 [ 164.663853][ T5927] tipc: Node number set to 4278255617 [ 164.754739][ T5927] IPVS: starting estimator thread 0... [ 164.913592][T10341] IPVS: using max 35 ests per chain, 84000 per kthread [ 164.936210][T10340] lo speed is unknown, defaulting to 1000 [ 164.943028][T10340] lo speed is unknown, defaulting to 1000 [ 165.027700][T10353] __nla_validate_parse: 14 callbacks suppressed [ 165.027720][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1160'. [ 165.375959][T10368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1164'. [ 165.427260][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 165.787299][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1170'. [ 165.881133][T10399] tipc: Enabled bearer , priority 0 [ 165.923523][T10399] syzkaller0: entered promiscuous mode [ 165.945815][T10399] syzkaller0: entered allmulticast mode [ 166.045966][T10399] tipc: Resetting bearer [ 166.072213][T10398] tipc: Resetting bearer [ 166.107974][T10398] tipc: Disabling bearer [ 166.134505][T10419] netlink: 'syz.1.1175': attribute type 2 has an invalid length. [ 166.142351][T10419] netlink: 'syz.1.1175': attribute type 1 has an invalid length. [ 166.153257][T10419] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1175'. [ 166.153328][T10416] bond0: entered promiscuous mode [ 166.171061][T10416] bond0: entered allmulticast mode [ 166.198342][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 166.210638][T10416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.397216][T10438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1182'. [ 166.401727][T10437] lo speed is unknown, defaulting to 1000 [ 166.468809][T10437] lo speed is unknown, defaulting to 1000 [ 166.469355][T10441] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 166.483639][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'. [ 166.651160][T10449] lo speed is unknown, defaulting to 1000 [ 166.746444][T10449] lo speed is unknown, defaulting to 1000 [ 166.763896][T10460] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1186'. [ 166.919765][T10466] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 166.981606][T10466] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1189'. [ 167.027840][T10466] netlink: 'syz.0.1189': attribute type 5 has an invalid length. [ 167.053102][T10466] netlink: 'syz.0.1189': attribute type 21 has an invalid length. [ 167.319492][T10475] syzkaller0: entered promiscuous mode [ 167.329455][T10475] syzkaller0: entered allmulticast mode [ 167.625884][T10496] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 167.668253][T10501] sctp: [Deprecated]: syz.3.1200 (pid 10501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.668253][T10501] Use struct sctp_sack_info instead [ 167.684807][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 167.778831][T10512] ip6tnl1: entered promiscuous mode [ 167.824748][T10512] ip6tnl1: entered allmulticast mode [ 167.923393][T10521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.959539][T10518] gretap0: entered promiscuous mode [ 167.965311][T10518] vlan2: entered promiscuous mode [ 168.154816][T10534] netlink: 'syz.0.1213': attribute type 7 has an invalid length. [ 168.180674][T10534] netlink: 'syz.0.1213': attribute type 8 has an invalid length. [ 169.380588][T10542] syz.0.1215 uses old SIOCAX25GETINFO [ 169.684657][ T5868] Bluetooth: hci1: command 0x080f tx timeout [ 169.701772][T10574] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.770088][T10574] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.922886][T10574] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.009835][T10574] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.077937][ T2930] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.097279][ T3484] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.114928][ T2930] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.128425][ T2930] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.234984][T10602] __nla_validate_parse: 13 callbacks suppressed [ 170.235004][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 170.251917][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 170.512068][T10614] netlink: 'syz.0.1234': attribute type 4 has an invalid length. [ 170.524684][T10615] netlink: 'syz.0.1234': attribute type 4 has an invalid length. [ 170.553691][T10615] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1234'. [ 170.573501][T10614] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1234'. [ 170.583607][T10622] FAULT_INJECTION: forcing a failure. [ 170.583607][T10622] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.601945][T10622] CPU: 1 UID: 0 PID: 10622 Comm: syz.4.1237 Not tainted syzkaller #0 PREEMPT(full) [ 170.601974][T10622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.601987][T10622] Call Trace: [ 170.601995][T10622] [ 170.602003][T10622] dump_stack_lvl+0x189/0x250 [ 170.602034][T10622] ? __pfx____ratelimit+0x10/0x10 [ 170.602063][T10622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.602092][T10622] ? __pfx__printk+0x10/0x10 [ 170.602117][T10622] ? __might_fault+0xb0/0x130 [ 170.602146][T10622] ? vfs_write+0x956/0xb30 [ 170.602192][T10622] ? rcu_is_watching+0x15/0xb0 [ 170.602215][T10622] should_fail_ex+0x414/0x560 [ 170.602244][T10622] _copy_from_user+0x2d/0xb0 [ 170.602269][T10622] __sys_bind+0x199/0x3e0 [ 170.602300][T10622] ? __pfx___sys_bind+0x10/0x10 [ 170.602336][T10622] ? __pfx_ksys_write+0x10/0x10 [ 170.602361][T10622] ? rcu_is_watching+0x15/0xb0 [ 170.602385][T10622] __x64_sys_bind+0x7a/0x90 [ 170.602415][T10622] do_syscall_64+0xfa/0x3b0 [ 170.602434][T10622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.602455][T10622] ? clear_bhb_loop+0x60/0xb0 [ 170.602479][T10622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.602499][T10622] RIP: 0033:0x7f1b16f8ebe9 [ 170.602528][T10622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.602551][T10622] RSP: 002b:00007f1b17e9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 170.602577][T10622] RAX: ffffffffffffffda RBX: 00007f1b171b5fa0 RCX: 00007f1b16f8ebe9 [ 170.602593][T10622] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000003 [ 170.602606][T10622] RBP: 00007f1b17e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 170.602619][T10622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.602631][T10622] R13: 00007f1b171b6038 R14: 00007f1b171b5fa0 R15: 00007fff79900438 [ 170.602655][T10622] [ 170.921869][T10643] IPv6: sit1: Disabled Multicast RS [ 171.037218][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 171.355333][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'. [ 171.422075][T10669] bond3: (slave bridge0): Releasing backup interface [ 171.512721][T10675] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 171.559746][T10679] FAULT_INJECTION: forcing a failure. [ 171.559746][T10679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.578017][T10679] CPU: 0 UID: 0 PID: 10679 Comm: syz.3.1250 Not tainted syzkaller #0 PREEMPT(full) [ 171.578046][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.578058][T10679] Call Trace: [ 171.578065][T10679] [ 171.578074][T10679] dump_stack_lvl+0x189/0x250 [ 171.578105][T10679] ? __pfx____ratelimit+0x10/0x10 [ 171.578134][T10679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.578158][T10679] ? __pfx__printk+0x10/0x10 [ 171.578189][T10679] ? rcu_is_watching+0x15/0xb0 [ 171.578210][T10679] should_fail_ex+0x414/0x560 [ 171.578236][T10679] _copy_to_user+0x31/0xb0 [ 171.578260][T10679] simple_read_from_buffer+0xe1/0x170 [ 171.578290][T10679] proc_fail_nth_read+0x1b3/0x220 [ 171.578313][T10679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.578337][T10679] ? rw_verify_area+0x2a6/0x4d0 [ 171.578362][T10679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.578385][T10679] vfs_read+0x1fd/0xa30 [ 171.578414][T10679] ? __pfx_vfs_read+0x10/0x10 [ 171.578438][T10679] ? ping_bind+0x459/0x12d0 [ 171.578466][T10679] ? __sys_bind+0x2e9/0x3e0 [ 171.578496][T10679] ? __pfx___sys_bind+0x10/0x10 [ 171.578528][T10679] ksys_read+0x145/0x250 [ 171.578573][T10679] ? __pfx_ksys_read+0x10/0x10 [ 171.578597][T10679] ? rcu_is_watching+0x15/0xb0 [ 171.578620][T10679] ? rcu_is_watching+0x15/0xb0 [ 171.578641][T10679] do_syscall_64+0xfa/0x3b0 [ 171.578660][T10679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.578680][T10679] ? clear_bhb_loop+0x60/0xb0 [ 171.578703][T10679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.578723][T10679] RIP: 0033:0x7f830238d5fc [ 171.578740][T10679] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 171.578758][T10679] RSP: 002b:00007f83031a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.578790][T10679] RAX: ffffffffffffffda RBX: 00007f83025b5fa0 RCX: 00007f830238d5fc [ 171.578806][T10679] RDX: 000000000000000f RSI: 00007f83031a10a0 RDI: 0000000000000004 [ 171.578819][T10679] RBP: 00007f83031a1090 R08: 0000000000000000 R09: 0000000000000000 [ 171.578832][T10679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.578845][T10679] R13: 00007f83025b6038 R14: 00007f83025b5fa0 R15: 00007ffd84b5c708 [ 171.578868][T10679] [ 172.017763][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 172.032151][T10691] batadv0: entered promiscuous mode [ 172.039773][T10691] macsec3: entered promiscuous mode [ 172.164825][T10691] batadv0: left promiscuous mode [ 172.362710][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 172.515631][T10717] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 172.961033][T10751] validate_nla: 1 callbacks suppressed [ 172.961052][T10751] netlink: 'syz.0.1269': attribute type 1 has an invalid length. [ 172.961059][T10750] netlink: 'syz.0.1269': attribute type 1 has an invalid length. [ 173.001027][T10750] bond2: (slave bridge4): making interface the new active one [ 173.009968][T10750] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 173.293838][T10767] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1274'. [ 173.336455][T10767] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 173.407731][T10767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.425669][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 173.436060][T10780] netlink: 'syz.1.1275': attribute type 8 has an invalid length. [ 173.460548][T10778] bond3: (slave gretap2): making interface the new active one [ 173.480780][T10778] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 173.564363][T10778] syz.0.1274 (10778) used greatest stack depth: 18480 bytes left [ 173.623673][T10791] netlink: 'syz.1.1280': attribute type 10 has an invalid length. [ 173.644064][T10791] veth0_vlan: left promiscuous mode [ 173.649611][T10791] veth0_vlan: entered promiscuous mode [ 173.670754][T10791] veth0_vlan: entered allmulticast mode [ 173.696185][T10800] netlink: 'syz.1.1280': attribute type 10 has an invalid length. [ 173.700052][T10791] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 173.775972][T10800] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 174.061308][T10820] lo speed is unknown, defaulting to 1000 [ 174.068395][T10820] lo speed is unknown, defaulting to 1000 [ 174.166439][T10825] netlink: 'syz.2.1286': attribute type 1 has an invalid length. [ 175.001154][T10882] IPVS: length: 164 != 24 [ 175.141671][T10892] lo speed is unknown, defaulting to 1000 [ 175.177173][T10892] lo speed is unknown, defaulting to 1000 [ 175.279221][ T30] audit: type=1800 audit(1756130469.400:6): pid=10901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1310" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1344 res=0 errno=0 [ 175.318453][T10901] __nla_validate_parse: 7 callbacks suppressed [ 175.318474][T10901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1310'. [ 175.422441][T10915] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1312'. [ 175.628217][T10924] netlink: 'syz.4.1314': attribute type 1 has an invalid length. [ 175.647679][T10924] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1314'. [ 175.671070][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'. [ 175.694209][T10924] netlink: 'syz.4.1314': attribute type 21 has an invalid length. [ 175.716108][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'. [ 175.781847][T10935] Unsupported ieee802154 address type: 0 [ 175.791026][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 175.879962][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 175.928791][T10939] openvswitch: netlink: Unknown nsh attribute 0 [ 175.942130][T10939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.107828][T10957] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1328'. [ 176.174804][T10955] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 176.182602][T10955] macvlan2: left promiscuous mode [ 176.193363][T10955] macvlan2: left allmulticast mode [ 176.216660][T10955] xfrm1: left allmulticast mode [ 176.222110][T10955] ip6tnl1: left promiscuous mode [ 176.228877][T10955] ip6tnl1: left allmulticast mode [ 176.238447][T10957] 0·: renamed from hsr0 [ 176.247024][T10957] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.258116][T10957] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.268733][T10957] 0·: entered allmulticast mode [ 176.273698][T10957] hsr_slave_0: entered allmulticast mode [ 176.279372][T10957] hsr_slave_1: entered allmulticast mode [ 176.286342][T10957] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 176.481788][T10984] netlink: 'syz.1.1335': attribute type 10 has an invalid length. [ 176.536181][T10984] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 176.544562][T10984] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 176.563224][T10984] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 176.647699][T10989] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1336'. [ 176.731934][T11002] syz0: rxe_newlink: already configured on lo [ 176.766682][T11003] svc: failed to register nfsdv3 RPC service (errno 111). [ 176.776611][T11003] svc: failed to register nfsaclv3 RPC service (errno 111). [ 176.922928][T11015] syzkaller0: entered promiscuous mode [ 176.929025][T11015] syzkaller0: entered allmulticast mode [ 176.947473][T11014] tipc: Enabled bearer , priority 0 [ 177.078281][T11016] tipc: Resetting bearer [ 177.097833][T11016] tipc: Disabling bearer [ 177.247385][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1345'. [ 177.247455][T11033] syzkaller1: entered promiscuous mode [ 177.267852][T11033] syzkaller1: entered allmulticast mode [ 177.297012][T11035] Bluetooth: MGMT ver 1.23 [ 177.695999][T11061] lo speed is unknown, defaulting to 1000 [ 177.745763][T11061] lo speed is unknown, defaulting to 1000 [ 177.794128][T11071] lo speed is unknown, defaulting to 1000 [ 178.294166][T11071] lo speed is unknown, defaulting to 1000 [ 179.710102][T11150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.884809][T11154] tipc: Enabled bearer , priority 0 [ 179.894058][T11154] veth0_to_bond: entered promiscuous mode [ 179.902136][T11154] tipc: Resetting bearer [ 179.976753][T11154] tipc: Disabling bearer [ 180.610113][T11210] __nla_validate_parse: 8 callbacks suppressed [ 180.610132][T11210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1394'. [ 180.638159][T11209] validate_nla: 5 callbacks suppressed [ 180.638178][T11209] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 180.652698][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 180.661740][T11209] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 180.945557][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 181.011087][T11233] !: renamed from dummy0 [ 181.168544][T11239] lo speed is unknown, defaulting to 1000 [ 181.208626][T11239] lo speed is unknown, defaulting to 1000 [ 181.342793][T11250] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 181.397583][T11250] netlink: 'syz.3.1405': attribute type 1 has an invalid length. [ 181.405578][T11251] netlink: 'syz.3.1405': attribute type 1 has an invalid length. [ 181.565530][T11251] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 181.566217][T11250] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 182.361441][T11294] lo speed is unknown, defaulting to 1000 [ 182.378362][T11294] lo speed is unknown, defaulting to 1000 [ 182.560101][T11307] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1412'. [ 182.671787][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880278f3c00: rx timeout, send abort [ 182.680230][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026418400: rx timeout, send abort [ 182.688835][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880278f3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 182.703284][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888026418400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 182.776876][T11314] lo speed is unknown, defaulting to 1000 [ 182.784058][T11314] lo speed is unknown, defaulting to 1000 [ 183.001974][T11326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.265857][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 183.279482][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1424'. [ 183.382392][T11358] netlink: 'syz.1.1429': attribute type 6 has an invalid length. [ 183.397340][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'. [ 183.408234][T11358] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1429'. [ 183.690529][T11382] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1437'. [ 183.711409][T11389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1436'. [ 183.854924][T11409] tipc: Enabled bearer , priority 0 [ 183.868667][T11409] syzkaller0: entered promiscuous mode [ 183.877087][T11409] syzkaller0: entered allmulticast mode [ 183.892477][T11409] syzkaller0: mtu less than device minimum [ 183.900108][T11407] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 183.915928][T11416] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 [ 184.054853][T11427] tap0: tun_chr_ioctl cmd 35108 [ 184.271776][T11443] tipc: Enabled bearer , priority 0 [ 184.295907][T11443] syzkaller0: entered promiscuous mode [ 184.302444][T11443] syzkaller0: entered allmulticast mode [ 184.313599][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 184.337386][T11443] tipc: Resetting bearer [ 184.350228][ T2152] hid-generic 0005:0C45:8002.0001: collection stack underflow [ 184.370308][ T2152] hid-generic 0005:0C45:8002.0001: item 0 0 0 12 parsing failed [ 184.389268][ T2152] hid-generic 0005:0C45:8002.0001: probe with driver hid-generic failed with error -22 [ 184.401919][T11441] tipc: Resetting bearer [ 184.412031][T11441] tipc: Disabling bearer [ 184.844069][T11482] netlink: 'syz.3.1465': attribute type 6 has an invalid length. [ 184.993750][ T24] tipc: Node number set to 499222645 [ 185.146212][T11511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.209205][T11513] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 185.507447][T11541] IPVS: Scheduler module ip_vs_sip not found [ 185.603242][T11548] lo speed is unknown, defaulting to 1000 [ 185.613868][T11548] lo speed is unknown, defaulting to 1000 [ 185.632566][T11552] __nla_validate_parse: 11 callbacks suppressed [ 185.632590][T11552] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1481'. [ 185.655375][T11553] netlink: 'syz.4.1482': attribute type 1 has an invalid length. [ 185.689064][T11555] netlink: 'syz.1.1481': attribute type 1 has an invalid length. [ 185.734339][T11555] netlink: 'syz.1.1481': attribute type 3 has an invalid length. [ 185.779638][T11555] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1481'. [ 186.011713][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 186.028048][T11558] netlink: 'syz.0.1484': attribute type 30 has an invalid length. [ 186.072325][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 186.072425][ T78] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.092330][T11558] netlink: 'syz.0.1484': attribute type 30 has an invalid length. [ 186.100419][ T78] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.128975][T11564] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1486'. [ 186.146579][ T78] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.161350][T11564] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1486'. [ 186.163850][ T78] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.193849][T11564] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1486'. [ 186.220077][T11566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1486'. [ 186.311899][T11576] raw_sendmsg: syz.0.1489 forgot to set AF_INET. Fix it! [ 186.461730][T11579] syzkaller0: entered promiscuous mode [ 186.470692][T11579] syzkaller0: entered allmulticast mode [ 186.482013][T11578] tipc: Enabled bearer , priority 0 [ 186.502391][T11587] netlink: 'syz.0.1492': attribute type 21 has an invalid length. [ 186.539135][T11587] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1492'. [ 186.552978][T11578] tipc: Resetting bearer [ 186.596251][T11594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1495'. [ 186.654534][T11578] tipc: Disabling bearer [ 186.838621][T11604] can: request_module (can-proto-0) failed. [ 187.060467][T11625] syz.2.1505: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 187.093102][T11625] CPU: 1 UID: 0 PID: 11625 Comm: syz.2.1505 Not tainted syzkaller #0 PREEMPT(full) [ 187.093144][T11625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.093170][T11625] Call Trace: [ 187.093179][T11625] [ 187.093188][T11625] dump_stack_lvl+0x189/0x250 [ 187.093220][T11625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.093245][T11625] ? __pfx__printk+0x10/0x10 [ 187.093273][T11625] ? lock_release+0x4b/0x3e0 [ 187.093305][T11625] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 187.093332][T11625] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 187.093358][T11625] warn_alloc+0x214/0x310 [ 187.093392][T11625] ? __pfx_warn_alloc+0x10/0x10 [ 187.093433][T11625] ? __get_vm_area_node+0x28f/0x300 [ 187.093463][T11625] ? packet_set_ring+0x6f4/0x2350 [ 187.093490][T11625] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 187.093547][T11625] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 187.093578][T11625] ? alloc_pages_mpol+0x3cd/0x4a0 [ 187.093618][T11625] ? packet_set_ring+0x6f4/0x2350 [ 187.093641][T11625] vzalloc_noprof+0xb2/0xf0 [ 187.093668][T11625] ? packet_set_ring+0x6f4/0x2350 [ 187.093693][T11625] packet_set_ring+0x6f4/0x2350 [ 187.093744][T11625] ? __pfx_packet_set_ring+0x10/0x10 [ 187.093768][T11625] ? lock_acquire+0x5f/0x360 [ 187.093799][T11625] ? rcu_is_watching+0x15/0xb0 [ 187.093819][T11625] ? lock_release+0x4b/0x3e0 [ 187.093847][T11625] ? __might_fault+0xb0/0x130 [ 187.093874][T11625] ? __might_fault+0xcc/0x130 [ 187.093902][T11625] ? _copy_from_user+0x94/0xb0 [ 187.093928][T11625] packet_setsockopt+0xc5a/0x12c0 [ 187.093954][T11625] ? __pfx_packet_setsockopt+0x10/0x10 [ 187.093986][T11625] ? aa_sk_perm+0x81e/0x950 [ 187.094015][T11625] ? rcu_is_watching+0x15/0xb0 [ 187.094037][T11625] ? __pfx_aa_sk_perm+0x10/0x10 [ 187.094064][T11625] ? lock_release+0x4b/0x3e0 [ 187.094094][T11625] ? __se_sys_futex+0x36f/0x400 [ 187.094118][T11625] ? aa_sock_opt_perm+0xff/0x1b0 [ 187.094138][T11625] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 187.094167][T11625] ? __pfx_packet_setsockopt+0x10/0x10 [ 187.094193][T11625] do_sock_setsockopt+0x179/0x1b0 [ 187.094216][T11625] __x64_sys_setsockopt+0x13f/0x1b0 [ 187.094239][T11625] do_syscall_64+0xfa/0x3b0 [ 187.094258][T11625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.094278][T11625] ? clear_bhb_loop+0x60/0xb0 [ 187.094301][T11625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.094321][T11625] RIP: 0033:0x7f3eab98ebe9 [ 187.094339][T11625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.094356][T11625] RSP: 002b:00007f3eac8a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.094378][T11625] RAX: ffffffffffffffda RBX: 00007f3eabbb6090 RCX: 00007f3eab98ebe9 [ 187.094393][T11625] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000009 [ 187.094405][T11625] RBP: 00007f3eaba11e19 R08: 000000000000001c R09: 0000000000000000 [ 187.094417][T11625] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 187.094430][T11625] R13: 00007f3eabbb6128 R14: 00007f3eabbb6090 R15: 00007ffea5edec18 [ 187.094454][T11625] [ 187.402811][T11625] Mem-Info: [ 187.409391][T11625] active_anon:7767 inactive_anon:0 isolated_anon:0 [ 187.409391][T11625] active_file:3280 inactive_file:39869 isolated_file:0 [ 187.409391][T11625] unevictable:768 dirty:81 writeback:0 [ 187.409391][T11625] slab_reclaimable:12304 slab_unreclaimable:172767 [ 187.409391][T11625] mapped:31100 shmem:5468 pagetables:1208 [ 187.409391][T11625] sec_pagetables:0 bounce:0 [ 187.409391][T11625] kernel_misc_reclaimable:0 [ 187.409391][T11625] free:1239669 free_pcp:19892 free_cma:0 [ 187.455067][T11631] netlink: 'syz.1.1504': attribute type 10 has an invalid length. [ 187.472241][T11625] Node 0 active_anon:31068kB inactive_anon:0kB active_file:13120kB inactive_file:159272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124400kB dirty:320kB writeback:0kB shmem:20336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12400kB pagetables:4772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 187.506593][T11625] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 187.550375][T11625] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 187.581508][T11625] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 187.589409][T11625] Node 0 DMA32 free:1060640kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30920kB inactive_anon:0kB active_file:13120kB inactive_file:157708kB unevictable:1536kB writepending:320kB present:3129332kB managed:2557448kB mlocked:0kB bounce:0kB free_pcp:57016kB local_pcp:32320kB free_cma:0kB [ 187.621998][T11625] lowmem_reserve[]: 0 0 1 1 1 [ 187.626918][T11625] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 187.656016][T11625] lowmem_reserve[]: 0 0 0 0 0 [ 187.660785][T11625] Node 1 Normal free:3882452kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22688kB local_pcp:10560kB free_cma:0kB [ 187.692347][T11625] lowmem_reserve[]: 0 0 0 0 0 [ 187.697205][T11625] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 187.713396][T11625] Node 0 DMA32: 1859*4kB (UM) 1462*8kB (UME) 382*16kB (UME) 1080*32kB (UME) 854*64kB (UME) 512*128kB (UM) 390*256kB (UME) 277*512kB (UM) 156*1024kB (UME) 10*2048kB (UM) 112*4096kB (M) = 1060636kB [ 187.733001][T11625] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 187.745480][T11625] Node 1 Normal: 241*4kB (UME) 42*8kB (UME) 38*16kB (UME) 91*32kB (UME) 28*64kB (UME) 6*128kB (UME) 3*256kB (UM) 5*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 944*4096kB (M) = 3882452kB [ 187.763937][T11625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 187.783565][T11625] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 187.793012][T11625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 187.827346][T11625] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 187.850591][T11625] 46814 total pagecache pages [ 187.863869][T11625] 0 pages in swap cache [ 187.878222][T11625] Free swap = 124996kB [ 187.882423][T11625] Total swap = 124996kB [ 187.913035][T11625] 2097051 pages RAM [ 187.921537][T11625] 0 pages HighMem/MovableOnly [ 187.939074][T11625] 425663 pages reserved [ 187.950881][T11625] 0 pages cma reserved [ 188.065331][T11656] netlink: 'syz.3.1514': attribute type 2 has an invalid length. [ 188.265590][T11666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.928282][T11718] netlink: 'syz.4.1533': attribute type 1 has an invalid length. [ 188.996606][T11718] bond6: entered promiscuous mode [ 189.002113][T11718] 8021q: adding VLAN 0 to HW filter on device bond6 [ 189.029100][T11730] netlink: 'syz.2.1536': attribute type 2 has an invalid length. [ 189.041519][T11730] : entered promiscuous mode [ 189.206935][T11746] lo speed is unknown, defaulting to 1000 [ 189.215510][T11746] lo speed is unknown, defaulting to 1000 [ 189.252862][T11735] syz.4.1538 (11735) used greatest stack depth: 17992 bytes left [ 189.453014][ T30] audit: type=1800 audit(1756130483.570:7): pid=11767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1546" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1352 res=0 errno=0 [ 189.725264][T11781] bond7: entered promiscuous mode [ 189.793825][T11781] 8021q: adding VLAN 0 to HW filter on device bond7 [ 189.825971][T11787] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.853303][T11781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.860611][T11781] IPv6: NLM_F_CREATE should be set when creating new route [ 189.867881][T11781] IPv6: NLM_F_CREATE should be set when creating new route [ 189.884234][T11787] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.888671][T11781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.960357][T11787] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.975078][T11787] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.044806][T11787] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.057233][T11787] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.126216][T11804] syzkaller0: entered promiscuous mode [ 190.131741][T11804] syzkaller0: entered allmulticast mode [ 190.164876][T11787] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.183865][T11787] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.321419][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.343579][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.371749][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.393862][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.418583][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.433805][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.501263][ T78] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.512057][ T78] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.522174][T11811] tipc: Enabled bearer , priority 0 [ 190.545792][T11792] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.568004][T11792] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.596063][T11814] syzkaller0: entered promiscuous mode [ 190.602117][T11814] syzkaller0: entered allmulticast mode [ 190.613109][ T78] ================================================================== [ 190.621213][ T78] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 190.628774][ T78] Read of size 8 at addr ffff8880577de8b0 by task kworker/u8:4/78 [ 190.636584][ T78] [ 190.638921][ T78] CPU: 0 UID: 0 PID: 78 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 190.638943][ T78] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.638955][ T78] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 190.638985][ T78] Call Trace: [ 190.638993][ T78] [ 190.639000][ T78] dump_stack_lvl+0x189/0x250 [ 190.639042][ T78] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.639062][ T78] ? lock_release+0x4b/0x3e0 [ 190.639090][ T78] ? __virt_addr_valid+0x4a5/0x5c0 [ 190.639114][ T78] print_report+0xca/0x240 [ 190.639130][ T78] ? __mutex_lock+0x147/0x1350 [ 190.639144][ T78] kasan_report+0x118/0x150 [ 190.639168][ T78] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 190.639193][ T78] ? __mutex_lock+0x147/0x1350 [ 190.639211][ T78] __mutex_lock+0x147/0x1350 [ 190.639227][ T78] ? __mutex_lock+0x5bb/0x1350 [ 190.639244][ T78] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 190.639271][ T78] ? __pfx___mutex_lock+0x10/0x10 [ 190.639285][ T78] ? do_raw_spin_unlock+0x122/0x240 [ 190.639308][ T78] ? rcu_is_watching+0x15/0xb0 [ 190.639329][ T78] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 190.639357][ T78] ? process_scheduled_works+0x9ef/0x17b0 [ 190.639373][ T78] ? process_scheduled_works+0x9ef/0x17b0 [ 190.639390][ T78] process_scheduled_works+0xae1/0x17b0 [ 190.639418][ T78] ? __pfx_process_scheduled_works+0x10/0x10 [ 190.639441][ T78] worker_thread+0x8a0/0xda0 [ 190.639459][ T78] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 190.639486][ T78] ? __kthread_parkme+0x7b/0x200 [ 190.639509][ T78] kthread+0x70e/0x8a0 [ 190.639538][ T78] ? __pfx_worker_thread+0x10/0x10 [ 190.639558][ T78] ? __pfx_kthread+0x10/0x10 [ 190.639579][ T78] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.639601][ T78] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.639625][ T78] ? __pfx_kthread+0x10/0x10 [ 190.639653][ T78] ret_from_fork+0x3f9/0x770 [ 190.639672][ T78] ? __pfx_ret_from_fork+0x10/0x10 [ 190.639691][ T78] ? __switch_to_asm+0x39/0x70 [ 190.639714][ T78] ? __switch_to_asm+0x33/0x70 [ 190.639735][ T78] ? __pfx_kthread+0x10/0x10 [ 190.639756][ T78] ret_from_fork_asm+0x1a/0x30 [ 190.639786][ T78] [ 190.639792][ T78] [ 190.664999][T11825] __nla_validate_parse: 11 callbacks suppressed [ 190.665022][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 190.666391][ T78] Allocated by task 11787: [ 190.874132][ T78] kasan_save_track+0x3e/0x80 [ 190.878830][ T78] __kasan_kmalloc+0x93/0xb0 [ 190.883433][ T78] __kmalloc_noprof+0x27a/0x4f0 [ 190.888301][ T78] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 190.894470][ T78] notifier_call_chain+0x1b3/0x3e0 [ 190.899594][ T78] register_netdevice+0x1608/0x1ae0 [ 190.904860][ T78] nsim_create+0xae8/0xf10 [ 190.909303][ T78] __nsim_dev_port_add+0x6b6/0xb10 [ 190.914425][ T78] nsim_dev_port_add_all+0x37/0xf0 [ 190.919558][ T78] nsim_dev_reload_up+0x451/0x780 [ 190.924595][ T78] devlink_reload+0x4ec/0x8d0 [ 190.929287][ T78] devlink_nl_reload_doit+0xb35/0xd50 [ 190.934674][ T78] genl_family_rcv_msg_doit+0x215/0x300 [ 190.940250][ T78] genl_rcv_msg+0x60e/0x790 [ 190.944770][ T78] netlink_rcv_skb+0x205/0x470 [ 190.949572][ T78] genl_rcv+0x28/0x40 [ 190.953581][ T78] netlink_unicast+0x82c/0x9e0 [ 190.958371][ T78] netlink_sendmsg+0x805/0xb30 [ 190.963155][ T78] __sock_sendmsg+0x21c/0x270 [ 190.967841][ T78] ____sys_sendmsg+0x505/0x830 [ 190.972609][ T78] ___sys_sendmsg+0x21f/0x2a0 [ 190.977295][ T78] __x64_sys_sendmsg+0x19b/0x260 [ 190.982238][ T78] do_syscall_64+0xfa/0x3b0 [ 190.986754][ T78] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.992689][ T78] [ 190.995027][ T78] Freed by task 11792: [ 190.999101][ T78] kasan_save_track+0x3e/0x80 [ 191.003800][ T78] kasan_save_free_info+0x46/0x50 [ 191.008833][ T78] __kasan_slab_free+0x5b/0x80 [ 191.013607][ T78] kfree+0x18e/0x440 [ 191.017533][ T78] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 191.023799][ T78] notifier_call_chain+0x1b3/0x3e0 [ 191.029030][ T78] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 191.035463][ T78] unregister_netdevice_queue+0x33c/0x380 [ 191.041190][ T78] nsim_destroy+0x1dd/0x670 [ 191.045705][ T78] __nsim_dev_port_del+0x14d/0x1b0 [ 191.050838][ T78] nsim_dev_reload_destroy+0x288/0x490 [ 191.056312][ T78] nsim_dev_reload_down+0x8a/0xc0 [ 191.061348][ T78] devlink_reload+0x1b3/0x8d0 [ 191.066051][ T78] devlink_nl_reload_doit+0xb35/0xd50 [ 191.071436][ T78] genl_family_rcv_msg_doit+0x215/0x300 [ 191.077010][ T78] genl_rcv_msg+0x60e/0x790 [ 191.081552][ T78] netlink_rcv_skb+0x205/0x470 [ 191.086337][ T78] genl_rcv+0x28/0x40 [ 191.090336][ T78] netlink_unicast+0x82c/0x9e0 [ 191.095137][ T78] netlink_sendmsg+0x805/0xb30 [ 191.099912][ T78] __sock_sendmsg+0x21c/0x270 [ 191.104603][ T78] ____sys_sendmsg+0x505/0x830 [ 191.109379][ T78] ___sys_sendmsg+0x21f/0x2a0 [ 191.114063][ T78] __x64_sys_sendmsg+0x19b/0x260 [ 191.119022][ T78] do_syscall_64+0xfa/0x3b0 [ 191.123529][ T78] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.129432][ T78] [ 191.131760][ T78] Last potentially related work creation: [ 191.137479][ T78] kasan_save_stack+0x3e/0x60 [ 191.142183][ T78] kasan_record_aux_stack+0xbd/0xd0 [ 191.147388][ T78] insert_work+0x3d/0x330 [ 191.151754][ T78] __queue_work+0xbaf/0xfb0 [ 191.156276][ T78] queue_work_on+0x181/0x270 [ 191.160973][ T78] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 191.166620][ T78] udp_tunnel_push_rx_port+0x17d/0x200 [ 191.172092][ T78] geneve_offload_rx_ports+0xd7/0x160 [ 191.177532][ T78] geneve_netdevice_event+0x6a/0x80 [ 191.182738][ T78] notifier_call_chain+0x1b3/0x3e0 [ 191.187853][ T78] call_netdevice_notifiers+0x88/0xc0 [ 191.193232][ T78] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 191.199474][ T78] notifier_call_chain+0x1b3/0x3e0 [ 191.204593][ T78] register_netdevice+0x1608/0x1ae0 [ 191.209800][ T78] nsim_create+0xae8/0xf10 [ 191.214218][ T78] __nsim_dev_port_add+0x6b6/0xb10 [ 191.219336][ T78] nsim_dev_port_add_all+0x37/0xf0 [ 191.224457][ T78] nsim_dev_reload_up+0x451/0x780 [ 191.229499][ T78] devlink_reload+0x4ec/0x8d0 [ 191.234179][ T78] devlink_nl_reload_doit+0xb35/0xd50 [ 191.239561][ T78] genl_family_rcv_msg_doit+0x215/0x300 [ 191.245123][ T78] genl_rcv_msg+0x60e/0x790 [ 191.249632][ T78] netlink_rcv_skb+0x205/0x470 [ 191.254404][ T78] genl_rcv+0x28/0x40 [ 191.258388][ T78] netlink_unicast+0x82c/0x9e0 [ 191.263168][ T78] netlink_sendmsg+0x805/0xb30 [ 191.267940][ T78] __sock_sendmsg+0x21c/0x270 [ 191.272622][ T78] ____sys_sendmsg+0x505/0x830 [ 191.277390][ T78] ___sys_sendmsg+0x21f/0x2a0 [ 191.282068][ T78] __x64_sys_sendmsg+0x19b/0x260 [ 191.287010][ T78] do_syscall_64+0xfa/0x3b0 [ 191.291515][ T78] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.297412][ T78] [ 191.299733][ T78] Second to last potentially related work creation: [ 191.306318][ T78] kasan_save_stack+0x3e/0x60 [ 191.311004][ T78] kasan_record_aux_stack+0xbd/0xd0 [ 191.316208][ T78] insert_work+0x3d/0x330 [ 191.320550][ T78] __queue_work+0xcd2/0xfb0 [ 191.325056][ T78] queue_work_on+0x181/0x270 [ 191.329649][ T78] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 191.335307][ T78] udp_tunnel_push_rx_port+0x17d/0x200 [ 191.340773][ T78] vxlan_offload_rx_ports+0x139/0x200 [ 191.346158][ T78] vxlan_netdevice_event+0x111/0x470 [ 191.351452][ T78] notifier_call_chain+0x1b3/0x3e0 [ 191.356580][ T78] call_netdevice_notifiers+0x88/0xc0 [ 191.361961][ T78] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 191.368209][ T78] notifier_call_chain+0x1b3/0x3e0 [ 191.373329][ T78] register_netdevice+0x1608/0x1ae0 [ 191.378526][ T78] nsim_create+0xae8/0xf10 [ 191.382946][ T78] __nsim_dev_port_add+0x6b6/0xb10 [ 191.388073][ T78] nsim_dev_port_add_all+0x37/0xf0 [ 191.393234][ T78] nsim_dev_reload_up+0x451/0x780 [ 191.398271][ T78] devlink_reload+0x4ec/0x8d0 [ 191.402965][ T78] devlink_nl_reload_doit+0xb35/0xd50 [ 191.408354][ T78] genl_family_rcv_msg_doit+0x215/0x300 [ 191.413906][ T78] genl_rcv_msg+0x60e/0x790 [ 191.418411][ T78] netlink_rcv_skb+0x205/0x470 [ 191.423188][ T78] genl_rcv+0x28/0x40 [ 191.427170][ T78] netlink_unicast+0x82c/0x9e0 [ 191.431940][ T78] netlink_sendmsg+0x805/0xb30 [ 191.436701][ T78] __sock_sendmsg+0x21c/0x270 [ 191.441388][ T78] ____sys_sendmsg+0x505/0x830 [ 191.446153][ T78] ___sys_sendmsg+0x21f/0x2a0 [ 191.450829][ T78] __x64_sys_sendmsg+0x19b/0x260 [ 191.455769][ T78] do_syscall_64+0xfa/0x3b0 [ 191.460273][ T78] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.466169][ T78] [ 191.468494][ T78] The buggy address belongs to the object at ffff8880577de800 [ 191.468494][ T78] which belongs to the cache kmalloc-256 of size 256 [ 191.482548][ T78] The buggy address is located 176 bytes inside of [ 191.482548][ T78] freed 256-byte region [ffff8880577de800, ffff8880577de900) [ 191.496346][ T78] [ 191.498669][ T78] The buggy address belongs to the physical page: [ 191.505079][ T78] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x577de [ 191.513941][ T78] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 191.522440][ T78] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 191.529983][ T78] page_type: f5(slab) [ 191.533972][ T78] raw: 00fff00000000040 ffff88801a441b40 ffffea0000a13d80 dead000000000002 [ 191.542561][ T78] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 191.551164][ T78] head: 00fff00000000040 ffff88801a441b40 ffffea0000a13d80 dead000000000002 [ 191.559840][ T78] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 191.568522][ T78] head: 00fff00000000001 ffffea00015df781 00000000ffffffff 00000000ffffffff [ 191.577194][ T78] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 191.585856][ T78] page dumped because: kasan: bad access detected [ 191.592290][ T78] page_owner tracks the page as allocated [ 191.598008][ T78] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5865, tgid 5865 (syz-executor), ts 78800100013, free_ts 26738958027 [ 191.619413][ T78] post_alloc_hook+0x240/0x2a0 [ 191.624205][ T78] get_page_from_freelist+0x21e4/0x22c0 [ 191.629849][ T78] __alloc_frozen_pages_noprof+0x181/0x370 [ 191.635659][ T78] alloc_pages_mpol+0x232/0x4a0 [ 191.640518][ T78] allocate_slab+0x8a/0x370 [ 191.645025][ T78] ___slab_alloc+0xbeb/0x1410 [ 191.649727][ T78] __kmalloc_noprof+0x305/0x4f0 [ 191.654597][ T78] __register_sysctl_table+0xba1/0x1340 [ 191.660154][ T78] neigh_sysctl_register+0x9a2/0xa80 [ 191.665441][ T78] devinet_sysctl_register+0xad/0x200 [ 191.670817][ T78] inetdev_init+0x2b4/0x500 [ 191.675326][ T78] inetdev_event+0x301/0x15b0 [ 191.680021][ T78] notifier_call_chain+0x1b3/0x3e0 [ 191.685143][ T78] register_netdevice+0x1608/0x1ae0 [ 191.690348][ T78] virt_wifi_newlink+0x428/0x860 [ 191.695302][ T78] rtnl_newlink_create+0x310/0xb00 [ 191.700415][ T78] page last free pid 1 tgid 1 stack trace: [ 191.706220][ T78] __free_frozen_pages+0xbc4/0xd30 [ 191.711345][ T78] free_contig_range+0x1bd/0x4a0 [ 191.716288][ T78] destroy_args+0x64/0x4a0 [ 191.720711][ T78] debug_vm_pgtable+0x39f/0x3b0 [ 191.725567][ T78] do_one_initcall+0x233/0x820 [ 191.730347][ T78] do_initcall_level+0x104/0x190 [ 191.735290][ T78] do_initcalls+0x59/0xa0 [ 191.739626][ T78] kernel_init_freeable+0x334/0x4b0 [ 191.744830][ T78] kernel_init+0x1d/0x1d0 [ 191.749165][ T78] ret_from_fork+0x3f9/0x770 [ 191.753756][ T78] ret_from_fork_asm+0x1a/0x30 [ 191.758533][ T78] [ 191.760857][ T78] Memory state around the buggy address: [ 191.766492][ T78] ffff8880577de780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 191.774563][ T78] ffff8880577de800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.782628][ T78] >ffff8880577de880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 191.790685][ T78] ^ [ 191.796342][ T78] ffff8880577de900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 191.804499][ T78] ffff8880577de980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 191.812564][ T78] ================================================================== [ 191.830379][ T2152] tipc: Node number set to 370956243 [ 191.843065][ T78] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 191.850315][ T78] CPU: 0 UID: 0 PID: 78 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 191.859620][ T78] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.869695][ T78] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 191.877021][ T78] Call Trace: [ 191.880322][ T78] [ 191.883263][ T78] dump_stack_lvl+0x99/0x250 [ 191.887863][ T78] ? __asan_memcpy+0x40/0x70 [ 191.892550][ T78] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.897771][ T78] ? __pfx__printk+0x10/0x10 [ 191.902385][ T78] vpanic+0x281/0x750 [ 191.906381][ T78] ? preempt_schedule+0xae/0xc0 [ 191.911258][ T78] ? __pfx_vpanic+0x10/0x10 [ 191.915770][ T78] ? preempt_schedule_common+0x83/0xd0 [ 191.921244][ T78] ? preempt_schedule+0xae/0xc0 [ 191.926108][ T78] ? __pfx_preempt_schedule+0x10/0x10 [ 191.931525][ T78] panic+0xb9/0xc0 [ 191.935258][ T78] ? __pfx_panic+0x10/0x10 [ 191.939707][ T78] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 191.945624][ T78] ? __mutex_lock+0x147/0x1350 [ 191.950401][ T78] check_panic_on_warn+0x89/0xb0 [ 191.955362][ T78] ? __mutex_lock+0x147/0x1350 [ 191.960131][ T78] end_report+0x78/0x160 [ 191.964398][ T78] kasan_report+0x129/0x150 [ 191.968919][ T78] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 191.974856][ T78] ? __mutex_lock+0x147/0x1350 [ 191.979638][ T78] __mutex_lock+0x147/0x1350 [ 191.984275][ T78] ? __mutex_lock+0x5bb/0x1350 [ 191.989049][ T78] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 191.995315][ T78] ? __pfx___mutex_lock+0x10/0x10 [ 192.000356][ T78] ? do_raw_spin_unlock+0x122/0x240 [ 192.005575][ T78] ? rcu_is_watching+0x15/0xb0 [ 192.010349][ T78] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 192.016433][ T78] ? process_scheduled_works+0x9ef/0x17b0 [ 192.022244][ T78] ? process_scheduled_works+0x9ef/0x17b0 [ 192.028007][ T78] process_scheduled_works+0xae1/0x17b0 [ 192.033570][ T78] ? __pfx_process_scheduled_works+0x10/0x10 [ 192.039565][ T78] worker_thread+0x8a0/0xda0 [ 192.044167][ T78] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.050521][ T78] ? __kthread_parkme+0x7b/0x200 [ 192.055475][ T78] kthread+0x70e/0x8a0 [ 192.059558][ T78] ? __pfx_worker_thread+0x10/0x10 [ 192.064682][ T78] ? __pfx_kthread+0x10/0x10 [ 192.069282][ T78] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.074491][ T78] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.079703][ T78] ? __pfx_kthread+0x10/0x10 [ 192.084302][ T78] ret_from_fork+0x3f9/0x770 [ 192.088900][ T78] ? __pfx_ret_from_fork+0x10/0x10 [ 192.094024][ T78] ? __switch_to_asm+0x39/0x70 [ 192.098824][ T78] ? __switch_to_asm+0x33/0x70 [ 192.103623][ T78] ? __pfx_kthread+0x10/0x10 [ 192.108225][ T78] ret_from_fork_asm+0x1a/0x30 [ 192.113052][ T78] [ 192.116219][ T78] Kernel Offset: disabled [ 192.120547][ T78] Rebooting in 86400 seconds..