last executing test programs: 3.860505696s ago: executing program 2 (id=5774): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'geneve0\x00', 0x1000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) socket$kcm(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x8) socket$key(0xf, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a3000000000080004400000000014000000110001000000000000000000"], 0x68}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r5], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000380)={"7ce88168ecac6ab1ecfcff10646313f6", 0x0, 0x0, {0x6, 0xdbb}, {0x5, 0x1}, 0x4, [0x4, 0x8, 0x80, 0x5, 0x4, 0x0, 0x8000000000000001, 0xffff, 0x7, 0xbe2b, 0x1, 0x3, 0x6, 0x4, 0x0, 0x3ce]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000480)={0x0, 0xfffffffffffffffc, 0x1, [0xffffffffffff7fff, 0x2, 0x10000, 0xfffffffffffffffb, 0x40], [0x0, 0x0, 0x0, 0x0, 0x100000001, 0x5, 0x6, 0x7ff, 0x100, 0x6, 0x5, 0x9, 0x8000, 0xfa, 0x0, 0x0, 0x1eee, 0x0, 0x696, 0x2, 0x80, 0x2, 0x80, 0x7, 0x4584, 0x6, 0x1, 0x6, 0x3, 0x4, 0x1, 0x4, 0x7fffffffffffffff, 0x7, 0x4, 0x6, 0x9, 0x7, 0x2, 0x5ec, 0x1, 0x2, 0x9, 0x20f, 0x401, 0x7fff, 0x1, 0x1f9, 0x5a8cad98, 0x0, 0x9, 0x81, 0x401, 0x4, 0x16, 0x31a5, 0x12c1c377, 0x2, 0x3ff, 0x0, 0x1, 0x6, 0x5, 0xd, 0x101, 0x4, 0x2, 0x2, 0x3, 0x5, 0xfffffffffffffffe, 0x8000000000000000, 0x10000000, 0x3, 0x8, 0x0, 0x8, 0x2, 0x2, 0xd, 0x4, 0x5, 0xf, 0x400, 0x3, 0x2, 0x0, 0x8, 0x0, 0xfffffffffffff858, 0x8000000000000001, 0x3, 0x2, 0x9, 0x5, 0xf9f8, 0x2489, 0x6, 0xfffffffffffffff7, 0x4, 0x5, 0x2, 0x9, 0x2, 0xc32, 0x4, 0x7, 0x0, 0x5, 0x3, 0x4, 0x200, 0x100000000, 0x101, 0x4, 0x6, 0x100, 0x1, 0x8001, 0x40, 0xb5]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000001100)={{r3}, r8, 0x1a, @unused=[0x7fffffffffffffff, 0x3, 0xfffffffffffffffb, 0xb2], @devid=r9}) 3.226062123s ago: executing program 0 (id=5913): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0x2}}, 0x14}}, 0x0) clock_gettime(0x0, &(0x7f000000c040)={0x0, 0x0}) recvmmsg(r0, &(0x7f000000be80)=[{{&(0x7f0000000200)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000280)=[{&(0x7f0000005040)=""/220, 0xdc}, {&(0x7f0000005140)=""/231, 0xe7}, {&(0x7f0000005240)=""/204, 0xcc}], 0x3}, 0x2}, {{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000007800)=[{&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/179, 0xb3}, {&(0x7f0000006400)=""/134, 0x86}, {&(0x7f00000064c0)=""/130, 0x82}, {&(0x7f0000006580)=""/153, 0x99}, {&(0x7f0000006640)=""/6, 0x6}, {&(0x7f0000006680)=""/4096, 0x1000}, {&(0x7f0000007680)=""/107, 0x6b}, {&(0x7f0000007700)=""/235, 0xeb}], 0x9}, 0x7}, {{&(0x7f00000078c0)=@nl=@unspec, 0x80, &(0x7f0000009cc0)=[{&(0x7f0000007940)=""/216, 0xd8}, {&(0x7f0000007a40)=""/4096, 0x1000}, {&(0x7f0000008a40)=""/200, 0xc8}, {&(0x7f0000008b40)=""/4096, 0x1000}, {&(0x7f0000009b40)=""/208, 0xd0}, {&(0x7f0000009c40)=""/123, 0x7b}], 0x6, &(0x7f0000009d40)=""/65, 0x41}, 0xb}, {{&(0x7f0000009dc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f000000a000)=[{&(0x7f0000009e40)=""/100, 0x64}, {&(0x7f0000009ec0)}, {&(0x7f0000009f00)=""/46, 0x2e}, {&(0x7f0000009f40)=""/139, 0x8b}], 0x4, &(0x7f000000a040)=""/55, 0x37}, 0xf}, {{&(0x7f000000a080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000000b440)=[{&(0x7f000000a100)=""/4096, 0x1000}, {&(0x7f000000b100)=""/232, 0xe8}, {&(0x7f000000b200)}, {&(0x7f000000b240)=""/211, 0xd3}, {&(0x7f000000b340)=""/185, 0xb9}, {&(0x7f000000b400)=""/37, 0x25}], 0x6, &(0x7f000000b4c0)=""/228, 0xe4}, 0x3}, {{&(0x7f000000b5c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f000000b940)=[{&(0x7f000000b640)=""/55, 0x37}, {&(0x7f000000b680)=""/62, 0x3e}, {&(0x7f000000b6c0)=""/18, 0x12}, {&(0x7f000000b700)=""/129, 0x81}, {&(0x7f000000b7c0)=""/9, 0x9}, {&(0x7f000000b800)=""/157, 0x9d}, {&(0x7f000000b8c0)=""/77, 0x4d}], 0x7, &(0x7f000000b9c0)=""/255, 0xff}, 0x8}, {{&(0x7f000000bac0)=@qipcrtr, 0x80, &(0x7f000000bd80)=[{&(0x7f000000bb40)=""/12, 0xc}, {&(0x7f000000bb80)=""/214, 0xd6}, {&(0x7f000000bc80)=""/196, 0xc4}], 0x3, &(0x7f000000bdc0)=""/191, 0xbf}, 0x6}], 0x7, 0x22, &(0x7f000000c080)={r1, r2+60000000}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)="fc") sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x140, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0xf7, 0x6, "6e8d8ba9ec5dab29703da08dc4fd90b80770d5f3ee571eae2e5e16fe37f9f0022388addca0f927b9b43ffe1fd720ea778512193b8f15c636b622624a932ab9899a17488e82664a1c01ca8540e183334ac0ab4954f29d5504238fb55528411870db07d10b93667ea77f27ead478f066a2f0432f2bbeb3a51c87072f64a8e9de50d20cd1b0928805cd3f8e90098331278a47b42e1cf21f2c98ebb7129fbc00f30936091ec8d6300c6e045955b5ea3ab274ee6b5a2004444fcf09abbf0bc498443cd00068fe28dc820a5d6bb4e0dc3f05e920c3ca02cc06b1e2ad162d6ff53427396eb75c7a5fd72189cb2ceb770c0fef57529a9f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x2c, 0x6, "fd3d557c203dfd5f3af02fb62d334f8171524bccc3cd75aa53a769901d8a60391ee45b74899349a1"}]}, @NFT_MSG_NEWSETELEM={0x46e0, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x441c, 0x3, 0x0, 0x1, [{0x418, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x238, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x35, 0x1, "ff16fb060d21a6cf87a9001f07e5feadb66752a5337afa6832794dbac1d28652157433ecee7d12468b161a22cb199cb5e9"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "47d6a40dbb70c24e6472f05a82cda02e7f8c5b5351e47aaf5749f76837ea38f19436f28629ec32c1cb85822676cc248150e570dd8e0b1523e2827caa0eb075977ebbb5c88012fa13a1e253df720f8ce26f178b37921eae52f372"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "3d2ad8917f15f545eab9ef4f7bc4ed725ad1ed0b92329b6a66d141f3a0a2fce13e5b3b3cf4a387f5ef1e91871405b87e970769f666aadd4aea72eb86716e591ee0442627771a8d2155d7693f2fe813d6235fa617a20780016cce83e1e21f4989f4f1883f299048b508f2d7f4867fcb810ebb02595e48e92c1a6731528656cdbc392fc3f885c9e91122ef24edb14b26ef69217500abfb5c217a58a455c8675cc5a0509db75ca3b420c99fcbe3a55b586aa879512b32ccc613df26d037344f820072ddfb2d6723a385ddfd3e70ce0d52322f"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x1c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdb, 0x1, "2b25695dcd1a9188ac694abefcb7544010a68ddf91d3b2711406dc5ae38b0d2479e4022a3ede158ddf85654c3222790c3f1f9b192260d1aa7e6cfbadf98d70269525adafce70c171e0a86be2fc3aa2d4f3bf2765c1d950f7939155f818593ee82925d42d81dfc7885163a862616091e4322d69b87bb4ed5b4b96286d3663acc00a24f512ebffc7e887b5c2309ee284623169077d74a8718351987c418e280410d4d0b3f68b387595df7e707eeb556ef67cc85290750c78c3500d8cb39f4d5ad64224e149d576ec4f22f2597180d9ba8de92eba3ee1e9f5"}, @NFTA_DATA_VALUE={0xc8, 0x1, "197e2e92c3ae7a1db627bf511ee2dd9a34a14652c8d3069ca21dfa7f181d758dbcefa995c841b74afb2d5e1a8510cad3670972b75d4c35032d0d5d0572522f0d5be29ed606deb060be942401ccddee4cadbc141b377dff7f5424915a76591caa64551176b5c10094027c569d5bf51ab88617f110f197cb479b52b5ad56fe4dd0cbddb088652871a067ea1d3a6c5987ca56831779a93bca736b98b7d7cc2896d4bc317ef0c4600522e2852e4eec39244f74bfe7fdffc77c08da1e596f9cbb7baf35e9ed58"}, @NFTA_DATA_VALUE={0x1e, 0x1, "5d0ac306d6606f6c2a374bea4018e00fdfd40f6683550fb5150d"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x180000}]}, {0x1594, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x1398, 0xb, 0x0, 0x1, [{0x136c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x135c, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x11a4, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "26188c988b40a54bac026909cd03561646fec3302716fbc24f487f793b2d0d8d61f26cf6d8149bf942bfe069357be05a9eea2a1349e253dd9539c2d4307f39ddcc"}, @NFTA_DATA_VALUE={0xc0, 0x1, "d294d0da2f207b744e560325cd2908b8ec7f7a58f996d60b32fb8796f4839942d2fa7493f3c2575d4317794e65e5d824ff1ef815fa05240bed571644ba4552d8ff2417c63d12d87afdfb7cd479a889f9773c3d185ab94ec8719e8bde8365f38d049b499a32b2bf9a540caaaf96ecc94cff01db7fb7b65109dcad7ffcd5bf1856aeee5fbc1e309e5795500b796c20df6961427d71c8e4e6f3e74277d74c877e3d2793cea06338e85449060b7ea029c6c6f07906da100777f1c626eec5"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf, 0x1, "fd3e44f758db1e86edaeae"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x8, 0x1, "9cefe5b5"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xe8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x31, 0x1, "492d1eeba1e386557cbb723c385f247983a12db707f93a23234c35ea190343250a84e4989f228464cfc057c649"}, @NFTA_DATA_VALUE={0x76, 0x1, "ed81e7990bc66b6e397baee937df53e42427b18d1f3d9dc785faedb1b1291ed9044dcfb794f4151c15e7f95f5327212335b9d42a80fafb6e69119e1d9244496666b9d7c06e8f318978d6bcc6e7a9241247e721742e5ea3962598c6a13b897a3e3703781070b89b55701ff57e816d16455d88"}]}, @NFTA_RANGE_TO_DATA={0xc4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xaf, 0x6, 0x1, 0x0, "fe34ca237e48fc8fa39e8390e5fae20eac6f40193c874005d7df8f49c5ffa5bb6c6214daa6cec0fc7dd008a4e7e827bb71b7dc181972f66618aeacb615fcfc388e7ba3d0eb49aa327e1f89cd2ee34de3ebf6ec8c7fd6c70734346185c8822f558f4a559cfe7b8e9a53ce7f6bfcecd70a17617eea108074f971b447510c0b43f08d0e6f8728860413be5a6e6f180ec80462579d91ff517438ba30cf86928132868081406a2a32a2ed185b8f"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x37b17c11}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xf8, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xc}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5e9f}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xbd5f}]}}}, {0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x116c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1168, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "a9f29be975a977276288a046c646d6152a49596cea00d3eae82a09f35b0f21625677a5e82567dbd253b84466c175ea2984ba6ccc960babbc79bf42498ed2aafc7cbee4a0342710acad5fe542fc68783b0ed1020c4bdde6c15022a4174e152cdc4ae7b5a0da86b05b7ae9632eda3fbf08b90c55a2298ea6481e83921b27d1304c3b88284d0075bf5aa493c2022f14acc258e9d04cae2ba1b847dfc2af3d48f497d6498ce43d13c3a9edc12e3dd9651863d2cda8abeb0fb4208f8b280e711c21cf3eb861ec308f0e0f69fcd10754111363d28dfc2e582796a0e56b20430e3416be90d9b20f968b11ffaf42e998644304382cf7aa4312179d22f3c842e09790c9b64685608188dc76f143b4df288fa2a7545f2b25226af6eae251942a8e5f22d6354eebcb4f5e5b5c8f293e626c6fe18cd75c5fe2790055f8898bc15fc4c63368d5d2cb6dc7020697db115d33f7044f36ad7590ce8cf00f63169319bdc26d0300699e8bbeb6e96ee1600403dacf7daf1395bcf919b504cb90f06aad57d2d03e031c970ba41056f0476b5a4e7eb8c9a47301acd817ff72c9f9e66c416e2a292a2af5e048696f0389f6c6310c40c7f5217fb5137ea043d13843757ece1ccec7055bab3b5cf8038810b0efb61c0f5cba2e72af167c0c676b71f71b9066540624cda3fd8e63cec5bb35c9a7a3972c992f02237724b9a50df6275f60378603a00411ffd5e49f543e5462bbdfa1cebc407899a09eca4ec9f9a30bc79cfa43d5bbda6dabb22139f302636ddddb74fa509024b1b6c310536af4e273fb1f04c930f1295601793eafe4eba79b203ac6589a951f0d60df6d4ef2f2a0614bfb460133a5d0d21ce0a0117a43366836c59e335f840943182bb3f8f8a8b7bc58ca8b0ef736de9f11690c61e23e1de09ee3a9af131848bb6787d603d73a1b02adc12b9d970c8b73a0f0bf91784c268275a64652836b93a16538c7e254b54dea4b47e8d5238edd21fdc99dc81f7aca8293be5ee2fcf60e870d15b790fe22912f59cf734938372deb7aae373fc90ddc2acb9bae5369841bd190fbe75eaf7df15dee108766466ae22499fac0b09ee221bad14c2266c4dd061d75d2a28d4a404e08824a6bcadc2e5c9a69de572b3bfa88b21a3098cb4b29cdeed17d3f1d674c2af90ec246943d5fc53a6f479cc362007ff372aa62ed6295352e8e2d70e8f3f60245be130309383225e8c3a665cecf7bcf16528eaf2529c24777277c0bc533e43a214b885ac9c1bea6df7967167e475704144c8108ee7a66176b766ec9efdae294156929a40974da4cb091395343cad941b3ddbe1f5f959c5cc12116808e1e695b8a9908c00314f16e940b03c485993e232e4a4f4ac3a5a13ef1b6b9c3b67e23465a72fd6bb6b4cd3411a4a4205ba15513d99ab31df10202dba1ed27864f3e3cd7d61138dc1d7e92ae45c6704351ceb206e7231f1dc72d3b8b61daad7860f46f1a6430501a3f348be262c8b12f9b90d351fef839677a26975ccf4a805b6492a66b7fcdab97edd16ff770ec60e10ee22381f3a1b15a732e6d61e9b1940141d15928de54aa31668d67a6340373cdc5274859bd2560e2bf49b1ccc5868df52ec7728797b24dd284e10330f32a48b5ffc7965218fcbf82aa5ae5705da28aba807229caff34504b39dfa3bd18e4b41eadda827eb55030813f9e93e7ac90fe8846366a3b8cae24c05204656e79a2c127fbd155d2924f373c20881e3586bfbefbbd2d51fb7bf9d65d42fa83404f5ac31ba5f59b04e43d1cad7ecffc899c997aa8f896bc57c09ac650b5fe8d767c91adb9ff9b65be4c7c578a60881134147e8e5398061c9c512f0cf541560a5d892b777697dbbef1ae228e3217354213f07780412dbd2102aacd6b829fb25483d77d81bf25716fd1361a7cff0071ec41886bd3bf908bd38070042817a1dd1191fae372449f24f213f92b7610f54394841c07a60018067651dc08902abeeea54c35a3deb930284f25a2c74b181daeaef202706a651d4bf29060da4354bf091f20e0a43f4d1d81f11c3daa963dadce15d24b46559d11a3dcc73dc85339ba71c37cab52f5cd57c106818e1a5e49e9144cdc96f5ae865be00b771d1aaa01fddf2efdaeedd53d4314326647fd01c4d7a811efb7bd24b3f5888ab16e0ee22521591bad1ad5ecbe72d2d76f357fb926e6515a4f9792123bd769f7ef57553d5b9f52f6a540174213ecd7294ae7a17ad09ae294fb1442ee2ef4bb211864ac8e45e6e46a54b79498dce383d0fb9c5eeb5c85a18ef570fe04d0fd614845e36ff79a7d931f3208f8af248e4392bba48f21ef45dd69726ba75cd2390e3f57434a46b6458126f64ccd364191eb577449156f0b51564a7596b5ff424cd694cef34d5f38ea8da51fde6252784840cde5311235b6822d6a09d274a5801e76a9d071e7dcfccb14744ad5bf131ac55afd99ec9dab12826c3d880239472495ca489d34dbece32bec453f06deaaae4ef2332373dc9c555be3508ca038a856af6cde329a98483aa47b662ad36cdbd18d78063f019e9021c3b540c73d195d33f4dd0d631e593f0b2a4bc0d3f258ba0e0d2d3b8a3f8f915ee3bd877d64fe1300413dd2a543bdfebcca1e23e356d85d942490bf065681590d14e36e06ed313c91729fdb909563afa05b12170a871eb8036c632095c23af958228fc833b0964b482aaae0e4ebb18462454f3af29ee31ef4aef7ffed7ad27c5deb8894166ecd0f64ffb3ed0142b4980ebda5d921f3187524b3bba8cbe9704d5fa9d6ce2d8ab222e2041cc13dea5a29d69493be65ed44b944a4108aa3fbe8f7d1405f9891517cc02b203babd9a27cc7690028b9732ce0f2774de5efea657ff30a91dadf47b07044c7fa408394feb7315c5e7b043031df86c5d7a1891bdc30d6f608b94db270280aed756a40430855d84a938731ec1a33e6b5f4fb5f9b7e7ca32820772856c8a0df16ef19a458a4e9908f3d12bb366a3a3c561473a31aa24582d665dc0ddaa17a8b531cae422d1538a67b662f9088dcdaf0af634a0f10104f8995f2b562ae9d995a906c635378ebff9699aa1934084bf3a9381f54f4c78565821f45da4b4f358c1112afd01064990817634256dc4cab07a9f2e7cfae89602e111daf4b9a4a20f7e87385fc008b3ae10acaf3c809d6263ad6b02697d766cd0b4a6eb4fd062a0d4a17f253e367ceed429e3d536756e55f87be511678b0f4ef118818c04b9e4f292b233e4ee1b4e338c4b8dd9737f9bdaa02e98d08c726b5a6346eb389c984d6a5d660a43c8172fa03b82da10b7d0323718443cf4772042ce1b3675bb7d110342561577c7f3d9893776b60ce1565b62f35734e2d09223d1835413eec738d9e5b6f1390ebc3f2a53eb3eb7f2652cb06e0477d4c19cb22ee43cca55a6a30a7f7cea13a0de58d71ad2d6a4f5ab4e0b288540758a767bda7ed92077d5d7956329699065ef3ea76f2f9388584214c3d68bea227922035a36fd666e5f3152c46b05cc97ee7981c92c26044ed0fcf6c30c7562269d8fa54d6a592c2c6343a2c5abbfcb96c7282015a067bc318516e8fbeeeefa40d2b3ec5ea53d1e1a06a9f8ac5e77dc5b26eebbd040379f2a8871f45be9a6d91679e50d7faf6ac9e53852461b46565836fcde5eea9ca05100fd00b0247482f721b5e1b05b4c6256ee3fa8a6d01a30f54a031af640bf24ca6a9a91d688470453c1418d9a4616f28fe136a75f1a8f4ad66a07a3a486e8cb63ccf669e9d6777becf3bf5d8688d4d0e826e89e288e09f7d7709516ac1830c66f699a5f0eef26193110288ef02e0ec0d2baa0d787b2b090951f4e66e96816200927c980c9b8b116901d443b5075e1a0d9c7e075a87294b435f1db3e63ce4e59cec9f8c6e7c5cd73939a46e97fc66a1d3709376a4c1229275f4bbc36867b8291e7dc25ccde5468fc347ad15aba2554fce01289a71b36a0a3e24311f3eee95fbb76ae9b8cde2e0a13329cc5c60d28db38dd920baa5cf9159e48d885011d5d3fa82e67f5d50172abd3b8cbe467d0b858131d21c593fbf004e723dbc32516fe81c9413b08138ddd458896edc5f83c6dcbbe63bb731c2ddb422c06e6838572786165261c2cb480c29a2b158698a07431095415d703d1a2767ec4e63a69c9914eaff47113b9b2aed06e3c3effb4c20b234873947aa0100a7c00295b97359046f3f798084970adc8de1e1383ec4431477b9be7a36d3ba8580292a6dd815652e79fa0458c087fe2dac522f2b8adc69ccb25fd2296991faf79e2353a5da73b153246d14cf3dc0ed2b8574aae67d4c632b260fa5bc25fa20d52317dd29caa6a00021954f8853854ae7ae1b28ad65b75254e15d6c629d5dffe513933d6bb1116579f395eef77be9ef27d596e77b4d6683a5e87b66bd481ab98aabd22677a7fe4147d811014449248ae9feaef0f28068fbf83cc2bafd357d500bfdc5521d3cdcc71c88ca56ae8fc3d777807821b4280db90f511e32b4a6e7e62dfd728e2621264e78b00d16a6502e7c406270975f6ac2c2a14edb0f6e2a0cc5092c9115386321abb02ba4802de3f1c86a8518053eaad24cfe66df687794ef0cfc85828e48d9b8ff8b820370fb4a9d7258ecf8e7faa9cdedcdbcc60986c7496a860d4cd0a634db472a4fbec6c8c20e81e9e900b765a76263b333117b407a4b3969568e7dfcdb63bafaac88103738be07bc613580dffd0d5ca85e3ca2eb065adfd110fa5e87ca199e8f38c6fa580229cc7c41eacc760f20a862e094695f8af18eb149680cdc3710cfeb5d1299e380a4e79fd03a966e24bda9e39d28df026ce3963d5309ec15249fa7ea8e377a24e7ee4a32eb9ff97bea983d9aaa3b5730cf4a68a608d95caf3d791e8fe34ca019340337fe57bbad1ae467a359fe323ee9c2aa6e3b40b0e2d41b9c13318a6a70231eac44a3de841a8314c2a4718ce78bbbe415b3a61ea8d974a7e22974857c32c93a5f3719262734e7b163bf429c1845cd6b88b799c0d9464aa0456702b8bc0e1bc16374578cf10fc0a181fcf95fd7f70e73c30f29a9eb9571d80167d3f3ad91ffd78528c64a37c7bcc01e7732b46a03460bf34388e58ca259f4623cd5a26294637304888c244025e96433e551ee0bef63e9fc206b9f9590a7eac173cdd0f464a720781c1325f44f89289b3bf5fa02cebfdea17a0bb6ad636015c5bdcb79ecb03288b7cb44597bb652cd76f48848fa9a1782e7d35ec6290bab8d5012302f9833d219bf713e3df055aa16c11e060a490ae934ee8de2d17e32551925af7c6a0076880d4d936ce931a3633d179550f44468a6a06eb7426930a25760dcdf2d3be2951b7ebb8c331e405c028160f17a93b730d8b0218d358bb54d550dffdc7050b2be95fce7c81a0a5738b00c63e6b5ddc82a3927876ca1e9a12a73e14d31289edf04daff3b2d9442af2a40432500cdb35b2525eee482ad49d980a175c0aafa3624654de37d4c3080cc864c27e130f99bace95bacdd8b96d8f4e65ac5ac5e3510b5d3b2726be50a6b57fa38094e74a7de4b34dff259e173a2a3f02bede396e87e0a3a077ee65ddc40378d606e716d1c071bd8b78d6788db3eb803806b6b052d4f43539c404f63154893a01acb35b2f2c599f8bdc4a770bba649cc8cbbe5ac7b19a42c8a8d1c8d5d1d67ed5713c3094da44a03e36ca48be775d546c702e40223886e695094eba1a3e162ac8cef9e768a6893136565e762950d7af09a7ba0efd5c734d164dbe81fe5f039d032bdb158dba28f9b81406a2309caec2c544d209571204eeb48e56c2b4a2503253f3686bebe"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x6, 0x1, "4613"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "202baa6a60b14a65154a53825146fac26e4268e39081c3aa46107f"}, @NFTA_DATA_VALUE={0xf7, 0x1, "ad1b64a168b451bdf4383ea73d9861ba03aad93a8bdc3f0282e62a401836e1bb96aff6d2f527f7dba67de7640b2b0727430b80c7021cd08e823a547d8b9a37e8e4622c28133ef66c4a1e2285eb37684a67cdec0e39dd02cfa6239c662c24d7259f866325065b99a7fa1ed11d055269caf063238fe9576c2dc3db1917a9ced3d70c3a6e4f696be37189b589f48cb79dae947bc85a851b15b3faa1a5451aa57ce6ff8c991da53314e72d3d7abdd480125c895d23d2ce30e1a553f9d111eeb99eb521644178238a7844c2b1e0e3ee322bc21dbab25b96d50de9449d11e2c382a315d73f20410cf83a3ed5c279953af0e6c869052b"}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}]}, {0x438, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xac, 0x6, 0x1, 0x0, "e6e0cd1b09337118545e3aa021bfd8bddf5ab0b8eee2f188e4687b98e1357389ed969e120c0af22313279d66ac937f4324bb8d71bec63b9b7d93fb6d07d96f8ff4943f1b5a2bd49592cce853efe0ec0714c09f4b5bab22dfc7e857507ba2ac61b9d10edffc844d59ba4ce28036524e6d06f9f71ed9897858418ff728554a2392a01c8eb40aab010712f47a7c33994622e9ae620ede99bca0f74dc22d558f8089bc48e294525159dc"}, @NFTA_SET_ELEM_USERDATA={0xf6, 0x6, 0x1, 0x0, "20ea65109d29c85b5e76e821dff2911c94cbf96e38fad27664ef52f363f2647992c088bbe7d91a60ed8f9ee6c65c100a743b73c8618aa5d0db54fcb62516c14647dc598c8313b74c5d5f34b4568b9b28bbd093d56d53679a3d0e622724784bb5fcb83a5018276e4e9144ffc89a516b25ee0832dc01fee9a45fcb4c4b0c1aa4e0ba996c321c5ec820e6d02f8c3ecf60e43c385cfa34af5727f59e286c35f8e3187111dbbf8034900d8f2b42c2bb4817d7c8ad92a8035687b34923d2681f5397733be3f3268b6a97bb363e1d790a947449bbb8251b7d0a11f1c2c00e7c0561324cf238c3b8f5e02e8227a698579f838e32ed1d"}, @NFTA_SET_ELEM_KEY_END={0x140, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x94, 0x1, "5b705117acfcad4d9861fa3e212530e9e3ee5efa02a9b4a99fee0529e06609f2f1b07c650ea7cf8f6d9eb3529f4f5c647bec1008257961c0fd0278bb5a2dbd76ecc1b8948df1afc83544d94f444486fcb83e2e48a13a8a0a8e396f7246e30f7b1ae70fec60a912ff6da4b730d60ab0154d8268317185f4d27ab4e652175517fb492ad46fc360853b77ebab36c231974e"}, @NFTA_DATA_VALUE={0x9c, 0x1, "849d56d42b488710ccb272314ca5e4736b09e168ec4d57d6941bface7d79d233fe52dff6c9b3a5a861ed66e2e37b21d5b7225e4a96e6471097b19e6b4955c62160d1810633955dbbcf5ddb84259e13b76d774596da4345ac6f55bb7b83ded1c1418778df1221b4c315f38feb47806f9647aebd53dc2b3610c96fe8acebf4c30eb57f5b775e7e8b7bdf7ccc6424b04970b0aea1bec88ea239"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_USERDATA={0xec, 0x6, 0x1, 0x0, "220ce11278fa250a391916481517aef8abc9972ba821ec060b49d4f48cc124ef1a2b6238cda459f79df9d9a009f5750b6ea69e8aa63bf90308b075cdab04457c8d618e01b305e4b6e10f87e479389bf803d87651079d859304fe533d0ac574dd29d9e7e295e4700166c9bce8ce9f43fede4fbc53e895e4f6421e47c92fcfec39a3f81d380237ed61b600344ea00fdde9fe6049808ba7dbe4fdaa86ee3681bbcc049e64fbb6448bfeea1a5386824fefc9717a46326b3b4b98c2f17467f742d31c47f813a32e44ef58b54a345f583743d956c0a963de80349cd808ff8367fff1a9a6e6e2f53ac1b9fd"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x1484, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10c0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "d52900d03ddd28bb968d9a3ed13247f57795cf03"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x7d, 0x1, "459d3a3da6d522a2c8aeffeb795d99993702b6ecbe52586e9f384906407de8ac2599a9024c94358e88ae205d2c8a00e77e85405cf24a17e2de882805a031d6b1ee75382ded9560e07654db9522a3e19d884cfe5cf61e446554cf6b78f5048e9b3144393f55296ea5b840f12d3804f785775b6aec1521b48ff0"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x128, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x64, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x82}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x5}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ELEM_KEY={0x16c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "903638ff60120c33674bf43f16f4a1349159e5f2893e92d3040da8ff12d839f946f98b6404c9668ee72180e65289288fcb9f181966467193e18d475ea7cc7e93d53e65955582aa962fa22369c7ac9e379b972f0618d96d741cd3a8cb475197a1d63e00cd24d600673e5751849b89ac20dd6f5b5c85b9addce71600d107d4fb479cd869312d11fc1c23025e36968bf2b82a8bd740f1c5b8d9c34652b8b5eb2609057a81ab7456ba0992556ca0d3ec3d702da9d2aa5c0296ffa51cf7a40fd3"}, @NFTA_DATA_VALUE={0x35, 0x1, "6a5e2153b7bb11d8461113ea424a718fa9642d39ef41bb4fb9936f4ea43734299e8e08032779a74600ce39efe1d9544060"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x15, 0x1, "4cb70285f148d1b155f3c91f15cb17a9d7"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}]}}}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x60, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x25c, 0x3, 0x0, 0x1, [{0x248, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x208, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "4b02106881837ee468b0d0864714e0eaff169bb68f81129136d313c0c79ee71e48f6e60677b461953f669e7b736502c989eeba2e1519519f28c35a4b5ee372ef2b7b3145f8485af63d2ffeb95a2914d99e6a825a3bd09ec4789e1208c749bf5ae6b78d79493aaf1cb45d5d87a68adff7d08f49295fa0ae36387978a10bc8b7d20e0f9217289e832928cd70f78260026b2e077b141a"}, @NFTA_DATA_VALUE={0x7a, 0x1, "8b90702f7bff24262d8152e136b24d7a4d6559a170ac7c4fdf10d3bbb9575d410e449f8668b36249b7bf89bc151bd46b2ef7af4cf7769cb9ed5b5d76e62afc233c3c8fe7d7cc81dccde22bbaaf13ca331018d8b54f5ba062d01d451e72fe25e57bf857c2c58f44cd8fe51b46319ba7a942e7c0cc8807"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x1fc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf785}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd629}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELSET={0xdc, 0xb, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_USERDATA={0xc6, 0xd, 0x1, 0x0, "94b096590853a61fa2964d58d5a3bcd754f3d2ad6ad27a8fc6f21a756c012bbc5b8d83a88b5eacd1028fc710d11479650b7eac6809a01028605b87accf13d690644a3d3dff4c589f87a34eb891c92c4b80a1e6d1870d54c64218ce0f9e70ab54f08e57297095d2f6ccb7779146153b1d578b775b0c185643b774b80503e9940976bc479a750263ecd895340deeee141aaf5e8cf403074ba7da8a52ae324a0bbcef19db28d4d85b9a6bbaad0315c17322a46ca00a8020522f9ccff7546ca005e0f808"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) socket$inet_icmp(0x2, 0x2, 0x1) 3.163446547s ago: executing program 1 (id=5914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100070000005391e51c0000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) 3.108273532s ago: executing program 2 (id=5916): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002680)=ANY=[@ANYBLOB="18000000520001c700001000000000101c"], 0x18}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000000000005000600000000000a00000000000000d1e53fa0fc78a8a7000000000000000100000000000000000200010000000000000000000000000005000500000000000a0002000000000020010b75a71800074946d8e7dd3c0008000000000000000000000001000f1cd09a846e948964442a8139d30d1d46ce4d379a6d511d9a7e5df0be8dd79691bdf58615b087958a475cecab371ec346eec8f778f3c682d802272940b774e4e35a46a2dfefdfee7ef8398bdfd39dbc09c077d30a68a03e38d7801320882268424ef595ecbf427a503009ea4bfe9eb8"], 0x70}, 0x1, 0x7}, 0x44000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x294, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x5, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x0, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8}}, {0x0, 0x2, [0x6, 0x6]}}, {{0x0, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3}}, {0x0, 0x2, [0x5fd]}}, {{0x0, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x0, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x0, 0x5, {0x2, 0x2}}, @TCA_RATE={0x0, 0x5, {0x10, 0x2}}]}, 0x2c4}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x48, 0x1}, 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x9, 0x8, 0x10, @private1, @private2, 0x7800, 0x80, 0x95d, 0x8}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @empty, 0x2000001, 0x0, 0x7d, 0x100, 0x4, 0x51, r7}) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff0000000071102d000000000095000000000000002499313c6b4848f771e25d65c155fa0900ea7f06916e87670d34968d004a89b74d32a7220d8e054a2cf4d763fd4fd39042b06ce8389ead102299b5d9f5e3aa8a1834646b4819fdfe368d060d1c7742c2462cc6496357f9b6a298bd6bbabf94c2b13afc17070eb59059bf61439b706a0fd52b658d50169e7d9747556dca4bf9e7788ac00000000000000000000000001ba700"/182], &(0x7f0000000480)='GPL\x00'}, 0x90) 3.09828309s ago: executing program 4 (id=5917): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10}, {0x10, 0x110, 0xa}], 0x20, 0xe000}, 0x5}], 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000709fefffffffcffffff017c0000040042801400018006000600bd0a000006000c00bd0a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) 3.091988015s ago: executing program 0 (id=5918): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="7c000000210a01000000000000000000f80819fa24e2b72df78b505e46fb491a4a06b82fa7949cd463215022c553dfd2766d674fd745c89bfafa14967e2675c511b044af7c1d73cc0fa51a0672859562f885831b492a359727de55fe10940cc5e5d845177032819a08b04856609f12fdf9f419731d82efa8c0000000cd6c06cf492ab23166bff3499013d9fd38aacc102879694485f7ff7221e287cb91610d78025001e50bac98d520538d7d04f7a6cd851c3f4dd9e5253707ac6a6f740170365fe3a0ddbfa15e41e3ca0f9acfa5585879ee14d250ecb01b4b5b6e42bfc71e43a26d04cfc1d76ef6497659dc9696c3589cd8feebb915edcbcc2a76ffb065bdb4611119da7076d1ef79c3638060fd3895c87a8e9a46b7472781853ad93b8975ff53a5b2be688d9382b89a3c8a82fe3d3722175bafe36f677172d9fc93d61aa65f8a1c662cb48da763e882bafb7a5aec1393ccc706eded04c14d45e1a9e85a07a375b7aac550f78b33e0c6e49ea0d69478495b785b7f851250461d8932cea8d8b905605a3d8994808f00c774989f4a788a396d508bb8665a36d387f74811aa53703416f3c4a640f5b4b8f6b2c421c4500c8333d5b0ba69"], 0x7c}], 0x1, 0x0, 0x0, 0x8040}, 0x4020000) 2.96373799s ago: executing program 0 (id=5920): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cfb(camellia-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4079, 0xfef, 0x0, 0x0}, &(0x7f0000000540)=0xffffffffffffffe3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES64=0x0], 0x3c}}, 0x40000) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "0a2c6bfff18bf4b1", "6b32e8e6076f0f93070e399fe1e1d76feec638b930303590a3e07f24ec2e5b02", "e50f3ec7", "32aba155d6b6aff7"}, 0x38) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) 2.957912121s ago: executing program 4 (id=5921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="034886dd010000000000140000"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) close(r0) 2.077723587s ago: executing program 1 (id=5922): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="a78825aa", @ANYRES16=0x0, @ANYBLOB="01002cbd7004ffdbdf250c000000200001801400020069703667726530000000000000000000080001", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x24000041) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002000000014001a80100005800c000580"], 0x34}}, 0x40080) r3 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'macvtap0\x00', 0x57e6}) 2.014302987s ago: executing program 3 (id=5923): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}], 0x1, 0x20000041) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xa0, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2c04}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x20080040) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040800}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.013583166s ago: executing program 2 (id=5924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xfff1}, {0xffff, 0x10}, {0x10, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f00000001c0)={0x7, 'pimreg0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r7, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x44}}, 0x0) 1.937330408s ago: executing program 3 (id=5925): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000640)={0xffffffffffffffff, 0x6, "d8dc3d", 0x81, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x8087, 0x7, 0x7, 0x262, {{0x32, 0x4, 0x1, 0x17, 0xc8, 0x66, 0x0, 0x6, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x35, 0x3, 0x5, [{@multicast2, 0x3}, {@multicast1, 0x4}, {@multicast2, 0x6}, {@rand_addr=0x64010100, 0x5}]}, @end, @noop, @cipso={0x86, 0x39, 0x2, [{0x0, 0x7, 'XG`eG'}, {0x2, 0x4, '_L'}, {0x6, 0xe, "3e133b40fde20c6cc9c6bfcd"}, {0x0, 0xe, "35c7424cb7a600d4b576343f"}, {0x0, 0xa, "535b0d83caf8df3e"}, {0x7, 0xfffffffffffffd14}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x65, 0x0, 0x5, [0x9, 0xdc, 0xfffeffff]}, @ssrr={0x89, 0xb, 0xa5, [@dev={0xac, 0x14, 0x14, 0x2c}, @multicast1]}, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x1f, 0xce, [@loopback, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @multicast1, @broadcast, @broadcast, @multicast1]}]}}}}}) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000003440)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfffffffffffffe8b) recvmsg$can_j1939(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/136, 0x88}], 0x1, &(0x7f0000000380)=""/106, 0x6a}, 0x40000000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x70, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x80a5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3d}, 0x94) 1.832277149s ago: executing program 0 (id=5926): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES16], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xefff, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="fb789d8ff669955197f6409c2e535e0d92bddcfb01e88644698001d9050da1f58ebd86e82275292ea6654849cc7c87fdde9134fda86f562a00fffae320f080e99a"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xfffffffffffffc91}, 0x1, 0x0, 0x0, 0x2000c801}, 0x1) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000600)={'gretap0\x00', r3, 0x7800, 0x20, 0x0, 0x4, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @broadcast, {[@noop]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000300)='\x00', 0x1) r7 = accept(r0, &(0x7f0000000380)=@ax25={{0x3, @default}, [@null, @rose, @netrom, @netrom, @bcast, @null, @rose, @null]}, &(0x7f0000000400)=0x80) poll(&(0x7f0000000440)=[{r7, 0x2000}, {r0, 0x4080}, {r0, 0x204}, {r6, 0x8000}], 0x4, 0x3) connect$unix(r6, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newtclass={0x58, 0x28, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff3, 0x8}, {0xb, 0x8}, {0xfff2, 0x4}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x2, 0x2}}]}}]}, 0x58}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000340)={0x2, 'batadv0\x00', {0x4c}, 0x7}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r8) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000680)={'wpan0\x00'}) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRESOCT=r11, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES16=r0, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 1.707459763s ago: executing program 3 (id=5927): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}], 0x1, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef40900c13832c99c7ef1bf00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf43951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc0f00d6e4edef3d93452a", 0xd8}], 0x1}, 0x800) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080), 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xe]}}]}}]}, 0x94}}, 0x0) 1.684751181s ago: executing program 4 (id=5928): unshare(0x28020480) r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x22) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.660585995s ago: executing program 1 (id=5929): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010000104000002000000150000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001800128008000100767469000c00028008003d04ac88a3bf0d92d7a4e6d90100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="d5e75383f09c5abe655c6c5aa91964ac57aea59bdba3e8241a556d100ec7e5938f3229e90e496007eae19a1d76d65cf68745a407976e9d75"], 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004044) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580100001000010000000000000000007f00000100000000000000000000faffffffffffffff0000000000eaffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033000000fc01000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000400"/272], 0x158}}, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/time_for_children\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x13, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x2c, 0x3, 0xc1, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r9, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0xe4, 0x5, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x229db7aa}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28db2543}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xda3f0ef}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9a94fe993c1e7e1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1f4}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4004000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r8, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000400)) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r7, @ANYRES64=r6, @ANYRES64=r6, @ANYRES16=r1, @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x4c884}, 0x200040c4) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r10) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x17c, r12, 0x200, 0x70bd27, 0x1, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x286, @remote, 0x800}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6c8, @empty, 0x3ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @remote}}}}}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x616}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff801}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x541}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) 1.383274209s ago: executing program 3 (id=5930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000700000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000005c0)={0xc73, 0x9, 0x5d0, 0x6, 0x400}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r0, &(0x7f00000004c0)="2d71e35bd4e18ac31c8cbb539cc4020d5e521c37e40b6c296be49494f3ef6cf833b55441d89afdbba11b4ac0823cae93d9ac3dfc04ff33a281020125aaff6948c8ec45b167f6cfa90bac03212fcd7f26140ab42224af3a60c3c2e783700cef25d17890b220c5fe6050804523a6cd2d28b6e71f42091db1b401490bd5fb5f8f96099f04c040f6ee16851f187b352eb6a7fee8fd1c2dccdd87ac4fbf9a3d1ceba5593a2e8c0e0cc970384b2915cea924959c24c81590bcdfc3c672b44b15c43bf6d7f2a6e29e9545950de4aec5d287a160fa8b22ce9ba9081aa1c6f2ec4923421c1ceddae173359bc3fd815a8743bd183e00931d"}, 0x20) bind$inet(r1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc33, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f00000006c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000ff00000000000000", 0x58}], 0x1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000001, 0x30, r4, 0x5f61c000) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040"], 0x50}}, 0x4080) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYRESDEC=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r10, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x400}, 0x10}, 0x94) 1.382480088s ago: executing program 1 (id=5931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000008206010200000000000000000000000005000100070000000900020073797a300000000005000500020000000c000780050015000200000005000400000000000c000300686173683a697000"], 0x50}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000407910000000000000670000c208000000950005000000000071a13928b72c696950a4edd77f9876d874394900f3bde847f8c78119dfbc27abc969c82ce6f6f0b2e10179582eed1c25598659f1307bc7dea42e897c2305fd2a9989f18e0b716808f6491a914b82ce112e8a52578b3a8078cfd0b7d34cd51a741cdf3bdf46d174934650e575b0f5097a4d8f97c4b165abe4bb2be76d95cdba3f0b3a790af9d04d66016aeb34cf29cfd883a854803074ce6d65e4f15f1171975400600759562f12b706682b684633803352f0e8ce93a2c36b70140ff917652d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x8598}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x6, @private2, 0x40}], 0x1c) (async) getsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f00000000c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x4e20, 0x800, 0x4e20, 0xfa, 0x0, 0x0, 0x180, 0x0, r3, r5}, {0x5, 0x1, 0x13, 0x3eab4841, 0x0, 0x401, 0x6, 0x4a}, {0x3a2b, 0xa4f9, 0x2, 0x4}, 0x8, 0x6e6bb7, 0x2, 0x0, 0x3, 0x2}, {{@in=@private=0xa010102, 0x4d6, 0x2b}, 0xa, @in=@remote, 0x0, 0x3, 0x0, 0x1, 0x7, 0xcedb, 0x8}}, 0xe8) 1.345040365s ago: executing program 2 (id=5932): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xc, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000009000000020001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000006de0000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000787b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw\nw'], 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) (async) listen(0xffffffffffffffff, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000003c0)=0x8) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'tunl0\x00', r6, 0x8, 0x1, 0x7ff, 0xffffffff, {{0x17, 0x4, 0x2, 0x0, 0x5c, 0x10, 0x0, 0x84, 0x2f, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x1a, 0x0, [{0x7, 0x6, "4dd8536a"}, {0x7, 0x5, 'tV!'}, {0x6, 0x3, "b8"}, {0x2, 0x6, "e4db0b2f"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x20, 0x0, [{0x6, 0xd, "753bd3dd101769deea9860"}, {0x7, 0xd, "ccfa96aeb1e822aee2d25b"}]}, @lsrr={0x83, 0x7, 0xf, [@remote]}]}}}}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={0x0, @multicast1, @empty}, &(0x7f0000000780)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x16c, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4526e6acb9bc0c2b}, 0x4008000) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) bind$can_j1939(0xffffffffffffffff, &(0x7f00000005c0)={0x1d, r6, 0x1, {0x2, 0x0, 0x1}, 0xff}, 0x18) (async) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r11, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r11, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x5, 0x0, 0x28, @local, @remote, 0x8, 0x1, 0x5, 0xfd}}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2400000090ee7e1cda21f72d45705bdd5ba25cecf5b67da9909c2581112bf7cb54b56636e277dbe1992cd9337609c3c0038f26e17f24f9f19064847a7f52ab1d8745775e53a763d9e004e495e70d2898e00515dcae29aee7bc6088", @ANYRES16=r11, @ANYBLOB="00042cbd7000fedbdf250100000008000800ac1414aa08000b00", @ANYRES32=r12, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x2000034}, 0x40) (async) connect$inet6(r0, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x9) 1.325021406s ago: executing program 4 (id=5933): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.259565499s ago: executing program 1 (id=5934): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) close(0x3) 1.152228594s ago: executing program 0 (id=5935): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a80)={0x28, r4, 0x201, 0x70bd28, 0x25dfdc00, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xe4d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @loopback}}) 1.136833434s ago: executing program 2 (id=5936): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x25dfdbfe, {0x9}, [{0x6c, 0x1, [@m_sample={0x68, 0x16, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x2, 0x20000000, 0xa, 0x400}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x80}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x1}}}}]}]}, 0x48}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x4, 0xffffffff, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x40) (async) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000b00000000000000000000014000a20000000000a0101000000000000000005000000091a010073797a3000000000140000001100010000000000000000000000000a"], 0x48}}, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="e820fb44f82e0745b20aec3d5500", @ANYRES16=r5, @ANYBLOB="000226bd7000ffdbdf25010000000900030073797a320000000005000400010000000900030073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x1) (async) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x800, 0x4) 815.440372ms ago: executing program 2 (id=5937): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x1c0000, 0x4, 0x0, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x4c084, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x6d5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 368.536549ms ago: executing program 1 (id=5938): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000560000009500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = socket(0x2b, 0x4, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="ad060000", 0x4) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289", 0x1f}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r2, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/4080, 0xff0}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x9}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xfeffffc9}]}}]}, 0x3c}}, 0xc0) sendto$llc(r0, &(0x7f0000000000)="c7fb1a48ba04084e002229171383ac2ab5de19ff0c0778c603bcaee38bf5ed752b88f6e37a39c06793b1762a59a5114e0c1bcea257db632bab62e5201d219a8fb306ee6b1453786dfb144f44afc16be16de652b20e3ce5155fc12a8bef736913bc26fe469ec1fd2d2a8f47a9d0ab291eae67122dd550edd9d2a2c7f793d8e0f8ffdc113399c33f4c5faa016d6815e0b14c87aabc9a621df8957590d25c308ec84a4777f2ce9be010010f5309b92c9e3c5ae63ce1fda4a0ee7e332a4d5d06823105c9ee32852493e8b4e59c62a755f06fb47c47e36cc046406e157eabbb1a", 0xde, 0x4000050, &(0x7f0000000200)={0x1a, 0x0, 0x8, 0x7, 0x6, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 341.730866ms ago: executing program 3 (id=5939): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=@acquire={0x230, 0x17, 0x4, 0x70bd25, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d4, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x29, 0x0, r3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x4e22, 0x5, 0x4e20, 0x0, 0xa, 0x20, 0x80, 0x5e, r1, r4}, {0xff, 0x4, 0x6, 0x6, 0xc, 0x401, 0x7, 0x1}, {0x2, 0xfff, 0x3, 0xffffffffffffffff}, 0x101, 0x0, 0x1, 0x1, 0x3}, 0x9, 0x8, 0xfffff7e6, 0x70bd2d}, [@algo_auth_trunc={0xdc, 0x14, {{'crc32c\x00'}, 0x480, 0x100, "e46907b32514e591f3e37d19085849d871d813ad9e690e6edda08eb3e40ecf68123a228f19b4fc0aed77e71b4acca5ffd7002d46aac0fd47bfd8b368fc2559a7a40e75f138f5fc6a216ed31a1a8bce8e9cf6e4463ce8a849a34fb9d88f571c55a4834785a8a914004bb86c2911c5a1991cba944276e4f90b042164755924e5c10ed286d42870c774caa19f456e996bae"}}, @lastused={0xc, 0xf, 0x3}, @srcaddr={0x14, 0xd, @in6=@local}, @lastused={0xc, 0xf, 0x3}]}, 0x230}, 0x1, 0x0, 0x0, 0x20004040}, 0x2000c005) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000080), 0x4048010) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 274.02524ms ago: executing program 4 (id=5940): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}}}}}, 0x0) 123.468294ms ago: executing program 3 (id=5941): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=@newtfilter={0x30, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 68.037411ms ago: executing program 0 (id=5942): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "1bf859", 0x0, 0x11, 0x0, @local, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x3c, 0x0, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x3b, 0x0, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @private2, @dev={0xfe, 0x80, '\x00', 0x10}, @private0, @mcast1, @mcast1, @mcast2, @mcast2]}, @fragment={0xff, 0x0, 0x2, 0x1, 0x0, 0x8, 0x65}, @srh={0x1, 0x0, 0x4, 0x0, 0x9, 0x50, 0xe15b, [@ipv4={'\x00', '\xff\xff', @local}, @private0, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x6c, 0x0, 0x4, 0x0, 0x4, 0x50, 0x4, [@mcast1, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev={0xfe, 0x80, '\x00', 0x39}]}], {0x4e20, 0x4e21, 0x0, 0x0, @opaque="dbf85b271810ca6d183b4e55a639f3eeae15e3ba2da9709d55c26f072588d5c7090b72c34ae01bf284b08f0048089df2701acdbcd20d452c1da8c6752d8d06d7d098af25f7f6404c24ea27d49107971f177c7e9895245578ddc5d2a3b8d950a4e1f37c7d2c857d0e3d9e97"}}}}}}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x54, &(0x7f0000000640)=r3, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@alu={0x4, 0x0, 0x2, 0x5, 0x4, 0xffffffffffffffff, 0xffffffffffffffe8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0xe882, 0x64, &(0x7f0000000880)=""/100, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x6, 0x6, 0xfffffffb}, 0x10, 0x4725, r0, 0x9, &(0x7f0000000980)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f00000009c0)=[{0x0, 0x3, 0xf, 0xb}, {0x4, 0x3, 0xd, 0xc}, {0x5, 0x3, 0x10, 0xc}, {0x5, 0x1, 0x4, 0x5}, {0x4, 0x1, 0x7, 0x5}, {0x3, 0x2, 0xb, 0xb}, {0x4, 0x3, 0x2, 0x5}, {0x4, 0x5, 0x10, 0x9}, {0x1, 0x2, 0x10, 0x8}], 0x10, 0x6}, 0x94) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r11, 0x81b21000) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x8, 0x19, &(0x7f0000000140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x66}], &(0x7f0000000240)='GPL\x00', 0x200, 0x0, &(0x7f0000000280), 0x40f00, 0x1, '\x00', r6, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xd, 0x100, 0xa4a}, 0x10, r7, r8, 0x4, &(0x7f0000000b40)=[r10, r11, r12], &(0x7f0000000b80)=[{0x1, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x7, 0x1}, {0x5, 0x5, 0xd, 0x3}, {0x4, 0x4, 0xf, 0x3}], 0x10, 0x4}, 0x94) 0s ago: executing program 4 (id=5943): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x8000000}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xfffffffc}, &(0x7f0000000180)=0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x7}, 0xc) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r3}, 0x48) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000008c0)={&(0x7f0000000440), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r5, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x39}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000044) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r4}, 0x38) sendmmsg(r2, &(0x7f0000000280), 0x1, 0x800) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/75, 0x4b}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): pcode 0x0c1a failed: -4 [ 346.000074][T19057] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 346.141460][T19057] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 346.165369][T19057] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 346.505790][T19057] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 346.511831][T19057] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 346.602200][T19091] IPVS: Scheduler module ip_vs_sip not found [ 346.779204][T19057] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.796269][T19057] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 346.850043][T19057] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.872469][T19057] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 346.988467][T19116] netlink: zone id is out of range [ 346.998296][T19117] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 347.086972][T19116] netlink: del zone limit has 4 unknown bytes [ 347.214949][T19128] netlink: 'syz.1.3777': attribute type 12 has an invalid length. [ 347.299703][T19130] netlink: 'syz.0.3780': attribute type 1 has an invalid length. [ 347.871216][ T94] block nbd1: Possible stuck request ffff8880251f9300: control (read@0,1024B). Runtime 60 seconds [ 347.890252][ T94] block nbd1: Possible stuck request ffff8880251f94c0: control (read@1024,1024B). Runtime 60 seconds [ 347.901839][ T94] block nbd1: Possible stuck request ffff8880251f9680: control (read@2048,1024B). Runtime 60 seconds [ 347.912981][ T94] block nbd1: Possible stuck request ffff8880251f9840: control (read@3072,1024B). Runtime 60 seconds [ 348.980362][T19147] __nla_validate_parse: 2 callbacks suppressed [ 348.980381][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3785'. [ 348.998728][T19151] validate_nla: 1 callbacks suppressed [ 348.998744][T19151] netlink: 'syz.3.3786': attribute type 1 has an invalid length. [ 349.052583][T19153] netlink: 'syz.3.3786': attribute type 1 has an invalid length. [ 349.060952][T19151] netlink: 'syz.3.3786': attribute type 3 has an invalid length. [ 349.144848][T19151] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3786'. [ 349.170080][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3786'. [ 349.172684][T19153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.203229][T19159] netlink: 'syz.2.3788': attribute type 11 has an invalid length. [ 349.260589][T19160] netlink: 'syz.2.3788': attribute type 1 has an invalid length. [ 349.269387][T19160] netlink: 'syz.2.3788': attribute type 1 has an invalid length. [ 349.365082][T19174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 349.400234][T19154] bond1 (unregistering): Released all slaves [ 349.476794][T19166] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3791'. [ 349.613253][T19182] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 349.658611][T19190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3793'. [ 349.669547][T19187] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3796'. [ 350.006755][T19213] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 350.117168][T19213] netlink: 'syz.1.3804': attribute type 2 has an invalid length. [ 350.280519][T19234] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3808'. [ 350.336352][T19236] netlink: 'syz.2.3809': attribute type 1 has an invalid length. [ 350.339693][T19238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3812'. [ 350.453178][T19238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3812'. [ 350.469711][T19246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.492515][T19246] bond0: (slave bond1): making interface the new active one [ 350.500788][T19246] bond0: (slave bond1): Enslaving as an active interface with an up link [ 350.520901][T19244] netlink: 'syz.1.3813': attribute type 7 has an invalid length. [ 350.530414][T19246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.551751][T19236] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 350.711379][T19254] tipc: Invalid UDP bearer configuration [ 350.711430][T19254] tipc: Enabling of bearer rejected, failed to enable media [ 350.734234][T19254] netlink: 'syz.3.3816': attribute type 5 has an invalid length. [ 351.076703][T19274] tipc: Enabling of bearer rejected, failed to enable media [ 351.525117][T19307] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 351.596253][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.605467][ T7977] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.614201][ T7977] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.656048][ T7977] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.743568][T19324] tipc: Enabled bearer , priority 0 [ 351.752112][T19324] syzkaller0: entered promiscuous mode [ 351.758195][T19324] syzkaller0: entered allmulticast mode [ 351.775190][T19325] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 351.830436][T19324] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 351.864854][T19324] tipc: Resetting bearer [ 351.877810][T19320] tipc: Resetting bearer [ 351.936679][T19320] tipc: Disabling bearer [ 352.047302][T19338] Bluetooth: MGMT ver 1.23 [ 352.152580][T19350] bridge0: port 3(syz_tun) entered blocking state [ 352.180587][T19350] bridge0: port 3(syz_tun) entered disabled state [ 352.208710][T19350] syz_tun: entered allmulticast mode [ 352.259216][T19350] syz_tun: entered promiscuous mode [ 352.265085][T19350] bridge0: port 3(syz_tun) entered blocking state [ 352.272098][T19350] bridge0: port 3(syz_tun) entered forwarding state [ 352.321782][T19353] xfrm1: entered promiscuous mode [ 352.335441][T19353] xfrm1: entered allmulticast mode [ 352.644918][T19378] IPv6: addrconf: prefix option has invalid lifetime [ 353.015077][T19402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.029072][T19402] bond1: (slave bond2): making interface the new active one [ 353.037484][T19402] bond1: (slave bond2): Enslaving as an active interface with an up link [ 353.070276][T19404] tipc: Enabled bearer , priority 0 [ 353.080912][T19404] syzkaller0: entered promiscuous mode [ 353.086506][T19404] syzkaller0: entered allmulticast mode [ 353.095031][T19404] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 353.118452][T19402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.133954][T19404] tipc: Resetting bearer [ 353.142608][T19401] tipc: Resetting bearer [ 353.164438][T19401] tipc: Disabling bearer [ 356.252661][ T5233] udevd[5233]: worker [6154] /devices/virtual/block/nbd1 is taking a long time [ 356.261873][ T5233] udevd[5233]: worker [5912] /devices/virtual/block/nbd2 timeout; kill it [ 356.270632][ T5233] udevd[5233]: seq 17862 '/devices/virtual/block/nbd2' killed [ 365.786611][ T55] block nbd2: Possible stuck request ffff888025220000: control (read@0,1024B). Runtime 210 seconds [ 365.797988][ T55] block nbd2: Possible stuck request ffff8880252201c0: control (read@1024,1024B). Runtime 210 seconds [ 365.809132][ T55] block nbd2: Possible stuck request ffff888025220380: control (read@2048,1024B). Runtime 210 seconds [ 365.820298][ T55] block nbd2: Possible stuck request ffff888025220540: control (read@3072,1024B). Runtime 210 seconds [ 366.426471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.183085][T19409] __nla_validate_parse: 18 callbacks suppressed [ 370.183098][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3862'. [ 370.281438][T19419] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3867'. [ 370.299978][T19418] validate_nla: 4 callbacks suppressed [ 370.299997][T19418] netlink: 'syz.3.3865': attribute type 1 has an invalid length. [ 370.383316][T19418] 8021q: adding VLAN 0 to HW filter on device bond3 [ 370.386241][T19424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3865'. [ 370.390886][T19413] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 370.434475][T19423] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3864'. [ 370.613304][T19435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3870'. [ 370.862190][T19447] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3874'. [ 370.877194][T19447] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3874'. [ 371.031379][T19451] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3876'. [ 371.042847][T19451] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 371.131765][T19461] netlink: 'syz.3.3879': attribute type 10 has an invalid length. [ 371.237392][T19461] team0: Device veth1_macvtap failed to register rx_handler [ 371.391654][T19474] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3883'. [ 371.431773][T19477] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3883'. [ 371.586264][T19486] netlink: 'syz.1.3885': attribute type 5 has an invalid length. [ 371.599477][T19489] netlink: 'syz.2.3886': attribute type 10 has an invalid length. [ 371.934303][ T7296] IPVS: starting estimator thread 0... [ 371.942127][T19513] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 372.025975][T19515] IPVS: using max 32 ests per chain, 76800 per kthread [ 372.378702][T19532] delete_channel: no stack [ 372.490584][T19535] netlink: 'syz.1.3901': attribute type 1 has an invalid length. [ 372.513278][T19535] netlink: 'syz.1.3901': attribute type 1 has an invalid length. [ 372.617532][T19543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.076998][T19564] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 373.895029][T19617] netlink: 'syz.2.3923': attribute type 2 has an invalid length. [ 374.219991][T19643] netlink: 'syz.0.3931': attribute type 4 has an invalid length. [ 374.444273][T19649] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 375.404285][T19724] __nla_validate_parse: 10 callbacks suppressed [ 375.404303][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3950'. [ 375.489560][T19730] sctp: [Deprecated]: syz.4.3952 (pid 19730) Use of int in max_burst socket option. [ 375.489560][T19730] Use struct sctp_assoc_value instead [ 375.533410][T19735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3954'. [ 375.757541][T19751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3958'. [ 375.809270][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3958'. [ 375.827426][T19753] tipc: Started in network mode [ 375.832489][T19753] tipc: Node identity fa68ce43ed8f, cluster identity 4711 [ 375.850885][T19753] tipc: Enabled bearer , priority 0 [ 375.860645][T19757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3961'. [ 375.873127][T19751] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3958'. [ 376.868105][T19753] syzkaller0: entered promiscuous mode [ 376.891462][T19753] syzkaller0: entered allmulticast mode [ 376.966933][ T7296] tipc: Node number set to 401067587 [ 377.033407][T19769] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3963'. [ 377.060441][T19769] netlink: 'syz.4.3963': attribute type 10 has an invalid length. [ 377.079891][T19764] tipc: Resetting bearer [ 377.112036][T19764] tipc: Disabling bearer [ 377.147576][T19769] syz_tun: entered promiscuous mode [ 377.160320][T19769] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 377.241096][T19779] `: (slave batadv0): Releasing backup interface [ 377.326403][T19779] `: (slave bridge_slave_1): Releasing backup interface [ 377.362851][T19779] `: (slave bond_slave_0): Releasing backup interface [ 377.380834][T19779] `: (slave bond_slave_1): Releasing backup interface [ 377.412039][T19779] team0: Port device team_slave_0 removed [ 377.428606][T19779] team0: Port device team_slave_1 removed [ 377.441185][T19779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.452139][T19779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.467556][T19779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.475067][T19779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.494609][T19779] bond0: (slave bond1): Releasing backup interface [ 377.501847][T19779] bond0: (slave bond1): the permanent HWaddr of slave - 36:22:b8:bd:bf:4e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 377.520287][T19779] bond0: (slave gretap1): making interface the new active one [ 377.540701][T19779] bond0: (slave gretap1): Releasing backup interface [ 377.592360][T19783] bridge0: port 3(syz_tun) entered disabled state [ 377.604340][T19783] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.611866][T19783] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.697519][T19783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.710903][T19783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.829078][T19785] team0: Mode changed to "broadcast" [ 377.834849][T19791] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 377.846371][T19779] syz.2.3967 (19779) used greatest stack depth: 15608 bytes left [ 377.907981][ T1163] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.941969][ T1163] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.966048][ T94] block nbd1: Possible stuck request ffff8880251f9300: control (read@0,1024B). Runtime 90 seconds [ 377.977562][ T94] block nbd1: Possible stuck request ffff8880251f94c0: control (read@1024,1024B). Runtime 90 seconds [ 377.993647][ T94] block nbd1: Possible stuck request ffff8880251f9680: control (read@2048,1024B). Runtime 90 seconds [ 377.999606][ T1163] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.005034][ T94] block nbd1: Possible stuck request ffff8880251f9840: control (read@3072,1024B). Runtime 90 seconds [ 378.046067][T19807] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 378.073925][ T1163] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.157366][ T1163] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.188751][T19817] delete_channel: no stack [ 378.213657][ T1163] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.255671][ T1163] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.320088][ T1163] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.414850][T19827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3978'. [ 378.463486][T19827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3978'. [ 378.489492][T19827] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3978'. [ 378.808676][T19849] ip6gre0: Master is either lo or non-ether device [ 379.209092][T19875] tipc: New replicast peer: 0.0.0.0 [ 379.234872][T19875] tipc: Enabled bearer , priority 10 [ 379.257705][T19875] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 379.340346][T19878] pim6reg527: entered allmulticast mode [ 379.382997][T19887] netlink: 'syz.1.3994': attribute type 3 has an invalid length. [ 379.421520][T19887] netlink: 'syz.1.3994': attribute type 3 has an invalid length. [ 379.500841][T19897] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 379.533577][T19889] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.762346][T19918] netlink: 'syz.4.4002': attribute type 7 has an invalid length. [ 379.790447][T19918] netlink: 'syz.4.4002': attribute type 8 has an invalid length. [ 379.881867][T19933] netlink: 'syz.3.4001': attribute type 2 has an invalid length. [ 379.912076][T19933] netlink: 'syz.3.4001': attribute type 8 has an invalid length. [ 380.406389][T19954] __nla_validate_parse: 11 callbacks suppressed [ 380.406406][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4010'. [ 380.428810][T19957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.539825][T19963] netlink: 'syz.1.4012': attribute type 2 has an invalid length. [ 380.570289][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4013'. [ 380.582451][T19963] netlink: 119 bytes leftover after parsing attributes in process `syz.1.4012'. [ 380.644636][T19965] dvmrp1: entered allmulticast mode [ 380.805865][T19979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4019'. [ 380.821420][T19981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4018'. [ 380.876302][T19984] sctp: [Deprecated]: syz.1.4021 (pid 19984) Use of int in max_burst socket option deprecated. [ 380.876302][T19984] Use struct sctp_assoc_value instead [ 380.893557][T19982] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 380.903204][T19982] raw_sendmsg: syz.3.4020 forgot to set AF_INET. Fix it! [ 381.102763][T20003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4024'. [ 381.232704][T20007] veth1: entered promiscuous mode [ 381.259916][T20003] netem: change failed [ 381.348692][T20015] dvmrp1: left allmulticast mode [ 381.402337][T20019] netlink: 'syz.2.4030': attribute type 2 has an invalid length. [ 381.551181][T20028] netlink: 'syz.0.4031': attribute type 10 has an invalid length. [ 381.569307][T20031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4034'. [ 381.585601][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4032'. [ 381.606804][T20028] team0: Device dummy0 failed to register rx_handler [ 381.690482][T20036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4035'. [ 381.798114][T20034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4032'. [ 382.088071][T20053] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 382.311476][T20073] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20004 [ 383.699031][T20141] hsr_slave_0 (unregistering): left promiscuous mode [ 384.096846][T20170] syzkaller0: entered promiscuous mode [ 384.102505][T20170] syzkaller0: entered allmulticast mode [ 384.552860][T20199] Bluetooth: MGMT ver 1.23 [ 384.938219][T20226] validate_nla: 2 callbacks suppressed [ 384.938237][T20226] netlink: 'syz.3.4094': attribute type 1 has an invalid length. [ 384.982521][T20226] netlink: 'syz.3.4094': attribute type 1 has an invalid length. [ 385.027756][T20221] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 386.023157][T20285] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 386.062890][T20291] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 386.151977][T20288] __nla_validate_parse: 81 callbacks suppressed [ 386.151998][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 386.226191][T20288] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 386.654832][T20313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4113'. [ 386.919388][T20318] netlink: 'syz.1.4115': attribute type 13 has an invalid length. [ 386.951933][T20318] veth0_macvtap: left promiscuous mode [ 386.961440][T20318] macvtap0: entered allmulticast mode [ 386.989092][T20318] macvtap0: refused to change device tx_queue_len [ 387.278285][T20334] netlink: 'syz.3.4120': attribute type 83 has an invalid length. [ 387.691989][T20301] syz.0.4111: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 387.726314][T20301] CPU: 1 UID: 0 PID: 20301 Comm: syz.0.4111 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 387.726341][T20301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.726358][T20301] Call Trace: [ 387.726365][T20301] [ 387.726373][T20301] dump_stack_lvl+0x189/0x250 [ 387.726403][T20301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.726424][T20301] ? __pfx__printk+0x10/0x10 [ 387.726446][T20301] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 387.726472][T20301] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 387.726494][T20301] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 387.726517][T20301] warn_alloc+0x214/0x310 [ 387.726547][T20301] ? __pfx_warn_alloc+0x10/0x10 [ 387.726578][T20301] ? __get_vm_area_node+0x28f/0x300 [ 387.726600][T20301] ? hash_ipport_create+0x741/0x1410 [ 387.726628][T20301] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 387.726679][T20301] ? alloc_pages_mpol+0x3cd/0x4a0 [ 387.726703][T20301] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 387.726732][T20301] ? rcu_is_watching+0x15/0xb0 [ 387.726751][T20301] ? hash_ipport_create+0x741/0x1410 [ 387.726772][T20301] ? hash_ipport_create+0x741/0x1410 [ 387.726792][T20301] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 387.726814][T20301] ? hash_ipport_create+0x741/0x1410 [ 387.726836][T20301] ? hash_ipport_create+0x6d5/0x1410 [ 387.726862][T20301] hash_ipport_create+0x741/0x1410 [ 387.726884][T20301] ? __lock_acquire+0xab9/0xd20 [ 387.726922][T20301] ? __pfx_hash_ipport_create+0x10/0x10 [ 387.726948][T20301] ? __nla_parse+0x40/0x60 [ 387.726972][T20301] ? __pfx_hash_ipport_create+0x10/0x10 [ 387.726996][T20301] ip_set_create+0xa97/0x1940 [ 387.727018][T20301] ? ip_set_create+0x4a2/0x1940 [ 387.727049][T20301] ? __pfx_ip_set_create+0x10/0x10 [ 387.727066][T20301] ? __mutex_lock+0x5b6/0x1360 [ 387.727126][T20301] nfnetlink_rcv_msg+0xb4d/0x1130 [ 387.727148][T20301] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 387.727189][T20301] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 387.727207][T20301] ? kasan_save_free_info+0x46/0x50 [ 387.727279][T20301] netlink_rcv_skb+0x208/0x470 [ 387.727304][T20301] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 387.727327][T20301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.727363][T20301] ? bpf_lsm_capable+0x9/0x20 [ 387.727384][T20301] ? security_capable+0x7e/0x2e0 [ 387.727415][T20301] nfnetlink_rcv+0x26a/0x2520 [ 387.727440][T20301] ? __dev_queue_xmit+0x1d79/0x3b50 [ 387.727476][T20301] ? __dev_queue_xmit+0x27b/0x3b50 [ 387.727508][T20301] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 387.727529][T20301] ? __pfx___dev_queue_xmit+0x10/0x10 [ 387.727563][T20301] ? ref_tracker_free+0x63a/0x7d0 [ 387.727585][T20301] ? __asan_memcpy+0x40/0x70 [ 387.727604][T20301] ? __pfx_ref_tracker_free+0x10/0x10 [ 387.727643][T20301] ? skb_clone+0x246/0x3a0 [ 387.727664][T20301] ? __netlink_deliver_tap+0x807/0x850 [ 387.727687][T20301] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.727718][T20301] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.727749][T20301] netlink_unicast+0x82c/0x9e0 [ 387.727780][T20301] ? __pfx_netlink_unicast+0x10/0x10 [ 387.727803][T20301] ? netlink_sendmsg+0x642/0xb30 [ 387.727824][T20301] ? skb_put+0x11b/0x210 [ 387.727843][T20301] netlink_sendmsg+0x805/0xb30 [ 387.727877][T20301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.727903][T20301] ? aa_sock_msg_perm+0xf1/0x1d0 [ 387.727930][T20301] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.727947][T20301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.727972][T20301] __sock_sendmsg+0x219/0x270 [ 387.727997][T20301] ____sys_sendmsg+0x505/0x830 [ 387.728021][T20301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.728049][T20301] ? import_iovec+0x74/0xa0 [ 387.728073][T20301] ___sys_sendmsg+0x21f/0x2a0 [ 387.728093][T20301] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.728151][T20301] ? __fget_files+0x2a/0x420 [ 387.728166][T20301] ? __fget_files+0x3a0/0x420 [ 387.728193][T20301] __x64_sys_sendmsg+0x19b/0x260 [ 387.728213][T20301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.728242][T20301] ? rcu_is_watching+0x15/0xb0 [ 387.728265][T20301] ? do_syscall_64+0xbe/0x3b0 [ 387.728292][T20301] do_syscall_64+0xfa/0x3b0 [ 387.728313][T20301] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.728334][T20301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.728350][T20301] ? clear_bhb_loop+0x60/0xb0 [ 387.728369][T20301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.728386][T20301] RIP: 0033:0x7f838e38ebe9 [ 387.728403][T20301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.728417][T20301] RSP: 002b:00007f838f1bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.728435][T20301] RAX: ffffffffffffffda RBX: 00007f838e5b5fa0 RCX: 00007f838e38ebe9 [ 387.728452][T20301] RDX: 0000000000004020 RSI: 0000200000000280 RDI: 0000000000000004 [ 387.728462][T20301] RBP: 00007f838e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 387.728472][T20301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.728482][T20301] R13: 00007f838e5b6038 R14: 00007f838e5b5fa0 R15: 00007ffcbf9c66b8 [ 387.728509][T20301] [ 387.728520][T20301] Mem-Info: [ 387.808552][T20359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4127'. [ 387.852312][T20301] active_anon:4717 inactive_anon:0 isolated_anon:0 [ 387.852312][T20301] active_file:2948 inactive_file:39958 isolated_file:0 [ 387.852312][T20301] unevictable:768 dirty:127 writeback:0 [ 387.852312][T20301] slab_reclaimable:12646 slab_unreclaimable:136290 [ 387.852312][T20301] mapped:29240 shmem:1367 pagetables:1101 [ 387.852312][T20301] sec_pagetables:0 bounce:0 [ 387.852312][T20301] kernel_misc_reclaimable:0 [ 387.852312][T20301] free:1284349 free_pcp:14478 free_cma:0 [ 387.884318][T20357] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4126'. [ 387.889326][T20359] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4127'. [ 387.889345][T20359] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4127'. [ 387.925687][T20301] Node 0 active_anon:18992kB inactive_anon:0kB active_file:11792kB inactive_file:159636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116960kB dirty:496kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14804kB pagetables:4220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 387.944142][T20357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.989480][T20301] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 388.191629][T20371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4129'. [ 388.204141][T20301] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.432574][T20301] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 388.439136][T20369] veth1_to_bond: entered allmulticast mode [ 388.443642][T20301] Node 0 DMA32 free:1230012kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19044kB inactive_anon:0kB active_file:11792kB inactive_file:158056kB unevictable:1536kB writepending:496kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:38908kB local_pcp:21364kB free_cma:0kB [ 388.479057][T20301] lowmem_reserve[]: 0 0 1 1 1 [ 388.483961][T20301] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 388.516590][T20301] lowmem_reserve[]: 0 0 0 0 0 [ 388.521538][T20301] Node 1 Normal free:3892412kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18496kB local_pcp:10016kB free_cma:0kB [ 388.571783][T20301] lowmem_reserve[]: 0 0 0 0 0 [ 388.578707][T20301] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 388.594746][T20301] Node 0 DMA32: 1411*4kB (UME) 467*8kB (UM) 279*16kB (UM) 143*32kB (UME) 59*64kB (UME) 48*128kB (UME) 33*256kB (UME) 6*512kB (ME) 3*1024kB (UM) 1*2048kB (M) 290*4096kB (M) = 1232820kB [ 388.633078][T20301] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 388.663001][T20377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4131'. [ 388.663332][T20301] Node 1 Normal: 215*4kB (UM) 48*8kB (UME) 42*16kB (UME) 148*32kB (UME) 51*64kB (UME) 6*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3892412kB [ 388.693101][T20371] veth1_to_bond (unregistering): left allmulticast mode [ 388.705094][T20301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.721430][T20301] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 388.732143][T20301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.742851][T20301] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 388.755654][T20301] 44295 total pagecache pages [ 388.760431][T20301] 0 pages in swap cache [ 388.764900][T20301] Free swap = 124996kB [ 388.769501][T20301] Total swap = 124996kB [ 388.773864][T20301] 2097051 pages RAM [ 388.777955][T20301] 0 pages HighMem/MovableOnly [ 388.782745][T20301] 425656 pages reserved [ 388.788111][T20301] 0 pages cma reserved [ 389.023785][T20395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4134'. [ 389.442264][T20398] vlan2: entered allmulticast mode [ 389.450738][T20398] veth0_to_batadv: entered allmulticast mode [ 389.878444][T20419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4142'. [ 389.955648][T20424] sctp: [Deprecated]: syz.3.4145 (pid 20424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.955648][T20424] Use struct sctp_sack_info instead [ 390.940218][T20452] tipc: Enabled bearer , priority 0 [ 390.957396][T20452] syzkaller0: entered promiscuous mode [ 390.962892][T20452] syzkaller0: entered allmulticast mode [ 391.075145][T20452] tipc: Resetting bearer [ 391.307079][T20451] tipc: Resetting bearer [ 391.427072][T20451] tipc: Disabling bearer [ 391.542158][T20478] netlink: 'syz.3.4162': attribute type 11 has an invalid length. [ 391.569854][T20478] __nla_validate_parse: 5 callbacks suppressed [ 391.569872][T20478] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4162'. [ 391.895859][T20493] netlink: 'syz.1.4167': attribute type 1 has an invalid length. [ 391.903617][T20493] netlink: 'syz.1.4167': attribute type 2 has an invalid length. [ 391.955154][T20493] netlink: 'syz.1.4167': attribute type 1 has an invalid length. [ 392.171859][T20509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4172'. [ 392.182422][T20509] netlink: 'syz.3.4172': attribute type 7 has an invalid length. [ 392.208911][T20509] netlink: 'syz.3.4172': attribute type 8 has an invalid length. [ 392.217888][T20509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4172'. [ 392.302643][T20509] gretap0: entered promiscuous mode [ 392.316657][T20509] batadv_slave_1: entered promiscuous mode [ 392.332279][T20509] erspan0: entered promiscuous mode [ 392.342762][T20509] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 392.364018][T20509] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.385153][T20509] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 392.481763][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4174'. [ 392.716169][T20532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4177'. [ 392.831063][T20532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4177'. [ 393.101740][T20546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4182'. [ 393.268816][T20558] tipc: Enabled bearer , priority 0 [ 393.309235][T20556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4182'. [ 393.375018][T20558] tipc: Disabling bearer [ 393.419926][T20546] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 393.449837][T20546] bond4: (slave vcan1): Error -95 calling set_mac_address [ 393.450486][T20262] Set syz1 is full, maxelem 65536 reached [ 393.601692][T20573] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4188'. [ 393.988288][T20606] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4199'. [ 394.156692][T20620] tipc: Enabling of bearer rejected, failed to enable media [ 394.267949][T20629] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 394.297640][T20629] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 395.476209][T20661] 8021q: VLANs not supported on lo [ 395.866800][ T55] block nbd2: Possible stuck request ffff888025220000: control (read@0,1024B). Runtime 240 seconds [ 395.878611][ T55] block nbd2: Possible stuck request ffff8880252201c0: control (read@1024,1024B). Runtime 240 seconds [ 395.890853][ T55] block nbd2: Possible stuck request ffff888025220380: control (read@2048,1024B). Runtime 240 seconds [ 395.902111][ T55] block nbd2: Possible stuck request ffff888025220540: control (read@3072,1024B). Runtime 240 seconds [ 396.323936][T20705] netlink: 'syz.3.4227': attribute type 27 has an invalid length. [ 396.368096][T20705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.416175][T20705] ip6tnl1: entered promiscuous mode [ 396.428070][T20705] ip6tnl1: entered allmulticast mode [ 396.512023][T20711] netlink: 'syz.0.4230': attribute type 11 has an invalid length. [ 396.671007][T20719] openvswitch: netlink: Missing key (keys=40, expected=80) [ 396.689386][T20719] __nla_validate_parse: 5 callbacks suppressed [ 396.689403][T20719] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4233'. [ 396.717800][T20719] xt_socket: unknown flags 0xd0 [ 396.728491][T20719] netlink: 'syz.0.4233': attribute type 1 has an invalid length. [ 397.004343][T20740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4238'. [ 397.029403][T20744] netlink: 'syz.2.4240': attribute type 10 has an invalid length. [ 397.097582][T20748] netlink: 'syz.2.4240': attribute type 10 has an invalid length. [ 397.103294][T20745] netlink: 'syz.2.4240': attribute type 10 has an invalid length. [ 397.141597][T20744] team0: Port device dummy0 added [ 397.190580][T20748] team0: Port device dummy0 removed [ 397.249568][T20748] `: (slave dummy0): Enslaving as an active interface with an up link [ 397.283056][T20747] tipc: Enabled bearer , priority 0 [ 397.308760][T20754] tipc: Resetting bearer [ 397.351581][T20746] tipc: Disabling bearer [ 397.433150][T20762] tipc: Enabled bearer , priority 0 [ 397.462943][T20762] syzkaller0: entered promiscuous mode [ 397.474531][T20762] syzkaller0: entered allmulticast mode [ 397.555013][T20762] tipc: Resetting bearer [ 397.569501][T20772] hsr0 speed is unknown, defaulting to 1000 [ 397.580713][T20761] tipc: Resetting bearer [ 397.619295][T20761] tipc: Disabling bearer [ 397.923737][T20783] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4252'. [ 397.955886][T20783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4252'. [ 397.969710][T20790] veth0: entered promiscuous mode [ 398.011561][T20790] veth0: left promiscuous mode [ 398.053028][T20795] tipc: Enabled bearer , priority 10 [ 398.717089][T20826] openvswitch: netlink: Key type 85 is out of range max 32 [ 398.758838][T20825] tipc: Bearer : already 2 bearers with priority 10 [ 398.776856][T20825] tipc: Bearer : trying with adjusted priority [ 398.822845][T20825] tipc: Enabled bearer , priority 9 [ 399.773602][T20860] tipc: Enabling of bearer rejected, already enabled [ 399.790270][T20860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4272'. [ 399.800544][T20860] chnl_net:caif_netlink_parms(): no params data found [ 399.949817][T20867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4272'. [ 400.076180][T20871] netlink: 'syz.3.4276': attribute type 1 has an invalid length. [ 400.102504][T20880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4277'. [ 400.211217][T20871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.289428][T20876] bond5: (slave geneve2): making interface the new active one [ 400.298857][T20876] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 400.359187][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.395980][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.473234][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.497950][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.629596][T20894] tipc: Enabled bearer , priority 0 [ 400.658587][T20893] netlink: 'syz.1.4283': attribute type 4 has an invalid length. [ 400.666182][T20894] geneve0: entered promiscuous mode [ 400.694486][T20894] tipc: Resetting bearer [ 400.736714][T20899] pim6reg527: entered allmulticast mode [ 400.746523][T20903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4284'. [ 400.837693][T20900] tipc: Disabling bearer [ 400.891059][T20911] netlink: 'syz.4.4285': attribute type 10 has an invalid length. [ 400.914497][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4286'. [ 400.935794][T20909] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 400.943521][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4286'. [ 401.177374][T20926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.209156][T20929] netlink: 'syz.1.4293': attribute type 1 has an invalid length. [ 401.350039][T20936] bond2 (unregistering): Released all slaves [ 401.457290][T20942] bond2: (slave gretap2): making interface the new active one [ 401.466430][T20942] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 401.498353][T20952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.712712][T20967] netlink: 'syz.2.4301': attribute type 4 has an invalid length. [ 401.865753][T20976] __nla_validate_parse: 68 callbacks suppressed [ 401.865770][T20976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4299'. [ 402.099522][T20986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4303'. [ 402.137499][T20986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4303'. [ 402.254698][T20986] bond0: (slave bridge_slave_1): Releasing backup interface [ 402.756755][T21014] tipc: Enabled bearer , priority 0 [ 402.898862][T21013] tipc: Disabling bearer [ 403.109553][T21034] netlink: 'syz.1.4321': attribute type 1 has an invalid length. [ 403.495937][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4326'. [ 403.557392][T21057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.119898][T21084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4332'. [ 404.130251][T21084] openvswitch: netlink: Flow key attr not present in new flow. [ 404.145133][T21084] openvswitch: netlink: Flow key attr not present in new flow. [ 404.451400][T21094] netlink: 'syz.1.4335': attribute type 4 has an invalid length. [ 404.617997][T21100] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 405.149105][T21115] netlink: 'syz.4.4342': attribute type 10 has an invalid length. [ 405.166524][T21115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4342'. [ 405.260087][T21115] team0: Port device geneve0 added [ 405.668103][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4349'. [ 405.678134][T21140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4350'. [ 405.731998][T21139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4349'. [ 405.845918][T21150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4352'. [ 406.170602][T21172] ip6gretap0: entered promiscuous mode [ 406.882866][T21215] __nla_validate_parse: 9 callbacks suppressed [ 406.882886][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4368'. [ 406.911757][T21213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4368'. [ 406.955898][T21213] bridge_slave_1: left allmulticast mode [ 406.961577][T21213] bridge_slave_1: left promiscuous mode [ 407.003281][T21223] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4370'. [ 407.005545][T21213] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.060077][T21213] bridge_slave_0: left allmulticast mode [ 407.069101][T21213] bridge_slave_0: left promiscuous mode [ 407.075283][T21213] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.166947][T21228] lo: entered promiscuous mode [ 407.179724][T21228] netlink: 'syz.3.4372': attribute type 2 has an invalid length. [ 407.188216][T21228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.223296][T21229] netlink: 'syz.1.4371': attribute type 11 has an invalid length. [ 407.386635][T21237] netlink: 'syz.3.4374': attribute type 1 has an invalid length. [ 407.450251][T21246] netlink: 'syz.4.4378': attribute type 1 has an invalid length. [ 407.457310][T21237] bond6: entered promiscuous mode [ 407.463494][T21237] 8021q: adding VLAN 0 to HW filter on device bond6 [ 407.472596][T21246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.556604][T21250] 8021q: adding VLAN 0 to HW filter on device bond6 [ 407.587423][T21250] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 407.601719][T21250] bond6: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 407.618953][T21256] netlink: 'syz.3.4374': attribute type 11 has an invalid length. [ 407.628534][T21256] netlink: 'syz.3.4374': attribute type 11 has an invalid length. [ 407.641435][T21250] bond6: (slave wireguard1): making interface the new active one [ 407.651823][T21256] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4374'. [ 407.662377][T21250] wireguard1: entered promiscuous mode [ 407.673163][T21250] bond6: (slave wireguard1): Enslaving as an active interface with an up link [ 407.872247][T21263] syzkaller1: entered promiscuous mode [ 407.930261][T21263] syzkaller1: entered allmulticast mode [ 407.983336][T21263] syzkaller0: entered promiscuous mode [ 407.989106][T21263] syzkaller0: entered allmulticast mode [ 408.004532][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4381'. [ 408.027451][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4382'. [ 408.046159][ T94] block nbd1: Possible stuck request ffff8880251f9300: control (read@0,1024B). Runtime 120 seconds [ 408.057345][ T94] block nbd1: Possible stuck request ffff8880251f94c0: control (read@1024,1024B). Runtime 120 seconds [ 408.069570][ T94] block nbd1: Possible stuck request ffff8880251f9680: control (read@2048,1024B). Runtime 120 seconds [ 408.080778][ T94] block nbd1: Possible stuck request ffff8880251f9840: control (read@3072,1024B). Runtime 120 seconds [ 408.477327][T21292] netlink: 'syz.2.4389': attribute type 1 has an invalid length. [ 408.485271][T21292] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4389'. [ 408.494425][T21292] netlink: 'syz.2.4389': attribute type 1 has an invalid length. [ 408.539687][T21295] netlink: 'syz.2.4389': attribute type 32 has an invalid length. [ 408.573501][T21295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4389'. [ 408.612631][T21295] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 408.613121][T21297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4390'. [ 408.672876][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4390'. [ 408.797353][T21308] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 408.826085][T21308] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 409.793282][T21355] netlink: 'syz.0.4407': attribute type 1 has an invalid length. [ 410.144501][T21369] bond0: (slave bond_slave_0): Releasing backup interface [ 410.210132][T21369] bond0: (slave bond_slave_1): Releasing backup interface [ 410.264274][T21369] team0: Port device team_slave_0 removed [ 410.294442][T21369] team0: Port device team_slave_1 removed [ 410.326313][T21369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.333731][T21369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.380149][T21369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.389731][T21369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.479247][T21385] openvswitch: netlink: Tunnel attr 64 out of range max 16 [ 410.610669][T21391] netlink: 'syz.3.4419': attribute type 1 has an invalid length. [ 410.768734][T21397] netlink: 'syz.2.4421': attribute type 11 has an invalid length. [ 410.817206][T21391] 8021q: adding VLAN 0 to HW filter on device bond7 [ 411.119292][T21413] syzkaller1: entered promiscuous mode [ 411.124807][T21413] syzkaller1: entered allmulticast mode [ 411.326384][T21430] netlink: 'syz.0.4427': attribute type 21 has an invalid length. [ 411.833635][T21457] netlink: 'syz.4.4437': attribute type 1 has an invalid length. [ 412.012374][T21466] veth3: entered promiscuous mode [ 412.302679][T21467] syzkaller0: entered promiscuous mode [ 412.323088][T21467] syzkaller0: entered allmulticast mode [ 412.367900][T21491] __nla_validate_parse: 3 callbacks suppressed [ 412.367919][T21491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4444'. [ 414.064881][T21503] veth0_to_team: entered promiscuous mode [ 414.074852][T21503] veth0_to_team: entered allmulticast mode [ 414.247411][T21522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4452'. [ 414.406778][T21539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4453'. [ 414.455907][T21541] netlink: 'syz.3.4456': attribute type 1 has an invalid length. [ 414.573179][T21553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4458'. [ 414.628529][T21541] 8021q: adding VLAN 0 to HW filter on device bond8 [ 414.694687][T21559] openvswitch: netlink: Flow key attribute not present in set flow. [ 414.831699][T21564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4461'. [ 415.019765][T21564] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 415.044917][T21578] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4466'. [ 415.064058][T21564] syzkaller0: entered promiscuous mode [ 415.072372][T21578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4466'. [ 415.089835][T21564] syzkaller0: entered allmulticast mode [ 415.156041][T21586] nbd: nbd1 already in use [ 415.424393][T21595] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4471'. [ 415.483327][T21595] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4471'. [ 415.613814][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4475'. [ 416.007214][T21638] netlink: 'syz.3.4484': attribute type 27 has an invalid length. [ 416.024298][T21639] netlink: 'syz.3.4484': attribute type 27 has an invalid length. [ 416.187658][T21655] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 416.206262][T21655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.508151][T21663] veth0_to_bridge: entered promiscuous mode [ 416.525845][T21662] veth0_to_bridge: left promiscuous mode [ 416.850784][T21686] xfrm1: entered allmulticast mode [ 417.170913][T21706] netlink: 'syz.0.4506': attribute type 21 has an invalid length. [ 417.179913][T21706] IPv6: NLM_F_CREATE should be specified when creating new route [ 417.188240][T21706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.195575][T21706] IPv6: NLM_F_CREATE should be set when creating new route [ 417.203350][T21706] IPv6: NLM_F_CREATE should be set when creating new route [ 417.210718][T21706] IPv6: NLM_F_CREATE should be set when creating new route [ 417.354825][T21716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.426053][T21719] __nla_validate_parse: 12 callbacks suppressed [ 417.426073][T21719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4509'. [ 417.452506][T21721] syz_tun: entered allmulticast mode [ 417.480726][T21721] syz_tun: left allmulticast mode [ 417.799135][T21737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4513'. [ 417.823537][T21737] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 417.844326][T21739] netlink: 'syz.0.4514': attribute type 39 has an invalid length. [ 418.194650][T21758] netlink: 'syz.0.4521': attribute type 10 has an invalid length. [ 418.211386][T21759] netlink: 'syz.0.4521': attribute type 10 has an invalid length. [ 418.267685][T21758] team0: Device dummy0 failed to register rx_handler [ 418.485094][T21774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4525'. [ 418.485175][T21772] netlink: 'syz.0.4524': attribute type 2 has an invalid length. [ 418.534039][T21765] syzkaller1: entered promiscuous mode [ 418.562315][T21765] syzkaller1: entered allmulticast mode [ 418.574265][T21774] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 418.592846][T21772] netlink: 'syz.0.4524': attribute type 6 has an invalid length. [ 418.593017][T21774] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 418.870438][T21790] bond3: entered promiscuous mode [ 418.876675][T21790] bond3: entered allmulticast mode [ 418.882301][T21790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 419.014670][T21799] netlink: 'syz.3.4531': attribute type 23 has an invalid length. [ 419.094627][T21790] bond3 (unregistering): Released all slaves [ 419.273950][T21803] netlink: zone id is out of range [ 419.281143][T21803] netlink: zone id is out of range [ 419.308959][T21803] netlink: zone id is out of range [ 419.314489][T21803] netlink: zone id is out of range [ 419.326411][T21803] netlink: zone id is out of range [ 419.374724][T21803] netlink: zone id is out of range [ 419.386457][T21803] netlink: zone id is out of range [ 419.529791][T21809] 8021q: adding VLAN 0 to HW filter on device bond10 [ 419.539404][T21809] bond0: (slave bond10): Enslaving as an active interface with an up link [ 419.832080][T21835] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4541'. [ 420.047516][T21851] tipc: Enabled bearer , priority 0 [ 420.053997][T21853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4546'. [ 420.055030][T21846] syzkaller0: entered promiscuous mode [ 420.073353][T21846] syzkaller0: entered allmulticast mode [ 420.169273][T21859] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4543'. [ 420.198851][T21851] tipc: Resetting bearer [ 420.234542][T21849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4543'. [ 420.253679][T21851] tipc: Disabling bearer [ 420.863566][T21897] netlink: 'syz.2.4558': attribute type 1 has an invalid length. [ 420.871745][T21897] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4558'. [ 420.974158][T21899] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4559'. [ 420.994030][T21905] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4562'. [ 421.123406][T21908] tipc: Started in network mode [ 421.135751][T21908] tipc: Node identity 0e5b39f28d4f, cluster identity 4711 [ 421.150630][T21908] tipc: Enabled bearer , priority 0 [ 421.180209][T21908] syzkaller0: entered promiscuous mode [ 421.193643][T21908] syzkaller0: entered allmulticast mode [ 421.205953][T21914] net_ratelimit: 11 callbacks suppressed [ 421.205972][T21914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.262995][T21907] tipc: Resetting bearer [ 421.292380][T21907] tipc: Disabling bearer [ 421.559015][T21929] netlink: 'syz.1.4569': attribute type 4 has an invalid length. [ 421.689716][T21937] netlink: 'syz.1.4572': attribute type 9 has an invalid length. [ 421.702006][T21935] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 421.712058][T21936] netlink: 'syz.1.4572': attribute type 9 has an invalid length. [ 421.898752][T21947] netlink: 'syz.2.4576': attribute type 10 has an invalid length. [ 421.981728][T21947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.205419][T21961] veth0: entered promiscuous mode [ 422.236840][T21958] veth0: left promiscuous mode [ 422.508125][T21974] tipc: Enabled bearer , priority 0 [ 422.552713][T21985] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 422.649835][T21990] __nla_validate_parse: 3 callbacks suppressed [ 422.649853][T21990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4590'. [ 422.778736][T21999] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 422.964635][T21976] tipc: Disabling bearer [ 423.003297][T22016] macvlan2: entered allmulticast mode [ 423.012962][T22016] bond0: (slave macvlan2): Opening slave failed [ 423.076614][T22021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.105070][T22022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4599'. [ 423.208209][T22029] netlink: 'syz.3.4600': attribute type 1 has an invalid length. [ 423.237862][T22032] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4601'. [ 423.407277][T22040] netlink: 'syz.2.4603': attribute type 10 has an invalid length. [ 423.504187][T22044] netlink: 'syz.3.4604': attribute type 1 has an invalid length. [ 423.519395][T22044] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4604'. [ 423.669308][T22044] netlink: 'syz.3.4604': attribute type 1 has an invalid length. [ 423.690547][T22044] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4604'. [ 423.726451][T22044] netlink: 'syz.3.4604': attribute type 1 has an invalid length. [ 423.738649][T22044] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4604'. [ 423.782619][T22044] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4604'. [ 423.831528][T22044] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4604'. [ 423.848834][T22044] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4604'. [ 423.864567][T22063] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4609'. [ 424.047903][T22067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 424.055176][T22067] IPv6: NLM_F_CREATE should be set when creating new route [ 424.071752][T22071] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 424.443981][T22097] team_slave_0: entered promiscuous mode [ 424.449770][T22097] team_slave_1: entered promiscuous mode [ 424.455593][T22097] geneve0: entered promiscuous mode [ 424.473200][T22097] macsec2: entered promiscuous mode [ 424.520303][T22097] team0: entered promiscuous mode [ 424.537649][T22097] macsec2: entered allmulticast mode [ 424.548009][T22097] team0: entered allmulticast mode [ 424.553263][T22097] team_slave_0: entered allmulticast mode [ 424.562419][T22097] team_slave_1: entered allmulticast mode [ 424.573944][T22097] geneve0: entered allmulticast mode [ 424.584477][T22097] team0: Device macsec2 is already an upper device of the team interface [ 424.610594][T22097] team0: left allmulticast mode [ 424.624399][T22097] team_slave_0: left allmulticast mode [ 424.630071][T22097] team_slave_1: left allmulticast mode [ 424.638977][T22097] geneve0: left allmulticast mode [ 424.644040][T22097] team0: left promiscuous mode [ 424.650064][T22097] team_slave_0: left promiscuous mode [ 424.655511][T22097] team_slave_1: left promiscuous mode [ 424.661056][T22097] geneve0: left promiscuous mode [ 425.366232][T22145] hsr0 speed is unknown, defaulting to 1000 [ 425.946261][ T55] block nbd2: Possible stuck request ffff888025220000: control (read@0,1024B). Runtime 270 seconds [ 425.957821][ T55] block nbd2: Possible stuck request ffff8880252201c0: control (read@1024,1024B). Runtime 270 seconds [ 425.969030][ T55] block nbd2: Possible stuck request ffff888025220380: control (read@2048,1024B). Runtime 270 seconds [ 425.980800][ T55] block nbd2: Possible stuck request ffff888025220540: control (read@3072,1024B). Runtime 270 seconds [ 426.020236][T22183] team_slave_0: entered promiscuous mode [ 426.025981][T22183] team_slave_1: entered promiscuous mode [ 426.031688][T22183] geneve0: entered promiscuous mode [ 426.283321][T22194] validate_nla: 65 callbacks suppressed [ 426.283339][T22194] netlink: 'syz.1.4642': attribute type 12 has an invalid length. [ 426.514701][T22200] syzkaller1: entered promiscuous mode [ 426.549582][T22200] syzkaller1: entered allmulticast mode [ 426.922734][T22218] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 427.034968][T22226] netlink: 'syz.1.4653': attribute type 2 has an invalid length. [ 427.077180][T22228] netlink: 'syz.4.4654': attribute type 10 has an invalid length. [ 427.083981][T22219] syz_tun (unregistering): left allmulticast mode [ 427.102186][T22219] syz_tun (unregistering): left promiscuous mode [ 427.116055][T22219] bridge0: port 3(syz_tun) entered disabled state [ 427.144487][T22228] bond0: (slave wlan1): Opening slave failed [ 427.784883][T22267] veth0: entered promiscuous mode [ 427.810821][T22266] veth0: left promiscuous mode [ 427.943900][T22277] netlink: 'syz.1.4667': attribute type 6 has an invalid length. [ 427.973213][T22275] netlink: 'syz.3.4666': attribute type 39 has an invalid length. [ 428.374612][T22297] __nla_validate_parse: 72 callbacks suppressed [ 428.374629][T22297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4674'. [ 428.590446][T22310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4678'. [ 428.733064][T22310] bond0: entered promiscuous mode [ 428.770308][T22310] batadv0: entered promiscuous mode [ 428.798033][T22310] debugfs: 'hsr1' already exists in 'hsr' [ 428.808544][T22310] Cannot create hsr debugfs directory [ 428.832601][T22310] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 428.861722][T22310] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 428.889935][T22310] hsr1: entered allmulticast mode [ 428.920914][T22310] bond0: entered allmulticast mode [ 428.928596][T22310] batadv0: entered allmulticast mode [ 428.941817][T22310] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 428.962082][T22310] bond0: left promiscuous mode [ 428.971928][T22310] batadv0: left promiscuous mode [ 429.056756][T22347] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4686'. [ 429.184856][T22352] netlink: 'syz.0.4687': attribute type 1 has an invalid length. [ 429.207619][T22352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4687'. [ 429.357337][T22360] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4690'. [ 429.598502][T22380] tipc: Enabled bearer , priority 0 [ 429.820915][T22380] syzkaller0: entered promiscuous mode [ 429.826635][T22380] syzkaller0: entered allmulticast mode [ 430.073755][T22412] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4702'. [ 431.614579][T22397] netlink: 'syz.1.4697': attribute type 29 has an invalid length. [ 431.710684][T22389] tipc: Resetting bearer [ 431.792922][T22389] tipc: Disabling bearer [ 432.032630][T22436] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4710'. [ 432.061354][T22433] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4708'. [ 432.320680][T22436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.334918][T22436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.354599][T22436] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 432.374204][T22436] bond0 (unregistering): Released all slaves [ 432.628324][T22460] net veth1_virt_wifi .: renamed from virt_wifi0 [ 432.636516][T22463] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 432.823669][T22473] rdma_rxe: rxe_newlink: failed to add lo [ 433.031411][T22484] hsr0: entered promiscuous mode [ 433.043068][T22484] hsr0: entered allmulticast mode [ 433.052230][T22484] hsr_slave_0: entered allmulticast mode [ 433.063385][T22484] hsr_slave_1: entered allmulticast mode [ 433.422776][T22504] team0: No ports can be present during mode change [ 433.545828][T22508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4734'. [ 433.557722][T22510] tipc: Enabled bearer , priority 0 [ 433.571880][T22506] syzkaller0: entered promiscuous mode [ 433.584691][T22506] syzkaller0: entered allmulticast mode [ 433.700365][T22525] netlink: 'syz.1.4738': attribute type 3 has an invalid length. [ 433.709339][T22525] netlink: 'syz.1.4738': attribute type 1 has an invalid length. [ 433.724267][T22510] tipc: Resetting bearer [ 433.767058][T22505] tipc: Resetting bearer [ 433.807121][T22505] tipc: Disabling bearer [ 433.826209][T22530] veth0: entered promiscuous mode [ 433.832354][T22529] veth0: left promiscuous mode [ 433.991851][T22541] sctp: [Deprecated]: syz.3.4744 (pid 22541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.991851][T22541] Use struct sctp_sack_info instead [ 434.007576][T22545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4745'. [ 434.213060][T22554] tipc: Enabled bearer , priority 0 [ 434.230300][T22555] syzkaller0: entered promiscuous mode [ 434.238956][T22555] syzkaller0: entered allmulticast mode [ 434.303958][T22555] tipc: Resetting bearer [ 434.338927][T22555] tipc: Disabling bearer [ 434.355177][T22564] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4751'. [ 434.507530][T22577] netlink: 'syz.3.4753': attribute type 29 has an invalid length. [ 434.565575][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4753'. [ 434.632934][T22585] netlink: 'syz.3.4753': attribute type 29 has an invalid length. [ 434.676270][T22592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4757'. [ 434.696852][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4753'. [ 434.916045][T22601] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 435.046200][T22613] netlink: 'syz.1.4764': attribute type 1 has an invalid length. [ 435.114268][T22613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.144299][T22613] vlan3: entered promiscuous mode [ 435.150476][T22613] bond3: entered promiscuous mode [ 435.156301][T22613] vlan3: entered allmulticast mode [ 435.161918][T22613] bond3: entered allmulticast mode [ 435.162726][T22616] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4765'. [ 435.331996][T22632] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4767'. [ 435.390181][T22633] netlink: 'syz.2.4767': attribute type 2 has an invalid length. [ 435.410500][T22633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4767'. [ 435.501169][T22637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4770'. [ 435.680104][T22647] tipc: Enabling of bearer rejected, failed to enable media [ 435.819356][T22657] C: renamed from lo (while UP) [ 435.984070][T22667] nbd: nbd3 already in use [ 436.379627][T22690] netlink: 'syz.3.4786': attribute type 8 has an invalid length. [ 437.064591][T22733] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 437.890568][T22789] syz_tun: entered promiscuous mode [ 437.899880][T22789] syz_tun: entered allmulticast mode [ 438.153813][ T94] block nbd1: Possible stuck request ffff8880251f9300: control (read@0,1024B). Runtime 150 seconds [ 438.165472][ T94] block nbd1: Possible stuck request ffff8880251f94c0: control (read@1024,1024B). Runtime 150 seconds [ 438.176671][ T94] block nbd1: Possible stuck request ffff8880251f9680: control (read@2048,1024B). Runtime 150 seconds [ 438.188284][ T94] block nbd1: Possible stuck request ffff8880251f9840: control (read@3072,1024B). Runtime 150 seconds [ 438.201469][T22806] netlink: 'syz.3.4821': attribute type 1 has an invalid length. [ 438.923974][T22797] geneve2: left promiscuous mode [ 438.938824][T22797] vlan2: left allmulticast mode [ 438.944961][T22797] mac80211_hwsim hwsim40 wlan0: left allmulticast mode [ 438.962416][T22797] xfrm1: left allmulticast mode [ 438.985687][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.015969][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.036486][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.065299][ T1163] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.207043][T22816] __nla_validate_parse: 10 callbacks suppressed [ 439.207061][T22816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4824'. [ 439.234202][T22826] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 439.247718][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4826'. [ 439.502714][T22844] rdma_rxe: rxe_newlink: failed to add lo [ 439.590343][T22853] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4833'. [ 439.596042][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4834'. [ 439.620409][T22852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4832'. [ 439.912342][T22873] netlink: 'syz.3.4839': attribute type 15 has an invalid length. [ 439.937931][T22873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4839'. [ 440.216095][T22890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4846'. [ 440.258230][T22890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4846'. [ 440.307251][T22897] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4848'. [ 440.990496][T22932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 441.003621][T22932] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 441.013068][T22932] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 441.151365][T22937] netlink: 'syz.0.4860': attribute type 8 has an invalid length. [ 441.380882][T22954] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 441.654494][T22971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 442.115824][T22998] netlink: 'syz.1.4878': attribute type 1 has an invalid length. [ 442.231387][T22998] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.348903][T23062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.394415][T23061] netlink: 'syz.1.4898': attribute type 8 has an invalid length. [ 443.714134][T23076] gretap0: entered promiscuous mode [ 443.771801][T23083] netlink: 'syz.1.4906': attribute type 7 has an invalid length. [ 443.791322][T23078] team0: Device gtp0 is up. Set it down before adding it as a team port [ 443.910093][T23083] : entered promiscuous mode [ 444.152453][T23095] openvswitch: netlink: Flow key attr not present in new flow. [ 444.419255][T23102] bridge8: entered promiscuous mode [ 444.452743][T23102] bridge8: entered allmulticast mode [ 444.514844][T23106] gtp0: entered promiscuous mode [ 444.539504][T23106] gtp0: entered allmulticast mode [ 444.594137][T23113] __nla_validate_parse: 16 callbacks suppressed [ 444.594153][T23113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4913'. [ 444.641204][T23115] netlink: 'syz.3.4914': attribute type 11 has an invalid length. [ 445.145201][T23147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4925'. [ 445.250138][T23155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4928'. [ 445.254697][T23149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4924'. [ 445.307711][T23149] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 445.670132][T23182] netlink: 'syz.1.4933': attribute type 11 has an invalid length. [ 445.905161][T23194] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4938'. [ 445.930174][T23195] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4938'. [ 446.595994][T23220] tipc: Enabling of bearer rejected, failed to enable media [ 446.618983][T23225] netlink: 'syz.1.4944': attribute type 1 has an invalid length. [ 446.636103][T23225] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4944'. [ 446.674374][T23225] netlink: 41 bytes leftover after parsing attributes in process `syz.1.4944'. [ 446.688417][T23230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4943'. [ 446.714518][T23232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4947'. [ 446.934031][T23238] syzkaller0: entered promiscuous mode [ 446.959568][T23238] syzkaller0: entered allmulticast mode [ 447.397884][T23259] netlink: 'syz.1.4958': attribute type 8 has an invalid length. [ 448.001258][T23300] netlink: 'syz.0.4971': attribute type 9 has an invalid length. [ 448.023723][T23300] sctp: [Deprecated]: syz.0.4971 (pid 23300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.023723][T23300] Use struct sctp_sack_info instead [ 448.175087][T23310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.197290][T23309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.540058][T23323] sctp: [Deprecated]: syz.1.4978 (pid 23323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.540058][T23323] Use struct sctp_sack_info instead [ 448.599760][T23330] netlink: 'syz.2.4980': attribute type 21 has an invalid length. [ 448.992736][T23352] veth7: entered allmulticast mode [ 449.114326][T23356] netlink: 'syz.1.4984': attribute type 10 has an invalid length. [ 449.127292][T23356] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.136240][T23356] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.174122][T23356] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.181544][T23356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.189645][T23356] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.196844][T23356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.222700][T23356] bridge0: entered promiscuous mode [ 449.239500][T23356] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 449.448587][T23371] pim6reg: entered allmulticast mode [ 449.573562][T23374] ipvlan2: entered promiscuous mode [ 449.593453][T23374] bridge0: port 1(ipvlan2) entered blocking state [ 449.613846][T23374] bridge0: port 1(ipvlan2) entered disabled state [ 449.633331][T23374] ipvlan2: entered allmulticast mode [ 449.640780][T23374] bridge0: entered allmulticast mode [ 449.661355][T23374] ipvlan2: left allmulticast mode [ 449.679000][T23374] bridge0: left allmulticast mode [ 449.796742][T23378] pim6reg: left allmulticast mode [ 449.925159][T23382] __nla_validate_parse: 7 callbacks suppressed [ 449.925178][T23382] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4992'. [ 449.981110][T23382] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 450.618096][T23418] netlink: 'syz.0.5002': attribute type 1 has an invalid length. [ 450.645411][T23418] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5002'. [ 450.674977][T23418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5002'. [ 450.786390][T23426] netlink: 'syz.4.5006': attribute type 1 has an invalid length. [ 450.796188][T23426] netlink: 'syz.4.5006': attribute type 2 has an invalid length. [ 450.821689][T23426] netlink: 'syz.4.5006': attribute type 2 has an invalid length. [ 450.844252][T23426] netlink: 'syz.4.5006': attribute type 1 has an invalid length. [ 450.901935][T23426] netlink: 'syz.4.5006': attribute type 1 has an invalid length. [ 450.931500][T23426] netlink: 'syz.4.5006': attribute type 2 has an invalid length. [ 451.149912][ T6027] IPVS: starting estimator thread 0... [ 451.209700][T23451] netlink: 'syz.2.5013': attribute type 1 has an invalid length. [ 451.246239][T23445] IPVS: using max 33 ests per chain, 79200 per kthread [ 451.402764][T23450] gretap2: entered promiscuous mode [ 451.453489][T23450] bond3: (slave gretap2): making interface the new active one [ 451.492965][T23450] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 451.595850][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5015'. [ 451.636473][T23460] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5015'. [ 451.659159][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5015'. [ 451.927147][T23482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5023'. [ 451.975441][T23482] bridge_slave_0: left allmulticast mode [ 451.981115][T23482] bridge_slave_0: left promiscuous mode [ 452.023955][T23482] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.174075][T23501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5025'. [ 452.325994][T23494] openvswitch: netlink: IP tunnel TTL not specified. [ 452.448087][T23514] lo: left promiscuous mode [ 452.530559][T11985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.554012][T23514] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.577175][T23514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.646027][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.667724][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.727209][T11985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.849524][T23524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.892928][T23529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5032'. [ 452.952160][T23531] netlink: 159784 bytes leftover after parsing attributes in process `syz.4.5035'. [ 452.988574][T23529] syz_tun: left allmulticast mode [ 453.019449][T23529] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 453.435624][T23553] macvtap1: entered promiscuous mode [ 453.441036][T23553] vlan0: entered promiscuous mode [ 453.447112][T23553] macvtap1: entered allmulticast mode [ 453.459425][T23553] vlan0: entered allmulticast mode [ 453.464725][T23553] veth0_vlan: entered allmulticast mode [ 453.467189][ T7300] net_ratelimit: 2 callbacks suppressed [ 453.467203][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.511341][ T7977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.652519][T23587] validate_nla: 2 callbacks suppressed [ 453.652540][T23587] netlink: 'syz.4.5046': attribute type 1 has an invalid length. [ 453.717106][T23587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.726592][ T7977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.747436][ T7977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.783393][T23587] bond0: (slave gretap1): making interface the new active one [ 453.801856][T23587] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 453.886476][T23594] sctp: [Deprecated]: syz.3.5048 (pid 23594) Use of int in max_burst socket option deprecated. [ 453.886476][T23594] Use struct sctp_assoc_value instead [ 454.271273][T23609] netlink: 'syz.4.5054': attribute type 1 has an invalid length. [ 454.327493][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.586693][ T1016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.610060][ T1016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.896289][T11985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.117906][T23660] netlink: 'syz.0.5065': attribute type 21 has an invalid length. [ 455.268176][T23664] __nla_validate_parse: 12 callbacks suppressed [ 455.268193][T23664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5067'. [ 455.481335][T23684] openvswitch: netlink: Message has 4 unknown bytes. [ 455.729882][T23696] netlink: 'syz.4.5072': attribute type 1 has an invalid length. [ 455.763954][T23699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5077'. [ 455.815415][T23700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5077'. [ 455.821159][T23705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5077'. [ 455.904353][T23699] xfrm2: entered promiscuous mode [ 455.923080][T23710] netlink: 'syz.1.5078': attribute type 1 has an invalid length. [ 455.931379][T23710] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5078'. [ 455.954919][T23699] xfrm2: entered allmulticast mode [ 455.981481][T23704] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 456.035464][ T55] block nbd2: Possible stuck request ffff888025220000: control (read@0,1024B). Runtime 300 seconds [ 456.046725][ T55] block nbd2: Possible stuck request ffff8880252201c0: control (read@1024,1024B). Runtime 300 seconds [ 456.057877][ T55] block nbd2: Possible stuck request ffff888025220380: control (read@2048,1024B). Runtime 300 seconds [ 456.068903][ T55] block nbd2: Possible stuck request ffff888025220540: control (read@3072,1024B). Runtime 300 seconds [ 456.218265][T23696] veth3: entered promiscuous mode [ 456.239048][T23696] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 456.497744][ T7978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 456.540460][ T7978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 456.590601][ T7978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 456.635991][ T1163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 456.695067][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5087'. [ 456.706641][T23728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5087'. [ 456.722366][T23729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5087'. [ 456.767874][T23729] tipc: Invalid UDP bearer configuration [ 456.767928][T23729] tipc: Enabling of bearer rejected, failed to enable media [ 456.833907][T23731] syz_tun: left promiscuous mode [ 456.880674][T23731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.061586][T23748] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.5092'. [ 457.061700][T23751] netlink: 'syz.0.5090': attribute type 1 has an invalid length. [ 457.079525][T23751] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5090'. [ 457.994664][T23802] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 458.573385][T23835] netlink: 'syz.2.5114': attribute type 1 has an invalid length. [ 459.183775][T23861] macvtap0: entered promiscuous mode [ 459.191458][T23861] macvtap0: entered allmulticast mode [ 459.197371][T23861] veth0_macvtap: entered allmulticast mode [ 459.287346][T23866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.287865][T23869] veth0_macvtap: left promiscuous mode [ 459.377252][T23870] `: (slave dummy0): Releasing backup interface [ 459.410404][T23870] bond3: (slave gretap2): Releasing active interface [ 459.661804][T23885] 8021q: adding VLAN 0 to HW filter on device bond6 [ 459.719983][T23887] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 459.915051][T23895] tc_dump_action: action bad kind [ 460.491130][T23936] netlink: 'syz.3.5149': attribute type 1 has an invalid length. [ 460.841930][T23960] openvswitch: netlink: Unknown key attributes 2 [ 460.859022][T23964] netlink: 'syz.0.5156': attribute type 21 has an invalid length. [ 460.897512][T23964] __nla_validate_parse: 8 callbacks suppressed [ 460.897529][T23964] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5156'. [ 461.429112][T24004] netlink: 'syz.1.5170': attribute type 2 has an invalid length. [ 461.635447][T24020] sctp: [Deprecated]: syz.1.5176 (pid 24020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.635447][T24020] Use struct sctp_sack_info instead [ 461.659546][T24018] netlink: 'syz.2.5175': attribute type 31 has an invalid length. [ 461.711472][T24025] netlink: 'syz.0.5177': attribute type 15 has an invalid length. [ 462.032293][T24043] netlink: 'syz.3.5182': attribute type 1 has an invalid length. [ 462.062541][T24046] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 462.982554][T24074] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5194'. [ 462.997473][T24072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5191'. [ 463.011407][T24074] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5194'. [ 463.036491][T24074] netlink: 'syz.3.5194': attribute type 6 has an invalid length. [ 463.046729][T24077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5193'. [ 463.047908][T24074] netlink: 'syz.3.5194': attribute type 5 has an invalid length. [ 463.072810][T24074] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5194'. [ 463.093003][T24077] geneve2: entered promiscuous mode [ 463.448023][T24102] netlink: 'syz.4.5200': attribute type 33 has an invalid length. [ 463.467788][T24102] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5200'. [ 463.581522][T24105] IPVS: Error connecting to the multicast addr [ 463.736238][T24115] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5206'. [ 463.756295][T24115] netem: invalid attributes len -24 [ 464.167234][T24122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5208'. [ 464.496762][T24153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5216'. [ 464.614086][T24153] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 464.884191][T24173] netlink: 'syz.3.5222': attribute type 11 has an invalid length. [ 465.142274][T24174] macvtap2: entered promiscuous mode [ 465.155677][T24174] macvtap2: entered allmulticast mode [ 465.480747][T24203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.265390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.342905][T24250] openvswitch: netlink: Unknown key attributes 2 [ 466.661006][T24260] __nla_validate_parse: 9 callbacks suppressed [ 466.661024][T24260] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5246'. [ 466.775972][T24260] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5246'. [ 466.824218][T24275] netlink: 'syz.3.5251': attribute type 1 has an invalid length. [ 466.841092][T24260] bond0 (unregistering): Released all slaves [ 466.906010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.946422][T24275] 8021q: adding VLAN 0 to HW filter on device bond11 [ 466.981675][T24282] bond11: (slave wlan0): Opening slave failed [ 467.106745][T24275] vlan2: entered allmulticast mode [ 467.123080][T24275] veth1: entered allmulticast mode [ 467.210461][T24295] netlink: 'syz.1.5255': attribute type 1 has an invalid length. [ 467.286069][T24295] 8021q: adding VLAN 0 to HW filter on device bond7 [ 467.325954][T24296] 8021q: adding VLAN 0 to HW filter on device bond7 [ 467.326655][T24295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5255'. [ 467.353132][T24296] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 467.380337][T24296] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 467.528744][T24303] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 467.542121][T24317] netlink: 'syz.2.5260': attribute type 8 has an invalid length. [ 467.551656][T24303] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 467.611661][T24298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5257'. [ 467.726937][T24324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5262'. [ 468.018301][T24344] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5268'. [ 468.033811][T24336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5266'. [ 468.055909][T24344] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5268'. [ 468.068004][T24336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5266'. [ 468.197226][ T94] block nbd1: Possible stuck request ffff8880251f9300: control (read@0,1024B). Runtime 180 seconds [ 468.208701][ T94] block nbd1: Possible stuck request ffff8880251f94c0: control (read@1024,1024B). Runtime 180 seconds [ 468.220277][ T94] block nbd1: Possible stuck request ffff8880251f9680: control (read@2048,1024B). Runtime 180 seconds [ 468.245986][ T94] block nbd1: Possible stuck request ffff8880251f9840: control (read@3072,1024B). Runtime 180 seconds [ 468.273438][T24361] tipc: Enabled bearer , priority 0 [ 468.290686][T24361] syzkaller0: entered promiscuous mode [ 468.297188][T24361] syzkaller0: entered allmulticast mode [ 468.382347][T24365] dvmrp0: entered allmulticast mode [ 468.390348][ T5233] udevd[5233]: worker [6154] /devices/virtual/block/nbd1 timeout; kill it [ 468.399960][T24360] tipc: Resetting bearer [ 468.400443][ T5233] udevd[5233]: seq 22360 '/devices/virtual/block/nbd1' killed [ 468.435830][T24360] tipc: Disabling bearer [ 468.457453][T24368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5275'. [ 469.231977][T24424] pimreg: entered allmulticast mode [ 469.527902][T24446] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 470.042618][T24476] netlink: 'syz.2.5306': attribute type 2 has an invalid length. [ 470.681916][T24517] dvmrp1: left allmulticast mode [ 470.896879][T24534] delete_channel: no stack [ 471.132847][T24548] netlink: 'syz.0.5324': attribute type 1 has an invalid length. [ 471.200744][ T6027] IPVS: starting estimator thread 0... [ 471.218329][T24553] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 471.247027][T24552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.291452][T24556] netlink: 'syz.1.5328': attribute type 11 has an invalid length. [ 471.305522][T24554] IPVS: using max 26 ests per chain, 62400 per kthread [ 471.372756][T24559] delete_channel: no stack [ 471.668911][T24588] __nla_validate_parse: 46 callbacks suppressed [ 471.668930][T24588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5335'. [ 471.704744][T24588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5335'. [ 471.779046][T24589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5334'. [ 471.964590][T24599] syzkaller0: entered allmulticast mode [ 472.257896][T24615] syzkaller1: entered promiscuous mode [ 472.263400][T24615] syzkaller1: entered allmulticast mode [ 472.298493][T24622] !€ÿ: renamed from bond_slave_0 (while UP) [ 472.377717][T24627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.818143][T24649] geneve2: entered promiscuous mode [ 472.835861][T24649] geneve2: entered allmulticast mode [ 473.025944][T24663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5359'. [ 473.056787][T24663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5359'. [ 473.310412][T24673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5361'. [ 473.345873][T24674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5361'. [ 473.687442][T24687] netlink: 'syz.4.5366': attribute type 3 has an invalid length. [ 473.697186][T24692] netlink: 'syz.4.5366': attribute type 3 has an invalid length. [ 473.707297][T24692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5366'. [ 473.736691][T24687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5366'. [ 473.831785][T24701] netlink: 45 bytes leftover after parsing attributes in process `syz.0.5369'. [ 474.034243][T24714] netlink: 'syz.4.5373': attribute type 2 has an invalid length. [ 475.236820][T24776] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 475.418765][T24780] tipc: Enabled bearer , priority 0 [ 475.428353][T24780] syzkaller0: entered promiscuous mode [ 475.433840][T24780] syzkaller0: entered allmulticast mode [ 475.452402][T24779] tipc: Resetting bearer [ 475.497976][T24779] tipc: Disabling bearer [ 475.577530][T24795] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 475.889228][T24810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 475.896494][T24810] IPv6: NLM_F_CREATE should be set when creating new route [ 476.177627][T24818] netlink: 'syz.4.5404': attribute type 4 has an invalid length. [ 476.384415][T24827] : entered promiscuous mode [ 476.808051][T24857] __nla_validate_parse: 9 callbacks suppressed [ 476.808073][T24857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5417'. [ 476.924750][T24868] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 477.064067][T24875] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5424'. [ 477.080590][T24876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5423'. [ 477.107453][T24879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5422'. [ 477.119904][T24883] netlink: 'syz.4.5425': attribute type 1 has an invalid length. [ 477.133551][T24880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5422'. [ 477.212640][T24885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5426'. [ 477.270996][T24890] sctp: [Deprecated]: syz.4.5428 (pid 24890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.270996][T24890] Use struct sctp_sack_info instead [ 477.480680][T24900] netlink: 'syz.4.5431': attribute type 1 has an invalid length. [ 477.935149][T24929] netlink: 'syz.0.5442': attribute type 2 has an invalid length. [ 477.977599][T24929] netlink: 'syz.0.5442': attribute type 1 has an invalid length. [ 478.046439][T24936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5443'. [ 478.139272][T24942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5445'. [ 478.235613][T24948] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5446'. [ 478.402658][T24956] tipc: Enabled bearer , priority 0 [ 478.431686][T24956] syzkaller0: entered promiscuous mode [ 478.446987][T24956] syzkaller0: entered allmulticast mode [ 478.504537][T24956] tipc: Resetting bearer [ 478.520466][T24964] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5453'. [ 478.533780][T24955] tipc: Resetting bearer [ 478.577290][T24955] tipc: Disabling bearer [ 478.963973][T25002] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 479.072560][T25006] netlink: 'syz.0.5464': attribute type 1 has an invalid length. [ 479.183609][T25006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.332315][T25028] netlink: 'syz.2.5468': attribute type 1 has an invalid length. [ 479.597155][T25042] netlink: 'syz.0.5473': attribute type 1 has an invalid length. [ 479.672864][T25047] netlink: 'syz.2.5474': attribute type 29 has an invalid length. [ 479.721577][T25037] can: request_module (can-proto-5) failed. [ 479.782245][T25055] netlink: 'syz.1.5475': attribute type 83 has an invalid length. [ 479.990579][T25072] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 480.047124][T25071] hsr0 speed is unknown, defaulting to 1000 [ 480.156887][T25084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.365074][T25077] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 480.420069][T25092] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 480.439499][T25092] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 480.523829][T25077] sch_tbf: burst 639 is lower than device syzkaller0 mtu (1514) ! [ 480.985839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.080509][T25123] netlink: 'syz.1.5493': attribute type 15 has an invalid length. [ 481.097840][T25130] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 481.410553][T25143] can: request_module (can-proto-0) failed. [ 481.727249][T25151] netlink: zone id is out of range [ 481.732492][T25151] netlink: zone id is out of range [ 481.750854][T25151] netlink: zone id is out of range [ 481.790200][T25151] netlink: zone id is out of range [ 481.834400][T25151] netlink: zone id is out of range [ 481.927971][T25173] __nla_validate_parse: 20 callbacks suppressed [ 481.927989][T25173] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5508'. [ 481.956269][T25160] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5504'. [ 481.980298][T25177] nbd: nbd2 already in use [ 482.113608][T25173] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.269412][T25173] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.352190][T25173] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.371398][T25191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.496669][T25202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5516'. [ 482.521130][T25173] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.586741][T25210] netlink: 'syz.1.5519': attribute type 8 has an invalid length. [ 482.599080][T25209] syzkaller1: entered promiscuous mode [ 482.604665][T25209] syzkaller1: entered allmulticast mode [ 482.643016][T25210] 8021q: adding VLAN 0 to HW filter on device bond8 [ 482.726390][ T1016] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.746521][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.784706][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.806312][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.817255][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5521'. [ 482.844860][T25215] sctp: [Deprecated]: syz.1.5521 (pid 25215) Use of int in max_burst socket option. [ 482.844860][T25215] Use struct sctp_assoc_value instead [ 482.977026][T25222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5524'. [ 483.000694][T25222] netlink: 'syz.2.5524': attribute type 2 has an invalid length. [ 483.030413][T25228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5525'. [ 483.145935][ T5871] Bluetooth: hci0: command tx timeout [ 483.499438][T25253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5534'. [ 483.540636][T25253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5534'. [ 483.645140][T25263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5536'. [ 483.754314][T25272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5539'. [ 483.768069][T25272] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 483.788508][T25272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.809349][T25274] C: renamed from team_slave_0 (while UP) [ 483.852479][T25274] netlink: 'syz.1.5540': attribute type 1 has an invalid length. [ 483.865591][T25274] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 484.187484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.310806][T25305] netlink: 'syz.2.5548': attribute type 15 has an invalid length. [ 484.422347][T17830] udevd[17830]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 484.481604][T25312] netlink: 'syz.1.5550': attribute type 1 has an invalid length. [ 484.520726][T25312] netlink: 'syz.1.5550': attribute type 1 has an invalid length. [ 484.527616][T25315] C: entered allmulticast mode [ 484.706469][T25327] netlink: 'syz.1.5554': attribute type 4 has an invalid length. [ 484.732920][T25327] netlink: 'syz.1.5554': attribute type 4 has an invalid length. [ 484.947658][T25343] netlink: 'syz.1.5556': attribute type 1 has an invalid length. [ 484.978631][T25335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 485.032851][T25338] macsec0: entered promiscuous mode [ 485.040558][T25338] bond0: entered promiscuous mode [ 485.049836][T25338] debugfs: 'hsr1' already exists in 'hsr' [ 485.066198][T25338] Cannot create hsr debugfs directory [ 485.074274][T25338] hsr1: Slave A (macsec0) is not up; please bring it up to get a fully working HSR network [ 485.090951][T25338] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 485.101558][T25338] hsr1: entered allmulticast mode [ 485.107831][T25338] macsec0: entered allmulticast mode [ 485.113340][T25338] veth1_macvtap: entered allmulticast mode [ 485.203652][T25335] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 485.238169][T25358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.414229][T25354] hsr0 speed is unknown, defaulting to 1000 [ 485.567970][T25369] netlink: 'syz.4.5565': attribute type 18 has an invalid length. [ 485.702174][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.735765][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.796437][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.820600][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.935199][T25391] sctp: [Deprecated]: syz.1.5570 (pid 25391) Use of int in max_burst socket option. [ 485.935199][T25391] Use struct sctp_assoc_value instead [ 486.085421][T25398] sctp: [Deprecated]: syz.1.5570 (pid 25398) Use of int in max_burst socket option. [ 486.085421][T25398] Use struct sctp_assoc_value instead [ 486.106122][ T55] block nbd2: Possible stuck request ffff888025220000: control (read@0,1024B). Runtime 330 seconds [ 486.117954][ T55] block nbd2: Possible stuck request ffff8880252201c0: control (read@1024,1024B). Runtime 330 seconds [ 486.129676][ T55] block nbd2: Possible stuck request ffff888025220380: control (read@2048,1024B). Runtime 330 seconds [ 486.141559][ T55] block nbd2: Possible stuck request ffff888025220540: control (read@3072,1024B). Runtime 330 seconds [ 486.858670][T25435] netlink: 'syz.4.5581': attribute type 21 has an invalid length. [ 486.945039][T25435] netlink: 'syz.4.5581': attribute type 5 has an invalid length. [ 486.970727][T25442] __nla_validate_parse: 23 callbacks suppressed [ 486.970745][T25442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5583'. [ 486.975426][T25435] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5581'. [ 487.022539][T25443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5583'. [ 487.141038][T25442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5583'. [ 487.186651][T25448] openvswitch: netlink: IP tunnel dst address not specified [ 487.403404][T25457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5588'. [ 487.974174][T25489] netlink: 'syz.4.5598': attribute type 7 has an invalid length. [ 488.409675][T25524] veth1_to_bond: entered allmulticast mode [ 488.436016][T25525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5606'. [ 488.465972][T25524] veth1_to_bond: left allmulticast mode [ 488.770448][T25536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5608'. [ 488.799066][T25536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5608'. [ 488.918586][T25547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5611'. [ 488.938406][T25547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5611'. [ 488.986165][T25549] tipc: Enabled bearer , priority 0 [ 489.171722][T25554] tipc: Disabling bearer [ 489.460603][T25580] IPv6: Can't replace route, no match found [ 489.659102][T25590] validate_nla: 2 callbacks suppressed [ 489.659122][T25590] netlink: 'syz.3.5626': attribute type 1 has an invalid length. [ 489.806340][T25597] block nbd4: Unsupported socket: shutdown callout must be supported. [ 489.968021][T25594] bond12: (slave gretap1): making interface the new active one [ 489.997397][T25594] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 490.039983][T25598] 8021q: adding VLAN 0 to HW filter on device bond12 [ 490.084719][T25603] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 490.167908][T25603] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 490.665895][T25645] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 490.773581][T25647] nft_compat: unsupported protocol 5 [ 491.072640][T25663] netlink: 'syz.3.5647': attribute type 10 has an invalid length. [ 491.103769][T25663] team0: Device hsr_slave_0 failed to register rx_handler [ 491.162271][T25663] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 491.253012][T25677] netlink: 'syz.4.5650': attribute type 21 has an invalid length. [ 491.487634][T25695] bridge_slave_0: invalid flags given to default FDB implementation [ 491.838703][T25723] siw: device registration error -23 [ 492.033055][T25733] netlink: 'syz.0.5665': attribute type 1 has an invalid length. [ 492.056620][T25734] __nla_validate_parse: 9 callbacks suppressed [ 492.056638][T25734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5666'. [ 492.078458][T25733] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5665'. [ 492.312186][T25746] dvmrp0: entered allmulticast mode [ 492.318545][T25755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5673'. [ 492.331550][T25755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5673'. [ 492.341058][T25746] dvmrp0: left allmulticast mode [ 492.448742][T25762] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5674'. [ 492.749292][T25779] netlink: 'syz.3.5681': attribute type 1 has an invalid length. [ 492.825766][T25789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5681'. [ 492.900687][T25779] 8021q: adding VLAN 0 to HW filter on device bond13 [ 493.113475][T25806] syzkaller1: entered promiscuous mode [ 493.120185][T25806] syzkaller1: entered allmulticast mode [ 493.328314][T25819] tipc: Enabling of bearer rejected, failed to enable media [ 493.345400][T25821] netlink: 'syz.0.5694': attribute type 11 has an invalid length. [ 494.055157][T25845] netlink: 'syz.2.5699': attribute type 11 has an invalid length. [ 494.076381][T25845] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5699'. [ 494.123774][T25847] netlink: 'syz.2.5699': attribute type 11 has an invalid length. [ 494.173839][T25847] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5699'. [ 494.364789][T25859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5703'. [ 494.396969][T25861] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5701'. [ 494.541600][T25865] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 494.556860][T25865] syzkaller0: entered promiscuous mode [ 494.565926][T25865] syzkaller0: entered allmulticast mode [ 495.077134][T25891] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 495.159739][T25896] netlink: 'syz.2.5714': attribute type 10 has an invalid length. [ 495.194847][T25896] team0: Port device dummy0 added [ 495.214483][T25901] netlink: 'syz.2.5714': attribute type 10 has an invalid length. [ 495.269560][T25901] team0: Port device dummy0 removed [ 495.292077][T25901] `: (slave dummy0): Enslaving as an active interface with an up link [ 495.466784][T25915] netlink: 'syz.4.5719': attribute type 1 has an invalid length. [ 495.503459][T25915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.547385][T25915] veth5: entered promiscuous mode [ 495.618726][T25919] netlink: 'syz.0.5720': attribute type 1 has an invalid length. [ 496.299400][T25953] netlink: 'syz.0.5731': attribute type 7 has an invalid length. [ 496.307427][T25953] netlink: 'syz.0.5731': attribute type 8 has an invalid length. [ 496.648542][T25962] sctp: [Deprecated]: syz.3.5735 (pid 25962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.648542][T25962] Use struct sctp_sack_info instead [ 496.722181][T25966] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 497.202698][T25992] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 497.304700][T26001] tipc: Invalid UDP bearer configuration [ 497.304756][T26001] tipc: Enabling of bearer rejected, failed to enable media [ 497.641861][T26026] syzkaller0: entered promiscuous mode [ 497.653938][T26026] syzkaller0: entered allmulticast mode [ 498.097496][T26046] __nla_validate_parse: 5 callbacks suppressed [ 498.097539][T26046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5763'. [ 498.262995][T26054] netlink: 'syz.0.5762': attribute type 17 has an invalid length. [ 498.271698][T26054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5762'. [ 498.289185][ T94] block nbd1: Possible stuck request ffff8880251f9300: control (read@0,1024B). Runtime 210 seconds [ 498.305843][T26054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5762'. [ 498.305885][ T94] block nbd1: Possible stuck request ffff8880251f94c0: control (read@1024,1024B). Runtime 210 seconds [ 498.326562][ T94] block nbd1: Possible stuck request ffff8880251f9680: control (read@2048,1024B). Runtime 210 seconds [ 498.337920][ T94] block nbd1: Possible stuck request ffff8880251f9840: control (read@3072,1024B). Runtime 210 seconds [ 498.365067][T26050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5762'. [ 498.441324][T26056] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5765'. [ 498.682821][T26065] sctp: [Deprecated]: syz.2.5768 (pid 26065) Use of int in max_burst socket option. [ 498.682821][T26065] Use struct sctp_assoc_value instead [ 498.711885][T26065] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5768'. [ 498.743401][T26065] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 498.911075][T26070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5771'. [ 499.701085][T26092] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5777'. [ 500.039031][T26097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5779'. [ 500.127656][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 500.141733][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 500.156241][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 500.164458][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 500.173730][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 500.230177][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 500.239250][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 500.248399][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 500.258097][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 500.273549][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 500.357237][T26106] netlink: 'syz.4.5781': attribute type 10 has an invalid length. [ 500.412124][T26106] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5781'. [ 500.507835][T26100] hsr0 speed is unknown, defaulting to 1000 [ 500.649633][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.683285][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.794268][T26127] bridge3: entered promiscuous mode [ 500.799766][T26127] bridge3: entered allmulticast mode [ 500.948242][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.999424][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.257142][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.289866][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.498257][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.509847][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.563733][T26158] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.572547][T26158] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.938364][T26167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.953224][T26167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.011645][T26167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.022402][T26167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.033662][T26167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.043246][T26167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.053439][T26167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.063686][T26167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.351254][ T30] audit: type=1800 audit(1755397073.353:9): pid=26180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5803" name="cgroup.controllers" dev="tmpfs" ino=2563 res=0 errno=0 [ 502.373941][ T5869] Bluetooth: hci4: command tx timeout [ 503.407114][ T13] ` (unregistering): (slave dummy0): Releasing backup interface [ 503.422701][ T13] ` (unregistering): Released all slaves [ 503.538988][ T13] bond0 (unregistering): left promiscuous mode [ 503.546164][ T13] bond0 (unregistering): Released all slaves [ 503.664324][ T13] bond1 (unregistering): Released all slaves [ 503.683075][ T13] bond2 (unregistering): Released all slaves [ 503.696798][ T13] bond3 (unregistering): Released all slaves [ 503.865183][ T13] tipc: Disabling bearer [ 503.892097][ T13] tipc: Left network mode [ 503.938451][T26100] chnl_net:caif_netlink_parms(): no params data found [ 504.036507][T26217] __nla_validate_parse: 2 callbacks suppressed [ 504.036524][T26217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5812'. [ 504.193862][T26227] net_ratelimit: 57 callbacks suppressed [ 504.193880][T26227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.344832][T26229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5816'. [ 504.383158][T26237] syzkaller0: entered promiscuous mode [ 504.392077][T26237] syzkaller0: entered allmulticast mode [ 504.426275][ T5869] Bluetooth: hci4: command tx timeout [ 504.508717][T26100] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.524722][T26100] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.541991][T26100] bridge_slave_0: entered allmulticast mode [ 504.570324][T26100] bridge_slave_0: entered promiscuous mode [ 504.674534][T26243] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5817'. [ 504.697991][T26100] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.716214][T26100] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.725890][T26100] bridge_slave_1: entered allmulticast mode [ 504.744100][T26100] bridge_slave_1: entered promiscuous mode [ 505.000905][T26100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.076495][T26100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.082286][T26259] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5823'. [ 505.193150][T26266] netlink: 'syz.3.5824': attribute type 7 has an invalid length. [ 505.201729][T26266] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5824'. [ 505.230831][T26267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.260546][T26100] team0: Port device team_slave_0 added [ 505.311439][T26100] team0: Port device team_slave_1 added [ 505.333889][T26270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5827'. [ 505.359384][T26270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5827'. [ 505.619166][T26100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.634219][T26100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.669358][T26100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.726180][ T13] macsec0: left promiscuous mode [ 505.778760][ T13] hsr_slave_0: left promiscuous mode [ 505.815945][ T13] hsr_slave_1: left promiscuous mode [ 505.852306][ T13] veth1_macvtap: left allmulticast mode [ 505.866951][ T13] veth1_macvtap: left promiscuous mode [ 505.878378][ T13] veth1_vlan: left promiscuous mode [ 506.085147][T26305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5834'. [ 506.414043][ T13] pim6reg527 (unregistering): left allmulticast mode [ 506.510355][ T5869] Bluetooth: hci4: command tx timeout [ 507.239268][T26100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.250658][T26100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.278074][T26100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.546288][T26100] hsr_slave_0: entered promiscuous mode [ 507.566840][T26100] hsr_slave_1: entered promiscuous mode [ 507.573245][T26100] debugfs: 'hsr0' already exists in 'hsr' [ 507.605538][T26100] Cannot create hsr debugfs directory [ 507.727706][T26341] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5840'. [ 508.230742][T26351] netlink: 'syz.1.5843': attribute type 13 has an invalid length. [ 508.242096][T26353] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 508.262668][ T13] IPVS: stop unused estimator thread 0... [ 508.434919][T26360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5846'. [ 508.596765][ T5869] Bluetooth: hci4: command tx timeout [ 508.836057][T26100] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 508.868461][T26100] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 508.922569][T26100] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 508.959724][T26100] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.356953][T26405] syzkaller1: entered promiscuous mode [ 509.362528][T26405] syzkaller1: entered allmulticast mode [ 509.518206][T26100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.590272][T26100] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.608764][T26421] netlink: 'syz.3.5864': attribute type 4 has an invalid length. [ 509.687266][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.694465][ T7977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.729618][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.736813][ T7977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.785400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.041087][T26446] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 510.089864][T26459] __nla_validate_parse: 3 callbacks suppressed [ 510.089882][T26459] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5874'. [ 510.470920][T26100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.532450][T26475] netlink: 'syz.4.5878': attribute type 1 has an invalid length. [ 510.661855][T26475] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.676301][ T5869] Bluetooth: hci4: command tx timeout [ 510.769993][T26478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.805966][T26478] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 510.827535][T26478] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 510.877096][T26100] veth0_vlan: entered promiscuous mode [ 510.930221][T26475] veth7: entered promiscuous mode [ 510.953211][T26475] bond4: (slave veth7): Enslaving as an active interface with a down link [ 510.974738][T26494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.005196][T26485] vlan4: entered allmulticast mode [ 511.011480][T26485] bond4: entered allmulticast mode [ 511.091283][T26505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5885'. [ 511.172972][T26100] veth1_vlan: entered promiscuous mode [ 511.283465][T26100] veth0_macvtap: entered promiscuous mode [ 511.321151][T26100] veth1_macvtap: entered promiscuous mode [ 511.384112][T26100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.406330][T26521] sctp: [Deprecated]: syz.0.5889 (pid 26521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.406330][T26521] Use struct sctp_sack_info instead [ 511.439764][T26100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.497049][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.518631][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.601229][T26537] sctp: [Deprecated]: syz.1.5895 (pid 26537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.601229][T26537] Use struct sctp_sack_info instead [ 511.630458][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.771909][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.938352][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.972770][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.991313][T26554] netlink: 'syz.4.5899': attribute type 1 has an invalid length. [ 512.001026][T26554] netlink: 'syz.4.5899': attribute type 2 has an invalid length. [ 512.039120][T26554] netlink: 'syz.4.5899': attribute type 1 has an invalid length. [ 512.041736][T26556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5898'. [ 512.054564][T26554] netlink: 'syz.4.5899': attribute type 2 has an invalid length. [ 512.076351][T26557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5898'. [ 512.096566][T26556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5898'. [ 512.099268][T26557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5898'. [ 512.115712][ T5871] Bluetooth: hci1: command tx timeout [ 512.117182][T26556] netlink: 'syz.0.5898': attribute type 15 has an invalid length. [ 512.132903][T26557] netlink: 'syz.0.5898': attribute type 15 has an invalid length. [ 512.153048][T26558] syzkaller0: entered promiscuous mode [ 512.158998][T26558] syzkaller0: entered allmulticast mode [ 512.792403][T26564] netlink: 'syz.3.5901': attribute type 30 has an invalid length. [ 512.850199][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.859256][T26564] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 512.868615][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.876522][T26564] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 512.930280][T26568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 512.954673][T26568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 512.969040][T26568] team0: Port device hsr0 added [ 513.048806][T26572] batadv1: entered allmulticast mode [ 513.112233][T26578] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 513.141778][T26578] syzkaller0: entered promiscuous mode [ 513.155862][T26578] syzkaller0: entered allmulticast mode [ 513.271758][T26582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5908'. [ 513.506475][T26594] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5910'. [ 513.545914][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 513.554107][T26594] validate_nla: 2 callbacks suppressed [ 513.554124][T26594] netlink: 'syz.4.5910': attribute type 1 has an invalid length. [ 513.592622][T26594] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5910'. [ 514.000096][T26625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5920'. [ 515.206841][T26670] netlink: 'syz.3.5927': attribute type 33 has an invalid length. [ 515.221943][T26670] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5927'. [ 515.259614][T26672] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 515.271561][T26672] team0: Device macvtap1 is already an upper device of the team interface [ 515.310466][T26679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5926'. [ 515.352672][T26678] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 515.353333][T26677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5929'. [ 515.367318][T26678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5928'. [ 515.400263][T26678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5928'. [ 515.614550][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5930'. [ 516.076129][T26708] hsr0 speed is unknown, defaulting to 1000 [ 516.187513][ T55] block nbd2: Possible stuck request ffff888025220000: control (read@0,1024B). Runtime 360 seconds [ 516.198750][ T55] block nbd2: Possible stuck request ffff8880252201c0: control (read@1024,1024B). Runtime 360 seconds [ 516.210575][ T55] block nbd2: Possible stuck request ffff888025220380: control (read@2048,1024B). Runtime 360 seconds [ 516.222731][ T55] block nbd2: Possible stuck request ffff888025220540: control (read@3072,1024B). Runtime 360 seconds [ 516.596516][T26716] veth0: entered promiscuous mode [ 516.623472][T26715] veth0: left promiscuous mode [ 516.655017][T26720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5938'. [ 516.740569][T26719] block nbd4: NBD_DISCONNECT [ 516.767041][T26723] netlink: 'syz.3.5941': attribute type 16 has an invalid length. [ 516.796582][T26723] netlink: 'syz.3.5941': attribute type 17 has an invalid length. [ 516.852195][T26723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.869541][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.882490][ T6027] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 516.894393][ T6027] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 516.903921][ T6027] CPU: 0 UID: 0 PID: 6027 Comm: kworker/0:7 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 516.915971][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.926024][ T6027] Workqueue: mld mld_ifc_work [ 516.930737][ T6027] RIP: 0010:add_grec+0x79f/0x1740 [ 516.935750][ T6027] Code: c6 e8 05 51 87 f7 45 85 ff 0f 84 b1 00 00 00 e8 b7 4c 87 f7 eb 05 e8 b0 4c 87 f7 4c 89 e0 48 c1 e8 03 48 89 84 24 a0 00 00 00 <42> 80 3c 30 00 74 08 4c 89 e7 e8 e2 b5 ea f7 4d 8b 3c 24 48 8b 7c [ 516.955933][ T6027] RSP: 0018:ffffc90004b178f8 EFLAGS: 00010206 [ 516.963305][ T6027] RAX: 000000001fffe000 RBX: ffff8880276c0c80 RCX: ffff888026875a00 [ 516.971271][ T6027] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 516.979232][ T6027] RBP: 0000000000000000 R08: ffff888026875a00 R09: 0000000000000002 [ 516.987189][ T6027] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000ffff0000 [ 516.995153][ T6027] R13: 0000000000000005 R14: dffffc0000000000 R15: 0000000000000001 [ 517.003119][ T6027] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 517.012040][ T6027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.018708][ T6027] CR2: 00007f838f179f98 CR3: 0000000075b7e000 CR4: 00000000003526f0 [ 517.026678][ T6027] Call Trace: [ 517.029954][ T6027] [ 517.032922][ T6027] mld_ifc_work+0x676/0xd60 [ 517.037434][ T6027] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.042629][ T6027] ? process_scheduled_works+0x9ef/0x17b0 [ 517.048342][ T6027] process_scheduled_works+0xade/0x17b0 [ 517.053879][ T6027] ? __pfx_process_scheduled_works+0x10/0x10 [ 517.059853][ T6027] worker_thread+0x8a0/0xda0 [ 517.064455][ T6027] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 517.070777][ T6027] ? __kthread_parkme+0x7b/0x200 [ 517.075698][ T6027] kthread+0x70e/0x8a0 [ 517.079751][ T6027] ? __pfx_worker_thread+0x10/0x10 [ 517.084925][ T6027] ? __pfx_kthread+0x10/0x10 [ 517.089678][ T6027] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.094955][ T6027] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.100142][ T6027] ? __pfx_kthread+0x10/0x10 [ 517.104718][ T6027] ret_from_fork+0x3f9/0x770 [ 517.109290][ T6027] ? __pfx_ret_from_fork+0x10/0x10 [ 517.114417][ T6027] ? __switch_to_asm+0x39/0x70 [ 517.119164][ T6027] ? __switch_to_asm+0x33/0x70 [ 517.123910][ T6027] ? __pfx_kthread+0x10/0x10 [ 517.128489][ T6027] ret_from_fork_asm+0x1a/0x30 [ 517.133244][ T6027] [ 517.136258][ T6027] Modules linked in: [ 517.141564][ T6027] ---[ end trace 0000000000000000 ]--- [ 517.190087][T26731] sctp: [Deprecated]: syz.4.5943 (pid 26731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.190087][T26731] Use struct sctp_sack_info instead [ 517.213224][ T6027] RIP: 0010:add_grec+0x79f/0x1740 [ 517.235805][ T6027] Code: c6 e8 05 51 87 f7 45 85 ff 0f 84 b1 00 00 00 e8 b7 4c 87 f7 eb 05 e8 b0 4c 87 f7 4c 89 e0 48 c1 e8 03 48 89 84 24 a0 00 00 00 <42> 80 3c 30 00 74 08 4c 89 e7 e8 e2 b5 ea f7 4d 8b 3c 24 48 8b 7c [ 517.265856][ T6027] RSP: 0018:ffffc90004b178f8 EFLAGS: 00010206 [ 517.272071][ T6027] RAX: 000000001fffe000 RBX: ffff8880276c0c80 RCX: ffff888026875a00 [ 517.280193][ T6027] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 517.288329][ T6027] RBP: 0000000000000000 R08: ffff888026875a00 R09: 0000000000000002 [ 517.298058][ T6027] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000ffff0000 [ 517.307860][ T6027] R13: 0000000000000005 R14: dffffc0000000000 R15: 0000000000000001 [ 517.316025][ T6027] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 517.324991][ T6027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.332192][ T6027] CR2: 00002000000000c0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 517.340356][ T6027] Kernel panic - not syncing: Fatal exception [ 517.346673][ T6027] Kernel Offset: disabled [ 517.350981][ T6027] Rebooting in 86400 seconds..