last executing test programs: 2m20.3859892s ago: executing program 0 (id=1769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x20, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x8, 0x0, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x20000400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000003840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000022c0)="2c2b74fddbc858e42edcd12037e5751c", 0x10}], 0x1, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000000000001701000004000000fcffffff00000000180000000000000017010000030000000100000000000000e0"], 0x110, 0x4000}], 0x1, 0x8081) recvmmsg(r6, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) write$bt_hci(r4, &(0x7f0000000300)=ANY=[], 0x5) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60865160af36514000cc008002c0004000200060019c00600bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 2m19.387723264s ago: executing program 0 (id=1785): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000c80)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0xb, @remote}, 0x1c, 0x0}}], 0x1, 0x890) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0xa}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x604ab000) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000080)={0x5, 0x9}) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000000c0)) 2m19.188726567s ago: executing program 0 (id=1788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1e010d1af867ecec, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r0}, 0x94) 2m19.089631671s ago: executing program 0 (id=1791): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r4, @ANYBLOB="d00000000a000100000000000000001008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x92}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$l2tp6(r6, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000200000004500003c00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="aa00002fed780018050af7fffefd000000000007d58838068b000000"], 0x4a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r7, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) shutdown(r7, 0x2) getpeername$inet(r7, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x20008050) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)={0x3, 'geneve1\x00', {0x7}, 0x8001}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33917f8eef16f162471f400000005000200020000000800030005ac0f000501"], 0x58}}, 0x0) 2m18.972099558s ago: executing program 0 (id=1793): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0x9}, {0xfff2, 0x9}, {0x6, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1c, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x4c}}, 0x24040081) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x130, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@generic="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"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x2, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f00000000c0)={0x281, 0x2}) 2m18.748019117s ago: executing program 0 (id=1799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000023b08000000009500"/33], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r4, 0x0, 0xfaf}, 0x18) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x2, 0x3, 0x4, {0xa, 0x4e20, 0x60da, @empty, 0x4}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)="736fe951b2e0bc61eb7d1632209326c30117ead0b6bffbb6e693b343835f2eacd5216a08348e2a8fbc23", 0x2a}, {&(0x7f0000000240)}, {&(0x7f00000002c0)="f8b2527d24e748c0e284", 0xa}, {&(0x7f0000000300)="ebbaab717a7605f215639b8db3b88f9992a8acf5a5e33aa1836a35fa163babe71ec29d1f7cede72baa2711dcf5815cf1fba78e6d29cd02f8b174b12b62570cd49623abb03050a5b80e2d3d11f8f90410bd0e6b13028f2f1c0d3fb7c8b7c8966490af035a1709842bbbd90572f25b21b6ea4d1b0ab44a8e78e0cc2a4c9a0bab994386ac3b194876edf04f8b49f4919fb34b2f82bb59b742c1c17d6bfc5d13cbe10927ea8787af377269dd0567", 0xac}, {&(0x7f00000003c0)="fd88cf32d282babfcfcd92d203d53ae6246387e6f2f2b19e48a63c2369cdf9ab5b15413dee45c777dce353bf67c5e4d6edcba8c366d23d931cfd0e776ad018821f9c00717aba4665bf37fa7093e0c899aad95b5269915c879b47c60548668f45ef8b6009278dbc0557e4826ba3934c29ba667f41bc6582a14a49f9657cff8621b0e6b6f2cddcdbaece4bafde759ec732b8", 0x91}, {&(0x7f0000000480)="de7ba0110aef0fbcba3dfbc7b923f2be11c8a8a0c93eefe6aa903f3fe67269352132e01cb72dd906a9f1ec434d3141dd90c5911def022eeb696d4a3b48888cc42c4ed7287a9d8646a1d4522ed88ec3feec6667fff355745671312d3297c5cdc9b3ba5d4ce194ff9205f6af5714db1d49ce3824982b3ac7d2d8652bd344c43bc26eae8d25c38938ef303fbf304b91fa41b20c9091f9d18a4701", 0x99}, {&(0x7f0000000540)="35b90ce8319d94514e05e38f43f75575e12d43dc6fdf1665829f017fb535fc6396b672fffdae388712ca75617ace5c55471d8b0f0bf43b60deaac4f18544c856dc37b6d47810de6fe513456ee8bac66dbce12a8059a635396145ffe0f92f420a80df938c1437e40f3cf9da6b0160718d280ca3574c30f8c5f953aff140e13aa8b374cf633888cd9ab52cd97c9a621fd8d28f1f5fda046c819f2163d31de49cd36210ce605a7eadbcc817140ae1eaca3b37ef17faeefa51cfd9ee4eb2a9f8e127c5fc3a742f3c0b1f0e2092864e6a363defa631e1cb42e97959204cc749cd8d14e7c4", 0xe2}, {&(0x7f0000000640)="d8bc4f54044039c43487e1be92e04676b83d05068fb385893beb5874d13e355afb837d81485cd43c92d0b92d653bc842e8df5512cb71dfec56c3377e0918ca631e1788cf5fa4692d24c6f9ec66e94581b86e0755a49d7937b4b581b8ce047d01bd", 0x61}], 0x8, &(0x7f0000000740)=[{0x30, 0x84, 0x8, "4087ba5239d2ad34cd90b43864a49153963a51376fbd6ab011"}], 0x30}, 0x104) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271b, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) (async) recvmsg$kcm(r6, &(0x7f00000009c0)={&(0x7f00000007c0)=@un=@abs, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)}, {&(0x7f00000008c0)=""/70, 0x46}], 0x2, &(0x7f0000000940)=""/127, 0x7f}, 0x62) 2m3.716687139s ago: executing program 32 (id=1799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000023b08000000009500"/33], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r4, 0x0, 0xfaf}, 0x18) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x2, 0x3, 0x4, {0xa, 0x4e20, 0x60da, @empty, 0x4}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)="736fe951b2e0bc61eb7d1632209326c30117ead0b6bffbb6e693b343835f2eacd5216a08348e2a8fbc23", 0x2a}, {&(0x7f0000000240)}, {&(0x7f00000002c0)="f8b2527d24e748c0e284", 0xa}, {&(0x7f0000000300)="ebbaab717a7605f215639b8db3b88f9992a8acf5a5e33aa1836a35fa163babe71ec29d1f7cede72baa2711dcf5815cf1fba78e6d29cd02f8b174b12b62570cd49623abb03050a5b80e2d3d11f8f90410bd0e6b13028f2f1c0d3fb7c8b7c8966490af035a1709842bbbd90572f25b21b6ea4d1b0ab44a8e78e0cc2a4c9a0bab994386ac3b194876edf04f8b49f4919fb34b2f82bb59b742c1c17d6bfc5d13cbe10927ea8787af377269dd0567", 0xac}, {&(0x7f00000003c0)="fd88cf32d282babfcfcd92d203d53ae6246387e6f2f2b19e48a63c2369cdf9ab5b15413dee45c777dce353bf67c5e4d6edcba8c366d23d931cfd0e776ad018821f9c00717aba4665bf37fa7093e0c899aad95b5269915c879b47c60548668f45ef8b6009278dbc0557e4826ba3934c29ba667f41bc6582a14a49f9657cff8621b0e6b6f2cddcdbaece4bafde759ec732b8", 0x91}, {&(0x7f0000000480)="de7ba0110aef0fbcba3dfbc7b923f2be11c8a8a0c93eefe6aa903f3fe67269352132e01cb72dd906a9f1ec434d3141dd90c5911def022eeb696d4a3b48888cc42c4ed7287a9d8646a1d4522ed88ec3feec6667fff355745671312d3297c5cdc9b3ba5d4ce194ff9205f6af5714db1d49ce3824982b3ac7d2d8652bd344c43bc26eae8d25c38938ef303fbf304b91fa41b20c9091f9d18a4701", 0x99}, {&(0x7f0000000540)="35b90ce8319d94514e05e38f43f75575e12d43dc6fdf1665829f017fb535fc6396b672fffdae388712ca75617ace5c55471d8b0f0bf43b60deaac4f18544c856dc37b6d47810de6fe513456ee8bac66dbce12a8059a635396145ffe0f92f420a80df938c1437e40f3cf9da6b0160718d280ca3574c30f8c5f953aff140e13aa8b374cf633888cd9ab52cd97c9a621fd8d28f1f5fda046c819f2163d31de49cd36210ce605a7eadbcc817140ae1eaca3b37ef17faeefa51cfd9ee4eb2a9f8e127c5fc3a742f3c0b1f0e2092864e6a363defa631e1cb42e97959204cc749cd8d14e7c4", 0xe2}, {&(0x7f0000000640)="d8bc4f54044039c43487e1be92e04676b83d05068fb385893beb5874d13e355afb837d81485cd43c92d0b92d653bc842e8df5512cb71dfec56c3377e0918ca631e1788cf5fa4692d24c6f9ec66e94581b86e0755a49d7937b4b581b8ce047d01bd", 0x61}], 0x8, &(0x7f0000000740)=[{0x30, 0x84, 0x8, "4087ba5239d2ad34cd90b43864a49153963a51376fbd6ab011"}], 0x30}, 0x104) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271b, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) (async) recvmsg$kcm(r6, &(0x7f00000009c0)={&(0x7f00000007c0)=@un=@abs, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)}, {&(0x7f00000008c0)=""/70, 0x46}], 0x2, &(0x7f0000000940)=""/127, 0x7f}, 0x62) 2.175566694s ago: executing program 1 (id=3592): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x4c90000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket(0x1d, 0x2, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000080)) 1.877529744s ago: executing program 1 (id=3598): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) (async) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x258, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc84}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd346}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xde, 0x3, "d96313320edd56bb7d6d3e7c919f8b6f17cb6adb6492735e36e74499dac7c5939aa28260269b5858f8f5465b2a6dca7106d5f165723aab4fdd63019efe8ab7b7f802a86daca657de1624cbee5c8b93ac8e2fb6185c93f6243953b2473143a2028808a68bc26e346bb489c400dff3f6c1ceb12cbc74a318cc81f5cc53acb53e06e8f6952f6c4fd0178be5305415fd46817174f760e0688e63cd9afc23037c3e0001832078494666abbed5ab94e84a03bfcc266fa4f3921c6db65eac106f24f35381e84abbf1c43a08dc9e5ef91514b0b2c4436f4bebca687aa705"}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x97c, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xdb4a, @dev={0xfe, 0x80, '\x00', 0x34}, 0x800}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x37d68d32, @loopback, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xede}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x8000}, 0x41) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)=@ethtool_cmd={0x49, 0x6, 0x3, 0xe, 0x31, 0xff, 0x80, 0xd7, 0x6, 0x10, 0x3, 0x7ff, 0x5, 0x8, 0xf, 0x0, [0x4006, 0x6]}}) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r5, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x56d, 0x3}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x600408c0}, 0x20000044) 1.723195663s ago: executing program 1 (id=3602): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0x7}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24008000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000329bd7000fddbdf250b00000008000600", @ANYRES32=r9, @ANYBLOB="08102c00020000000500300402000000"], 0x2c}}, 0x4000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3e8}}, 0x40000) 1.384792475s ago: executing program 1 (id=3607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xd}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x100}}}]}, 0x3c}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfcba}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r6, 0x1, 0x1, @local}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000780)={r6, 0x1, 0x6, @local}, 0x10) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r6, 0x3, {0x2}, 0xff}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) close(0x3) write$cgroup_subtree(r7, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) setsockopt$inet_mreq(r11, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000009003000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c0000000b0a01010000000000000000010000000900010073797a30000000000c0010400000000000000001"], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x9}, {0x10, 0xa}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004) 1.38183072s ago: executing program 5 (id=3608): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001200add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$kcm(0x2, 0x3, 0x2) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x7d, 0xfe, 0xfffffff8, 0x0, @mcast2, @loopback={0x29, 0x460c6}, 0x700, 0x8, 0xfffffffd}}) 1.381221976s ago: executing program 2 (id=3609): socketpair(0x15, 0x80000, 0xa35, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000000)={0x1, 0x59b, 0x5, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000004) 1.208123554s ago: executing program 2 (id=3611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r0, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x16f, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x102a}, @exit, @generic={0x9, 0x9, 0x9, 0x81, 0xffff}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @cb_func, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 1.204197434s ago: executing program 5 (id=3614): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 1.109823364s ago: executing program 3 (id=3615): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000ec0)=ANY=[], 0xf0}}], 0x1, 0x24004c41) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0x4, 0xffb, 0x7, 0xb69, 0xc1, 0x8, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0xffffffff, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0xa, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0xf, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x9, 0x4, 0x1, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmmsg$alg(r1, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c400)=ANY=[@ANYBLOB], 0x8dec}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c0a0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000ec0)=ANY=[], 0xf0}}], 0x1, 0x24004c41) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0x4, 0xffb, 0x7, 0xb69, 0xc1, 0x8, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0xffffffff, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0xa, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0xf, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x9, 0x4, 0x1, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) sendmmsg$alg(r1, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c400)=ANY=[@ANYBLOB], 0x8dec}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c0a0) (async) 1.024130657s ago: executing program 2 (id=3616): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.021698221s ago: executing program 5 (id=3617): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000019c0)=""/4084, 0xff4}, {&(0x7f0000000a40)=""/193, 0xc1}], 0x2}}], 0x1, 0x10000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x200000000000011, 0x2, 0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000004c0)={0x0, 0x6}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000540)={r5, @in={{0x2, 0x4e24, @multicast1}}, 0x3, 0x3, 0x1, 0x4d53, 0x2, 0x5, 0x7}, 0x9c) r6 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000440)) accept4$unix(r6, 0x0, &(0x7f0000000480), 0x80000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) recvmmsg$unix(r6, &(0x7f0000004080)=[{{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/155, 0x9b}, {&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000840)=""/171, 0xab}, {&(0x7f0000000900)=""/126, 0x7e}, {&(0x7f0000000980)=""/102, 0x66}, {&(0x7f0000000a00)=""/84, 0x54}, {&(0x7f0000000a80)=""/93, 0x5d}, {&(0x7f0000000b00)=""/58, 0x3a}], 0x8, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000c00)=""/84, 0x54}, {&(0x7f0000000c80)=""/8, 0x8}, {&(0x7f0000000cc0)=""/149, 0x95}, {&(0x7f0000000d80)=""/217, 0xd9}, {&(0x7f0000000e80)=""/99, 0x63}, {&(0x7f0000000f00)=""/81, 0x51}], 0x6, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001080), 0x6e, &(0x7f0000001840)=[{&(0x7f0000001100)=""/172, 0xac}, {&(0x7f00000011c0)=""/84, 0x54}, {&(0x7f0000001300)=""/184, 0xb8}, {&(0x7f0000001240)}, {&(0x7f00000013c0)=""/125, 0x7d}, {&(0x7f0000001440)=""/192, 0xc0}, {&(0x7f0000001500)=""/249, 0xf9}, {&(0x7f0000001600)=""/74, 0x4a}, {&(0x7f0000001680)=""/178, 0xb2}, {&(0x7f0000001740)=""/241, 0xf1}], 0xa, &(0x7f0000001900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000001280)=[{&(0x7f0000001a40)=""/101, 0x65}, {&(0x7f0000001ac0)=""/191, 0xbf}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x3, &(0x7f0000002b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000002cc0), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000002d40)=""/123, 0x7b}, {&(0x7f0000002dc0)=""/73, 0x49}, {&(0x7f0000002e40)=""/30, 0x1e}, {&(0x7f0000002e80)}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0x5, &(0x7f0000003f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}], 0x5, 0x21, &(0x7f00000041c0)={0x77359400}) 978.826706ms ago: executing program 2 (id=3619): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x54, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@mpls_uc={0x8847, {[{0x5, 0x0, 0x1}, {0x6}, {0x1, 0x0, 0x1}, {0xc}, {0x9}, {0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}], @generic="238a3ed9c29f6ed30488c5e5691c9a6976b74800cb3fca5c00531205d6417979935f6b6aa37b6e30b814"}}}}, 0x0) 943.472232ms ago: executing program 3 (id=3620): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800e0001900010000000000000000000a0000000000000008001e00000000001400050000000000000000000000000000000001"], 0x38}}, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000200)={0x9, 0x4, 0x81}) r4 = socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x5, 0x4, 0x3, 0x4}, 0x8) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001400)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4c, 0x2, [@TCA_FW_POLICE={0x48, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x20000000, 0x7fffffff, 0x101, 0x7, {0x1, 0x1, 0x2, 0xc0, 0x9}, {0xfb, 0x2, 0x7ff, 0x3, 0xfff2, 0x8}, 0x4, 0x1e, 0x8}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r2, @ANYBLOB="2000508005000200000000000800030008ac0f00090001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 820.229202ms ago: executing program 5 (id=3621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x4}]}, 0x5c}}, 0x0) 819.567108ms ago: executing program 4 (id=3622): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000001c0)="48000000140081fb7059ff00000004000aff0f030000038130216266c808222e40d6ee11000000006fabca1b4e7d06a6bd7cf750375ed08a562ad6e74703c48f93b82a0200000046", 0x48}], 0x1}, 0x10004000) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 747.94479ms ago: executing program 2 (id=3623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061117c0000000000850000000100000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 747.570628ms ago: executing program 5 (id=3624): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 722.072788ms ago: executing program 4 (id=3625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r1, &(0x7f0000000000)={0x22, 0xf8, 0x40, 0x1, 0xfe}, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010) 655.818831ms ago: executing program 2 (id=3626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800600"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7d, &(0x7f0000000700)={r3, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000700)={0x34, r5, 0x1, 0x7ffffe, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006140)=[{{&(0x7f0000002580), 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)=""/167, 0xa7}], 0x1, &(0x7f0000002700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002740), 0x6e, &(0x7f0000002880)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f00000027c0)}, {&(0x7f0000002800)=""/107, 0x6b}, {&(0x7f0000004ac0)=""/4096, 0x1000}], 0x5, &(0x7f0000002900)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002940), 0x6e, &(0x7f0000005b80)=[{&(0x7f00000029c0)=""/153, 0x99}, {&(0x7f0000005ac0)=""/186, 0xba}], 0x2, &(0x7f0000005bc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000005c40)=""/219, 0xdb}], 0x1, &(0x7f0000005d80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005dc0), 0x6e, &(0x7f0000005fc0)=[{&(0x7f0000005e40)=""/162, 0xa2}, {&(0x7f0000005f00)=""/124, 0x7c}, {&(0x7f0000005f80)=""/3, 0x3}], 0x3, &(0x7f0000006000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}], 0x5, 0x40000141, &(0x7f0000006280)={0x77359400}) writev(r10, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r11, &(0x7f0000000000), 0xffffff98) splice(r9, 0x0, r11, 0x0, 0x80, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) recvmmsg(r0, &(0x7f0000002440)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/245, 0xf5}], 0x1, &(0x7f0000000340)=""/12, 0xc}, 0x76}, {{&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000005c0)=""/73, 0x49}, {&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f0000000740)=""/231, 0xe7}, {&(0x7f0000000840)=""/200, 0xc8}, {&(0x7f0000000940)=""/12, 0xc}, {&(0x7f0000000980)=""/237, 0xed}, {&(0x7f0000000a80)=""/113, 0x71}, {&(0x7f0000000b00)=""/163, 0xa3}], 0x9}, 0xfb}, {{&(0x7f0000000c80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/108, 0x6c}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2, &(0x7f0000000e80)=""/133, 0x85}, 0x3}, {{&(0x7f0000000f40)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000fc0)=""/226, 0xe2}, {&(0x7f00000010c0)=""/240, 0xf0}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/179, 0xb3}, {&(0x7f0000002280)=""/164, 0xa4}], 0x5, &(0x7f00000023c0)=""/97, 0x61}, 0x2}], 0x4, 0x40000020, &(0x7f0000002540)={0x77359400}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000014060000400012001437070000000000ffffac14140005000a000200000001000900000000000b"], 0x68}, 0x9, 0x0, 0x0, 0x800}, 0x0) 640.797034ms ago: executing program 3 (id=3627): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20004040}, 0x4880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002d00090027bd7000000000000500000014000a00020000000000000000000000000000014c764f47ed79740ba6e132b7c583a5e649514d23a533e533c206bb35f5ed332165a5c111eb15bd2a1362a0c2f0254234dd2682be30ea8ffa0c507b664284c6a6f1a9b2cff36c98d6442f73d84f72758e91b5bf02641fdd85c8edf22c528415480dc0985750e2739867871172cf38cce11aa364aaf9899bf35db2cc78eab79fe247d4045bb186447b8e8ac4825f76c3c1dd17f52a4d6d023110ba820175e42b1c651e68cc60c90c5dbb75a92c8dfd1c24f74f5b"], 0x28}}, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0x17, &(0x7f00000000c0), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3], [0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x42b9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1fb3a8c}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 639.057289ms ago: executing program 5 (id=3628): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee163", 0x55, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000280)=0xfffff908, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r3, 0x10, 0x0, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x400, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f0000000080)={0x0, 0x2000000800000009, 0x1ff, 0xfffffffffffffffd, 0x800000, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000000, 0x3, 0x9, 0x0, 0x0, 0x7fffffff, 0x8000000000000000}, 0x0, 0x0) 587.394978ms ago: executing program 4 (id=3629): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000c002e0072646d615f636d"], 0x1c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00168008000f00884827"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r11 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x44}}, 0x0) 460.237098ms ago: executing program 3 (id=3630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 408.134623ms ago: executing program 3 (id=3631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000230048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb00000000000000599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c50500721fc7aa2a583726c64c0fb6ca996d278fb00bba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee93f9959e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f54d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8989d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501ae03002af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a86ad4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909eb08cca312c557bff04cf1fbb0dcfe8ac00"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd3c1f8faa8744b2a3c5c763047ba1585e2a94c0fd780100e7e144d6a8280d5f79b3d7bf5756687aff2574a38904d67872771946ac2d58027ffeb27c010705e1ba81f50aeb128a8ca3cf7cb4abe854ddb03d2f56ae3fc2af209fbe52c06714bbaa532d3a75a2d639081ce165e41d1d6a4f5e1533", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x40}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x41) 400.325874ms ago: executing program 1 (id=3632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x4d78, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xcc, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x80, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "ef38eea3131be8874aa2e7a7db58e72e3d56eee46626811de44a5dec1172428d193d317c80062b694a54bbdc4f5fce54a24fb922507e9e50066e76be038473d6f8e5d09c18c0f39cd6c34e9216c98d56f9b1417a89fff42b68dd622879bea5edab11bfac8a197c32f30dfc2b18612f92dfa90476dd"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c68, 0x3, 0x0, 0x1, [{0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x110, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "f99035b51fc6bbc9cab19f5d2d0f07ce6c1b488a0d6e1527e2f3acafcb7b094d39563f3894e674e64df955889003cfde334d193a79d12fc1ea0de11a6447c8c7610166f062c013b58dfe1e142073cd"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x74, 0x1, "865938750e4db1cbae3c7d144a41a23d51c5f5714f79faf9506b8521279e79b69b2183c891e610254ce944d8cc7a37f89ccd0ebf83824da615700b7b5066cb02c13ac47b3688fd5eee6403fb41d82cc43496d537dfd9b817315e8153972e5b64ea34ce7098385e2fc43144cdfc631fd8"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x3a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xd4, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_TTL={0x5, 0x2, 0x1c}]}}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_ELEM_DATA={0x2c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xb, 0x1, "7ecd7f35983917"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "8323cf5537195ba4be9f747dc9c147419ea99a39ab470f5d96e0e469c6cd7959130404425214c1bf1b188de95fc2dc72edf50eb0eb1729372710fc57895473f01e657ad6eee8a70638a9e860ce87be8ace2f012a00b8f44e08a1a3399ca9e7980fecb07f1c20bf97ccc0129e21f6c7f78cdaa874400c6c"}, @NFTA_DATA_VALUE={0xa3, 0x1, "0fd054b243513a2fb5d1d57896bf5ea7ede581d7914feeb1d8edc479909d3ef535e01d3c5781db3090e7be87fa53f1bd99528285459a8da35f600c70fca59e8a65e75f62ae8600431b01b607dfff8129f15e82bb64873cabd1238571a83a93028a5129070dfdfe0f8406ca5313e355dd8991f371e5f67bc08ddf38d3f5660f188cfb86b68376192f9bce3963d2412d805e01bd548026e30f2719e7ac3d6cf4"}]}]}, {0x2290, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x34, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x27, 0x1, "dee836a0911eb8f168fb128f59ebd93cd0ef97bbe7d5e8257d867e45c5654903b589de"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "a463ca7c8c140a419c08e4c596ca83f43626a597492cb802db95aa3cb998624dfc2fb86441e7c03178a5b82213797ad13e83a66d4e2ea2f0ce5cbe47755aa2d6ef587f98a26da89b99bbdd16e863083a3da3ad839773f7e403693929d2b93884f3d62171a1fa5ac7296f2ec34f5d38e8b00134aeaf3dfc75a0caf8e1b167cec472d0e94be965fc0c59c2a5cc5b2e526a4d5e7b05736b296140a939456c59ed8d8b38af7f0bdbc560b1b9e90f3218faff6c36f3dbee3e1a889d83aa7a7f2f3288b41fa210d014e52822749be5a3485b5bfd4426751918ec7167964eb1c6a3ff75dac26b8bbfa06fa8ac4e78c2bb7bb326e2a2a08490ba6f3939844bf13f15157d0fc5a6461263a0d16248bf3707aa8df39d0611507dcf300cf7a4e8e346bfbce276f28b2dd3f5fedc874d3ee4d0bb22b376043db663516bc6fbccb99b77f1030bc5b0699ce80ebb8229a25225578ee69e5da5dcf5b1d10876d5fc8e1e4469c10af79124d467a69a10ccafa7a61d851b33e45ab007048ca1353c7ce8505abe9e372dfc049b8c2ee67d6887639a1678ec74744588aea1727b5c8c822f777c70f372f401a0b6e4fccad3fbf5fe2abcaa0a260662a1ff92c4a79fae919f807aa16ee82f15a3dfc2a11fc968f14bb186672e147cf1581cf5b33680bcf2793fe49aa59b7188e1a3b6d3525d01c4a2d91695a469f558a346982a0320f01847f413d34fda2d0c11c37f58c02623a165592d00d2a84577227920cec602d5224a6783925320d5c1e5f9871d614ec5e80ce4f5d619a7bcb3c27ac48fddd3c4accac462158088fd7ab9c794b5cc6818991a1017a27d436c703429dd5a659345bb0b714d62cc8b012722680abc13a57fb9c124e9c85ef8319d296e001fa975a676ec603f7fd217629dbef2efc4bd1adaf49ffbc9d58fddbbd36952c92f1eb5d927ced8f4b94fdccdf3de2b1c4a0d1418699818db85aa3115a185382adbe0cd3d351fd0e3f42efdfc27d443f9ec8cd10fdd55efddb28a1ee963c4531dbf16bf9361d2fc19542ba1e5653c4182f2c08f4261bfd46e3604f2faec8e550fdf3492063a090f3204232fa2a4d8af225e8ab5dada277a0c0ed3bb1020e7ff0299e05eaacd1ce588608887c7e888f38d06f6e8777008edafdeee5065fc36ff11748fc8e41399d387f54bf469273f811a343789213d6f8540163c632a9efe498104ef05ed648a5a262d208d0912b7468d7d2bc7db04f2121bdb556a911378a0383ac90a49679c08e4a5aad5eabccafd63fefc31c2e45bbc1c6233491ba05322435a8bb9e6939017edcce1548d2570516185b147572b4c2567db58ac82aae990fd24c0e310a687dd819c8fa1c33a75ecdec4ecac7de4db3c55ff271257ad2fd8cf9b22c84ef72dafad7ceab71aedfe5181043c7f47f7fbe97505c99fe66d14deb3fd4f4c1271d93b4461a8f8f39aa37251d9b230880465c5b93d2a299243a36a74cafd39467a5aa11c7bf702d1b300aaa02163494ff57fa24cb77404781f057ea7c486b3dbf0b0ec88547a5fd847a0ecd264d2908c87edb0692c5f404d0d6ed7ac1e5427a1693283598ff1696f3b617ea2422b12a753bdb75af8d565042b8cd714538001ea266c75a46efc2b2c770cffbd9a898ef2564b92defe4d6688ad368f8c40d2c1de8da8bdd29dea30c3d568e8d70fc3a35200a4a8ba6a104dc5c14f4dabc619f603629d9988336659d3a413f44d10ca409cd2cb71a5df94c13feca8750c883a922269451bbc27168aaf169f1e9d8cb5fcbdedf3f7853d59a68b8440c880a0b916a615cfefa3c4e19693c5993028c11167b5ab8ab4c0ef93be9a79d2cd4d31a7f065a7d548b9e83b275166869d57009c0c179b693854a79ae16595061d6ab6e1f7aa22f298f777585a6ab56187706753c9159bc51e238c47744b669cafcc07f6d9cb959720b48d5b01e525bd913537d32f02c8e43f922c4b018a573a631783a0d5dfc3384617e2809c4e8d1f1add0b3cf872f2141c5492bf612863761e744c626ea28b2ad38729f2b68dc72f51c3c3c9f4ff4d13e9d40e0015cec21fe9ecc615b107dc5bcad5daf819607d08dccbd78ef5fbf575b875de9ef86c4b444b2e161a14a739dab01650b47f7d09ea0b7408b9fd767d26627df071322a0338e27928459b904d04e0c46691e6cbfbd6a24e32e71042f23b37cafb7164407d559655e9a4220e3d880b51509156f90f65b19239de24d541e42a48e1fb92d4813f563879c8ea04454b17b53e5fb5cf64e78821a73528eea50c689ec0173fc77f931585c0b3653aefd60980cc853b0feed8ed897e377fde305b515ddfb7ee45888f325b33711aa95d6a01ba8a2f1db58a02db857bccefcb5f6584fd8ce7f8bc530bc6de64bf18e822de9c70cff298a8c950498246ddeef58f3c94ffe7693fc4fc9fdb6f18eb6a5d31d16c79c57870503040c12c17d9bc05c594b6c3ab40fc45ed541c304bd8781b676b1927710aca6f794b02e5b7a40d6bf3cbb8ae64b63c2cb498764c46ca978a1f3bf9ff6821340892eb0ff23dcc989c34f6be4bd4b457a81a4981696729ea73df8cc36a305544085371a2a61f2940f4d9af2eeae511d042a185723acccb018e1a5ca1525e6baba974a0dde2ed7586d8f73cd1540ee4ea39102d6728dabddb3dbe95af2d7f57ab0561afbbd697276910c4a497f8138a20b4e1bc261f306f9d27b379153998070855cc26e732f83f88b61295bea8556b94b3bca76d9166727612bdf75dfc56e651ae1edb7c2d322dd5b3ae410129b8433efe44791c507920a9848db0f1215be94f65828dd5124347ed3342716498c5c702c88b945844ccedb97f3d0bac9843488e8a640732286d444a6a2f83c0ace6d3322de698c04f4826479995c653e2a11a44045b055c3a153ac9e59e081007007df0f6277cd8d607eed375f7ffcc9943ee14d4b0f71459f75c24e0e89801a10929c2904d9fa0b9c134d07ace89c67e9f658fda2cadfa7af3ca417fb47dda92c39196aee1561a05288906d3ddd70137e6f5b0e60fb27b9a10eb00ce79f560aa9ee497295af705a47ab935a799d0f5e8896a842f1a934e5ffd5544de0cdec1f6352bdc8a94225e60fbe244ce022a4afc070a3af99a44c814c78e601c1e25951d1496aed04233613ce09868c48ab7c2cdaff3522dd732029b88f9fedadfde0dd1d8492ed7f5b4e908835df04b9d432beec7e27c8dca6619d311bcb818e5c209397f3c04e2952ae696e8852c6d49ccf48f9f7e7bfc7d301b072d361bd6d529c63a4ce1df40a3377574258098fbb60a81d58070cd2037e9a8efb0c3f39909adc377d940330129cd28603270788c4c02bf73acd3983cdc5085585dce9fc44587382a34dc924372a3f941458b5560bbad7d42b3f7992899f14857d1c0253aca9c22d5eb3e9dca2f911be2c3fb5edf5a3c5f9100e3eceb9afd9e25cebbae0f56c7bbdbf95aad25b58ccd1a2bffe45f3bae302061e0d4502b71054cd681ba3b0ad37f59e1f2444a26026da3d2a2cc1eb2cd531574bf9b0f80fe09f9644aa82d6921b0d658cfa834e9fe51330a2521b154f418a6d8e19ffbfedce7e1480c1303e15beb80595c95383437f77f4587ce751042bf601fd1eb23be125718c4bd38dbaf4bf5acd3dd7dc07599809527d6bba987c64b21239b4661cd794ab8bb13b4da6c1aa3469c833959b48f2e74dc694331a4b64607bf68ca97095bf595a47ddba80f0daea546de007fd49ca0ce7ea467348a9969d94579e0ee48cfdd0f7b0e70f369cbb57dbfa3eec1a571c85046a5351d3a963566c400124ec244ea133fe8dc46785cde68bac2733a8b3bb65f599f367c991c455a408834dad2af07c1e56d7e98dc1540f3b2f78fb5a745772dd5dc5598130c0a664e91d953fda19c7e8ed27145131278f1f90ce8f60785a284b399f142fd5e093a40dcffc2c8375d4f894e042d8f16ea4dd2b56c341e5d3ce2c48cda152d2c58f38b9456307dfd4cbf0ea5a4ec9ba560d3f6cea12d56204f38b02c82c3927119a4a0260a54f37734098e25b19b879497246b52733b16b782ce15ac5f511d98096b29191004bfcd623f30948229f4aeefc643c44a60c1eff2de1ad1eb2474049c4e24c2da7eaff0a3cd059a7b3d5e51d3b5ba24b98425bd43038f140a27fdeba036ee8dc425aa4e6178143a3e3fcafd0d0ea6f7013c1beaa41c84b774284837cf8a3c53fe4f8b1193142ef8637b04d1467a36d2cba77dcbf04c4c3ace39465958f3eb4c2028a7ef9c49edfb171f3435e2f5a4ec5c09e419846079ecb2cb8273a478d4e6f883f3a5aa714061a94709b8390394ed02b44e9652894e6dae3fdbc0374c2ea60597a523a912647ec8e5e8ad853ae6cfdf7c32eba11e61dbc456baeebbd49391de212b6019b3825959ebe443487174495bf35245aa3f2eb0d7058f9f3b70050a4d7118fd98cbda28af40ad091962c7bf52453cb74da7c7ff0a926cb30e0f972fe709721908b69b53ac9a7069b1702ba18350183086caa4c0430203aa72f650018687fd7076ff1743ee7642a0313db927e678b4d9c23ee2576be3f51104cd77708e0b97118049995f5f8435f7dd16693dd2d3eb2bdf12b9962dee156dab8bf417c114765bda6c5bbd2d3704fcd71897da0dc69a6f40e3ef231851b6699ca6f5b73a1e4dcf2dc44855332a2861dc5e3b472183beaa05041076de42644f127a8bc8c7d463555737f6cd058a551cb4e944bd5caddc1d507fefba16dbf1f313d4cbbf23dd1ecf692ff0d321d76933dfb5e07c87e5a7cee4cc4d749c5649ee7d884e730b232bb095338d32dd671c7aed0d25713e6bce54e05c57b53edd6c06fda4f71eefd04388765c4d6beca638cc8704dd395c3d29c151b9e31e163f0c890e529635f676c74d3915f0555bca979bcede48c33d9c3e803e8bab76950c0f4b0b5b56c92ba6461718f3d364816091e5d74891c2d150fb8aef9a1a8584d488d24501d844bc82c38ff8e4ac35d38b3fe82366b0ad9be6d2ba5e6a8065e52b22a532c5a55b00b814fce8541d2e62e34fc378429df7f35509f2ecb17cbc7e7c62f7ec18b23997ac9552be33fc73f2e214aaca494d576f45a054a2a472c5064ce4ad10a03565e6049c79673e7a06da4b11d3e8b8c027c807f6a22fe31ca39fa34b0dacb49bd8007b8b523f252df6bba50f83f2127650275aba7d3ae4a03c72b92753c71bb42b09e48f786744db209b268af140e374d69a22bbe4a6d83712c2a794f3a01a96bc5a889e4375d4133c0afb8354fb829bf12949bc728c68c5c85beb6ad30bd3e99635559ad74b19b45bb6431628aed31aa90f675e94bfe0f2def6ed139ff46f7779cb446904418beec71ff53d394271a35c94d4b249599da5ef37d635b2df74683735995748b976ae6fdc27cc54e3ebec8cd4b592d73acaab891158f45491efb32c038b67893b8611db41b4743f0e5656840c83d8746477c929610750bf36be600e6ce6a17bc0fd62a0fc0b48bbc5a77a432b8173dd5c5661925890b4ad79de6ffb4615d72366783950cdc705276ce7fcbd5cbe2590564f9c0b381ff522fd7edb3e258bb012b531b1a6c6c7d5dc3c0bd811d8e502dff757fff2fb8c199ec60ba297b3b8f1251497ac58e92bda74a881961da10256820fc248af9353ea00dd49f5a61555fa51a61a9aa22f776658e13145280203aa7a34a3cef238224913cda5f10a7952f0d5f00d4cdf842eb99aa4d2a8d4b7f506bbbd24a905062c7e4c8bd9a799d35c22ec5e4af200bacf7204902838a5d4741995d465ec447ceb73d8b03ab51833"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x11c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "2a3a8d2ec66c2e57dd377ea38dd60c3fe8a0e2512a2a6a63e9caf5e6a53b092079cf01b45a6784f597a3d0cdebc880ab638375453cc3b0ebb343d23f7c7c4e90e242c9a32058de8836ff925226bcacab259df9dafa813bc1f618af81d322e378b9ecd298e7efb00e00fd6676a736592ecef71fce536ba132a9e792f261e727ceb1e67eeb403e0ad6e127a72192eac1ffd468ee920d37250e0362798398df310aaed580bd88e373f0b098ec23b76431faf1f9b7fe3d273687f81cd8d24d17cbb705"}]}, @NFTA_SET_ELEM_USERDATA={0x3e, 0x6, 0x1, 0x0, "7c0b9abc83628820cca35f896100d25bae7ba144b04446ceaa64e3a21c4e177c927527c30483e1612527810308831d3c5c575326f65fbbef00f2"}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, {0x720, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xff}]}}}]}, @NFTA_SET_ELEM_KEY={0x100, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x19c, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}, {0x8c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x448}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x609}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xcefd}]}}}, {0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x31}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}]}}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_SET_ELEM_KEY_END={0x358, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "5ce7168efea9d11d0eaa1802da79206ce60f22718cd32609f3b719b3dcae03ea298891d0c04f1916a44489a2c6e9f11cf3470892aff03ec5df38dd319c8edc418edc7ba4582c81d789d6068a968a13ce53a317814bc6069e8b183ffaefc58ca76d6550b517f16193b403c3d943014739d8e4dc81370866a439ab80a1b96a5d4cf8d86aa41b1aa5446eb9c436d9fe34ed40dab93e64c63ddcc66911838b78333d76311f55477f64bd1e5d223ca9b90f03aa61fa10ddd8fe0e7c944597a2a27c9aed873eb35738c55473cab23f"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xef, 0x1, "e11e70edd88a5cafe3b8655bdaeb95d2ad8d26ab8fd70c2469e20cd8982a75f4b89c52f5e1c88c77600058e9d2aa5a5a7b3b65f3271c148b3e88f6b0d25b1b18dc2e4d357a6a95bd6f837f993ede5374239117600162c231afded1a4602789c80dde7a17750b67c4de43dceb53aa24572f18026f5330946605505da146354136e9d0734491305b83f0bbe4f66918effb10240692faed3073f23b4b4ec10454007cfcff2fdcd423063d8c841d29489481810f105a36c140ea42aeede59a0c92456aebe40c33d7b8174867e719030fa54b4020b1350727a8a672b4d4697acb687b7ed3c6962bcd96feb68aa1"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "ec8ec0a2ee44dcfb23ad9b029021ecad4cc299db5c64a37e8242cd0cc21651f667697dcc060ed23744e1ebc768416c409dc7c8ea06e0c24a37e2a2fa6e88ee1324d5806de3aabfb2d409986fed7be1774e25aa4299f7e1bdb84fa66aba6d957fa2b55b5ac673d15d4f46735d22f6c28815f9fafdc22631a8386e55625306f2d9776694fe4ff51398d35d6e19c22c4340d5fa9aaea192c1f916228641f5c222e379102dfae2869d0bd940bdb84fc75e6a0d5ca6ff4f1e180b23de"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8, 0x1, "373b1ad1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x304, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaf, 0x1, "5b3e2e21f40645fb1c2f554b766e89bcbbdd477e4626f6a541b8037d5bf666fb14908be7db04c52812a09c15f5b55e644ba92459c4c92fa0ad93f41fd13347d228104015478407694727b28e2350a2583be0d04e7f102453300f00d483f71b72e7a355583e62969c5f8a6aed918fe9894ac2af162b2360cd4ec803d631afc3d914d9ed22c423d85917844973a4a0f487da37b7c2ef6417224f4c257d2e0b3a566106cb577e361a7a760e42"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "e9c3a14e1ef9d976970562b0a1ec24ee986836c0ecdc3bb024150c7f80096c046da4b8c5074a3753eac8e01ab70bd607e7df21b754053ef8774141c494e33ad1a9361a899a793f5af9f2dca5b3be09b7a55ad5def86a65beb57fb8a9fde8835673e50382db28ff813eb6092443aae335fe2a944db35e96ac6f1b3fb62034505ec9f289276f89cfd9614933b789fa3ef910a6fcce3106e2227e015f58ff0ecbe0344fc3ddbab85ba4ce0082dade3af6d65f7fc4d3e075d5c6377a69dfd5fb95587e"}, @NFTA_DATA_VALUE={0x60, 0x1, "3d4fa69c4ef96d2d2cd46f56584033b97356cf29057c11b4298dd0f947b38bd9fe522a81ea6f4bd14d72b0de88f9df6a2b22016ed330f60d89ceb5a6286ca3ffc38ca48767de0f404780c586d3f576a2bbfae4b52ecf4c9942b2c356"}, @NFTA_DATA_VALUE={0xb0, 0x1, "c514d12adb489a2662abfec0247a8c9f60366ad772e81e862e05175d96be4275d338a8bfa973c6b9853be0b1ad19db6feea73a09ff682d116a23057ea5fe5ade87b3ff7b26f9c36cbb6a0bec224fb2106206ab7d7f8ab4847e3ab8a0e46d9681f3135b2808d8a5b7085520c3cf1339c7f3d81d41d4bcee103cca5d9c80cee6f9afb1233113e7b903f8739c36d13da41773a17661b971ae994fe3dbf62fc2fb436585a435360161b0fc62f772"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "04b5c5984c15f205ebacb70ff698dd6134db1c1ae7ff5102ef44c62a77d9e70f40e0a06146fe1dd596a85a6df472a420cdd504d1cc982c6a5c895ad459d98a24b1e1d19e49272eed0196472a0fe2ba552270ea063308e82b6668248172552376397bf17dbdb653877193a5358ebddfdde4d8c2b7a73e62da82dcd291ef9902290c2ba3988cdc4b8c6248e51ac2c8013e8465b158ae0bb56a5b9e067b4ec536537c5a2198e5"}, @NFTA_DATA_VALUE={0x31, 0x1, "9d97398cdc3117821ca5d98695cb533924d280428a7ae8b1e5432a37ef408512d8fe05ae6d6e91efc7f94b008e"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x460, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x3e8, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xf}]}}}, {0x2fc, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x2ec, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x2c8, 0xa, 0x0, 0x1, [{0x2b4, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x2a0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DATA={0x294, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "6ec1ce2717e625ff7c4f70757ed494661e4213f80d33b991d2348c8400851bd2a7b85785275658bc792d1405c64b710f641c44acd50bb991a1a92326b9f5d18c9744f619d806319b755fbdce18515cd26bce"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "2050c846b6ae4e5dc27c86bfedc232c7660151dcfb36515f7c90941a9f19215ded63fa27e54bbfefc065f71df8e840aa668efc086d221320fd8bb91be05a9f3e9ce28ede8e9a967f9f0dda7254daae4340de7d2e69c35598661cad39aa2c258e9f8c2087e0eb6717e3413cd752e02a8e356619aa8268eae825a1a0f2bb54c23ab9dc16a631c21b"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x401}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x68, 0x6, 0x1, 0x0, "9b894393d7f63371171a53432dd8f33be2005c3db7890fc22938806a4d745f70e0e0a4be242f16ded4bc7dc56d4b086a27801b03b847cbb3e50e0a225558f461cbb305ee0c683603cee98ef5ddde820917905e74f50b89ce3698d9795435fb250c559e84"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}]}, {0x14dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1474, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf8, 0x1, "42beee4250a0d9e672719b81b0217d848d6cf80266d60f4e1998e8da8d8ce5cab8174250e5ad5a19583a99ef0b055421f4d94c28137bfcb21491b503215a01f5e9719a0aeda0b6d7ae5759885f9902d64a1fea4855587092eaa21e6317842fac7109dfe8cad7a24b1ae21eb1576f0fea5db1572015fb84fa75000667430159f6214260c40d7ff827e2bd391f9b6de009a4efa5a1fb311dbc87ce4cf2d78d1055b635d10c678dd262a069182adde9716c785fe77cdd23c67947c16c5eda4303625c09e6f42bf4d23e635d3f8f9aacde7444713cffda5d4bb4d8a68fff248bc608a36b0c84104425bcd16787d406df393f4ba1bb6e"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VALUE={0xf1, 0x1, "735f8d8bbca462f9b4dd4316d4a950d14b4114d203a1ff1a19422a3417ea3dd2c9db8ea733729136f1fba955ef69992428bd3f98248cfae6ba859b3211028e2fc37ffb7d27316f5e94a2755080915c4e1ddcac8c9354e5ea12b4ce80099b8f199114f33ea59b208225798b26d9f10829651d05465628e2e159382af16bf96f3c4e9797eb948001220fb91e72119c48a7d1084b034312e76db34ed2ca55edecdbc3681ff7c56c0a9edcc2f99bf78339e0f1c968074c2043806a5ccf583c112fc2aece51fb382bc5732dfdeb7927773df470545a6a1fb9dd5718e5761ca0b504f1ed102f24d2917ea6ad34f41ede"}, @NFTA_DATA_VALUE={0x1004, 0x1, "f6dc7e9f4d207e5fc5e0828969a838301d282611312191a006e26ccdff6b14539909da548780681fd7a7a8f5c951f2ede5c969c9b00d24d1b17a52a9343f04abd4658dcd08e25e2545c7f0e5ff2340225f78e26ae87af9274bcedf8ba566f6cb0ef57ec7e9892647722e49feb598183d0172cb4f76bdd7bccf612b0e4b923dc36b5adb86b4e8790fff9ebbb9025b7f49695e80a947e11e6923dbab174d3b99a10dd323c8b1c0d1295a182ae719ebd0c83e48c40c715d4ae501e20f9785f1df4741d08624244fbf988747170261b9434e5286d039ec10b0e955830622c87f3c171d24b4aa7f6d14487f1e623dc1302f72b18025e55623040124bedbbdfecfebb9a239eea149e65888be9c312c41f61d89f749136e227d5bfb82b23d9770b92efbca350aa3c657de0d489d7aa00c1b508c56f3a190ec8694a94636f1928393b647f3d018098a510d34b55bb366b454bfba78cd3779de83b02550d62363fb6f0ff83d5705f6a15f6fd2ccd2b3ccfe05f48288b258777cc7cd3d1c1c7e1a49f7aceb40a371e568b9e80cd4b99ffdd72720e4f6deec1178b091cfff6838dfe2c09b186ef5586664cd7d517a256adadacc3717c93f42815c533622a9eb747905f6985d5b922eaf1e262bcbef9d7128289ae51eeddcf108499edbe671785041687ebf8aa47b68b193253aa1554ef34370601728ab9e26d7ba388c86591b67090ec97b32b6c3689299a4f5cf5612aab68167eee27e0e448d7d0cdff38042d6111d0b5e25d6178d93d97e4db43893e2ff463f0a2a34f5fa7ed0c3425734bfdb6f106176bbac10d0f8a9d2fdb14afb3be28094c3da1a854fbfb6be462c1339ed047b5941b596f66c84995ce27606d2608c0b33a02d2064683718330075b538a0b33813598d8c6207dff8e4e6a4e4c412486c3ce491b4aa6c22f38c8b99862763d33cdcd2f54a84acf4f4d7d5d696f04d370322e3fa90506041e15df5c91f5ab01041d198450d47072b0b839ba950f2e92a111d339acf26e2a46df6e2fa2c1aabbdba655d5079c863a5f0c2adda842c32529ce7c828e92425b093b18e5e7d0066407e0a0124fbcf66d7978b61e69f840380f5df91ba7b7bd0daf0e38af6b165a930a861af30b3043369dd3da4673b974537cb6159b0aba7517aa38a68a2383fb6aa7f8356284fe9a079ebe50bc27597fc9c9f3fd3273cd1f5271badd3217025b93ab26c4d6514092698a50f4705c844652ffa99e338ffaa658f02f5586528436ad1453a2f6b632a082e8ef640481330d9adce889faf802df2f4668d8e2cdbd55795db2284d862cdb3f67401c141f5398e1828fc964bc281fd8a77a5fc25adb95348a7131a2051964702a15030c19bd226af16355320f865bf83f2d8c0b7c6cf0d3321bd08743d410c4a5e5502b7b4cc1883e4db4a542f65dadb568291ad43bc0c151337ff371e428b897d10020984e8db410db622cb643d51c32bcead0bd214fe08768d3ded4ca92aef001caf7a94238ed1ca8d7f9c0ca40d7c07b82316e08bd9adb68aecfe2c1359e49fde2bbdf12b82270a96ab02c675c05ab1786c65dedda10b651b728aeba4648ecc107c29331adc3ba1a14fcb745996a4a58503c7489e56833a59beb94f8d3d3e0e4fa990f80a43b110506464615da8d9f2d14d7508ee9fea0e45444cbf51259bc6633fd82816b8d72a9efd9e5db18c6ab5ba2dd57ae23e097269b12d412f0697e75a1b02f80d465f7c48403b85bacd5f35a1c6e6fa3c855ec26fc3df82ff45b868d97da57cd8177970054fbd1ea963ffd7e9ef89de18a05560b7d094d9db5aceb22b59289e91f41037f63290877e836ce772d9216334f81c12a5fb2f126b695c46c677fefebb3e1026aa270c132f4e97e6e317dc9540e0493728def9646f4afe3fb593a84313dd76957fb3d52351c4ec952e3ca9be586b01320cbba7d12d4c58e6135e0beae25d96ebf7d5ee05bc7f547257072d8fdc4b849d50d102d0a7c273e24aec3e5f8dd621e4930a6a61a107e1c877f2e2cfafb5c2346778b44d02d794befe94c30c058b3e29e26d801db57940499984affee2506b43770412a8844a327afdc0f51adf1138a255a1b1d7a6be088c3fbf444662de8b99acb3a4668ee95c5576e9d916d3e954e7621e430c75f3ab45f605597bd36ef39cf5deb28ad2a0d800992ae4c36c30c851f7029215d666d174af5106e2f1da9b2352178426ce8024bc173475f48ae40f5265c6f395d2ee5c35077e3dce0bef5fce2e1e654e1f7aacede89acba8aec4c524817d0d5e3f4ba081d163d7655028f1ae95b6d117aeda41fc9838c0919a9978b754d720e423f17726941e301fe9ebd42428e422972fac807022d19c511eae15111cecdda7de24ca2c0660cdc9393b8dabd192367eba85a7c0f435e40d52d6bf59df693e290e5d890c2a6372a0ae10f0599c6c592581444551c6c3b8c9da1df20c9343796b3e29efb77dc5089470634b91610ff13e15e4cd5836d0b84f8913efdbfe1015010e67db2da3ecf1c8b5bef79a2caede953111b90f84cf2e6f33ab98929a933c64173d56922d6fa4c60176a231032443c21c6e4d2c8fb24914285057e3648e9d3ef32eb6c682fd2eb17ae9a67e154449f3da8b5635b3acfb16e68560651eeb3d0eb21f5196dc7278e44803247df51556e9b80efeccdaf90169596060e7e0253e509b1ac1b4d6b99cf58ab6ab1eb384ea8b4d80383e9e931dec5df9117f4c35f851e6c7926387fe67dc3167e53def15514df2dd637fc0afa3e0a7afd00c5fa6b58742a61bd6fd9ef33c785308cc15863b6c7666449c6b364e55fe45fce82e8a7115a4d6b79c58f45295155fba43dd9614212eb20c39a4bc25956b9247df9ccb709246f7ad444a199f67044c485654b25d17d9a326d9c266f9f753f4e7da08accc930e725b539433cd10c09fef1097ac3cc0ae4ab75352238984d73918f8d3b5fcea8124fb8decd4f8acf3b4ea039708f42b2850842daf5c14029aced1089d5951bfe786d04d3b0c27cf84da225543d07610af8a1febc0c035e51510551c80882b2c4f8a82ae1de1dcf343f584b3ff654c0cd1c0d7d8e84bae26d9990910e5a719bd79a9b53fbddc6129dcbdc73f9eb18318cb92b57bfe53a615a1f78c67bafd749198935e34e39714f408995d65c331be636183a3b30ebd308dd5f10b5da3356b5e5dee8dd9bb9b553740d36924cc5022a1c22546d96ef44570432a71d730bb3df345f8de129a71855ed0f83d1971d2492a18edb8a27a2f26f13ec4a628c093dc6b7562af503d3407a707444d844661d14ed854c321164cfda82eb3ab825310187aea9e0134185ab7fae823cb7907c4f312ce4e7d325da42382c0e290e813ac0a0292037e2719a125c9c09269fdb77bee83d0a195551c697c5b7a1c6cbce97f358e4d051d4d5a6587365bb7425941c34a479b9db7126066f604439ad9e9419ca3403b878659d616fc281080181f552f9af448d0df69ebb8f248ae3c23e62bdbc035371d2891ed7737ef18c674817c10e72d9f975f392ee4006e5569803e8b01815a7e22377a6daab3ba448110bee28dc0b9de952d2c6cd988b3315152b65ac5a208695489ced7d5d177d8296861ed820930d0a8789ec23e522d0da1059dc026598bd133c3b5406d6b9f454690bbaffbff53d2b9ff1a868b8906ec042c7c0eb87776248ff01c1568e21208e8f689186831462cf7d8a6f03df0228c2f02674578573a0a7c93c84bfd0c28cf0839e49b71c4e4a6b8dd408e129879bea86c71aa830ffdf52bf42989ea793dfa6a2c04682540e4d804597070e3ea5f7074b0160e3eadcb6c962aa3e65912e9b82e9e71f235c7cb90bfb436b6eb1997f6e189b578a6ee827a181d1a7612877622d09167b6a1eb70c05708e952225c4d006de2f40aa83d37b722457c1b0ad74464d91c7fa3d70e521a55fb20c51bd18d544e92f565fb4b3a6394d4ea08ce026471f990f067dedd6d9b1ecf87217eea736e6490235e6113a2c32fdd5b35d6325bc66b07c8ce7e8abb0f75e7d27370fb419150a434f11a595c416093bbb6dcc3cad95629f9cd3159399b6b685f115ad9263d79c02744565b763e0b0a7318769bc11bca49743a8fa26f27c21e0df771ef4aec7530f97777dd3a4656091a7596b9a0be0c2cb2d27bd1e751b94c0a768693a7f0a5ec8014809f2b83da3871cb28ddd2823ceeb7da02507c1aeac887480adbd2cc4917b21dfd3859cf0ee7cdd8dcb5d92960df40316729bf23106e3983f26e02938e8d7ae6ec2f3875dda5634fda59b80542c623b855f0d8d46e34a5e3110e1bdf3dc35e1c471749daa1afd236c244e10d6c6de72400f0930b42fec0a2fa17b1a194dfbbcc2814158ac4afbcfe596d0339e3e60d34458eb33922680b3f364587c447a992ca4fd908de47ef557c262b40c2a10e86c2b2d338f26f8c00943f8ff41b2b0c83be6f39c28d24393f35e3d1b14fa5daada94d862c1fb6a9ccb16aa3a9622067099b941b74a2eb775f7b621134917d31dff476cbb0f4467190a6ff9ca6a4ea883b6a4af2f57742d6627359999b90e72e05e846c6cc225b8029afbb4b690285a4332f313c5bf9aeb213845432aada052db224e2e1df12ac4e76df7155738295d189c341651feb173af724fc2f686cc092f5a027d0073dcf4d16463939ca2cb558d56166205d6ffe121bfff5fbc7497daeb593e313a7098ed765bd50593bc39722e68e13826bac285c74d32a71398232fb965db898d46d93ad02df5ba66d711bd8f0b5727c46d57e9f8415167aa961e1c64d69d8a2f35ed967b4714db3808e549774820dec36cdc65994cf96a401edac1c74619cddd4e05dac5bbd1f564015e0c9390fbcf04a5bfc11dfa2e3c66a146ae93588254f2ae98abdead077a3a28435b122fa4ed30d108702276c6ac975fccde4566cc4838e60dfa1e8bc4d7fd714500e735c44bd05d72ccf999f4b7d67334bf9dec2d2a0641d18bca985739f1f200bffa42a021d28351bc7c30c9911137faf48a4059529b6d93822b17eb7a4200d5940a7763f5353e17641183f240cbb071a6c33d7b2e33b4737865a25dac8c8106030ccb2cc3de2b5f05cb0427229829ba2d7544db8d2a57b1a62df67412c05c80fade2828df10eb113f6fcdc3914abb0383f9045a64b51b50a248296243259e6243fe29481227c940dac9e77b52fc1ecfc3cbb7472a0f779cb87fc8fe6474595cd68e89c75b168989019abb42b238f23fcedfd7e9d6f296cc4085016e76b8ab1befcb484612e2d72d8df3a11fcb7664393bc73d4cd87c57c9c879667fc5fe4a10951a2c6a68611b39a1fd7cb8dffcf7ceffeb7c1e270dcbb81f8800443f4df889b559472dd4643509577370c96a8309d51eaf31bf5b2116ea6ac6ec2a83fb6fe08eab3eef78aa0f9af9a960a185334073c5e29ed3d0c75ae629ff0d48a8e0f41ab4e9c65130ddceaf94b0baf5885a3ce3e1354af93ab4f8f04663c2197e5ac186c2b9b96b2d8bdbdb61286dc96a998c55b054d0952942eddff293d3615034160080da0f76603ba50c725237891ec7bd795d9d3c6a7282b0b6c736aeed0f0f2580fe2cacef7dd4c20d53f5a26011fca789063c5a1344a1ffc4692f9075b9894abfbeca36ffbe445a80c481d679090cc6b780b668d27548c07da8d5188c57c46bada073e80c104548cd531572d0bfd4c90be7db33ea37a676e5ff5ddf621ce15af45280d74b12dcbd9cd619b64caad094972d0ddbac20830ce0e8048afaf382d664e73e442ee02c29970cd19d88c1e3c84e25e57777186"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "b1f5e067903e80b7b7f106027b8d5ca576a41e17686243d10b5ccd3ce452daa14af2d6214afe405afddc07618c9f038ade1b681cb5dc18538b9530643083a19d596782b4a69b5206e7d92672e5529242fb32f2436f321b0748ccea8c3249ba4c994fcd8ede4299ea77"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc3b}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0x4e2c}}, 0x0) 236.17807ms ago: executing program 4 (id=3633): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0xfffffffffffffffd, 0x0) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x880) 232.158556ms ago: executing program 1 (id=3634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(blake2b-256)\x00'}, 0x58) writev(r0, &(0x7f0000000200), 0x46) 207.893949ms ago: executing program 3 (id=3635): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000000c0)=0x49e2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 163.893962ms ago: executing program 4 (id=3636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000c80)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x4004040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002060100003d00000000bcda0000000005000400000000000900020073797a30000000000c00078008001240090001000500010006000000050005000a00000016000300686173683a6e65742c70"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772a8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37d651f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f49a5764f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d0775"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) 0s ago: executing program 4 (id=3637): sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff4, 0xfff3}}}, 0x24}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {}, {0xfff2, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5c3}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}]}}]}, 0x4c}}, 0x4008041) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): abling of bearer rejected, already enabled [ 219.527757][T11722] syzkaller0: mtu less than device minimum [ 219.642602][T11727] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 219.651213][T11727] netlink: 'syz.3.1668': attribute type 4 has an invalid length. [ 219.660765][T11727] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1668'. [ 219.694780][T11728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1667'. [ 219.715055][T11731] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 219.951986][ T1166] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.001197][ T1166] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.021064][ T1166] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.034756][ T1166] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.252261][T11757] netlink: 'syz.3.1677': attribute type 1 has an invalid length. [ 220.262221][T11757] netlink: 'syz.3.1677': attribute type 3 has an invalid length. [ 220.312482][T11757] tipc: Enabled bearer , priority 0 [ 220.337888][T11757] syzkaller0: entered promiscuous mode [ 220.338153][T11761] netlink: 'syz.2.1676': attribute type 15 has an invalid length. [ 220.352168][T11757] syzkaller0: entered allmulticast mode [ 220.439974][T11757] tipc: Resetting bearer [ 220.470415][T11757] lo: entered promiscuous mode [ 220.511771][T11757] tunl0: entered promiscuous mode [ 220.537025][T11757] gre0: entered promiscuous mode [ 220.548148][T11757] gretap0: entered promiscuous mode [ 220.581315][T11771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.582771][T11757] erspan0: entered promiscuous mode [ 220.598295][T11757] ip_vti0: entered promiscuous mode [ 220.611241][T11765] tipc: Enabling of bearer rejected, failed to enable media [ 220.621032][T11767] tipc: Enabling of bearer rejected, failed to enable media [ 220.630967][T11756] tipc: Resetting bearer [ 220.659013][T11769] netlink: 'syz.4.1680': attribute type 3 has an invalid length. [ 220.774456][T11756] tipc: Disabling bearer [ 220.817517][T11777] syz2: rxe_newlink: already configured on vxcan1 [ 220.949909][T11782] Unsupported ieee802154 address type: 0 [ 220.957586][T11783] syz_tun: entered allmulticast mode [ 221.004331][T11781] syz_tun: left allmulticast mode [ 221.096902][T11790] xt_policy: too many policy elements [ 221.113700][T11790] xt_policy: too many policy elements [ 221.481564][T11815] netlink: 'syz.1.1696': attribute type 16 has an invalid length. [ 221.500251][T11815] netlink: 'syz.1.1696': attribute type 17 has an invalid length. [ 221.529492][T11817] netlink: 'syz.4.1697': attribute type 39 has an invalid length. [ 221.624648][T11079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.636260][T11815] dummy0: left promiscuous mode [ 221.653298][T11079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.675735][T11815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.693158][T11079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.305013][T11079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.322177][T11852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.426658][T11854] __nla_validate_parse: 9 callbacks suppressed [ 222.426678][T11854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1709'. [ 222.446143][T11854] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1709'. [ 222.648389][T11871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1714'. [ 223.346121][T11918] netlink: 'syz.4.1722': attribute type 2 has an invalid length. [ 223.363656][T11918] netlink: 'syz.4.1722': attribute type 8 has an invalid length. [ 223.371424][T11918] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.1722'. [ 223.380800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.464668][T11920] can: request_module (can-proto-0) failed. [ 223.792631][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 223.792680][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 224.022493][T11918] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1722'. [ 224.054461][T11932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1729'. [ 224.228985][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 224.241557][T11943] Set syz1 is full, maxelem 65536 reached [ 224.292728][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 224.379643][T11950] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 224.380257][T11962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.413002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.717051][T11967] netlink: 'syz.1.1736': attribute type 1 has an invalid length. [ 225.202187][T12011] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.209467][T12011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.390834][T12014] syzkaller0: entered promiscuous mode [ 225.402025][T12014] syzkaller0: entered allmulticast mode [ 225.724541][T12037] IPVS: set_ctl: invalid protocol: 59 172.30.0.5:20004 [ 226.710138][T12035] tipc: Enabling of bearer rejected, failed to enable media [ 226.935093][T12052] bridge3: entered promiscuous mode [ 226.940444][T12052] bridge3: entered allmulticast mode [ 227.047726][T12062] validate_nla: 1 callbacks suppressed [ 227.047744][T12062] netlink: 'syz.4.1763': attribute type 4 has an invalid length. [ 227.127833][T12057] veth11: entered allmulticast mode [ 227.426097][T12089] netlink: 'syz.2.1770': attribute type 33 has an invalid length. [ 227.463681][T12089] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 227.626450][T12100] __nla_validate_parse: 13 callbacks suppressed [ 227.626470][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1775'. [ 227.801455][T12110] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1778'. [ 227.951246][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 227.971724][T12121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1779'. [ 228.051244][T12125] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1782'. [ 228.080416][T12125] net_ratelimit: 3 callbacks suppressed [ 228.080434][T12125] netlink: zone id is out of range [ 228.162558][T12125] netlink: get zone limit has 8 unknown bytes [ 228.291647][T12136] netlink: 'syz.0.1785': attribute type 10 has an invalid length. [ 228.309838][T12136] syz_tun: entered promiscuous mode [ 228.322400][T12136] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 228.566465][T12153] netlink: 'syz.1.1790': attribute type 2 has an invalid length. [ 228.698751][T12161] netlink: 'syz.1.1794': attribute type 2 has an invalid length. [ 228.707401][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 228.726563][T12162] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 228.843299][T12166] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1795'. [ 229.027270][T12176] 8021q: VLANs not supported on wg1 [ 229.212247][T12201] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1804'. [ 229.239723][T12203] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1805'. [ 229.319223][T12209] netlink: 'syz.2.1807': attribute type 29 has an invalid length. [ 229.328595][T12210] netlink: 'syz.2.1807': attribute type 29 has an invalid length. [ 229.515626][T12220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1812'. [ 229.694126][T12235] gtp0: entered promiscuous mode [ 229.706067][T12235] gtp0: entered allmulticast mode [ 230.173885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.235704][T12274] netlink: 'syz.1.1824': attribute type 29 has an invalid length. [ 230.251464][T12272] netlink: 'syz.1.1824': attribute type 29 has an invalid length. [ 230.488771][ T5182] Bluetooth: hci4: link tx timeout [ 230.496558][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 230.506226][ T5182] Bluetooth: hci4: link tx timeout [ 230.511547][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 230.714356][T12292] netlink: 'syz.2.1829': attribute type 1 has an invalid length. [ 230.925279][T12304] ip6gre2: entered allmulticast mode [ 231.067580][T12311] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 231.096528][T12316] vxcan4: entered promiscuous mode [ 231.101851][T12316] vxcan4: entered allmulticast mode [ 231.160130][T12321] tipc: Enabled bearer , priority 0 [ 231.167674][T12321] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 231.197435][T12321] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 231.244507][T12321] tipc: Resetting bearer [ 231.651357][T12344] tipc: Enabling of bearer rejected, already enabled [ 231.676448][T12344] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 231.720640][T12354] dvmrp0: entered allmulticast mode [ 231.900041][T12358] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 231.904427][T12366] vxcan1 speed is unknown, defaulting to 1000 [ 232.155101][T12375] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 232.303458][T12384] syz_tun: entered promiscuous mode [ 232.321364][T12384] syz_tun: entered allmulticast mode [ 232.562631][T12366] lo speed is unknown, defaulting to 1000 [ 232.575880][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 232.680369][T12398] validate_nla: 2 callbacks suppressed [ 232.680388][T12398] netlink: 'syz.2.1858': attribute type 1 has an invalid length. [ 232.713209][T12398] __nla_validate_parse: 26 callbacks suppressed [ 232.713228][T12398] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1858'. [ 232.732008][T12402] netlink: 'syz.2.1858': attribute type 1 has an invalid length. [ 232.740249][T12402] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1858'. [ 232.882720][T12406] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 232.889851][T12406] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 233.109854][T12417] vcan0: tx drop: invalid sa for name 0x0000004000000000 [ 233.167757][T12417] netlink: 'syz.4.1864': attribute type 4 has an invalid length. [ 233.237048][T12425] netlink: 'syz.4.1864': attribute type 4 has an invalid length. [ 233.470440][T12432] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 233.768840][T12445] netlink: 'syz.4.1870': attribute type 1 has an invalid length. [ 233.777693][T12445] netlink: 'syz.4.1870': attribute type 1 has an invalid length. [ 234.028997][T12465] tipc: Started in network mode [ 234.034889][T12465] tipc: Node identity 3e3cb0ac5f5b, cluster identity 4711 [ 234.044308][T12465] tipc: Enabled bearer , priority 0 [ 234.053899][T12465] syzkaller0: entered promiscuous mode [ 234.059395][T12465] syzkaller0: entered allmulticast mode [ 234.103230][T12465] tipc: Resetting bearer [ 234.116625][T12464] tipc: Resetting bearer [ 234.150607][T12464] tipc: Disabling bearer [ 234.270030][T12481] netlink: 'syz.3.1880': attribute type 1 has an invalid length. [ 234.291565][T12481] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1880'. [ 234.323437][T12483] macvlan3: entered promiscuous mode [ 234.330672][T12483] macvlan3: entered allmulticast mode [ 234.338879][T12483] veth1_to_bond: entered promiscuous mode [ 234.345023][T12483] veth1_to_bond: entered allmulticast mode [ 234.358636][T12483] team0: Port device macvlan3 added [ 234.479912][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1885'. [ 234.519958][T12493] tc_dump_action: action bad kind [ 235.067616][T12514] tipc: Enabling of bearer rejected, failed to enable media [ 235.122180][T12530] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1897'. [ 235.294276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.401577][T12553] netlink: 'syz.2.1903': attribute type 1 has an invalid length. [ 235.421354][T12553] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1903'. [ 235.450783][T12553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1903'. [ 235.518386][T12560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1906'. [ 235.542676][T12565] tipc: Enabling of bearer rejected, already enabled [ 235.811543][T12585] netlink: 'syz.4.1912': attribute type 32 has an invalid length. [ 235.843130][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 235.852381][T12585] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 236.005802][T12593] tipc: Enabling of bearer rejected, already enabled [ 236.059025][T12593] tipc: Resetting bearer [ 236.081383][T12593] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 236.110599][T12601] tipc: Resetting bearer [ 236.252506][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 236.381425][T12617] netlink: 'syz.4.1920': attribute type 10 has an invalid length. [ 236.392135][T12617] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 236.410235][T12617] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 236.882073][T12651] NCSI netlink: No device for ifindex 813332851 [ 237.932242][T12721] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 238.044293][T12727] tipc: Enabled bearer , priority 0 [ 238.056653][T12727] sit0: entered promiscuous mode [ 238.071086][T12727] validate_nla: 3 callbacks suppressed [ 238.071104][T12727] netlink: 'syz.4.1950': attribute type 1 has an invalid length. [ 238.110547][T12727] __nla_validate_parse: 10 callbacks suppressed [ 238.110565][T12727] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1950'. [ 238.139966][T12731] syzkaller0: entered promiscuous mode [ 238.163750][T12731] syzkaller0: entered allmulticast mode [ 238.175456][T12723] tipc: Enabling of bearer rejected, already enabled [ 238.188302][T12723] IPVS: set_ctl: invalid protocol: 125 127.0.0.1:20000 [ 238.196334][T12725] tipc: Resetting bearer [ 238.229253][T12725] tipc: Disabling bearer [ 238.337928][T12736] tipc: Enabled bearer , priority 0 [ 238.345676][T12734] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1951'. [ 238.355299][T12735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1951'. [ 238.366933][T12734] syzkaller0: entered promiscuous mode [ 238.372441][T12734] syzkaller0: entered allmulticast mode [ 238.417549][T12736] tipc: Resetting bearer [ 238.492561][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 238.507941][T12736] tipc: Disabling bearer [ 238.513900][T12739] nbd: nbd0 already in use [ 238.782459][T12750] netlink: 'syz.4.1956': attribute type 1 has an invalid length. [ 238.804371][T12750] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1956'. [ 239.029968][T12757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1959'. [ 239.069895][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 239.180090][T12761] siw: device registration error -23 [ 239.246218][T12764] netlink: 'syz.2.1962': attribute type 25 has an invalid length. [ 239.318356][T12774] batadv0: entered promiscuous mode [ 239.350304][T12779] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 239.359060][T12779] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1964'. [ 239.360636][T12777] batadv0: left promiscuous mode [ 239.373023][T12779] netlink: 'syz.3.1964': attribute type 2 has an invalid length. [ 239.380936][T12779] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 239.891532][T12798] netlink: 'syz.4.1968': attribute type 21 has an invalid length. [ 239.900181][T12798] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.957446][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 239.967443][T12803] netlink: 'syz.4.1969': attribute type 3 has an invalid length. [ 240.015306][T12805] netlink: 'syz.4.1970': attribute type 1 has an invalid length. [ 240.024404][T12805] netlink: 'syz.4.1970': attribute type 1 has an invalid length. [ 240.384723][T12814] erspan0: entered promiscuous mode [ 240.390085][T12814] erspan0: entered allmulticast mode [ 240.451821][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'. [ 240.582014][T12826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.768820][T12832] vxcan1 speed is unknown, defaulting to 1000 [ 240.996982][T12832] lo speed is unknown, defaulting to 1000 [ 241.176562][T12851] vlan4: entered promiscuous mode [ 241.181861][T12851] vlan4: entered allmulticast mode [ 241.187184][T12851] hsr_slave_1: entered allmulticast mode [ 241.821284][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.939221][T12872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.994251][T12874] tipc: Enabling of bearer rejected, failed to enable media [ 242.145076][T12878] bond11 (unregistering): Released all slaves [ 242.178698][T12883] ip6tnl1: entered promiscuous mode [ 242.186564][T12883] ip6tnl1: entered allmulticast mode [ 242.622177][T12900] vxcan1 speed is unknown, defaulting to 1000 [ 242.729045][T12908] sctp: [Deprecated]: syz.3.2007 (pid 12908) Use of int in max_burst socket option deprecated. [ 242.729045][T12908] Use struct sctp_assoc_value instead [ 242.843551][T12900] lo speed is unknown, defaulting to 1000 [ 242.978400][T12915] veth0: entered promiscuous mode [ 243.017016][T12916] veth0: left promiscuous mode [ 243.327832][T12929] __nla_validate_parse: 9 callbacks suppressed [ 243.327853][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2015'. [ 243.351327][T12931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2016'. [ 243.703727][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 243.777567][T12941] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2020'. [ 243.868860][T12944] validate_nla: 1 callbacks suppressed [ 243.868882][T12944] netlink: 'syz.3.2021': attribute type 8 has an invalid length. [ 244.334503][T12968] bond4: entered promiscuous mode [ 244.349161][T12968] bond4: entered allmulticast mode [ 244.363322][T12968] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.460810][ T5182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.472039][ T5182] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.483485][ T5182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.516638][ T5182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.526560][ T5182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.617677][T12985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 244.621208][T12976] vxcan1 speed is unknown, defaulting to 1000 [ 244.952139][T12998] netlink: 'syz.4.2040': attribute type 11 has an invalid length. [ 244.971010][T12998] netlink: 'syz.4.2040': attribute type 11 has an invalid length. [ 244.998484][T12998] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2040'. [ 245.164040][T13003] Bluetooth: MGMT ver 1.23 [ 245.284649][T12976] lo speed is unknown, defaulting to 1000 [ 245.333946][T13007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2044'. [ 245.524482][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2045'. [ 245.833951][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 246.023128][T13035] openvswitch: netlink: Actions may not be safe on all matching packets [ 246.099156][T12976] chnl_net:caif_netlink_parms(): no params data found [ 246.145526][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2052'. [ 246.278062][T12976] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.301394][T12976] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.321867][T12976] bridge_slave_0: entered allmulticast mode [ 246.340416][T12976] bridge_slave_0: entered promiscuous mode [ 246.365165][T12976] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.372498][T12976] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.385825][T12976] bridge_slave_1: entered allmulticast mode [ 246.395931][T12976] bridge_slave_1: entered promiscuous mode [ 246.479893][T12976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.507195][T12976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.577125][ T5875] Bluetooth: hci5: command tx timeout [ 246.636950][T12976] team0: Port device team_slave_0 added [ 246.692254][T12976] team0: Port device team_slave_1 added [ 246.775680][T12976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.799448][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.853996][T12976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.866925][T12976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.874065][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.914807][T12976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.002969][T13074] netlink: 'syz.3.2062': attribute type 1 has an invalid length. [ 247.010745][T13074] netlink: 'syz.3.2062': attribute type 3 has an invalid length. [ 247.046057][T13074] netlink: 'syz.3.2062': attribute type 235 has an invalid length. [ 247.066752][T12976] hsr_slave_0: entered promiscuous mode [ 247.076936][T12976] hsr_slave_1: entered promiscuous mode [ 247.092122][T12976] debugfs: 'hsr0' already exists in 'hsr' [ 247.108496][T12976] Cannot create hsr debugfs directory [ 247.754418][T13111] netlink: 'syz.4.2069': attribute type 33 has an invalid length. [ 247.851635][T12976] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.877713][T12976] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.899476][T12976] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.923579][T12976] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.262075][T12976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.326277][T12976] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.357589][T13105] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.364830][T13105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.424853][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.432079][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.653182][ T5875] Bluetooth: hci5: command tx timeout [ 248.799418][T13156] syzkaller1: entered promiscuous mode [ 248.805176][T13156] syzkaller1: entered allmulticast mode [ 248.818277][T13156] __nla_validate_parse: 5 callbacks suppressed [ 248.818297][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2082'. [ 248.989368][T12976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.418681][T13184] tipc: Enabled bearer , priority 0 [ 249.439339][T13184] syzkaller0: entered promiscuous mode [ 249.446259][T13184] syzkaller0: entered allmulticast mode [ 249.485271][T13184] tipc: Resetting bearer [ 249.498158][T13183] tipc: Resetting bearer [ 249.527583][T13183] tipc: Disabling bearer [ 249.580634][T13190] vxcan1 speed is unknown, defaulting to 1000 [ 249.607339][T12976] veth0_vlan: entered promiscuous mode [ 249.638388][T13194] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 249.678416][T12976] veth1_vlan: entered promiscuous mode [ 249.731864][T12976] veth0_macvtap: entered promiscuous mode [ 249.757081][T12976] veth1_macvtap: entered promiscuous mode [ 249.798084][T12976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.821108][T12976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.849345][ T3562] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.859040][ T3562] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.870467][ T3562] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.895208][ T3562] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.970159][T13190] lo speed is unknown, defaulting to 1000 [ 250.018287][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.033221][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.120459][ T2125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.139667][ T2125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.499857][T13210] netlink: 'syz.5.2093': attribute type 13 has an invalid length. [ 250.604993][T13210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.737654][ T5875] Bluetooth: hci5: command tx timeout [ 250.930563][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'. [ 251.002553][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2094'. [ 251.086653][T13218] netlink: 'syz.4.2094': attribute type 15 has an invalid length. [ 251.109924][T13220] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2095'. [ 251.160193][T13220] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2095'. [ 251.273224][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'. [ 251.279126][T13224] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2095'. [ 251.307727][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2094'. [ 251.321369][T13224] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2095'. [ 251.335458][T13218] netlink: 'syz.4.2094': attribute type 15 has an invalid length. [ 251.392488][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'. [ 251.432296][T13218] netlink: 'syz.4.2094': attribute type 15 has an invalid length. [ 251.461456][T13218] netlink: 'syz.4.2094': attribute type 15 has an invalid length. [ 251.533727][T13218] netlink: 'syz.4.2094': attribute type 15 has an invalid length. [ 251.566775][T13218] netlink: 'syz.4.2094': attribute type 15 has an invalid length. [ 251.595346][T13218] netlink: 'syz.4.2094': attribute type 15 has an invalid length. [ 251.647104][T13234] tap0: tun_chr_ioctl cmd 1074025676 [ 251.652449][T13234] tap0: owner set to 0 [ 251.658267][T13218] netlink: 'syz.4.2094': attribute type 15 has an invalid length. [ 251.706237][T12175] bond0: (slave syz_tun): Releasing backup interface [ 251.977678][T13251] syzkaller1: left promiscuous mode [ 252.027640][T13251] syzkaller1: left allmulticast mode [ 252.226021][T13266] openvswitch: netlink: Flow key attr not present in new flow. [ 252.822992][ T5875] Bluetooth: hci5: command tx timeout [ 252.879542][T13286] sctp: [Deprecated]: syz.3.2115 (pid 13286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.879542][T13286] Use struct sctp_sack_info instead [ 252.881321][T13289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.199428][T13309] tipc: Started in network mode [ 253.209136][T13309] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 253.236408][T13309] tipc: Enabled bearer , priority 10 [ 253.269948][T13311] nbd: nbd0 already in use [ 254.187339][T13360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.221537][T13360] openvswitch: netlink: Actions may not be safe on all matching packets [ 254.232037][T13354] vlan2: entered allmulticast mode [ 254.263537][T13354] bond0: entered allmulticast mode [ 254.283228][T13354] bond_slave_0: entered allmulticast mode [ 254.353203][T11077] tipc: Node number set to 4269801514 [ 254.694191][T13374] __nla_validate_parse: 18 callbacks suppressed [ 254.694212][T13374] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2141'. [ 254.838822][T13388] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 254.877535][T13389] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2144'. [ 254.878386][T13388] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2143'. [ 254.946302][T13398] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2145'. [ 255.179865][T13407] veth0: entered promiscuous mode [ 255.186517][T13407] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2148'. [ 255.195948][T13407] unsupported nlmsg_type 40 [ 255.499063][T13405] veth0: left promiscuous mode [ 255.670784][T13428] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2154'. [ 255.835206][T13433] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2156'. [ 255.844904][T13433] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2156'. [ 255.875367][T13433] validate_nla: 3 callbacks suppressed [ 255.875387][T13433] netlink: 'syz.1.2156': attribute type 5 has an invalid length. [ 255.901560][T13433] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2156'. [ 256.349616][T13469] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2167'. [ 256.983034][T13503] netlink: 'syz.3.2177': attribute type 2 has an invalid length. [ 257.188608][T13519] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 257.218311][T13519] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 257.337669][T13521] pim6reg: entered allmulticast mode [ 257.667352][T13542] openvswitch: netlink: IP tunnel dst address not specified [ 257.674348][T13545] openvswitch: netlink: Multiple metadata blocks provided [ 257.703292][T13544] openvswitch: netlink: IP tunnel dst address not specified [ 257.730654][T13542] netlink: 'syz.5.2190': attribute type 1 has an invalid length. [ 257.785169][T13544] netlink: 'syz.5.2190': attribute type 1 has an invalid length. [ 257.964279][T13563] netlink: 'syz.5.2199': attribute type 1 has an invalid length. [ 258.640918][T13603] netlink: 'syz.2.2209': attribute type 16 has an invalid length. [ 258.661743][T13603] netlink: 'syz.2.2209': attribute type 17 has an invalid length. [ 258.747555][T13603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.763300][T13603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.782429][T13607] dvmrp0: left allmulticast mode [ 258.973926][T13622] unknown channel width for channel at 909000KHz? [ 258.994559][T13622] unknown channel width for channel at 909000KHz? [ 259.021893][T13622] unknown channel width for channel at 909000KHz? [ 259.150613][T13632] netlink: 'syz.3.2218': attribute type 21 has an invalid length. [ 259.301086][T13650] sctp: [Deprecated]: syz.1.2221 (pid 13650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.301086][T13650] Use struct sctp_sack_info instead [ 259.369388][T13650] batadv_slave_1: default FDB implementation only supports local addresses [ 259.948377][T13686] svc: failed to register nfsdv3 RPC service (errno 111). [ 259.958070][T13686] svc: failed to register nfsaclv3 RPC service (errno 111). [ 259.987932][T13699] __nla_validate_parse: 7 callbacks suppressed [ 259.987951][T13699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2236'. [ 260.034926][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'. [ 260.048308][T13696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2235'. [ 260.061920][T13696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2235'. [ 260.168968][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2238'. [ 260.196681][T13705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2238'. [ 260.424509][T13722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2244'. [ 261.059437][T13769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2257'. [ 261.454788][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2264'. [ 261.486389][T13790] netlink: 'syz.3.2264': attribute type 30 has an invalid length. [ 261.512079][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2264'. [ 261.710836][ T3562] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.730968][ T3562] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.781664][ T3562] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.790808][ T3562] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.813975][T13810] netlink: 'syz.2.2272': attribute type 10 has an invalid length. [ 261.853659][T13810] batadv0: entered promiscuous mode [ 261.859071][T13810] batadv0: entered allmulticast mode [ 261.866839][T13810] bridge0: port 3(batadv0) entered blocking state [ 261.875910][T13810] bridge0: port 3(batadv0) entered disabled state [ 261.902631][T13810] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 261.973599][T13817] netlink: 'syz.3.2273': attribute type 11 has an invalid length. [ 262.189177][T13827] erspan0: entered allmulticast mode [ 262.381765][T13832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.488930][T13846] vlan0: entered allmulticast mode [ 262.494729][T13846] bridge0: entered allmulticast mode [ 262.734457][T13861] netlink: 'syz.3.2285': attribute type 1 has an invalid length. [ 262.782670][T13861] netlink: 'syz.3.2285': attribute type 3 has an invalid length. [ 262.790952][T13861] netlink: 'syz.3.2285': attribute type 235 has an invalid length. [ 263.253288][T13883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.264872][T13878] netlink: 'syz.3.2292': attribute type 4 has an invalid length. [ 263.762283][T13909] vxcan1 speed is unknown, defaulting to 1000 [ 263.878362][T13924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.085296][T13909] lo speed is unknown, defaulting to 1000 [ 264.325930][T13944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 264.608313][T13954] vxcan1 speed is unknown, defaulting to 1000 [ 264.948728][T13954] lo speed is unknown, defaulting to 1000 [ 265.328087][T13984] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 265.745467][T14005] pim6reg1: entered promiscuous mode [ 265.750965][T14005] pim6reg1: entered allmulticast mode [ 265.994357][T14009] __nla_validate_parse: 14 callbacks suppressed [ 265.994378][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2326'. [ 266.296654][T14017] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2328'. [ 266.361464][T14028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2330'. [ 266.604243][T14035] tipc: Enabling of bearer rejected, already enabled [ 266.604701][T14032] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2334'. [ 266.635101][T14035] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 266.670251][T14035] tipc: Resetting bearer [ 266.699450][T14032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2334'. [ 266.849289][T14036] sch_tbf: peakrate 9 is lower than or equals to rate 15503939996559463183 ! [ 266.961258][T14035] syzkaller0: mtu greater than device maximum [ 267.233372][T14060] netlink: 'syz.2.2342': attribute type 10 has an invalid length. [ 267.567923][T14060] bridge0: entered allmulticast mode [ 267.613656][T14060] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 267.865475][T14069] tipc: Enabled bearer , priority 0 [ 267.891436][T14069] syzkaller0: entered promiscuous mode [ 267.933671][T14069] syzkaller0: entered allmulticast mode [ 267.959959][T14069] tipc: Resetting bearer [ 267.989696][T14068] tipc: Resetting bearer [ 268.073839][T14068] tipc: Disabling bearer [ 268.143082][T14091] netlink: 'syz.2.2354': attribute type 26 has an invalid length. [ 268.370113][T14103] raw_sendmsg: syz.5.2355 forgot to set AF_INET. Fix it! [ 269.208305][T14148] IPv6: Can't replace route, no match found [ 269.239290][T14147] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2368'. [ 269.432184][T14160] tipc: Enabling of bearer rejected, already enabled [ 269.451248][T14157] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 269.474578][T14157] netlink: 'syz.2.2371': attribute type 4 has an invalid length. [ 269.526863][T14165] netlink: 'syz.2.2371': attribute type 4 has an invalid length. [ 269.597691][T14169] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2376'. [ 269.861452][T14185] netlink: 'syz.3.2379': attribute type 39 has an invalid length. [ 270.026900][T14191] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 270.181259][T14191] bond5: entered promiscuous mode [ 270.186959][T14191] bond5: entered allmulticast mode [ 270.193478][T14191] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.257931][T14204] netlink: 'syz.1.2385': attribute type 58 has an invalid length. [ 270.298830][T14204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2385'. [ 270.679839][T14229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2392'. [ 270.705245][T14230] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 270.717480][T14230] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 270.740954][T14235] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2393'. [ 271.007667][T14243] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2396'. [ 271.025999][T14239] IPv6: sit2: Disabled Multicast RS [ 271.389426][T14266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2406'. [ 271.421412][T14266] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2406'. [ 271.437880][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2406'. [ 271.462720][T14270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2405'. [ 272.200624][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2412'. [ 272.399589][T14302] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2416'. [ 272.437195][T14302] netem: invalid attributes len -24 [ 272.442576][T14302] netem: change failed [ 272.518870][T14309] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2417'. [ 272.565685][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2420'. [ 272.709072][T14318] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 272.710288][T14324] netlink: 'syz.5.2424': attribute type 30 has an invalid length. [ 272.736298][T14324] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 272.755211][T14324] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 273.011705][T14339] pim6reg1: entered promiscuous mode [ 273.034269][T14339] pim6reg1: entered allmulticast mode [ 273.387257][T14371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.470809][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2438'. [ 273.745738][T14393] netlink: 'syz.1.2444': attribute type 1 has an invalid length. [ 274.183241][T14417] veth0: entered promiscuous mode [ 274.195213][T14415] tipc: Enabled bearer , priority 0 [ 274.239074][T14417] veth0 (unregistering): left promiscuous mode [ 274.293934][T14415] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 274.301492][T14415] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 274.489600][T14435] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 274.734171][ T5875] Bluetooth: hci5: command tx timeout [ 275.210803][T14468] openvswitch: netlink: Actions may not be safe on all matching packets [ 275.313719][T11077] tipc: Node number set to 894402635 [ 276.085542][T14502] __nla_validate_parse: 4 callbacks suppressed [ 276.085564][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2473'. [ 276.328458][ T9] IPVS: starting estimator thread 0... [ 276.423215][T14514] IPVS: using max 29 ests per chain, 69600 per kthread [ 276.505487][T14524] netlink: 'syz.2.2478': attribute type 25 has an invalid length. [ 276.516371][T14524] netlink: 'syz.2.2478': attribute type 3 has an invalid length. [ 276.525101][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'. [ 276.641906][T14529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2481'. [ 276.699047][T14529] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2481'. [ 276.882041][T14540] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2484'. [ 276.913770][T14545] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 276.936371][T14543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2485'. [ 276.994460][T14540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2484'. [ 277.308699][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2495'. [ 277.337997][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2495'. [ 277.637307][T14583] vlan1: entered allmulticast mode [ 277.719759][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2502'. [ 277.944579][T14600] sctp: [Deprecated]: syz.2.2505 (pid 14600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.944579][T14600] Use struct sctp_sack_info instead [ 278.251732][T14622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.271042][T14622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.658230][T14646] netlink: 'syz.2.2522': attribute type 16 has an invalid length. [ 278.673078][T14646] netlink: 'syz.2.2522': attribute type 3 has an invalid length. [ 280.039786][T14718] netlink: 'syz.1.2545': attribute type 11 has an invalid length. [ 280.097736][T14727] tipc: Enabled bearer , priority 0 [ 280.431646][T14713] tipc: Disabling bearer [ 281.256652][T14806] __nla_validate_parse: 18 callbacks suppressed [ 281.256673][T14806] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2564'. [ 281.517356][T14809] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2565'. [ 281.878269][T14832] netlink: 'syz.4.2566': attribute type 1 has an invalid length. [ 282.264999][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'. [ 282.305031][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'. [ 282.585977][T14861] syzkaller1: entered promiscuous mode [ 282.603481][T14861] syzkaller1: entered allmulticast mode [ 282.822572][T14877] sctp: [Deprecated]: syz.1.2584 (pid 14877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.822572][T14877] Use struct sctp_sack_info instead [ 282.963053][T14877] sctp: [Deprecated]: syz.1.2584 (pid 14877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.963053][T14877] Use struct sctp_sack_info instead [ 282.987912][T14877] sctp: [Deprecated]: syz.1.2584 (pid 14877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.987912][T14877] Use struct sctp_sack_info instead [ 283.026341][T14877] sctp: [Deprecated]: syz.1.2584 (pid 14877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.026341][T14877] Use struct sctp_sack_info instead [ 283.066002][T14877] sctp: [Deprecated]: syz.1.2584 (pid 14877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.066002][T14877] Use struct sctp_sack_info instead [ 283.133071][T14877] sctp: [Deprecated]: syz.1.2584 (pid 14877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.133071][T14877] Use struct sctp_sack_info instead [ 283.185647][T14877] sctp: [Deprecated]: syz.1.2584 (pid 14877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.185647][T14877] Use struct sctp_sack_info instead [ 283.211600][T14894] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2590'. [ 283.239002][T14877] sctp: [Deprecated]: syz.1.2584 (pid 14877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.239002][T14877] Use struct sctp_sack_info instead [ 283.297430][T14877] sctp: [Deprecated]: syz.1.2584 (pid 14877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.297430][T14877] Use struct sctp_sack_info instead [ 283.356930][T14877] sctp: [Deprecated]: syz.1.2584 (pid 14877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.356930][T14877] Use struct sctp_sack_info instead [ 283.395577][T14901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2594'. [ 283.577932][T14912] netlink: 'syz.2.2597': attribute type 4 has an invalid length. [ 283.740068][T14922] delete_channel: no stack [ 283.913347][T14932] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 283.927044][T14936] tipc: Enabled bearer , priority 0 [ 283.960976][T14936] syzkaller0: entered promiscuous mode [ 283.993362][T14936] syzkaller0: entered allmulticast mode [ 284.000522][T14940] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2607'. [ 284.033141][T14940] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2607'. [ 284.068946][T14944] netlink: 'syz.2.2609': attribute type 4 has an invalid length. [ 284.081536][T14936] tipc: Resetting bearer [ 284.107582][T14944] netlink: 'syz.2.2609': attribute type 4 has an invalid length. [ 284.125677][T14935] tipc: Resetting bearer [ 284.159691][T14935] tipc: Disabling bearer [ 284.388961][T14959] gre2: entered promiscuous mode [ 284.412051][T14959] gre2: entered allmulticast mode [ 284.453504][T14966] netlink: 'syz.1.2615': attribute type 2 has an invalid length. [ 284.565388][T14969] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2613'. [ 284.834301][T14978] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2618'. [ 285.049366][T14994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.122033][T14994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.302120][T15015] netlink: 'syz.1.2628': attribute type 39 has an invalid length. [ 285.698593][T15040] netlink: 'syz.1.2638': attribute type 2 has an invalid length. [ 285.707012][T15040] netlink: 'syz.1.2638': attribute type 8 has an invalid length. [ 285.920457][T15053] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 286.451755][T15092] __nla_validate_parse: 7 callbacks suppressed [ 286.451792][T15092] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.2651'. [ 286.635061][T15106] netlink: 'syz.2.2656': attribute type 11 has an invalid length. [ 286.690348][T15110] netlink: 'syz.5.2659': attribute type 32 has an invalid length. [ 286.723041][T15110] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2659'. [ 286.984140][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2662'. [ 287.627402][T15135] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.635161][T15135] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.832693][T15135] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 288.269525][T15189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2677'. [ 288.488350][T15204] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 288.618134][T15214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2683'. [ 288.750218][T15224] syzkaller1: left promiscuous mode [ 288.758717][T15224] syzkaller1: left allmulticast mode [ 288.766625][T15225] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 288.854190][T15230] netlink: 'syz.3.2690': attribute type 3 has an invalid length. [ 288.928831][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2691'. [ 289.149881][T15246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2694'. [ 289.612886][ T30] audit: type=1800 audit(1755448505.670:4): pid=15257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2696" name="memory.events" dev="tmpfs" ino=3005 res=0 errno=0 [ 289.892401][T15277] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2702'. [ 290.095448][T15292] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2707'. [ 290.138463][T15292] 8021q: VLANs not supported on sit0 [ 290.412539][T15315] netlink: 'syz.1.2714': attribute type 10 has an invalid length. [ 290.439472][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2716'. [ 290.490205][T15318] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 290.714073][T15327] tipc: Enabled bearer , priority 0 [ 290.741882][T15327] syzkaller0: entered promiscuous mode [ 290.760585][T15327] syzkaller0: entered allmulticast mode [ 290.790699][T15327] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 290.839619][T15327] tipc: Resetting bearer [ 290.845900][T15335] bond0: entered allmulticast mode [ 290.871779][T15335] !€ÿ: entered allmulticast mode [ 290.879615][T15335] bond_slave_1: entered allmulticast mode [ 290.892695][T15335] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 290.939279][T15339] netlink: 'syz.2.2725': attribute type 1 has an invalid length. [ 290.953279][T15339] netlink: 'syz.2.2725': attribute type 2 has an invalid length. [ 290.968779][T15346] bridge_slave_1: left allmulticast mode [ 290.990328][T15346] bridge_slave_1: left promiscuous mode [ 291.000664][T15346] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.068087][T15346] bridge_slave_0: left allmulticast mode [ 291.075985][T15346] bridge_slave_0: left promiscuous mode [ 291.081876][T15346] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.267414][T15326] tipc: Resetting bearer [ 291.315957][T15326] tipc: Disabling bearer [ 291.527735][T15382] __nla_validate_parse: 3 callbacks suppressed [ 291.527755][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2736'. [ 291.575779][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2736'. [ 291.616483][T15383] netlink: 'syz.3.2738': attribute type 1 has an invalid length. [ 291.659598][T15383] netlink: 'syz.3.2738': attribute type 10 has an invalid length. [ 291.683803][T15383] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2738'. [ 292.007183][T15415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2744'. [ 292.038469][T15421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2746'. [ 292.105399][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2747'. [ 292.130179][T15426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2747'. [ 292.237613][T15422] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2747'. [ 292.322640][T15435] syzkaller1: entered promiscuous mode [ 292.339305][T15435] syzkaller1: entered allmulticast mode [ 292.583135][T15451] netlink: 'syz.1.2756': attribute type 1 has an invalid length. [ 292.694040][T15457] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2757'. [ 292.858148][T15469] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2760'. [ 292.948597][T15469] bond0 (unregistering): Released all slaves [ 293.094103][T15477] netlink: 'syz.2.2762': attribute type 11 has an invalid length. [ 293.283383][T15482] netlink: 'syz.1.2765': attribute type 1 has an invalid length. [ 293.840536][ T5875] Bluetooth: hci5: link tx timeout [ 293.847089][ T5875] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 293.901432][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.911141][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.923334][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.931698][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.939827][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.172270][T15522] vxcan1 speed is unknown, defaulting to 1000 [ 294.722039][T15522] lo speed is unknown, defaulting to 1000 [ 294.856434][T15564] sock: sock_set_timeout: `syz.4.2786' (pid 15564) tries to set negative timeout [ 295.312297][T15583] netlink: 'syz.1.2790': attribute type 4 has an invalid length. [ 295.327058][T15582] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 295.423461][T15585] gretap1: entered promiscuous mode [ 295.579786][T15591] vlan5: entered allmulticast mode [ 295.608393][T15596] netlink: 'syz.2.2794': attribute type 29 has an invalid length. [ 295.630148][T15599] netlink: 'syz.2.2794': attribute type 1 has an invalid length. [ 295.648352][T15599] netlink: 'syz.2.2794': attribute type 1 has an invalid length. [ 295.660957][T15599] netlink: 'syz.2.2794': attribute type 1 has an invalid length. [ 295.672264][T15599] netlink: 'syz.2.2794': attribute type 2 has an invalid length. [ 295.785485][T15607] netlink: 'syz.4.2796': attribute type 1 has an invalid length. [ 295.816212][T15605] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 295.933194][ T5182] Bluetooth: hci5: command 0x0406 tx timeout [ 296.006486][T15522] chnl_net:caif_netlink_parms(): no params data found [ 296.014637][ T5875] Bluetooth: hci0: command tx timeout [ 296.638554][T15522] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.670032][T15522] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.707741][T15522] bridge_slave_0: entered allmulticast mode [ 296.721738][T15522] bridge_slave_0: entered promiscuous mode [ 296.756806][T15522] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.779099][T15522] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.808503][T15522] bridge_slave_1: entered allmulticast mode [ 296.839670][T15522] bridge_slave_1: entered promiscuous mode [ 296.938435][T15669] netlink: 'syz.2.2809': attribute type 1 has an invalid length. [ 296.956603][T15669] __nla_validate_parse: 17 callbacks suppressed [ 296.956623][T15669] netlink: 784 bytes leftover after parsing attributes in process `syz.2.2809'. [ 296.981189][T15667] tipc: Enabled bearer , priority 0 [ 297.086426][T15660] syzkaller0: entered promiscuous mode [ 297.091949][T15660] syzkaller0: entered allmulticast mode [ 297.099621][T15660] tipc: Resetting bearer [ 297.112402][T15522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.126894][T15655] syzkaller1: entered promiscuous mode [ 297.132534][T15655] syzkaller1: entered allmulticast mode [ 297.173865][T15522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.236377][T15653] tipc: Resetting bearer [ 297.244138][T15677] Unsupported ieee802154 address type: 0 [ 298.095419][ T5875] Bluetooth: hci0: command tx timeout [ 298.537524][T15653] tipc: Disabling bearer [ 298.548458][T15522] team0: Port device team_slave_0 added [ 298.563742][T15522] team0: Port device team_slave_1 added [ 298.781821][T15522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.805238][T15522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.871969][T15522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.914759][T15522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.929877][T15522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.987861][T15522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.109643][T15522] hsr_slave_0: entered promiscuous mode [ 299.128317][T15522] hsr_slave_1: entered promiscuous mode [ 299.136370][T15522] debugfs: 'hsr0' already exists in 'hsr' [ 299.142435][T15522] Cannot create hsr debugfs directory [ 299.149596][T15719] : renamed from veth0_to_batadv [ 299.398944][T15736] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 299.417218][T15736] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2827'. [ 299.433276][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2827'. [ 299.604570][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2830'. [ 299.646547][T15522] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.785841][T15522] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.837626][T15756] netlink: 'syz.4.2834': attribute type 1 has an invalid length. [ 299.906356][T15522] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.948083][T15769] netlink: 'syz.1.2835': attribute type 1 has an invalid length. [ 299.974158][T15769] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2835'. [ 300.001194][T15756] bond11: (slave geneve2): making interface the new active one [ 300.016404][T15756] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 300.084713][T15522] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.118250][T13643] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 300.132899][T13643] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 300.168302][T15754] sit0: entered promiscuous mode [ 300.182983][ T5875] Bluetooth: hci0: command tx timeout [ 300.205181][T15754] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2835'. [ 300.219913][T15781] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 300.248932][T15780] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 300.267421][T13643] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 300.285434][T13643] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 300.695865][T15522] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 300.700746][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2845'. [ 300.718608][T15522] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 300.756766][T15522] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.779052][T15522] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.826780][T15810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2845'. [ 300.842732][T15810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2845'. [ 300.889675][T15810] gretap1: entered promiscuous mode [ 300.900390][T15810] gretap1: entered allmulticast mode [ 300.926903][T15821] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2848'. [ 300.953010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.970636][T15818] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 300.984024][T15818] 0ªî{X¹¦: entered allmulticast mode [ 300.989952][T15818] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 301.007139][T15821] 0ªî{X¹¦: entered promiscuous mode [ 301.027793][T15825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.028891][T15821] 0ªî{X¹¦: left allmulticast mode [ 301.282191][T15522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.350794][T15522] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.558185][T15840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.571341][T15840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.588012][T15840] bond0 (unregistering): Released all slaves [ 301.620593][T13105] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.627833][T13105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.657259][T13641] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.664494][T13641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.101175][T15522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.256945][T15522] veth0_vlan: entered promiscuous mode [ 302.264128][ T5875] Bluetooth: hci0: command tx timeout [ 302.295359][T15522] veth1_vlan: entered promiscuous mode [ 302.335654][T15522] veth0_macvtap: entered promiscuous mode [ 302.370592][T15522] veth1_macvtap: entered promiscuous mode [ 302.441951][T15522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.486782][T15522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.528810][T13105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.551327][T15888] __nla_validate_parse: 67 callbacks suppressed [ 302.551349][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2866'. [ 302.577650][T13105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.606482][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2869'. [ 302.688003][T13105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.708766][T13105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.878233][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'. [ 303.075235][T13637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.116193][T13637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.220112][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.251707][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.542121][T15925] 0ªî{X¹¦: left promiscuous mode [ 303.576591][T15925] erspan0: left promiscuous mode [ 303.585260][T15925] sit0: left promiscuous mode [ 303.696085][T15925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.785925][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.268277][T15964] vxcan1 speed is unknown, defaulting to 1000 [ 304.388994][T15967] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 304.417284][T15967] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 304.515497][ T5182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.525244][ T5182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.533178][ T5182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.541402][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.558894][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.574291][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.790418][T15976] validate_nla: 1 callbacks suppressed [ 304.790439][T15976] netlink: 'syz.3.2891': attribute type 21 has an invalid length. [ 304.836275][T15976] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2891'. [ 304.884097][T15964] lo speed is unknown, defaulting to 1000 [ 304.886016][T15969] vxcan1 speed is unknown, defaulting to 1000 [ 304.994970][T15988] netlink: 'syz.1.2895': attribute type 1 has an invalid length. [ 305.167621][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'. [ 305.239310][T16000] netlink: 'syz.5.2897': attribute type 4 has an invalid length. [ 305.283760][T16002] erspan0: entered promiscuous mode [ 305.301709][T16003] netlink: 'syz.5.2897': attribute type 4 has an invalid length. [ 305.383899][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2900'. [ 305.495549][T15969] lo speed is unknown, defaulting to 1000 [ 305.508786][T16009] net_ratelimit: 2 callbacks suppressed [ 305.508829][T16009] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 305.549246][T16010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.549255][T16006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.670860][T13105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.679689][T13105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.290047][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2903'. [ 306.430634][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2906'. [ 306.662168][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.672270][ T5875] Bluetooth: hci2: command tx timeout [ 306.809204][T16028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.282965][T13105] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.291885][T13105] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 307.322209][T15969] chnl_net:caif_netlink_parms(): no params data found [ 307.350750][T13105] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.368501][T13105] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 307.454238][T13105] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.487363][T13105] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 307.498257][T13105] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.511621][T13105] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 307.628281][T16064] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 307.642932][T16064] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 307.731981][T16075] netlink: 'syz.5.2915': attribute type 4 has an invalid length. [ 307.798136][T15969] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.812615][T15969] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.833811][T15969] bridge_slave_0: entered allmulticast mode [ 307.841608][T15969] bridge_slave_0: entered promiscuous mode [ 307.858472][T16064] vxcan1 speed is unknown, defaulting to 1000 [ 307.861263][T16081] openvswitch: netlink: Multiple metadata blocks provided [ 307.866990][T15969] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.879772][T15969] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.887379][T15969] bridge_slave_1: entered allmulticast mode [ 307.893602][T16080] openvswitch: netlink: Multiple metadata blocks provided [ 307.903569][T15969] bridge_slave_1: entered promiscuous mode [ 308.010790][T15969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.020822][T16080] netlink: 'syz.4.2917': attribute type 10 has an invalid length. [ 308.055476][T16080] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.083368][T16080] bridge_slave_1: left allmulticast mode [ 308.089233][T16080] bridge_slave_1: left promiscuous mode [ 308.102379][T16080] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.136947][T16080] bridge_slave_1: entered allmulticast mode [ 308.169633][T16080] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 308.194382][T15969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.232522][T16064] lo speed is unknown, defaulting to 1000 [ 308.355929][T15969] team0: Port device team_slave_0 added [ 308.370490][T15969] team0: Port device team_slave_1 added [ 308.600669][T15969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.622239][T15969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.742372][ T5875] Bluetooth: hci2: command tx timeout [ 308.751070][T15969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.794668][T15969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.801744][T15969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.839793][T15969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.024208][T15969] hsr_slave_0: entered promiscuous mode [ 309.048898][T15969] hsr_slave_1: entered promiscuous mode [ 309.075813][T15969] debugfs: 'hsr0' already exists in 'hsr' [ 309.081584][T15969] Cannot create hsr debugfs directory [ 309.293298][T16133] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 309.435274][T16140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2934'. [ 309.473820][T16140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2934'. [ 309.823197][T15969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.852017][T16155] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.961950][T15969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.012978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.147457][T16165] netlink: 'syz.1.2939': attribute type 1 has an invalid length. [ 310.161356][T16165] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2939'. [ 310.169295][T15969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.207102][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2941'. [ 310.216865][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2941'. [ 310.226223][T16171] netlink: 'syz.4.2941': attribute type 3 has an invalid length. [ 310.250020][T15969] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.499677][T16179] C: entered promiscuous mode [ 310.511504][T16179] tunl0: entered promiscuous mode [ 310.529612][T16179] gre0: entered promiscuous mode [ 310.535624][T16183] sctp_setsockopt_delayed_ack: 55 callbacks suppressed [ 310.535659][T16183] sctp: [Deprecated]: syz.3.2946 (pid 16183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.535659][T16183] Use struct sctp_sack_info instead [ 310.570207][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2945'. [ 310.582865][T16179] gretap0: entered promiscuous mode [ 310.593553][T16179] erspan0: entered promiscuous mode [ 310.604045][T16179] ip_vti0: entered promiscuous mode [ 310.670098][T15969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 310.677105][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2947'. [ 310.741810][T15969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 310.782178][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 310.814552][ T5875] Bluetooth: hci2: command tx timeout [ 310.823427][T15969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 310.848169][T15969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.361610][T16233] netlink: 'syz.4.2957': attribute type 21 has an invalid length. [ 311.441461][T16235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2956'. [ 311.451150][T16235] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2956'. [ 311.815569][T15969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.819667][T16253] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 311.838365][T15969] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.902455][T13638] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.909662][T13638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.952289][ T2125] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.959496][ T2125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.239626][T16277] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 312.426921][T15969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.498738][T15969] veth0_vlan: entered promiscuous mode [ 312.517457][T15969] veth1_vlan: entered promiscuous mode [ 312.550564][T15969] veth0_macvtap: entered promiscuous mode [ 312.561398][T15969] veth1_macvtap: entered promiscuous mode [ 312.588300][T15969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.610309][T15969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.629339][T13651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.639260][T13651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.656523][T13651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.666097][T13651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.804065][T16296] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 312.894302][ T5875] Bluetooth: hci2: command tx timeout [ 313.066005][T16279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.179549][ T2125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.208548][ T2125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.308316][ T2125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.334155][ T2125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.701621][T16335] netlink: 'syz.2.2984': attribute type 4 has an invalid length. [ 313.734308][T16335] netlink: 'syz.2.2984': attribute type 1 has an invalid length. [ 313.768873][T16335] netlink: 'syz.2.2984': attribute type 3 has an invalid length. [ 313.822995][T16335] netlink: 'syz.2.2984': attribute type 235 has an invalid length. [ 313.866269][T16339] veth7: entered promiscuous mode [ 314.122692][T16348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.362411][ T5182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.371391][ T5182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.384915][ T5182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.394309][ T5182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.402681][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.459300][T16359] vxcan1 speed is unknown, defaulting to 1000 [ 314.480393][T16364] Bluetooth: MGMT ver 1.23 [ 314.588411][T16366] __nla_validate_parse: 11 callbacks suppressed [ 314.588434][T16366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2994'. [ 314.713407][T16359] lo speed is unknown, defaulting to 1000 [ 314.950686][T16376] 8021q: VLANs not supported on gre0 [ 315.115754][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 315.125122][T16382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3002'. [ 315.499038][T16405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3007'. [ 315.511230][T16404] tipc: Started in network mode [ 315.516660][T16404] tipc: Node identity e20baecb6d39, cluster identity 4711 [ 315.524489][T16404] tipc: Enabled bearer , priority 0 [ 315.542831][T16404] syzkaller0: entered promiscuous mode [ 315.562126][T16404] syzkaller0: entered allmulticast mode [ 315.595073][T16408] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 315.656178][T16359] chnl_net:caif_netlink_parms(): no params data found [ 315.691533][T16403] tipc: Resetting bearer [ 315.746265][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'. [ 315.748798][T16403] tipc: Disabling bearer [ 316.142391][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 316.220933][T16359] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.228791][T16359] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.236469][T16359] bridge_slave_0: entered allmulticast mode [ 316.245169][T16359] bridge_slave_0: entered promiscuous mode [ 316.261101][T16439] ipvlan0: entered promiscuous mode [ 316.269694][T16439] ipvlan0: entered allmulticast mode [ 316.307015][T16439] veth0_vlan: entered allmulticast mode [ 316.330329][T16359] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.353936][T16359] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.361218][T16359] bridge_slave_1: entered allmulticast mode [ 316.390279][T16359] bridge_slave_1: entered promiscuous mode [ 316.494251][ T5875] Bluetooth: hci3: command tx timeout [ 316.501413][T16450] netlink: 'syz.3.3019': attribute type 23 has an invalid length. [ 316.555065][T16359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.668847][T16359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.822265][T16465] FAULT_INJECTION: forcing a failure. [ 316.822265][T16465] name failslab, interval 1, probability 0, space 0, times 1 [ 316.848523][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3023'. [ 316.860190][T16465] CPU: 1 UID: 0 PID: 16465 Comm: syz.5.3022 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 316.860229][T16465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.860247][T16465] Call Trace: [ 316.860256][T16465] [ 316.860264][T16465] dump_stack_lvl+0x189/0x250 [ 316.860293][T16465] ? __pfx____ratelimit+0x10/0x10 [ 316.860319][T16465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.860341][T16465] ? __pfx__printk+0x10/0x10 [ 316.860373][T16465] ? __pfx___might_resched+0x10/0x10 [ 316.860397][T16465] should_fail_ex+0x414/0x560 [ 316.860426][T16465] ? proc_sys_call_handler+0x3ca/0x700 [ 316.860450][T16465] should_failslab+0xa8/0x100 [ 316.860480][T16465] __kvmalloc_node_noprof+0x161/0x5f0 [ 316.860508][T16465] ? proc_sys_call_handler+0x3ca/0x700 [ 316.860538][T16465] proc_sys_call_handler+0x3ca/0x700 [ 316.860570][T16465] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 316.860608][T16465] vfs_write+0x5c6/0xb30 [ 316.860639][T16465] ? __pfx_proc_sys_write+0x10/0x10 [ 316.860663][T16465] ? __pfx_vfs_write+0x10/0x10 [ 316.860699][T16465] ? __fget_files+0x2a/0x420 [ 316.860726][T16465] ksys_write+0x145/0x250 [ 316.860754][T16465] ? __pfx_ksys_write+0x10/0x10 [ 316.860775][T16465] ? rcu_is_watching+0x15/0xb0 [ 316.860800][T16465] ? do_syscall_64+0xbe/0x3b0 [ 316.860832][T16465] do_syscall_64+0xfa/0x3b0 [ 316.860857][T16465] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.860881][T16465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.860900][T16465] ? clear_bhb_loop+0x60/0xb0 [ 316.860923][T16465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.860951][T16465] RIP: 0033:0x7f0e3c38ebe9 [ 316.860972][T16465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.860987][T16465] RSP: 002b:00007f0e3d26f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.861010][T16465] RAX: ffffffffffffffda RBX: 00007f0e3c5b6090 RCX: 00007f0e3c38ebe9 [ 316.861022][T16465] RDX: 0000000000000005 RSI: 00002000000003c0 RDI: 0000000000000005 [ 316.861033][T16465] RBP: 00007f0e3d26f090 R08: 0000000000000000 R09: 0000000000000000 [ 316.861043][T16465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.861053][T16465] R13: 00007f0e3c5b6128 R14: 00007f0e3c5b6090 R15: 00007fffb7963698 [ 316.861083][T16465] [ 317.172252][T16463] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3023'. [ 317.239374][T16359] team0: Port device team_slave_0 added [ 317.270797][T16475] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3027'. [ 317.284401][T16475] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3027'. [ 317.321508][T16359] team0: Port device team_slave_1 added [ 317.406842][T16359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.417100][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.444274][T16359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.480895][T16359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.489300][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.528971][T16359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.657146][T16490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.666435][T16490] team0: Failed to send port change of device bond0 via netlink (err -105) [ 317.675447][T16490] team0: Failed to send options change via netlink (err -105) [ 317.683117][T16490] team0: Port device bond0 added [ 317.799504][T16499] FAULT_INJECTION: forcing a failure. [ 317.799504][T16499] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 317.843736][T16499] CPU: 1 UID: 0 PID: 16499 Comm: syz.1.3034 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 317.843766][T16499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.843778][T16499] Call Trace: [ 317.843786][T16499] [ 317.843795][T16499] dump_stack_lvl+0x189/0x250 [ 317.843824][T16499] ? __pfx____ratelimit+0x10/0x10 [ 317.843851][T16499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.843875][T16499] ? __pfx__printk+0x10/0x10 [ 317.843903][T16499] ? __might_fault+0xb0/0x130 [ 317.843944][T16499] should_fail_ex+0x414/0x560 [ 317.843976][T16499] _copy_from_iter+0x1db/0x16f0 [ 317.844011][T16499] ? __pfx__copy_from_iter+0x10/0x10 [ 317.844030][T16499] ? proc_sys_call_handler+0x3ca/0x700 [ 317.844057][T16499] ? rcu_is_watching+0x15/0xb0 [ 317.844076][T16499] ? proc_sys_call_handler+0x3ca/0x700 [ 317.844101][T16499] ? trace_kmalloc+0x1f/0xd0 [ 317.844131][T16499] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 317.844160][T16499] ? proc_sys_call_handler+0x3ca/0x700 [ 317.844192][T16499] proc_sys_call_handler+0x41e/0x700 [ 317.844227][T16499] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 317.844276][T16499] vfs_write+0x5c6/0xb30 [ 317.844307][T16499] ? __pfx_proc_sys_write+0x10/0x10 [ 317.844331][T16499] ? __pfx_vfs_write+0x10/0x10 [ 317.844367][T16499] ? __fget_files+0x2a/0x420 [ 317.844395][T16499] ksys_write+0x145/0x250 [ 317.844422][T16499] ? __pfx_ksys_write+0x10/0x10 [ 317.844463][T16499] ? rcu_is_watching+0x15/0xb0 [ 317.844488][T16499] ? do_syscall_64+0xbe/0x3b0 [ 317.844521][T16499] do_syscall_64+0xfa/0x3b0 [ 317.844547][T16499] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.844573][T16499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.844593][T16499] ? clear_bhb_loop+0x60/0xb0 [ 317.844618][T16499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.844636][T16499] RIP: 0033:0x7f05fc58ebe9 [ 317.844655][T16499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.844671][T16499] RSP: 002b:00007f05fd37b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.844691][T16499] RAX: ffffffffffffffda RBX: 00007f05fc7b6090 RCX: 00007f05fc58ebe9 [ 317.844706][T16499] RDX: 0000000000000005 RSI: 00002000000003c0 RDI: 0000000000000005 [ 317.844718][T16499] RBP: 00007f05fd37b090 R08: 0000000000000000 R09: 0000000000000000 [ 317.844730][T16499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.844741][T16499] R13: 00007f05fc7b6128 R14: 00007f05fc7b6090 R15: 00007fffafee4588 [ 317.844775][T16499] [ 318.157779][T16359] hsr_slave_0: entered promiscuous mode [ 318.164971][T16359] hsr_slave_1: entered promiscuous mode [ 318.184509][T16359] debugfs: 'hsr0' already exists in 'hsr' [ 318.190281][T16359] Cannot create hsr debugfs directory [ 318.493022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.575780][ T5875] Bluetooth: hci3: command tx timeout [ 318.659551][T16359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.680045][T16359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.695253][T16359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 318.868151][T16533] Unsupported ieee802154 address type: 0 [ 318.902264][T16359] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.921106][T16359] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.932346][T16359] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 319.074485][T16359] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.097138][T16359] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.109249][T16359] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 319.216533][T16359] bond0: (slave netdevsim0): Releasing backup interface [ 319.226721][T16359] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 319.241947][T16359] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.253414][T16359] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.266302][T16359] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 319.517396][T16359] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.551369][T16359] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.580966][T16359] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.616399][T16573] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 319.627893][T16573] team0: Device macvtap1 is already an upper device of the team interface [ 319.653811][T16359] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.673678][T16575] netlink: 'syz.1.3055': attribute type 11 has an invalid length. [ 319.681521][T16575] __nla_validate_parse: 67 callbacks suppressed [ 319.681538][T16575] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3055'. [ 319.928252][T16594] netlink: 'syz.3.3061': attribute type 12 has an invalid length. [ 319.988173][T16359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.102015][T16359] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.129716][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.136879][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.190645][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 320.213596][T16611] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3064'. [ 320.221044][T13638] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.229707][T13638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.379338][T16359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.437403][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3070'. [ 320.454362][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3068'. [ 320.472150][T16622] netlink: 212284 bytes leftover after parsing attributes in process `syz.3.3068'. [ 320.497884][T16624] netlink: 212284 bytes leftover after parsing attributes in process `syz.3.3068'. [ 320.527628][T16622] openvswitch: netlink: Message has 5 unknown bytes. [ 320.536873][T16624] openvswitch: netlink: Message has 5 unknown bytes. [ 320.653729][T16628] ip6erspan0: entered promiscuous mode [ 320.660736][ T5875] Bluetooth: hci3: command tx timeout [ 320.898946][T16645] netlink: 'syz.2.3075': attribute type 33 has an invalid length. [ 320.935512][T16359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.180072][T16671] netlink: 'syz.2.3084': attribute type 1 has an invalid length. [ 321.233440][T16671] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3084'. [ 321.281398][T16671] nbd: couldn't find device at index 1048576 [ 321.332120][T16681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3086'. [ 321.477761][T16688] netlink: 'syz.2.3087': attribute type 21 has an invalid length. [ 321.485808][T16688] IPv6: NLM_F_CREATE should be specified when creating new route [ 321.622256][T16691] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3088'. [ 321.907600][T16359] veth0_vlan: entered promiscuous mode [ 321.962082][T16359] veth1_vlan: entered promiscuous mode [ 322.111734][T16359] veth0_macvtap: entered promiscuous mode [ 322.129504][T16359] veth1_macvtap: entered promiscuous mode [ 322.162287][T16706] vxcan1 speed is unknown, defaulting to 1000 [ 322.192101][T16359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.217664][T16359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.257759][T13637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.270800][T13637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.299772][T13637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.344828][T13637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.736039][ T5875] Bluetooth: hci3: command tx timeout [ 322.791683][T16706] lo speed is unknown, defaulting to 1000 [ 322.856038][T16722] netlink: 'syz.1.3095': attribute type 1 has an invalid length. [ 322.923134][ T2125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.931374][ T2125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.997718][T13637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.006282][T13637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.171214][T16729] vxcan1 speed is unknown, defaulting to 1000 [ 324.168340][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.186479][T16764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.190586][ T5182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.202566][T16729] lo speed is unknown, defaulting to 1000 [ 324.203498][ T5182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.239488][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.248878][ T5182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.286013][T16764] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 324.598817][T16767] vxcan1 speed is unknown, defaulting to 1000 [ 325.124041][T16795] __nla_validate_parse: 2 callbacks suppressed [ 325.124062][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3116'. [ 325.150145][T16795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3116'. [ 325.299120][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3116'. [ 325.346321][T16795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.415937][T16797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.423677][T16797] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 325.435797][T16797] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 325.464284][T16767] lo speed is unknown, defaulting to 1000 [ 325.465161][T16802] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3118'. [ 325.499363][T16802] netlink: 'syz.4.3118': attribute type 4 has an invalid length. [ 326.050458][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3127'. [ 326.334731][ T5875] Bluetooth: hci1: command tx timeout [ 326.624918][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3133'. [ 326.707121][T16856] netlink: 'syz.5.3134': attribute type 21 has an invalid length. [ 326.797019][T16767] chnl_net:caif_netlink_parms(): no params data found [ 327.519179][T16767] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.557839][T16767] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.578242][T16767] bridge_slave_0: entered allmulticast mode [ 327.592494][T16767] bridge_slave_0: entered promiscuous mode [ 327.610322][T16895] syz_tun: entered allmulticast mode [ 327.621834][T16767] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.644310][T16767] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.658234][T16767] bridge_slave_1: entered allmulticast mode [ 327.674582][T16767] bridge_slave_1: entered promiscuous mode [ 327.690122][T16889] syz_tun: left allmulticast mode [ 327.927370][T16767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.028074][T16767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.219008][T16926] netlink: 'syz.3.3153': attribute type 11 has an invalid length. [ 328.242519][T16926] netlink: 'syz.3.3153': attribute type 11 has an invalid length. [ 328.270419][T16926] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3153'. [ 328.380448][T16767] team0: Port device team_slave_0 added [ 328.418589][T16767] team0: Port device team_slave_1 added [ 328.424629][ T5875] Bluetooth: hci1: command tx timeout [ 328.572010][T16940] netlink: 'syz.5.3157': attribute type 1 has an invalid length. [ 328.674515][T16940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.722220][T16767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.741731][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.774667][T16767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.798627][T16954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3159'. [ 328.815991][T16947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.823833][T16947] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 328.839041][T16947] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 328.952496][T16950] veth5: entered promiscuous mode [ 328.970869][T16950] bond0: (slave veth5): Enslaving as an active interface with a down link [ 329.010158][T16940] vlan2: entered allmulticast mode [ 329.015954][T16940] bond0: entered allmulticast mode [ 329.069270][T16767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.077989][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.083237][T16970] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3160'. [ 329.121196][T16767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.143316][T16956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.237445][T16767] hsr_slave_0: entered promiscuous mode [ 329.260603][T16767] hsr_slave_1: entered promiscuous mode [ 329.269475][T16767] debugfs: 'hsr0' already exists in 'hsr' [ 329.280105][T16767] Cannot create hsr debugfs directory [ 329.289768][T16975] bridge_slave_0: entered promiscuous mode [ 329.311699][T16976] bridge1: entered promiscuous mode [ 329.317400][T16976] bridge1: entered allmulticast mode [ 329.334270][T16972] syzkaller0: entered promiscuous mode [ 329.339841][T16972] syzkaller0: entered allmulticast mode [ 329.506360][T16767] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.517698][T16767] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.665860][T16986] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3166'. [ 329.812096][T16767] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.824722][T16767] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.985831][T16767] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.000047][T16767] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.179386][T17011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.368360][T17017] netlink: 'syz.3.3177': attribute type 1 has an invalid length. [ 330.447762][T17017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.504628][ T5875] Bluetooth: hci1: command tx timeout [ 330.613112][T17003] infiniband syz1: set active [ 330.617975][T17003] infiniband syz1: added bond0 [ 330.665838][T17003] RDS/IB: syz1: added [ 330.670027][T17003] smc: adding ib device syz1 with port count 1 [ 330.678638][T17021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.685463][T17003] smc: ib device syz1 port 1 has pnetid [ 330.699168][T17021] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 330.711959][T17021] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 330.758048][T17017] veth3: entered promiscuous mode [ 330.767361][T17017] bond1: (slave veth3): Enslaving as an active interface with a down link [ 330.855494][T16767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 330.886735][T16767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 330.907995][T16767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 330.952706][T16767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.329630][T16767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.405703][T16767] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.450801][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.458051][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.510729][T13651] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.518022][T13651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.764974][T17061] netlink: 796 bytes leftover after parsing attributes in process `syz.4.3189'. [ 331.973660][T17066] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3191'. [ 331.991743][T17068] netlink: 'syz.4.3192': attribute type 49 has an invalid length. [ 332.202212][T17078] netlink: 'syz.3.3196': attribute type 21 has an invalid length. [ 332.218653][T17078] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3196'. [ 332.234066][T17079] netlink: 'syz.5.3195': attribute type 28 has an invalid length. [ 332.247284][T17079] netlink: 'syz.5.3195': attribute type 3 has an invalid length. [ 332.257352][T17081] syzkaller0: create flow: hash 1310613033 index 1 [ 332.270223][T17078] netlink: 'syz.3.3196': attribute type 4 has an invalid length. [ 332.281151][T17079] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3195'. [ 332.288461][T17078] netlink: 'syz.3.3196': attribute type 5 has an invalid length. [ 332.298643][T17078] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3196'. [ 332.299821][T17074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3194'. [ 332.329372][T17079] netlink: 'syz.5.3195': attribute type 1 has an invalid length. [ 332.456123][T17080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 332.475670][T17080] bond1: (slave bond2): making interface the new active one [ 332.485938][T17080] bond1: (slave bond2): Enslaving as an active interface with an up link [ 332.507719][T16767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.587400][ T5875] Bluetooth: hci1: command tx timeout [ 332.700746][T17089] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 332.731265][T17073] syzkaller0: delete flow: hash 1310613033 index 1 [ 332.752326][T17093] vxcan1: tx address claim with dest, not broadcast [ 334.168957][T16767] veth0_vlan: entered promiscuous mode [ 334.254963][T16767] veth1_vlan: entered promiscuous mode [ 334.298383][T17101] Bluetooth: MGMT ver 1.23 [ 334.389673][T16767] veth0_macvtap: entered promiscuous mode [ 334.446633][T16767] veth1_macvtap: entered promiscuous mode [ 334.491976][T16767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.502406][T17114] netlink: 'syz.4.3204': attribute type 50 has an invalid length. [ 334.528115][T16767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.535519][T17114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3204'. [ 334.592844][ T3548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.665945][ T3548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.693885][ T3548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.742294][T13646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.927175][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.939174][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.024270][T13105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.054942][T13105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.133859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.467117][T17146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3214'. [ 335.529380][T17146] sctp: [Deprecated]: syz.3.3214 (pid 17146) Use of int in max_burst socket option deprecated. [ 335.529380][T17146] Use struct sctp_assoc_value instead [ 335.696517][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3216'. [ 335.725351][T17155] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3216'. [ 335.823055][T17155] geneve4: entered promiscuous mode [ 335.828318][T17155] geneve4: entered allmulticast mode [ 335.901879][ T1166] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.931598][ T1166] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.944452][T17166] xt_policy: neither incoming nor outgoing policy selected [ 335.955682][ T1166] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.990558][ T1166] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.194415][T17171] tipc: Enabled bearer , priority 0 [ 336.541221][T17171] syzkaller0: entered promiscuous mode [ 336.558723][T17171] syzkaller0: entered allmulticast mode [ 336.620349][T17191] netlink: 'syz.1.3227': attribute type 11 has an invalid length. [ 336.635570][T17183] tipc: Resetting bearer [ 336.680061][T17170] tipc: Resetting bearer [ 336.767388][T17170] tipc: Disabling bearer [ 336.796896][T17192] tipc: Enabling of bearer rejected, failed to enable media [ 336.845810][T17201] netlink: 'syz.3.3230': attribute type 1 has an invalid length. [ 336.895156][T17206] __nla_validate_parse: 4 callbacks suppressed [ 336.895174][T17206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3229'. [ 336.897898][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3230'. [ 337.158453][T17208] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3229'. [ 337.176805][T17215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3232'. [ 337.378114][T17229] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 337.417751][T17225] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 337.522328][T17235] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20000 [ 337.581848][T17237] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3239'. [ 337.726143][T17243] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000 [ 337.773542][T17245] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3243'. [ 337.801635][T17245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3243'. [ 337.920434][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'. [ 337.953306][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'. [ 338.032655][T17255] netlink: 'syz.1.3245': attribute type 39 has an invalid length. [ 338.532699][T17271] netlink: 'syz.4.3251': attribute type 1 has an invalid length. [ 338.603512][T17271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.637828][T17275] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 338.687381][T17271] vlan2: entered allmulticast mode [ 338.693710][T17271] veth1: entered allmulticast mode [ 338.699610][T17271] veth1: entered promiscuous mode [ 338.707894][T17271] veth1: left promiscuous mode [ 338.715761][T17271] bond1: (slave vlan2): making interface the new active one [ 338.724410][T17271] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 338.742604][T17271] veth1: entered promiscuous mode [ 338.753563][T17271] vlan2: entered promiscuous mode [ 338.759256][T17271] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 338.832252][T17281] vxcan1 speed is unknown, defaulting to 1000 [ 339.110218][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3258'. [ 339.367646][T17314] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 339.379657][T17281] lo speed is unknown, defaulting to 1000 [ 339.671891][T17324] vxcan1 speed is unknown, defaulting to 1000 [ 340.314485][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 340.328850][T17324] lo speed is unknown, defaulting to 1000 [ 341.460881][T17325] lo speed is unknown, defaulting to 1000 [ 341.699045][ T5182] Bluetooth: hci1: command 0x0405 tx timeout [ 341.864936][T17413] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 341.883275][T17412] netlink: 'syz.4.3298': attribute type 7 has an invalid length. [ 341.996363][T17412] tipc: Started in network mode [ 342.019187][T17412] tipc: Node identity 56a7a58f6ff, cluster identity 4711 [ 342.069937][T17412] tipc: Enabled bearer , priority 0 [ 342.110398][T17415] syzkaller0: entered promiscuous mode [ 342.140263][T17415] syzkaller0: entered allmulticast mode [ 342.314243][T17412] tipc: Resetting bearer [ 343.063188][T11079] tipc: Node number set to 962045327 [ 344.732118][T17411] tipc: Resetting bearer [ 344.758038][T17411] tipc: Disabling bearer [ 345.144063][T17456] netlink: 'syz.1.3306': attribute type 1 has an invalid length. [ 345.412211][T17467] __nla_validate_parse: 9 callbacks suppressed [ 345.412230][T17467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3309'. [ 345.462675][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803201d000: rx timeout, send abort [ 345.548763][T17472] netlink: 'syz.4.3311': attribute type 6 has an invalid length. [ 345.679895][T17477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.780731][T17469] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 345.928631][T17485] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3313'. [ 345.971859][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803201d000: abort rx timeout. Force session deactivation [ 346.241916][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'. [ 346.290642][T17487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3315'. [ 346.335077][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3316'. [ 346.397591][T17495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3317'. [ 346.440433][T17494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.571878][T17494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.988982][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'. [ 347.014644][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3321'. [ 347.020699][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'. [ 347.054640][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3321'. [ 347.646318][T17549] macvlan0: entered promiscuous mode [ 347.659004][T17549] macvlan0: entered allmulticast mode [ 347.775792][T17559] netlink: 'syz.4.3333': attribute type 1 has an invalid length. [ 348.067177][T17559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 348.155914][T17577] netlink: 'syz.5.3338': attribute type 39 has an invalid length. [ 348.601233][T17594] netlink: 'syz.4.3344': attribute type 1 has an invalid length. [ 348.702143][T17596] tipc: Started in network mode [ 348.715997][T17596] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 348.748157][T17596] tipc: Enabled bearer , priority 10 [ 349.011939][T17611] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 2, id = 0 [ 349.128052][T17615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.743046][ T5945] tipc: Node number set to 4269801492 [ 349.778567][T17653] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 349.855741][T17658] netlink: 'syz.5.3365': attribute type 7 has an invalid length. [ 350.196653][ T1166] vlan2: left promiscuous mode [ 350.530956][T17686] __nla_validate_parse: 10 callbacks suppressed [ 350.530977][T17686] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3376'. [ 350.571485][T17690] netlink: 'syz.4.3378': attribute type 1 has an invalid length. [ 350.584059][T17690] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3378'. [ 350.812611][T17699] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3380'. [ 351.098201][T17712] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3384'. [ 351.339795][T17731] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3390'. [ 351.351083][T17731] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3390'. [ 351.464669][T17736] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3390'. [ 351.475719][T17732] tipc: Enabled bearer , priority 0 [ 351.488946][T17736] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3390'. [ 351.824879][T17729] tipc: Disabling bearer [ 352.031077][T17768] netlink: 'syz.2.3397': attribute type 6 has an invalid length. [ 352.076663][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3400'. [ 352.223998][T17780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3402'. [ 352.972070][T17821] netlink: 'syz.5.3415': attribute type 2 has an invalid length. [ 353.239193][T17839] xt_socket: unknown flags 0xe4 [ 353.320319][T17841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.574614][T17849] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 353.619714][T17850] netlink: 'syz.2.3425': attribute type 2 has an invalid length. [ 353.634456][T17853] tipc: Enabling of bearer rejected, failed to enable media [ 354.117344][T17889] netlink: 'syz.2.3436': attribute type 1 has an invalid length. [ 354.253982][T17895] bond3: (slave geneve2): making interface the new active one [ 354.269169][T17895] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 354.278265][T13637] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 354.289572][T13637] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 354.301696][T13637] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 354.314069][T13637] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 354.379539][T13637] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.444326][T13637] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.496021][T13637] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.511434][T13637] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.560946][T17921] veth0: entered promiscuous mode [ 354.750695][T17929] syzkaller0: entered promiscuous mode [ 354.762610][T17929] syzkaller0: entered allmulticast mode [ 354.774100][T17929] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 355.058566][T17910] veth0: left promiscuous mode [ 355.386967][T17946] netlink: 'syz.4.3454': attribute type 10 has an invalid length. [ 355.420656][T17946] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.428412][T17946] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.471382][T17946] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.478654][T17946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.479952][T17957] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 355.486241][T17946] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.486415][T17946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.515476][T17957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.538726][T17946] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 355.572310][T17953] IPv6: sit2: Disabled Multicast RS [ 355.707133][T17966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.000697][T17988] __nla_validate_parse: 17 callbacks suppressed [ 356.000717][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3469'. [ 356.191501][T18002] netlink: 'syz.3.3471': attribute type 11 has an invalid length. [ 356.212004][T18002] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3471'. [ 356.236916][T18007] netlink: 'syz.1.3473': attribute type 1 has an invalid length. [ 356.270146][T18007] netlink: 'syz.1.3473': attribute type 1 has an invalid length. [ 356.277063][T18005] vxcan1 speed is unknown, defaulting to 1000 [ 356.504752][T18020] tipc: Enabled bearer , priority 0 [ 356.530589][T18020] syzkaller0: entered promiscuous mode [ 356.556908][T18020] syzkaller0: entered allmulticast mode [ 356.596804][T18020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3475'. [ 356.721110][T18020] tipc: Resetting bearer [ 356.751680][T18030] : renamed from bridge_slave_0 (while UP) [ 356.784733][T18017] tipc: Resetting bearer [ 356.818744][T18017] tipc: Disabling bearer [ 356.978873][T18034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3480'. [ 357.010267][T18034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3480'. [ 357.157002][T18005] lo speed is unknown, defaulting to 1000 [ 357.682066][T18065] vxcan1 speed is unknown, defaulting to 1000 [ 357.727879][T18060] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 357.755688][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3488'. [ 357.971518][T18069] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 358.009794][T18069] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3488'. [ 358.096862][T18065] lo speed is unknown, defaulting to 1000 [ 358.226346][T18074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3490'. [ 358.557693][ T30] audit: type=1800 audit(1755448574.640:5): pid=18087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3495" name="memory.events" dev="tmpfs" ino=515 res=0 errno=0 [ 358.557963][T18085] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3494'. [ 358.600004][T18087] netlink: 'syz.2.3495': attribute type 29 has an invalid length. [ 358.608650][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'. [ 358.658198][T18085] tipc: Enabled bearer , priority 0 [ 358.695875][T18085] syzkaller0: entered promiscuous mode [ 358.711549][T18085] syzkaller0: entered allmulticast mode [ 358.841814][T18085] tipc: Resetting bearer [ 358.985922][T18084] tipc: Resetting bearer [ 359.033419][T18084] tipc: Disabling bearer [ 359.479262][T18112] tipc: Enabled bearer , priority 0 [ 360.203682][T18127] macsec1: entered promiscuous mode [ 360.210460][T18127] team0: entered promiscuous mode [ 360.225372][T18127] team_slave_0: entered promiscuous mode [ 360.231319][T18127] team_slave_1: entered promiscuous mode [ 360.238104][T18127] macsec1: entered allmulticast mode [ 360.253690][T18127] team0: entered allmulticast mode [ 360.261947][T18127] team_slave_0: entered allmulticast mode [ 360.277004][T18127] team_slave_1: entered allmulticast mode [ 360.291609][T18127] team0: Device macsec1 is already an upper device of the team interface [ 360.330431][T18127] team0: left allmulticast mode [ 360.337988][T18127] team_slave_0: left allmulticast mode [ 360.348342][T18127] team_slave_1: left allmulticast mode [ 360.358566][T18127] team0: left promiscuous mode [ 360.367502][T18127] team_slave_0: left promiscuous mode [ 360.379100][T18127] team_slave_1: left promiscuous mode [ 360.434297][T18111] tipc: Disabling bearer [ 360.685400][T18139] netlink: 'syz.3.3509': attribute type 1 has an invalid length. [ 360.830104][T18141] netlink: 'syz.2.3511': attribute type 4 has an invalid length. [ 360.969631][T18151] netlink: 'syz.5.3510': attribute type 3 has an invalid length. [ 361.023099][T18150] __nla_validate_parse: 8 callbacks suppressed [ 361.023119][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'. [ 361.069396][T18150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3513'. [ 361.999267][ T5918] IPVS: starting estimator thread 0... [ 362.009348][T18199] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 362.102266][T18208] netlink: 'syz.4.3532': attribute type 10 has an invalid length. [ 362.113583][T18200] IPVS: using max 28 ests per chain, 67200 per kthread [ 362.154746][T18208] syz_tun: entered promiscuous mode [ 362.180864][T18208] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 362.194519][T18210] tipc: Started in network mode [ 362.199420][T18210] tipc: Node identity 080211000001, cluster identity 4711 [ 362.207856][T18210] tipc: Enabled bearer , priority 0 [ 362.217560][T18210] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 362.241674][T18210] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 362.280863][T18210] tipc: Resetting bearer [ 362.302245][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3535'. [ 362.327315][T18217] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 362.351591][T18217] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 362.362278][T18217] gretap3: entered promiscuous mode [ 362.375947][T18217] gretap3: entered allmulticast mode [ 362.388421][T18220] netlink: 'syz.4.3536': attribute type 10 has an invalid length. [ 362.411568][T18218] veth7: entered allmulticast mode [ 362.443624][T18221] veth9: entered allmulticast mode [ 362.810598][T18246] netlink: 'syz.1.3545': attribute type 1 has an invalid length. [ 362.907817][T18253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3547'. [ 363.295859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.309038][ T5974] tipc: Node number set to 134418688 [ 363.394578][T18279] tipc: Enabled bearer , priority 0 [ 363.422914][T18279] syzkaller0: entered promiscuous mode [ 363.428427][T18279] syzkaller0: entered allmulticast mode [ 363.486824][T18284] veth0: entered promiscuous mode [ 363.586808][T18279] tipc: Resetting bearer [ 363.657681][T18279] tipc: Disabling bearer [ 363.757995][T18280] veth0: left promiscuous mode [ 363.764446][T18301] veth1_virt_wifi: mtu less than device minimum [ 363.880335][T18313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3564'. [ 363.906322][T18318] netlink: 'syz.4.3565': attribute type 30 has an invalid length. [ 364.246585][T18336] tipc: Enabling of bearer rejected, already enabled [ 364.328381][T18338] bridge1: entered allmulticast mode [ 364.376541][T18338] netlink: 'syz.4.3572': attribute type 8 has an invalid length. [ 364.452564][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3575'. [ 364.655690][T18361] netlink: 'syz.5.3578': attribute type 1 has an invalid length. [ 364.675834][T18363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3579'. [ 364.685177][T18361] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3578'. [ 364.697352][T18361] netlink: 'syz.5.3578': attribute type 1 has an invalid length. [ 364.778990][T18367] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 364.828602][T18371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.006216][T18381] netlink: 'syz.1.3584': attribute type 64 has an invalid length. [ 365.028479][T18381] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3584'. [ 365.052181][T18381] netlink: 'syz.1.3584': attribute type 7 has an invalid length. [ 365.260761][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3587'. [ 365.731605][T18420] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 365.782258][T18420] mac80211_hwsim hwsim21 ÿ: renamed from wlan1 [ 366.008813][T18441] gre1: entered promiscuous mode [ 366.027289][T18441] gre1: entered allmulticast mode [ 366.087889][T18436] __nla_validate_parse: 4 callbacks suppressed [ 366.087909][T18436] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3603'. [ 366.290827][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3607'. [ 366.313324][T18452] veth0: entered promiscuous mode [ 366.472362][T18465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3613'. [ 366.632581][T18473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.023899][T18499] netlink: 'syz.3.3627': attribute type 10 has an invalid length. [ 367.066015][T18504] netlink: 'syz.4.3629': attribute type 1 has an invalid length. [ 367.125910][T18451] veth0: left promiscuous mode [ 367.180588][T18504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3629'. [ 367.212155][T18507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 367.224231][T18507] bond4: (slave bond5): making interface the new active one [ 367.232222][T18507] bond4: (slave bond5): Enslaving as an active interface with an up link [ 367.248350][T18504] bond4: entered promiscuous mode [ 367.254416][T18504] bond5: entered promiscuous mode [ 367.259703][T18504] bond4: entered allmulticast mode [ 367.269636][T18504] bond5: entered allmulticast mode [ 367.276010][T18504] 8021q: adding VLAN 0 to HW filter on device bond4 [ 367.289018][T18504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.299983][T18504] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3629'. [ 367.631931][T13638] [ 367.634331][T13638] ============================================ [ 367.640478][T13638] WARNING: possible recursive locking detected [ 367.646636][T13638] 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 Not tainted [ 367.653737][T13638] -------------------------------------------- [ 367.659876][T13638] kworker/u8:12/13638 is trying to acquire lock: [ 367.666191][T13638] ffffe8ffffdde3a8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 367.675422][T13638] [ 367.675422][T13638] but task is already holding lock: [ 367.682789][T13638] ffffe8ffffdde3f8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 367.692066][T13638] [ 367.692066][T13638] other info that might help us debug this: [ 367.700165][T13638] Possible unsafe locking scenario: [ 367.700165][T13638] [ 367.707606][T13638] CPU0 [ 367.710903][T13638] ---- [ 367.714179][T13638] lock(&pd_list->lock); [ 367.718518][T13638] lock(&pd_list->lock); [ 367.722864][T13638] [ 367.722864][T13638] *** DEADLOCK *** [ 367.722864][T13638] [ 367.731020][T13638] May be due to missing lock nesting notation [ 367.731020][T13638] [ 367.739337][T13638] 3 locks held by kworker/u8:12/13638: [ 367.744791][T13638] #0: ffff88801e7ae948 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 367.756726][T13638] #1: ffffc9000bfefbc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 367.768568][T13638] #2: ffffe8ffffdde3f8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 367.778233][T13638] [ 367.778233][T13638] stack backtrace: [ 367.784135][T13638] CPU: 1 UID: 0 PID: 13638 Comm: kworker/u8:12 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 367.784164][T13638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.784179][T13638] Workqueue: pencrypt_parallel padata_parallel_worker [ 367.784214][T13638] Call Trace: [ 367.784221][T13638] [ 367.784229][T13638] dump_stack_lvl+0x189/0x250 [ 367.784251][T13638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.784270][T13638] ? __pfx__printk+0x10/0x10 [ 367.784294][T13638] ? print_lock_name+0xde/0x100 [ 367.784318][T13638] print_deadlock_bug+0x28b/0x2a0 [ 367.784337][T13638] validate_chain+0x1a3f/0x2140 [ 367.784356][T13638] ? irqentry_exit+0x74/0x90 [ 367.784378][T13638] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.784400][T13638] ? look_up_lock_class+0x74/0x170 [ 367.784422][T13638] ? register_lock_class+0x51/0x320 [ 367.784448][T13638] __lock_acquire+0xab9/0xd20 [ 367.784475][T13638] ? padata_do_serial+0x73e/0xb80 [ 367.784495][T13638] lock_acquire+0x120/0x360 [ 367.784518][T13638] ? padata_do_serial+0x73e/0xb80 [ 367.784540][T13638] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 367.784564][T13638] _raw_spin_lock+0x2e/0x40 [ 367.784582][T13638] ? padata_do_serial+0x73e/0xb80 [ 367.784603][T13638] padata_do_serial+0x73e/0xb80 [ 367.784630][T13638] ? padata_parallel_worker+0x44/0x1d0 [ 367.784652][T13638] padata_parallel_worker+0x75/0x1d0 [ 367.784673][T13638] ? process_scheduled_works+0x9ef/0x17b0 [ 367.784690][T13638] process_scheduled_works+0xade/0x17b0 [ 367.784717][T13638] ? __pfx_process_scheduled_works+0x10/0x10 [ 367.784740][T13638] worker_thread+0x8a0/0xda0 [ 367.784768][T13638] kthread+0x70e/0x8a0 [ 367.784788][T13638] ? __pfx_worker_thread+0x10/0x10 [ 367.784804][T13638] ? __pfx_kthread+0x10/0x10 [ 367.784824][T13638] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.784844][T13638] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.784865][T13638] ? __pfx_kthread+0x10/0x10 [ 367.784885][T13638] ret_from_fork+0x3f9/0x770 [ 367.784903][T13638] ? __pfx_ret_from_fork+0x10/0x10 [ 367.784921][T13638] ? __switch_to_asm+0x39/0x70 [ 367.784942][T13638] ? __switch_to_asm+0x33/0x70 [ 367.784962][T13638] ? __pfx_kthread+0x10/0x10 [ 367.784992][T13638] ret_from_fork_asm+0x1a/0x30 [ 367.785020][T13638] [ 369.053347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog