last executing test programs: 3m42.693500734s ago: executing program 2 (id=3912): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000004c0)={@void, @void, @eth={@remote, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xbe, 0x11, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xbe, 0x0, @gue={{0x2, 0x0, 0x3, 0xfd, 0x100}, "d621cb24adaa7be1d3c8df9ca786eb3677c9de37452d6b07bd90a1a8429dd176018bc32761a649677873a0a74ee608a60cc9a4fc7a31af84bb3bedd46a7a3b396a24d09ed1f319e58be011fc4a404e0af469ef2a1a1f59972f89a08eae40840ad434f8235fb724448091e34800cfff359944fc0089e1e37492b9fb8b8d867bb5b68cc9092d5813d796ff27b341319c40c83a58ab31390d401e7c5e17e9d26f743fe1b11786a587e136864dcc215d"}}}}}}}}, 0xf4) listen(r0, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3m42.57730344s ago: executing program 2 (id=3915): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000c80)={@random="b19098cbaf38", @local, @void, {@generic={0x800}}}, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f00000001c0)={@default, @default, 0x2, 0x44}) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="f6f1954420a697373eafed55561be80c5ae42f9286d41f39c884bd0c3f88eea8b0c2578e84f8155ebf7b0cfed0da27241e84b83473ab80b53467f56f1dc881311aef98160f5459700bb2fac80badcb55bd965ff4838f47a66092a6fc92ed6d3f785b60d2429e4c234b3e31667c67e0b4a275230781a498f568ca691977", 0x7d}, {&(0x7f0000000500)="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", 0x1a7}, {&(0x7f0000000340)="7e704c40186b0f55103f38168537c6cb6d20c82aa48af2142257c12bc60bd09db08646e220", 0x25}], 0x3}, 0x34048805) 3m42.478569283s ago: executing program 2 (id=3917): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r5], 0x50}}, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) 3m42.246127882s ago: executing program 2 (id=3920): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x83, &(0x7f0000000000)={r6, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={r6, 0xf}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={r6, 0xf}, 0x8) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) sendto$packet(r7, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r9 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r9, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0xfffe) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={0xfffffffffffffecd, r8, 0x200, 0x70bc24, 0x25dfdc00, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c6238a5f1d7379d}, 0xb0cf1a6b82add4a8) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={0xfffffffffffffecd, r8, 0x200, 0x70bc24, 0x25dfdc00, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c6238a5f1d7379d}, 0xb0cf1a6b82add4a8) 3m42.040515628s ago: executing program 2 (id=3923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0xc010) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x9, 0x6, 0x107, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040) 3m41.873500281s ago: executing program 2 (id=3926): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000026000900010008008000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e79256f8d9292316e72dab8bd624000000ec09d0cc506d4028064b8412aa0f79f0e1eb8bf80a7f4516b2f24ef4f3e29994518b83b2532d41ce49761c58574abd99ab8101d0d29b4d2f0e1793c51941f2e8f2ec20bd08bc842745fd687779274bd34fd0a833bf6997915f55cf0f22443ed58e5cfe1c7f8a1a5332422b348344f8d3051c915e8475f90f7b71cb77a53b02bfccace903837cf3ab9a3b094aac93a4fc16531f442a07a0b3cae18b077a0eab34a87b4077ce45", @ANYRES16=r3, @ANYBLOB="000825bd7000fcdbdf250300000005001200070000000500120034000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r7) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) close(0x3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf250700000014000200fe80000000000000000000000000004208000400ac1414bb140003"], 0x44}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4060}, 0xc000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5d4528bd70a0fedbdf25010000000c0002000100000000000000040007800c0004769456d1167404001d1cc2936b85d47fd844789b98897670203cc8a4af51a8c6d8ecfc9aaeb7e6e8b67ce500"/90], 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000000) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f00000000c0)=0x1) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1000293d7000fddbdf250a00000006000900020000000c0806000300000008000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) socket$inet6_udplite(0xa, 0x2, 0x88) 3m26.790528393s ago: executing program 32 (id=3926): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000026000900010008008000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e79256f8d9292316e72dab8bd624000000ec09d0cc506d4028064b8412aa0f79f0e1eb8bf80a7f4516b2f24ef4f3e29994518b83b2532d41ce49761c58574abd99ab8101d0d29b4d2f0e1793c51941f2e8f2ec20bd08bc842745fd687779274bd34fd0a833bf6997915f55cf0f22443ed58e5cfe1c7f8a1a5332422b348344f8d3051c915e8475f90f7b71cb77a53b02bfccace903837cf3ab9a3b094aac93a4fc16531f442a07a0b3cae18b077a0eab34a87b4077ce45", @ANYRES16=r3, @ANYBLOB="000825bd7000fcdbdf250300000005001200070000000500120034000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r7) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) close(0x3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf250700000014000200fe80000000000000000000000000004208000400ac1414bb140003"], 0x44}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4060}, 0xc000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5d4528bd70a0fedbdf25010000000c0002000100000000000000040007800c0004769456d1167404001d1cc2936b85d47fd844789b98897670203cc8a4af51a8c6d8ecfc9aaeb7e6e8b67ce500"/90], 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000000) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f00000000c0)=0x1) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1000293d7000fddbdf250a00000006000900020000000c0806000300000008000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) socket$inet6_udplite(0xa, 0x2, 0x88) 1m23.149235824s ago: executing program 5 (id=5530): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd0000fedbdf253a000000080000", @ANYRES32=r6, @ANYBLOB="060065001000000004005b00"], 0x28}}, 0x4810) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="000229bd7000fddb9f7eca6c000008000300", @ANYRES32=r6, @ANYBLOB="20003400fc7beb7af3ed04bb637e49e835a98b357f13f14b24dda7530e53393d0f0034004fd293675ae7213688dd32000a00340002020202020200000a003400020202020202000024006e8004000200040001000400010004000200040002000400020004000200040001000b000a006a28ba4c0837f70004002800"], 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r1}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x9}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x68, 0x2, [@TCA_CGROUP_EMATCHES={0x64, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xa, 0x7, 0x8}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x8000}, {0x3, 0x0, 0xb0d2136f7484feab}}}, @TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x98}}, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000001080)=0x5, 0x4) socket$l2tp(0x2, 0x2, 0x73) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r10, 0x1) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) socket$netlink(0x10, 0x3, 0x4) 1m22.328867711s ago: executing program 5 (id=5539): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"/616], 0x268}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'vlan1\x00', {0xe}, 0xc3c}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800080008000800000000000800009500"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r4, 0x25, 0x0, @void}, 0x10) close(r5) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r6, &(0x7f0000001480)=0x2, 0x12) 1m22.193033312s ago: executing program 5 (id=5541): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@getqdisc={0x30, 0x26, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0x7, 0xe}, {0x1, 0xf}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@getqdisc={0x30, 0x26, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0x7, 0xe}, {0x1, 0xf}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x20040000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) (async) 1m22.18651947s ago: executing program 5 (id=5545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @initdev}, &(0x7f00000000c0)=0xc) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x29}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x200448c3) r3 = socket(0x21, 0x1, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r3) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r5 = socket(0x1d, 0x0, 0xffff) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e23, 0xf53, @local, 0x7}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000440)={{0x0, 0xfffffffffffffffd, 0x2, 0x2, 0x5, 0x7, 0x2, 0xfff, 0x2d9f, 0xc95, 0x1, 0x5, 0x0, 0x6, 0x8001}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000004c0)={0x0, 0x0, "b51e36aeb76e9a32099b0089559342e5656067d843f18048eb7f95dfe06c55fbe3fe838c6cdbf61aee4352edb86af666a6b3aee1c1aa81b74176f02d33e1d8f5a749d46b67b108f3fc96291735e9955cbc8f9d7ee1bbefe4beb862cc96848c6a97764a8972cac4f77958825fdd1cbb69aad2014e304757a70b9dfee3927348ef5a1d0195767a4f767e3ff140463b171a33009813391493e75f42837bdc37d90aaf71bf5ca056226344494ac4bcd76705d0a41fd4935996f2fc200b5013ce4b132b9ac67511be360dc755313bf8f1d50f54ae84e2433073f0d8aa234c80d8a3f06dc6fbd4089ef735b4dd9037d45831312408192ac84dbd19985d24fd72603f35", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000014c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000024c0)={{0x0, 0x5, 0x1, 0x1, 0xafd, 0x44f, 0x7, 0x40, 0x0, 0x81, 0xb8, 0x2, 0x100000000, 0xcc7, 0x4d419f58}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002580)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000002780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000002980)={0x6, [{}, {}, {}, {}, {0x0}], 0x0, "5e0544b9942c47"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003980)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000003b80)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xe, "e582008e60147f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000004b80)={0x8000000000000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "e5b30e0934480e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000005b80)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "648345db63594b"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000006b80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000006d80)={{0x0, 0x7, 0x0, 0x0, 0x8, 0x8, 0x40, 0x2, 0x8001, 0x40000000, 0x80000000, 0x853, 0x1, 0x7f, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000007d80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000007f80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000008180)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000008380)={0xce24, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "ef81d27dc2f519"}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000009380)={{0x0, 0x7fffffff, 0x2, 0x1, 0x3, 0x401, 0x8001, 0x4c7, 0x3, 0xfffffffc, 0x5, 0x4, 0x654, 0xfffffffffffffe01, 0xb}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000113840)={0x1, [{r6, r7}, {r8}, {r9, r10}, {0x0, r11}, {r12}, {r13}, {r14, r15}, {r16, r17}, {r18, r19}, {0x0, r20}, {r21}, {0x0, r22}, {r23}], 0xe9, "5c0f961d87c1ce"}) 1m22.172204369s ago: executing program 5 (id=5550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24}, 0x94) sendto(0xffffffffffffffff, &(0x7f00000004c0)="a86c52dc015260e71b54b91b881885870b77ea6ef685f47eed82d07cf535d5084d3d376c7d22c3067c182836ccba18f1a9dfcdf4c9caa28ed761342b3b09fd5cd84d760d35d5ef6971576ee548162fd4", 0x50, 0x4000000, &(0x7f0000000540)=@in6={0xa, 0x4e20, 0xbd, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) 1m22.045596023s ago: executing program 5 (id=5554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110880000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$netlink(0x10, 0x3, 0xa) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x24}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000026000100fdff07000010e7ff030000"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x24, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) 2.299450771s ago: executing program 33 (id=5554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110880000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$netlink(0x10, 0x3, 0xa) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x24}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000026000100fdff07000010e7ff030000"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x24, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) 1.314234845s ago: executing program 3 (id=5628): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00040000000000000014dffac8be00001750284a01efffbffcdbdf"], 0x1c}}, 0xc000) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001"], 0x80}}, 0x0) 1.312479727s ago: executing program 4 (id=5629): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) (async) socketpair(0xf, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x340, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x310, 0x2, [@TCA_BASIC_ACT={0x30c, 0x3, [@m_simple={0xf0, 0xd, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xff, 0x3, 0x20000000, 0x1, 0x9}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xff9, 0xffffffffffffffff, 0x1, 0xb}}, @TCA_DEF_PARMS={0x18, 0x2, {0xae2, 0x8, 0x8, 0x4, 0x5}}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'multiq\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xd, 0x5, 0x0, 0x4, 0x5}}, @TCA_DEF_DATA={0xa, 0x3, '${\')/\x00'}]}, {0x2f, 0x6, "89945c687cb78fe1dee98ae22c11fa1f8dffa03b2a127a45746ee95c700e3b3f36e048bb59a0f3e50fc24b"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0xfffffffffffffe1b, 0x5, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x782}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1000, 0x6, 0x20000000, 0xa5, 0x5}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x6bffbb88, 0x4, 0x9, 0x1}, 0xe}}]}, {0x53, 0x6, "fd79c6f4dbf267b816be63566fc07f9ad5e43d03bb0010969831e0bf3ba8ad89e24dfcfdc3a5a2bde646f6513f122e1d57ace3e9e1b57ba239adcf4aec6257beb572b91ec58e567c270a1f39511bb5"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x134, 0x17, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x229e, 0x10000003, 0x2, 0x9}, 0x1}}]}, {0xca, 0x6, "e3ca6068e8bce54f31363d6642ae80a2e14f465c8aed0a0eb5f425b9c24e7c2e4c00f6c9cf846edab00c6b23bb750c7ef74f5f78e3a70da41f1e31facffc748cda8e8440353691b3686eeb2453d8cd6cf2b8665bc9559ef0061f7ff59a092022e078e8b442b091599ac77115140cbda85ff29efdb1874e9210351ee070a0b597c1cad5c545ea09f491bd5fd3f22cc246dab8cf6bd2630a82776fe670f4fdd14f8514eb1a6fbf63d7219be493a0bc9b44c774a0e11ac03e8cefe3b5beb01f5ade0b8712882b1f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x64, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}]}}]}, 0x64}}, 0x0) (async) write$cgroup_devices(r3, &(0x7f00000003c0)=ANY=[], 0x8) (async, rerun: 64) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8", @ANYRESOCT, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRESHEX=r3], 0x2a8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async, rerun: 64) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 1.248174028s ago: executing program 0 (id=5630): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @dev}, &(0x7f00000001c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYBLOB], 0x3c}}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffff7}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffff8000}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x101}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xfff}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}]}}]}, 0x58}}, 0x4000080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x16, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x2, 0x5}, {0xf, 0x6}, {0xc, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x3, 0x5, 0xb, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x9, 0x4}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) r12 = socket$unix(0x1, 0x5, 0x0) r13 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1dc, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r15, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r16, @ANYRES32=r15], 0x44}}, 0x0) 1.112314904s ago: executing program 3 (id=5632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000840)={0x30, r3, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r7, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x4, 0x6, @remote}, 0x14) sendmmsg$sock(r7, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40400c0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x4c, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x29}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r9 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r9, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20004086) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB="04d20582"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.043713144s ago: executing program 1 (id=5633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRES32=r6, @ANYRES64=r0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000001740)=[{&(0x7f00000011c0)=""/253, 0xfd}], 0x1) 880.274593ms ago: executing program 1 (id=5634): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {}, {0x2d}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x63}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000040)={0x54, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0xb40b}, {0x8}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x1}, {0x8}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 801.95623ms ago: executing program 3 (id=5635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'rose0\x00', {'erspan0\x00'}, 0x101}) 767.202047ms ago: executing program 4 (id=5636): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000040)="ead77b", 0x3, 0x20000840, &(0x7f0000000080)={0xa, 0x4e24, 0x8b7a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) r1 = socket$isdn(0x22, 0x3, 0x1) shutdown(r1, 0x1) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 695.781939ms ago: executing program 0 (id=5637): r0 = socket(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2, 0x0, 0x4003}, 0x0) 645.819766ms ago: executing program 1 (id=5638): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@can_newroute={0x164, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "29f764864ce3536c"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "38286370efac9bdd"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x4b, 0x0, 0x58, 0x0, 0x0, "a8d6e9d248a595d89a8f1a2c1c4c4997fab7c4c99c1436cf260f7af0b6d2166ff6b173068a48bdbb1d68ac03275f334057dbc1104b6349b48a46d48a86df091c9c792f4d1fbe1fb27963490938eae97839d0612f556c59bfce09b22796f5932d784fee44611e8e074590fe3e4b02b139a6ee764ab03e3382845e3344ac38f243bf092ba6a89df79e7ab4ba506f47db193cb47cd2e69bad0a6e0745440f0fa2cb85cbdd01d0cf1a45a4aaccaf76774e7c5619e4744bd8d95a1df0a57204f3b9e5d921d418d3a21167fd67b2b373f0ddeb03a6a3981818c90d4152c82a7907138e0ecc9b8ccc9b2901d60cbb0e647f48bb5a27b1b744db047b74fe27e968a9e063", 0x0, "19bc3340488836aaa131694a4cb097b6acc6773e"}}]}, 0x164}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) (async, rerun: 32) socket$kcm(0x29, 0x7, 0x0) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000b72e88b85c4edcd69391df69005e0001002dbdd5f0f14dd846cb052253", @ANYRES32, @ANYBLOB="02000000"], 0x1c}}, 0x20008004) 642.333853ms ago: executing program 3 (id=5639): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0xfffff5ca, {{0x2, 0x4e24, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000000c0)={0x3, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000200)={0x29, 0x6, 0x0, 0x7f, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast1}]}, 0x38) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = accept4(r0, 0x0, &(0x7f00000002c0), 0x180000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) sendmsg$nl_generic(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x324, 0x26, 0x101, 0x70bd2b, 0x25dfdbfd, {0x18}, [@typed={0xc, 0xe5, 0x0, 0x0, @u64=0xb}, @generic="6235f4b2210074ec280e16cdd7110368a621c8a2ecc51bf643c59bdf8e05ea60dedb650f6f04c77d27cc86da8cba4e852c2911e7a6c0ffc39b03a4990ebbdf2eacd3cdaa1594ac67e644d655bfe33f7d2055d85cf9caefbbde866c1f63f50a9ab730cc6c556b1eaee6149f04d35615a007c171ff80b840ac573384490e5c558829afe1daa8e38ef78d83fc7d", @generic="dd7fb6fd8e5fefd876f7d6598a11315e862c0abc98fa6c245ba69e88707fbd842429a61cf82ef500b9d039ff3ba45818147ba1b344a0c76ac2549f43ada39baf7394ce823ef2d00239a45f2136855c96f3b42cbe32c6b33641790403efdebd0d51b7a2dac4fafe781ba3b9459d8f377a8cd4012e6d8b5b6f65", @generic, @nested={0xed, 0x6f, 0x0, 0x1, [@typed={0x8, 0x100, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x142}, @generic="073b41c05dd728d817b258a0c54ef7c0e6f5e74f796fac937d516c0e7e06a1b1a861de36e18f8b9ac791d6b9ca6ea8af0395fb023d5b3b17029c662b75ef195b3b30ea43f5c050bd86c502f10d1677dfe3fdb87c71823d924942baba34dc381b2a84faef6b46dc21eb76d2ec21b9a74a7029713dfd5ed5fdd84c52d6fc8031d5053a4d661ee56dee54a69855a85a41651adaddc25c7de50940305783631a0bdb82e35e10e6d1599c31a59b2cfb659168f936c24e0dcd74f20834f1d30ae4a1e949fceef1af", @nested={0x4, 0x97}, @typed={0x14, 0x13d, 0x0, 0x0, @ipv6=@private1}]}, @typed={0x8, 0x133, 0x0, 0x0, @uid=0xee01}, @typed={0x103, 0x67, 0x0, 0x0, @binary="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"}]}, 0x324}, 0x1, 0x0, 0x0, 0x81}, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x6000, r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x10, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x7, 0x0, 0xf42}, 0x10, 0x11af5, 0xffffffffffffffff, 0x2, &(0x7f0000000a40)=[0x1, r5, r6], &(0x7f0000000a80)=[{0x0, 0x4, 0x6, 0x5}, {0x0, 0x5, 0x7, 0xb}], 0x10, 0xd}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000bc0)='memory.events\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000c00)={r4, 0x100, 0x10, 0xfffffffffffff001}) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000c40)={0x9, 0x0, 0x6, 0x7fff, 0x2, 0x0, [{0x7, 0x4a6, 0x8, '\x00', 0x208}, {0x8058, 0xfffffffffffffffc, 0x2, '\x00', 0x800}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r8, 0x0, 0xf3, 0xe3, &(0x7f0000000d00)="8c6c00d6d61611cf018c2e45bb9a5091a785f74b5c56d2abcc9646957d00ad05c721a08d47efbca6fc4157bcd1cd3ca2da9932b331f01b7e5a61ea1d0f05332fe348b2e71dce1d3ff0c61184f28086c3b33960b9118ac48be16a307ff49e174ea122c98bf7c98c90830cc391a9e95c2dc00b4cacde84ad45d78ef18273b372dbf180bc2b8b67cc5938cd48b327f18e8583f15e297abd933e226673483d6a21fbc595406970e937b3cb652ef61fb78ced7cdd45a29e3cfe30a2882fcf039907b607ca3aaae0bdb99908ae22bb9cee00f81841e34a81588bf08c9de815698ca6f9f96bd4d65510571b5a0936f3fb7241c2bb1e72", &(0x7f0000000e00)=""/227, 0xfffffffa, 0x0, 0xb2, 0xa2, &(0x7f0000000f00)="7903c309ce452349e4b67826092a08af525b7b749c39b6971ec4c1062faaad674237a7443355a26370320f0a73039b8fe64d8b961b16edef4f1880bd31af884b15ba32b091edd5a6912431c60612bc34de4c2ff5874440eb374ccdf1c17ac15aac1803f2fec69d9615dae96fae97df4c93beaba5c8933a2b23c3fd62b8efe8119759e6b7e2779d6ccfe6ed5fb94df427e996065b5206784d3e69591b894343d6616710c1779299f51f877c350c52aa021282", &(0x7f0000000fc0)="aaae843dc8ea33115ef3d299c1bb4da4ee8b3a808003b270bb008dfd66fe437d17810bbf316ae89587b0352a9ae2329d93a1410ee80fe6279f94fa705b20148cf61e99a5105c974d30dcfa673ac0acf6fdb0d75d069382dd9cfc98f7b547eb0dd4b2c77249e360a862ef9a898fa814508cea2fa3014aff70e3f3f2dee65cc8669166dd93e3d01d9b1ab44b5f2edeec34edd3c3a5ac33c01cbfb5ee713755623c403e", 0x2, 0x0, 0x81}, 0x50) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000001100)={0x80, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg$can_j1939(r8, &(0x7f0000003800)={&(0x7f0000001240)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003700)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/241, 0xf1}, {&(0x7f00000023c0)=""/179, 0xb3}, {&(0x7f0000002480)=""/24, 0x18}, {&(0x7f00000024c0)=""/59, 0x3b}, {&(0x7f0000002500)=""/212, 0xd4}, {&(0x7f0000002600)=""/186, 0xba}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/8, 0x8}], 0x9, &(0x7f00000037c0)=""/56, 0x38}, 0x100) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000038c0)={&(0x7f0000003840)=""/100, 0x64}) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000003900)={r8}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000003940)={0x0, 0x82, "95ee916c607af8051b4451ef93a1d08b5fd2e4761f309f3214d96f99ecd752309fbba2bdf9eded0611968df60e1a4c5141ffd007faabfbceb7d7722ef1344124a85f89239cd6e1f4ac3fbb01b9a3de556881f57a167c3f08a6e4e457499398d151e0be8da251ece433a0ba7dd9ddf0fb621f00d10f53dd3604a6d5d2dfe62284063f"}, &(0x7f0000003a00)=0x8a) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000003a40)={r12, @in6={{0xa, 0x4e20, 0x3, @local, 0x3}}, 0x0, 0xfffb, 0x1, 0xb45, 0x40, 0x80000000, 0x6}, 0xfffffffffffffffd) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000003b00)={@dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "1d3893c1930b2d801d1e36a486e9813f802aa431bcf5d9cebb2f0ab2ff7d526d", 0xb, 0x237, 0x7f, 0x2}, 0x3c) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f0000003b40)={0x80002000}) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000003c80)={0x1, 0x7, 0x1000, 0x7b, &(0x7f0000003b80)="617bafeb99d7c33ea55cff63b7be5271726f87ffe7ec1aacb8c925e835e3a57e4314faf6b995460a34495fc4452419b5c89f26599997249b2db48ec459d41644ba56586ffb73c3c47f9845fa54886114aa9a74cbdb209fdf60478b7e7d4998b7036641175ad27f529bff7cc4e850db6b6645359095506225e9288c", 0x7d, 0x0, &(0x7f0000003c00)="e2ede829b305baa82def463be98cef548d70aea71b5dc79cb7d1ddfbd92d7f6994def3e4694131d13edbf7ac2c3f68124e123dffe7e4ecc5d5225008b20618645e499c7eff4a0609352817b530856f369224adb2452bdc5ec916e66d6bdb0814a1b844e113a71e5779d849d415d689a0de2d9d507fb8a1b7bf6964bbb5"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004000)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f40)=@mpls_getroute={0x5c, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x14, 0x10, 0x8d, 0xff, 0x4, 0x0, 0x7, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0xa37c, 0x35}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x46}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0xfff5, 0x21, 0xe2}}, @RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 619.56683ms ago: executing program 4 (id=5640): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 587.118581ms ago: executing program 3 (id=5641): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffefffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040d5}, 0x24040084) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0x6}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x428, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x8, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}, {{0x1c, 0x1, {0xd, 0x6e, 0x33, 0x3ff, 0x0, 0x400, 0x9, 0x3}}, {0xa, 0x2, [0xc, 0xffff, 0x8]}}, {{0x1c, 0x1, {0x3, 0x9e, 0x7, 0x84, 0x2, 0x7fff, 0x8000, 0x1}}, {0x6, 0x2, [0x81]}}, {{0x1c, 0x1, {0x0, 0x4, 0x9, 0x10, 0x1, 0x0, 0x2f, 0x4}}, {0xc, 0x2, [0x2, 0xfffd, 0x5140, 0xf]}}, {{0x1c, 0x1, {0x5, 0x6, 0xd, 0x2, 0x1, 0x2, 0x1000, 0x6}}, {0x10, 0x2, [0x518, 0x2, 0x3ff, 0x9, 0x800, 0x6]}}, {{0x1c, 0x1, {0x80, 0x4, 0x2, 0x0, 0x0, 0x8, 0x7fff, 0x2}}, {0x8, 0x2, [0x8, 0x6]}}, {{0x1c, 0x1, {0x93, 0x9, 0x0, 0x10000, 0x1, 0x4, 0x7, 0x4}}, {0xc, 0x2, [0x3, 0x2, 0x7, 0x4]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x428}}, 0x0) 521.817726ms ago: executing program 1 (id=5642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) recvfrom(r2, 0x0, 0x0, 0x40002062, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x54) 446.625175ms ago: executing program 4 (id=5643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x4c, r2, 0x400, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x0, 0x8, 0xa5}]}]}]}, 0x4c}}, 0x0) 386.485499ms ago: executing program 0 (id=5644): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc00000042000701fefffffffcdbdf25047c000004004580a10001"], 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) 384.934035ms ago: executing program 4 (id=5645): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x8947, &(0x7f0000000180)="83c8cfef3a") 303.104757ms ago: executing program 3 (id=5646): r0 = socket(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x4, 0x2, {0xa, 0x4e20, 0x8000, @local, 0x7}}}, 0x3a) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r2 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1}, 0x48) socket$caif_stream(0x25, 0x1, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000010fe40)={0x4, [], 0x8, "9d6ae9fa18e0f5"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) unshare(0x22020600) unshare(0x2a020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 302.411639ms ago: executing program 1 (id=5647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x30, 0x84, 0x1, "59766fe282f0381b5cc7a195cb5ade0d64bc2d9ad30419f432"}], 0x30}}], 0x2, 0x0) getsockname$qrtr(r1, &(0x7f0000000080), &(0x7f0000000180)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x200, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x1a984, 0x49060}, [@IFLA_GSO_MAX_SEGS={0x0, 0x28, 0x1be5}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xb, 0x2, {0x10, 0xd}}]}}}]}, 0xffffffffffffff03}, 0x1, 0x0, 0x0, 0x90}, 0x0) 213.658997ms ago: executing program 0 (id=5648): r0 = socket(0x80000000000000a, 0x2, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000002380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x18ec, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18b8, 0x3, 0x0, 0x1, [{0x1fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x42, 0x6, 0x1, 0x0, "287ab31e6e7cc5b37b915ba267023dc1f2a290ac97626e889d41374897fd956a07541027217a5223e53e67051c7a0f2e5abd50e24c5f30525c7b1fc7a0ea"}, @NFTA_SET_ELEM_EXPRESSIONS={0x1b4, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x75}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x128, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x118, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DATA={0xf4, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "43cadad8811c9e44d459b9b71dd63e0092e902656adfc58f89f3c12d60612d3ab3cbeb2a9caa54b7c19c5c8f4a8075e30923e33ab19678ee78a5c419e2d3fc77bd6038ef5af4804ed4d39c11683a3c4e4f57b36d42434e"}, @NFTA_DATA_VALUE={0x25, 0x1, "5b37e6c61bd9e8b459dc5b9e2507a48e2976fdd628291e325542fdcecddc1781b6"}, @NFTA_DATA_VALUE={0x3b, 0x1, "8a5cce743e686c4ce1ba8f31e8027e1597ada9951e231a1668dd843e2aa90c8eadd5046ea32b18585f2a79f2c0c58ae81643542610623e"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}]}]}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf3}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x89}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x61011e8fda427dce}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, {0x1640, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x1370, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "042f215d7473084c71f85e2dacf938574160024679474a9d321b5e001a309d4839b37483cbaee2288d49afe0ab57b970031f061e73a0110ec6a5d3a9d04a2c042d11b3ccb25197dd196e224dcaaabed9a1367260082f8e336141695efa70fd9584f0108190cd096c51ef16dadbf94a2c4d03a9ac0b62e09fc49f1a56de863663cb92e2a554a2b4e16b1d080a53944eeba95a6cced9dc974030ac6ce08bf80e1d4ded8054bdd72f4241f27c0e44a501af7aa8d0de932d86820cf798770098701729a16b88"}, @NFTA_DATA_VALUE={0x70, 0x1, "d9b8fa18d9b072ee131e377c860f2600021f960913d0d7895733263c70be712106a96a2afa3047ada9647bad05bf1a000afc17e07855ec21985f64a43538922195523c53cf7de560660724904cf000cbd5baccd200dde56bd6ff1da17069d0875e5ccfe70db4caf0ac312b6a"}, @NFTA_DATA_VALUE={0x28, 0x1, "1e13c30551beaf3707761f26a6734f69c8f464436c0a95f1f65b5e268aef7390f1f5c216"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "9d2c1116ff75e71dae26750f19b032f5419339dabd494449ce1f4357cc58d4bd662193406fd0d583"}, @NFTA_DATA_VALUE={0xb6, 0x1, "bb2c3a2ba2f7aee3b2c1592c5d92fa0f49d3535051751a13c7fe07cd81c32152a434b7eb14b275ff6709668a775eef7fa51ec8a2491ebf2dc41adb8b57ea6c2329283360c372449087a996d0ae18b47a07cffc0c102638e0b94c2c49b377eb448374e9a05c5fa7c34cbb92ba6bbf655c64c9e417a1091aa29f68a043710e5f0abf3687ef8ca061fbf78b7ae291e64de662b6aef9fffb2a4da4612d23006297ab6161d3fbb9d2c5fd6d907d741eaeb869728d"}, @NFTA_DATA_VALUE={0xd3, 0x1, "1ee81c1f8a294c04763a1129ac6c6beb92a8a5afc00ca5e8aaea4eb20a0adaef085f35f3d72bdca874914610cd2224c51bbbc77f71a21346c1e6c2f4e4d0b7d7b7679698c901306d8e461e6e502273d1113ee189b68c3488a2cbaecbf8ac64ffd2c99b3526a7be4713f27f5eb23214deb2e255e654b726ede586da0b8ec993e01c7013ba1fc54a98d911eca17fe15fefda30fb67846507b910a97cf137f3b5858204b7db75b0c82f23d7ae8f3a96a945d752c32ce2238f15e5effc43935cc0163026738dd2446fd74b77e81b932718"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x2ac, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x1a0, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x190, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xae, 0x3, "c5e8ca3765fab301813e6fd35c9cb9d6a850f2d36ab5073cd208186ba800d384eec64b5dfe6919cffdf66df9f66d180566c53367a51dcb6d087e414a3e4dec82f7f016fa54874f6cfa21f891c308df6b31cf247234053f714a2348886a2d4f499b80b1febc116df82254172bc7bd024fa631e3ddf336c017dc7291014a5c62ac7dd56fc678543e625da7cb87251f62bb2fd605a6e1d4763666c427bfe4d9e07e4619bb222e9205745073"}, @NFTA_TARGET_INFO={0xcc, 0x3, "e8d56bb640d64f909be2dd44f5927832aa2e6b82dddb86410d5c81426d59f3112774cbaf5f5a9415ab2179013b77cd2e828a7ecae23f64eb7839aad34bcf87260a632f9248b144eff207a0247158412ac85976715da0f8d75209522740b8722b54071d610c9ead7d4d58e7f95adce28fb40abe6a02d9cf8d2002c538f85c279496fead3f056edf68f6a5711237b0f3e0987474246e82930277970cc6e96a2ff0260a87c9762eb95defedf64319a45c3d36e7e2229a09b00d6e4e0f44af0515a794d0171529a9020d"}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x48, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}]}}}, {0x58, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xcf}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xe2}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}]}]}, @NFT_MSG_NEWCHAIN={0xe0, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xb0, 0xc, "3a1fd9d432f3bf8e1fc0b248827e211c367224f7f216e38559262d90162c0f015161c1dded7bb1fcf4d9eff7a29e09497b735c765d80b506782b357fda07e7bf491fb895d22f3ae40ddcc482b3756fb90e1eeb0e51fbb9f2f8b25b3f9ae7687a04ec8dcf103f98d1e091cbfef338acc7c5fbf3c36ddf87f003c16ed8db8ba2d034a22669ba0be0bece5d6fe8160f28eab8a8d71c146dd53825467208149ccd0c6615f61ff9185e42b5043b50"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x398, 0x8, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x51, 0x7, 0x1, 0x0, "83581a2fc2612e0f4c93bd26a72e6585dbbfb2146c1720021a1f32855eab6fa67503f55c246b30d2c5e7ebbed8160e3479010843042219c916e837e001e06d0e127a8bc854304ccb677bc03740"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x310, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x16c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x160, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CMP_DATA={0xf4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb2, 0x1, "5c93904e2b84040b7a9968685c12473785997c76c1f2755f090ed8c552a4f1624185c73649ac4d748faca36db8993d3a56f6f6a0b6644258f9fb0b0a03ab61103c7bcdcf665a5e4259bd7486b553627cc2392119c8db9450f701efae2b884412fab4118daa717186cc3ad247d8e387f5b1363bdb33a4971c1cfe57c1f4159254cbc9eac13ef524aca48b889419139f42147a42a39292783a9789764cf4bd6810ef331868b8f5b3a48748ec0067cb"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x28, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x58, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1e0c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) close(r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r7], 0xe4}, 0x1, 0x0, 0x0, 0x24048891}, 0x20010801) setsockopt(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100)="01000000020006fc", 0x8) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 166.420422ms ago: executing program 1 (id=5649): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x9, 0x0, &(0x7f0000001580)) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r1, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x415, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x0, [0x4, 0x9, 0x1, 0x7ff, 0x1c000000]}, &(0x7f0000000080)=0x54) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x9, 0x0, &(0x7f0000001580)) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) recvmmsg(r1, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x415, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x0, [0x4, 0x9, 0x1, 0x7ff, 0x1c000000]}, &(0x7f0000000080)=0x54) (async) 35.230615ms ago: executing program 0 (id=5650): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000100)='nr0\x00') (async) writev(r1, &(0x7f0000003500)=[{&(0x7f00000035c0)='4', 0x1}, {&(0x7f0000000080)='C', 0x1}, {&(0x7f00000000c0)="d40d", 0x2}], 0x3) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x3}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket(0x2d, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) connect$qrtr(r4, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc) (async) bind$xdp(r4, &(0x7f0000000000)={0x2d, 0x0, 0x0, 0x12, r4}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000200), &(0x7f00000003c0)=r3}, 0x20) 34.466783ms ago: executing program 4 (id=5651): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000600008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0x27c, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x7}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}, [@tmpl={0x1c4, 0x5, [{{@in6=@remote}, 0x0, @in=@broadcast}, {{@in6=@mcast2}, 0x0, @in=@dev}, {{@in=@multicast2}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x12f}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in6=@dev}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@loopback}, {{}, 0x0, @in6=@rand_addr=' \x01\x00'}, {{@in6=@dev}, 0x0, @in=@local}]}]}, 0x27c}}, 0x0) 0s ago: executing program 0 (id=5652): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) kernel console output (not intermixed with test programs): moved [ 576.310160][T19620] team0 (unregistering): Port device team_slave_1 removed [ 576.891494][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3729'. [ 577.051864][T19688] netlink: 'syz.3.3735': attribute type 1 has an invalid length. [ 577.684348][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3739'. [ 577.801419][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3739'. [ 578.281667][T19743] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3750'. [ 578.591491][T19762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 578.598817][T19762] IPv6: NLM_F_CREATE should be set when creating new route [ 578.606104][T19762] IPv6: NLM_F_CREATE should be set when creating new route [ 578.766420][T19774] netlink: 'syz.1.3760': attribute type 7 has an invalid length. [ 578.777058][T19774] netlink: 'syz.1.3760': attribute type 7 has an invalid length. [ 578.880696][T19776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.943051][T19776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 579.103993][T19789] erspan0: entered promiscuous mode [ 579.327582][T19795] netlink: 'syz.0.3767': attribute type 1 has an invalid length. [ 579.492277][T19796] bond1: (slave veth7): Enslaving as an active interface with a down link [ 579.528376][T19798] bond1: (slave veth9): Enslaving as an active interface with a down link [ 579.549234][T19807] __nla_validate_parse: 4 callbacks suppressed [ 579.549253][T19807] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3771'. [ 579.577588][T19805] syzkaller0: entered allmulticast mode [ 579.812680][T19828] tipc: Enabling of bearer rejected, failed to enable media [ 579.846667][T19835] tipc: Enabling of bearer rejected, failed to enable media [ 579.938302][T19840] netlink: 'syz.1.3780': attribute type 12 has an invalid length. [ 580.334914][T19864] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 580.355742][T19864] bond3: (slave lo): Enslaving as a backup interface with an up link [ 580.365983][T19864] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 580.399901][T19869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3788'. [ 580.492593][T19873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.543523][T19875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3790'. [ 580.593696][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'. [ 580.594365][T19873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.625079][T19879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3791'. [ 580.639449][T19879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3791'. [ 580.683586][T19873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.768824][T19884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3794'. [ 580.807752][T19873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.987149][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.003820][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.066461][T19900] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 581.083504][T19901] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 581.398405][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3800'. [ 581.806858][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.821161][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.882929][T19914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3801'. [ 581.945713][T19916] netlink: 'syz.4.3802': attribute type 1 has an invalid length. [ 581.978924][T19916] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3802'. [ 582.150463][T19933] bond2 (unregistering): Released all slaves [ 582.167149][T19931] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 582.185928][T19931] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 582.363151][ T581] nci: nci_ntf_packet: unknown ntf opcode 0x110 [ 582.426165][T19954] bond2: entered promiscuous mode [ 582.431224][T19954] bond2: entered allmulticast mode [ 582.448900][T19954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 582.490700][T19956] macvlan0: entered promiscuous mode [ 582.496118][T19956] macvlan0: entered allmulticast mode [ 582.503521][T19956] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 582.741013][T19982] wg1: entered promiscuous mode [ 582.746393][T19982] wg1: entered allmulticast mode [ 583.251991][T19998] openvswitch: netlink: IP tunnel dst address not specified [ 583.288326][T20001] unsupported nla_type 33542 [ 583.368774][T20003] tipc: Enabling of bearer rejected, failed to enable media [ 583.678790][T20023] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 583.934784][T20041] syzkaller1: entered promiscuous mode [ 583.940424][T20041] syzkaller1: entered allmulticast mode [ 584.142802][T20051] netlink: 'syz.1.3843': attribute type 23 has an invalid length. [ 584.168884][T20049] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 584.183287][T20049] tipc: Enabled bearer , priority 0 [ 584.191381][T20049] syzkaller0: entered promiscuous mode [ 584.197379][T20049] syzkaller0: entered allmulticast mode [ 584.207350][T20049] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 584.270878][T20049] tipc: Resetting bearer [ 584.333417][T20048] tipc: Resetting bearer [ 584.359204][T20062] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 584.368705][T20048] tipc: Disabling bearer [ 584.531468][T20073] netlink: 'syz.4.3850': attribute type 1 has an invalid length. [ 584.907642][T20090] __nla_validate_parse: 11 callbacks suppressed [ 584.907666][T20090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3855'. [ 585.095237][T20095] veth0: entered promiscuous mode [ 585.105890][T20093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.208135][T20093] veth0: left promiscuous mode [ 585.253854][T20107] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3858'. [ 585.560646][T20123] mac80211_hwsim hwsim32 +: renamed from syzkaller0 (while UP) [ 585.706988][T20133] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 585.720713][T20133] bond2 (unregistering): Released all slaves [ 585.776001][T20136] dvmrp0: entered allmulticast mode [ 585.982525][T20156] netlink: 'syz.0.3874': attribute type 25 has an invalid length. [ 585.996676][T20158] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 586.011612][T20156] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.036293][T20156] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.052670][T20161] netlink: 'syz.0.3874': attribute type 16 has an invalid length. [ 586.085878][T20162] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3876'. [ 586.097614][T20161] netlink: 'syz.0.3874': attribute type 17 has an invalid length. [ 586.137747][T20161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 586.258847][T20168] : renamed from hsr0 [ 586.338913][T20174] openvswitch: netlink: Missing key (keys=40, expected=100) [ 586.390520][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3882'. [ 586.539087][T20174] bridge_slave_0: left allmulticast mode [ 586.564981][T20174] bridge_slave_0: left promiscuous mode [ 586.581205][T20174] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.596591][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3884'. [ 586.640608][T20196] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 586.653159][T20196] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3884'. [ 586.779657][T20201] netlink: 'syz.3.3887': attribute type 1 has an invalid length. [ 586.815438][T20203] tipc: Started in network mode [ 586.822332][T20203] tipc: Node identity de40e24e4136, cluster identity 4711 [ 586.833993][T20203] tipc: Enabled bearer , priority 0 [ 586.854852][T20202] tipc: Disabling bearer [ 586.924617][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3890'. [ 586.991774][T20217] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3893'. [ 587.077284][T20221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3894'. [ 587.113072][T20223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3892'. [ 587.122212][T20223] bridge_slave_1: left allmulticast mode [ 587.141158][T20223] bridge_slave_1: left promiscuous mode [ 587.152270][T20223] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.912108][T20262] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 588.134476][T20286] sctp: [Deprecated]: syz.4.3909 (pid 20286) Use of int in maxseg socket option. [ 588.134476][T20286] Use struct sctp_assoc_value instead [ 588.203457][T20290] gre0: entered promiscuous mode [ 588.209570][T20290] gre0: entered allmulticast mode [ 588.456844][T20305] vlan2: entered promiscuous mode [ 588.462120][T20305] vlan2: entered allmulticast mode [ 588.480277][T20305] hsr_slave_1: entered allmulticast mode [ 588.558357][T20308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.077731][T20336] netlink: 'syz.2.3926': attribute type 32 has an invalid length. [ 589.156900][T20344] netlink: 'syz.0.3928': attribute type 5 has an invalid length. [ 589.288009][T20336] bond0: Setting coupled_control to off (0) [ 589.365536][T20357] netlink: 'syz.3.3931': attribute type 1 has an invalid length. [ 589.509510][T20368] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 589.666969][T20377] netlink: 'syz.0.3937': attribute type 32 has an invalid length. [ 589.718686][T20377] bond2: option coupled_control: invalid value (128) [ 589.733404][T20377] bond2 (unregistering): Released all slaves [ 589.769612][T20382] bond3: option mode: unable to set because the bond device has slaves [ 589.796654][T20382] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 590.078941][T20403] netlink: 'syz.4.3945': attribute type 1 has an invalid length. [ 590.087769][T20403] __nla_validate_parse: 14 callbacks suppressed [ 590.087996][T20403] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3945'. [ 590.110446][T20403] netlink: 'syz.4.3945': attribute type 1 has an invalid length. [ 590.190618][T20408] bond3: (slave veth3): Enslaving as an active interface with a down link [ 590.213867][T20403] bond3: (slave veth0_to_bond): making interface the new active one [ 590.223258][T20403] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 590.242529][T20403] bond3: entered promiscuous mode [ 590.248332][T20403] veth0_to_bond: entered promiscuous mode [ 590.254844][T20403] bond3: entered allmulticast mode [ 590.259987][T20403] veth0_to_bond: entered allmulticast mode [ 590.368788][T20416] bond3: (slave veth0_to_bond): Releasing active interface [ 590.379976][T20416] veth0_to_bond: left promiscuous mode [ 590.389952][T20416] veth0_to_bond: left allmulticast mode [ 590.398144][T20419] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.3949'. [ 590.412575][T20416] bond0: (slave bond_slave_0): Releasing backup interface [ 590.423312][T20416] bond0: (slave bond_slave_1): Releasing backup interface [ 590.441389][T20416] team0: Port device team_slave_0 removed [ 590.454989][T20416] team0: Port device team_slave_1 removed [ 590.462383][T20416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.472776][T20416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.598388][T20416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.614392][T20416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.631556][T20416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 590.671668][T20419] tipc: Enabled bearer , priority 0 [ 590.691110][T20422] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 590.708540][T20423] syzkaller0: entered promiscuous mode [ 590.714019][T20423] syzkaller0: entered allmulticast mode [ 590.732610][T20419] tipc: Resetting bearer [ 590.891360][T20439] wg1: Master is either lo or non-ether device [ 591.017841][T20449] bond0: option ad_select: unable to set because the bond device is up [ 591.148154][T20458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3961'. [ 591.166525][T20413] tipc: Resetting bearer [ 591.183460][T20459] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 591.183460][T20458] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 591.212759][T20413] tipc: Disabling bearer [ 591.232507][T20462] only policy match revision 0 supported [ 591.232526][T20462] unable to load match [ 591.308697][T20469] netlink: 'syz.4.3963': attribute type 1 has an invalid length. [ 591.435685][T20464] team_slave_0: entered promiscuous mode [ 591.441450][T20464] team_slave_1: entered promiscuous mode [ 591.454705][T20464] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 591.470817][T20481] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3966'. [ 591.721427][T20499] syzkaller1: entered promiscuous mode [ 591.737399][T20499] syzkaller1: entered allmulticast mode [ 591.874612][T20508] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 591.890820][T20508] bond3: (slave lo): Enslaving as a backup interface with an up link [ 591.912864][T20508] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 591.937068][T20511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3974'. [ 592.099995][T20518] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3977'. [ 592.134788][T20518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3977'. [ 592.153859][T20518] : entered promiscuous mode [ 592.154590][T20520] netlink: 'syz.1.3978': attribute type 4 has an invalid length. [ 592.232692][T20527] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3981'. [ 592.242393][T20528] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3981'. [ 592.715002][T20557] bond3: option mode: unable to set because the bond device has slaves [ 592.732909][T20561] netlink: 'syz.4.3991': attribute type 10 has an invalid length. [ 592.741912][T20557] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 592.760606][T20562] netlink: 'syz.4.3991': attribute type 10 has an invalid length. [ 592.780996][T20561] syz_tun: entered promiscuous mode [ 592.794622][T20560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3990'. [ 592.818876][T20561] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 592.840632][T20560] bond0: entered promiscuous mode [ 592.848245][T20560] gretap0: entered promiscuous mode [ 592.855535][T20560] debugfs: 'hsr1' already exists in 'hsr' [ 592.861302][T20560] Cannot create hsr debugfs directory [ 592.867422][T20560] hsr1: entered promiscuous mode [ 592.879925][T20562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.889853][T20562] team0: Port device bond0 added [ 592.976054][T20566] tipc: Enabled bearer , priority 0 [ 593.117985][T20577] netlink: 'syz.0.3996': attribute type 7 has an invalid length. [ 593.283691][T20582] FAULT_INJECTION: forcing a failure. [ 593.283691][T20582] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 593.320038][T20582] CPU: 0 UID: 0 PID: 20582 Comm: syz.3.3998 Not tainted syzkaller #0 PREEMPT(full) [ 593.320067][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 593.320086][T20582] Call Trace: [ 593.320095][T20582] [ 593.320103][T20582] dump_stack_lvl+0xe8/0x150 [ 593.320144][T20582] should_fail_ex+0x414/0x560 [ 593.320181][T20582] _copy_from_iter+0x1cd/0x1630 [ 593.320217][T20582] ? __pfx__copy_from_iter+0x10/0x10 [ 593.320245][T20582] ? __lock_acquire+0x6b6/0x2cf0 [ 593.320271][T20582] tun_get_user+0x219/0x3dc0 [ 593.320307][T20582] ? aa_file_perm+0x139/0x1530 [ 593.320340][T20582] ? aa_file_perm+0x44c/0x1530 [ 593.320365][T20582] ? __pfx_tun_get_user+0x10/0x10 [ 593.320390][T20582] ? __lock_acquire+0x6b6/0x2cf0 [ 593.320412][T20582] ? kstrtoull+0x12f/0x1d0 [ 593.320447][T20582] ? ref_tracker_alloc+0x318/0x460 [ 593.320464][T20582] ? get_pid_task+0x20/0x1f0 [ 593.320491][T20582] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 593.320512][T20582] ? tun_get+0x1c/0x2f0 [ 593.320535][T20582] ? tun_get+0x1c/0x2f0 [ 593.320562][T20582] ? tun_get+0x1c/0x2f0 [ 593.320583][T20582] ? tun_get+0x1c/0x2f0 [ 593.320610][T20582] tun_chr_write_iter+0x113/0x200 [ 593.320636][T20582] vfs_write+0x5c9/0xb30 [ 593.320660][T20582] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 593.320684][T20582] ? __pfx_vfs_write+0x10/0x10 [ 593.320713][T20582] ? __fget_files+0x2a/0x420 [ 593.320745][T20582] ksys_write+0x145/0x250 [ 593.320767][T20582] ? __pfx_ksys_write+0x10/0x10 [ 593.320796][T20582] do_syscall_64+0xec/0xf80 [ 593.320818][T20582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.320836][T20582] ? trace_irq_disable+0x37/0x100 [ 593.320861][T20582] ? clear_bhb_loop+0x60/0xb0 [ 593.320884][T20582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.320907][T20582] RIP: 0033:0x7fb37af8f749 [ 593.320927][T20582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.320945][T20582] RSP: 002b:00007fb37be92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 593.320971][T20582] RAX: ffffffffffffffda RBX: 00007fb37b1e5fa0 RCX: 00007fb37af8f749 [ 593.320986][T20582] RDX: 0000000000000042 RSI: 00002000000003c0 RDI: 0000000000000004 [ 593.320999][T20582] RBP: 00007fb37be92090 R08: 0000000000000000 R09: 0000000000000000 [ 593.321011][T20582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.321023][T20582] R13: 00007fb37b1e6038 R14: 00007fb37b1e5fa0 R15: 00007ffd32ad46a8 [ 593.321055][T20582] [ 593.639737][T20567] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 593.659999][T20601] syzkaller1: entered promiscuous mode [ 593.667291][T20601] syzkaller1: entered allmulticast mode [ 593.689428][T20565] tipc: Disabling bearer [ 593.848031][T20609] lo speed is unknown, defaulting to 1000 [ 593.855682][T20609] lo speed is unknown, defaulting to 1000 [ 593.862193][T20609] lo speed is unknown, defaulting to 1000 [ 593.899405][T20609] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 593.981311][T20609] lo speed is unknown, defaulting to 1000 [ 593.997470][T20609] lo speed is unknown, defaulting to 1000 [ 594.008281][T20609] lo speed is unknown, defaulting to 1000 [ 594.019394][T20609] lo speed is unknown, defaulting to 1000 [ 594.027423][T20609] lo speed is unknown, defaulting to 1000 [ 594.045188][T20609] lo speed is unknown, defaulting to 1000 [ 594.186758][T20628] bond4 (unregistering): Released all slaves [ 594.280184][T20627] bond4 (unregistering): Released all slaves [ 594.387714][T20637] tipc: Enabled bearer , priority 0 [ 594.433113][T20637] syzkaller0: entered promiscuous mode [ 594.439958][T20637] syzkaller0: entered allmulticast mode [ 594.460792][T20635] tipc: Resetting bearer [ 594.495676][T20635] tipc: Disabling bearer [ 594.698121][T20651] rdma_rxe: rxe_newlink: failed to add lo [ 594.787404][T20665] validate_nla: 1 callbacks suppressed [ 594.787425][T20665] netlink: 'syz.3.4020': attribute type 2 has an invalid length. [ 594.801798][T20665] netlink: 'syz.3.4020': attribute type 8 has an invalid length. [ 594.917833][T20667] bond4: entered promiscuous mode [ 594.923621][T20667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.000794][T20667] bond4: (slave xfrm1): refused to change device type [ 595.173240][T20680] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 595.267680][T20689] netlink: 'syz.3.4028': attribute type 1 has an invalid length. [ 595.277245][T20689] __nla_validate_parse: 10 callbacks suppressed [ 595.277266][T20689] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4028'. [ 595.306435][T20689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4028'. [ 595.317169][T20689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4028'. [ 595.375911][T20700] tipc: Enabling of bearer rejected, failed to enable media [ 595.398284][T20702] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 595.678505][T20722] macvlan0: entered promiscuous mode [ 595.735533][T20725] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4040'. [ 595.747631][T20725] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4040'. [ 595.761970][T20725] netlink: 'syz.4.4040': attribute type 5 has an invalid length. [ 595.770280][T20725] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4040'. [ 595.854722][T20732] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4042'. [ 595.864892][T20732] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4042'. [ 595.944291][T20735] veth0_to_bond: entered allmulticast mode [ 596.028536][T20740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4044'. [ 596.060831][T20742] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 596.397258][T20758] netlink: 'syz.4.4050': attribute type 1 has an invalid length. [ 596.816346][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4061'. [ 597.399232][T20828] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 598.429651][T20860] hsr_slave_0 (unregistering): left promiscuous mode [ 598.882016][T20903] netlink: 'syz.1.4094': attribute type 5 has an invalid length. [ 598.920567][T20903] geneve2: entered promiscuous mode [ 598.925928][T20903] geneve2: entered allmulticast mode [ 598.932672][ T1302] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 598.968386][ T1302] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 598.979368][ T1302] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 598.989283][ T1302] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 599.148432][T20920] syzkaller0: entered promiscuous mode [ 599.165054][T20920] syzkaller0: entered allmulticast mode [ 599.176932][T20923] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 599.209256][T20923] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 599.592332][T20948] syzkaller0: entered promiscuous mode [ 599.599225][T20948] syzkaller0: entered allmulticast mode [ 600.446572][T21005] __nla_validate_parse: 13 callbacks suppressed [ 600.446591][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4126'. [ 600.483366][T21008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4126'. [ 600.504230][T21008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4126'. [ 600.513851][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4126'. [ 600.636316][T21020] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4131'. [ 600.873544][T21037] netlink: 'syz.4.4138': attribute type 1 has an invalid length. [ 600.919794][T21037] 8021q: adding VLAN 0 to HW filter on device bond6 [ 600.939568][T21037] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 600.950347][T21037] v: renamed from ipvlan1 [ 601.020768][T21048] netlink: 'syz.4.4140': attribute type 21 has an invalid length. [ 601.034892][T21048] IPv6: NLM_F_CREATE should be specified when creating new route [ 601.329928][T21072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4148'. [ 601.341211][T21072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4148'. [ 601.479375][T21081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4150'. [ 601.833633][T21106] tipc: Failed to remove unknown binding: 66,0,0/3293493163:1386421288/1386421289 [ 601.859679][T21107] tipc: Failed to remove unknown binding: 66,0,0/3293493163:1386421288/1386421289 [ 601.872496][T21106] tipc: Failed to remove unknown binding: 66,0,0/3293493163:1386421288/1386421289 [ 601.896488][T21109] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 601.951728][T21109] 8021q: adding VLAN 0 to HW filter on device bond4 [ 601.988616][T21115] bond4: (slave geneve2): making interface the new active one [ 601.997389][T21115] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 602.040916][T21114] bond4: Unable to set down delay as MII monitoring is disabled [ 602.051422][T21114] bond4 (unregistering): Released all slaves [ 602.074988][T21125] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4164'. [ 602.085824][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 602.095903][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 602.104494][T21120] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4163'. [ 602.116242][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 602.126963][T21125] netlink: 'syz.3.4164': attribute type 12 has an invalid length. [ 602.136643][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 602.253700][T21130] netlink: 'syz.1.4166': attribute type 1 has an invalid length. [ 602.337031][T21132] netlink: 'syz.1.4167': attribute type 39 has an invalid length. [ 602.521290][T21138] ipvlan0: entered allmulticast mode [ 602.527282][T21138] batadv_slave_1: entered allmulticast mode [ 602.578772][T21138] ipvlan1: entered allmulticast mode [ 602.604399][T21138] ipvlan2: entered allmulticast mode [ 602.623072][T21138] ipvlan3: entered allmulticast mode [ 602.635031][T21138] ipvlan4: entered allmulticast mode [ 602.642452][T21141] netlink: 'syz.4.4169': attribute type 5 has an invalid length. [ 602.648888][T21138] ipvlan5: entered allmulticast mode [ 602.666184][T21138] ipvlan6: entered allmulticast mode [ 602.682411][T21138] ipvlan7: entered allmulticast mode [ 602.699724][T21138] ipvlan8: entered allmulticast mode [ 602.715104][T21138] ipvlan9: entered allmulticast mode [ 602.732251][T21138] ipvlan10: entered allmulticast mode [ 602.750181][T21138] ipvlan11: entered allmulticast mode [ 602.768260][T21138] ipvlan12: entered allmulticast mode [ 602.783285][T21138] ipvlan13: entered allmulticast mode [ 602.800830][T21138] ipvlan14: entered allmulticast mode [ 602.822913][T21138] ipvlan15: entered allmulticast mode [ 602.842445][T21138] ipvlan16: entered allmulticast mode [ 602.863707][T21138] ipvlan17: entered allmulticast mode [ 602.890421][T21138] ipvlan18: entered allmulticast mode [ 602.906187][T21138] ipvlan19: entered allmulticast mode [ 602.921647][T21138] ipvlan20: entered allmulticast mode [ 602.938889][T21138] ipvlan21: entered allmulticast mode [ 602.969467][T21138] ipvlan22: entered allmulticast mode [ 602.991409][T21138] ipvlan23: entered allmulticast mode [ 603.021831][T21138] ipvlan24: entered allmulticast mode [ 603.042062][T21138] ipvlan25: entered allmulticast mode [ 603.060868][T21138] ipvlan26: entered allmulticast mode [ 603.089613][T21138] ipvlan27: entered allmulticast mode [ 603.105481][T21138] ipvlan28: entered allmulticast mode [ 603.174737][T21138] ipvlan29: entered allmulticast mode [ 603.193208][T21138] ipvlan30: entered allmulticast mode [ 603.218738][T21138] ipvlan31: entered allmulticast mode [ 603.243162][T21138] ipvlan32: entered allmulticast mode [ 603.258435][T21166] openvswitch: netlink: Duplicate key (type 1). [ 603.323523][T21138] ipvlan33: entered allmulticast mode [ 603.335884][T21169] netlink: 'syz.0.4177': attribute type 4 has an invalid length. [ 603.682449][T21199] netlink: 'syz.0.4185': attribute type 1 has an invalid length. [ 603.799632][T21199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 603.876659][T21209] bond2: (slave geneve2): making interface the new active one [ 603.918907][T21209] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 603.935786][T21210] syzkaller0: entered promiscuous mode [ 603.943069][T21210] syzkaller0: entered allmulticast mode [ 603.976039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.288713][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 604.300733][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 604.312946][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.358477][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.367859][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.880847][T21257] can: request_module (can-proto-4) failed. [ 604.943813][T21231] lo speed is unknown, defaulting to 1000 [ 605.123133][T21279] veth3: entered allmulticast mode [ 605.466092][T21231] chnl_net:caif_netlink_parms(): no params data found [ 605.567378][T21307] __nla_validate_parse: 12 callbacks suppressed [ 605.567400][T21307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4217'. [ 605.767622][T21317] syzkaller0: entered promiscuous mode [ 605.768605][T21323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.773150][T21317] syzkaller0: entered allmulticast mode [ 605.795007][T21314] netlink: 'syz.0.4220': attribute type 39 has an invalid length. [ 605.811186][T21231] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.822273][T21231] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.830830][T21231] bridge_slave_0: entered allmulticast mode [ 605.839292][T21231] bridge_slave_0: entered promiscuous mode [ 605.908221][T21231] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.926052][T21231] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.942139][T21231] bridge_slave_1: entered allmulticast mode [ 605.950528][T21231] bridge_slave_1: entered promiscuous mode [ 606.131112][T21231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.158546][T21231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.263457][T21344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4227'. [ 606.290610][T21231] team0: Port device team_slave_0 added [ 606.326174][T21348] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4228'. [ 606.341331][T21231] team0: Port device team_slave_1 added [ 606.352469][T21350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4229'. [ 606.385445][T21348] bond3 (unregistering): Released all slaves [ 606.454290][ T5835] Bluetooth: hci3: command tx timeout [ 606.517490][T21231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.541907][T21231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.571780][T21231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.586407][T21231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.593577][T21231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.626720][T21231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.713713][T21358] bond5: option all_slaves_active: invalid value (222) [ 606.736443][T21358] bond5 (unregistering): Released all slaves [ 606.993094][T21231] hsr_slave_0: entered promiscuous mode [ 607.001101][T21231] hsr_slave_1: entered promiscuous mode [ 607.166850][T21397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.177333][T21395] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 607.177427][T21398] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4238'. [ 607.204330][T21399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.223049][T21395] bond7: (slave lo): Enslaving as a backup interface with an up link [ 607.237671][T21401] netlink: 'syz.0.4238': attribute type 1 has an invalid length. [ 607.251539][T21395] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 607.272983][T21401] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.4238'. [ 607.288793][ T6018] lo speed is unknown, defaulting to 1000 [ 607.299216][ T5962] lo speed is unknown, defaulting to 1000 [ 607.305061][ T5883] lo speed is unknown, defaulting to 1000 [ 607.331649][T21404] syzkaller1: entered promiscuous mode [ 607.338032][T21404] syzkaller1: entered allmulticast mode [ 607.358711][T21402] netlink: 'syz.3.4243': attribute type 1 has an invalid length. [ 607.366610][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4243'. [ 607.376593][T21402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4243'. [ 607.395962][T21402] netlink: 'syz.3.4243': attribute type 2 has an invalid length. [ 607.416487][T21402] netlink: 'syz.3.4243': attribute type 2 has an invalid length. [ 607.442995][T21402] netlink: 'syz.3.4243': attribute type 2 has an invalid length. [ 607.660516][T21415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4247'. [ 607.716838][T21231] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 607.748908][T21231] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 607.794780][T21231] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 607.813502][T21231] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 607.840712][T21422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.882237][T21421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 608.000835][T21231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.028981][T21231] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.039657][T21435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4255'. [ 608.060188][T15670] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.067424][T15670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.116506][T15670] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.123687][T15670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.182251][T21444] veth0_to_bridge: entered promiscuous mode [ 608.226228][T21443] veth0_to_bridge: left promiscuous mode [ 608.535050][ T5835] Bluetooth: hci3: command tx timeout [ 608.750613][T21231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.883577][T21457] lo speed is unknown, defaulting to 1000 [ 609.180635][T21497] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 609.526170][T21512] syzkaller0: entered promiscuous mode [ 609.534245][T21512] syzkaller0: entered allmulticast mode [ 609.679336][T21231] veth0_vlan: entered promiscuous mode [ 609.721527][T21231] veth1_vlan: entered promiscuous mode [ 609.872626][T21533] netlink: 'syz.4.4279': attribute type 1 has an invalid length. [ 609.874863][T21519] syzkaller0: entered allmulticast mode [ 609.898992][T21530] netlink: 'syz.3.4278': attribute type 8 has an invalid length. [ 610.131636][T21539] netlink: 'syz.1.4280': attribute type 1 has an invalid length. [ 610.619480][ T5835] Bluetooth: hci3: command tx timeout [ 610.735031][T21545] __nla_validate_parse: 3 callbacks suppressed [ 610.735054][T21545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4282'. [ 611.538892][T21539] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 611.589409][T21231] veth0_macvtap: entered promiscuous mode [ 611.648558][T21231] veth1_macvtap: entered promiscuous mode [ 611.720035][T21231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.748529][T21231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.763769][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.808325][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.831261][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.845917][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.080256][T21573] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4292'. [ 612.095292][T21572] sctp: [Deprecated]: syz.1.4293 (pid 21572) Use of int in maxseg socket option. [ 612.095292][T21572] Use struct sctp_assoc_value instead [ 612.109994][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.119314][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.141886][T21572] netlink: 'syz.1.4293': attribute type 33 has an invalid length. [ 612.150319][T21572] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4293'. [ 612.160950][T21576] netlink: 'syz.3.4294': attribute type 11 has an invalid length. [ 612.182115][T21576] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4294'. [ 612.197470][T15670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.206457][T15670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.228791][T21575] tipc: Enabled bearer , priority 0 [ 612.240837][T21575] tipc: Disabling bearer [ 612.508181][T21595] netlink: 'syz.5.4298': attribute type 11 has an invalid length. [ 612.520364][T21595] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4298'. [ 612.538349][T21595] netlink: 'syz.5.4298': attribute type 13 has an invalid length. [ 612.577539][T21600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4299'. [ 612.698659][ T5835] Bluetooth: hci3: command tx timeout [ 612.749908][T21608] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 612.851716][T21616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4304'. [ 612.865782][T21616] netlink: 'syz.4.4304': attribute type 4 has an invalid length. [ 612.952035][T21621] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4305'. [ 612.957564][T21603] syzkaller1: entered promiscuous mode [ 612.999256][T21603] syzkaller1: entered allmulticast mode [ 613.080903][T21628] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 613.099606][T21632] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 613.160652][T21631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4308'. [ 613.240935][T21631] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4308'. [ 613.513956][T21657] netlink: 'syz.3.4316': attribute type 1 has an invalid length. [ 613.547685][T21657] netlink: 'syz.3.4316': attribute type 1 has an invalid length. [ 613.584372][T21657] netlink: 'syz.3.4316': attribute type 1 has an invalid length. [ 613.613247][T21657] netlink: 'syz.3.4316': attribute type 2 has an invalid length. [ 614.015754][T21688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 614.022030][T21678] ip6t_srh: unknown srh match flags 4000 [ 614.022999][T21688] IPv6: NLM_F_CREATE should be set when creating new route [ 614.036069][T21688] IPv6: NLM_F_CREATE should be set when creating new route [ 614.043327][T21688] IPv6: NLM_F_CREATE should be set when creating new route [ 614.190534][T21699] netlink: 'syz.4.4332': attribute type 83 has an invalid length. [ 614.367848][T21719] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 614.394023][T21719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.527827][T21723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.640444][T21735] openvswitch: netlink: Missing key (keys=40, expected=100) [ 614.719855][T21746] netlink: 'syz.1.4346': attribute type 2 has an invalid length. [ 614.739728][T21747] syz_tun: entered allmulticast mode [ 614.776939][ T5835] Bluetooth: hci3: command tx timeout [ 614.849826][T21747] syz_tun: left allmulticast mode [ 614.879052][T21754] tipc: New replicast peer: 255.255.255.255 [ 614.886569][T21754] tipc: Enabled bearer , priority 10 [ 615.005685][T21764] syzkaller0: entered promiscuous mode [ 615.061389][T21764] syzkaller0: entered allmulticast mode [ 615.126572][T21775] ipt_REJECT: TCP_RESET invalid for non-tcp [ 615.727437][T21812] nft_compat: unsupported protocol 0 [ 615.752950][T21812] nft_compat: unsupported protocol 0 [ 615.764415][T21812] nft_compat: unsupported protocol 0 [ 615.796958][T21812] nft_compat: unsupported protocol 0 [ 615.812768][T21812] nft_compat: unsupported protocol 0 [ 615.840872][T21812] nft_compat: unsupported protocol 0 [ 615.902009][T21824] __nla_validate_parse: 10 callbacks suppressed [ 615.902035][T21824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4368'. [ 615.972428][T21828] syzkaller0: refused to change device tx_queue_len [ 615.981283][T21828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4370'. [ 616.077650][T21829] delete_channel: no stack [ 616.393149][T21853] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 616.560350][T21861] syz.3.4380 uses old SIOCAX25GETINFO [ 616.588432][T21863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4382'. [ 616.614870][T21863] openvswitch: netlink: Flow actions attr not present in new flow. [ 616.701722][T21867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4384'. [ 617.076408][T21888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4387'. [ 617.232400][T21409] udevd[21409]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 617.290584][T21891] udevd[21891]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 617.376665][T21899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'. [ 617.388965][T21900] netlink: 'syz.0.4392': attribute type 11 has an invalid length. [ 617.400136][T21899] openvswitch: netlink: Flow actions attr not present in new flow. [ 617.413223][T21900] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4392'. [ 617.461631][T21897] netlink: zone id is out of range [ 617.486026][T21897] netlink: zone id is out of range [ 617.516995][T21897] netlink: zone id is out of range [ 617.522174][T21897] netlink: zone id is out of range [ 617.598657][T21911] netlink: 'syz.4.4397': attribute type 1 has an invalid length. [ 617.617911][T21911] netlink: 'syz.4.4397': attribute type 2 has an invalid length. [ 617.647000][T21911] netlink: 'syz.4.4397': attribute type 1 has an invalid length. [ 617.659849][T21911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4397'. [ 617.683757][T21920] netlink: 'syz.1.4395': attribute type 1 has an invalid length. [ 618.075453][T21946] sctp: [Deprecated]: syz.5.4405 (pid 21946) Use of int in maxseg socket option. [ 618.075453][T21946] Use struct sctp_assoc_value instead [ 618.090567][T21944] x_tables: duplicate underflow at hook 2 [ 618.138465][T21946] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4405'. [ 618.166453][T21946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4405'. [ 618.251850][T21955] sctp: [Deprecated]: syz.5.4405 (pid 21955) Use of int in maxseg socket option. [ 618.251850][T21955] Use struct sctp_assoc_value instead [ 618.275442][T21946] xt_CT: No such helper "syz1" [ 618.286429][ T10] IPVS: starting estimator thread 0... [ 618.309598][T21961] IPVS: Error connecting to the multicast addr [ 618.384878][T21962] IPVS: using max 31 ests per chain, 74400 per kthread [ 618.690852][T21985] xt_NFQUEUE: number of total queues is 0 [ 618.746716][T21973] pim6reg1: entered promiscuous mode [ 618.764158][T21973] pim6reg1: entered allmulticast mode [ 619.307966][T22009] IPv6: Can't replace route, no match found [ 620.447706][T22090] net_ratelimit: 10 callbacks suppressed [ 620.447727][T22090] openvswitch: netlink: IP tunnel TTL not specified. [ 620.500561][T22090] syzkaller0: entered promiscuous mode [ 620.507336][T22090] syzkaller0: entered allmulticast mode [ 620.783855][T22079] lo speed is unknown, defaulting to 1000 [ 621.162422][T22115] netlink: 'syz.1.4457': attribute type 11 has an invalid length. [ 621.195055][T22115] __nla_validate_parse: 13 callbacks suppressed [ 621.195074][T22115] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4457'. [ 621.408405][T22126] netlink: 'syz.0.4461': attribute type 29 has an invalid length. [ 621.465548][T22130] netlink: 'syz.0.4461': attribute type 29 has an invalid length. [ 621.485998][T22126] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4461'. [ 621.525650][T22126] syz.0.4461: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 621.553947][T22135] sctp: [Deprecated]: syz.1.4462 (pid 22135) Use of int in max_burst socket option. [ 621.553947][T22135] Use struct sctp_assoc_value instead [ 621.627975][T22126] CPU: 1 UID: 0 PID: 22126 Comm: syz.0.4461 Not tainted syzkaller #0 PREEMPT(full) [ 621.628005][T22126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.628019][T22126] Call Trace: [ 621.628026][T22126] [ 621.628034][T22126] dump_stack_lvl+0xe8/0x150 [ 621.628068][T22126] warn_alloc+0x214/0x310 [ 621.628090][T22126] ? stack_trace_save+0x9c/0xe0 [ 621.628122][T22126] ? __pfx_warn_alloc+0x10/0x10 [ 621.628148][T22126] ? kasan_save_track+0x4f/0x80 [ 621.628162][T22126] ? kasan_save_track+0x3e/0x80 [ 621.628175][T22126] ? __kasan_kmalloc+0x93/0xb0 [ 621.628190][T22126] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 621.628205][T22126] ? xskq_create+0x56/0x170 [ 621.628234][T22126] ? xsk_setsockopt+0x4dc/0x8d0 [ 621.628258][T22126] ? do_sock_setsockopt+0x17c/0x1b0 [ 621.628280][T22126] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 621.628298][T22126] ? do_syscall_64+0xec/0xf80 [ 621.628318][T22126] __vmalloc_node_range_noprof+0x134/0x16a0 [ 621.628367][T22126] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 621.628395][T22126] ? __kasan_kmalloc+0x93/0xb0 [ 621.628434][T22126] vmalloc_user_noprof+0xad/0xf0 [ 621.628457][T22126] ? xskq_create+0xbf/0x170 [ 621.628487][T22126] xskq_create+0xbf/0x170 [ 621.628519][T22126] xsk_init_queue+0xb0/0x110 [ 621.628548][T22126] xsk_setsockopt+0x4dc/0x8d0 [ 621.628578][T22126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 621.628604][T22126] ? __pfx_aa_sk_perm+0x10/0x10 [ 621.628630][T22126] ? aa_sock_opt_perm+0xff/0x1a0 [ 621.628659][T22126] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 621.628677][T22126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 621.628704][T22126] do_sock_setsockopt+0x17c/0x1b0 [ 621.628727][T22126] __x64_sys_setsockopt+0x13f/0x1b0 [ 621.628752][T22126] do_syscall_64+0xec/0xf80 [ 621.628772][T22126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.628790][T22126] ? trace_irq_disable+0x37/0x100 [ 621.628813][T22126] ? clear_bhb_loop+0x60/0xb0 [ 621.628834][T22126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.628851][T22126] RIP: 0033:0x7f594a38f749 [ 621.628867][T22126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.628885][T22126] RSP: 002b:00007f594b250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 621.628906][T22126] RAX: ffffffffffffffda RBX: 00007f594a5e5fa0 RCX: 00007f594a38f749 [ 621.628921][T22126] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 621.628934][T22126] RBP: 00007f594a413f91 R08: 0000000000000004 R09: 0000000000000000 [ 621.628945][T22126] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.628956][T22126] R13: 00007f594a5e6038 R14: 00007f594a5e5fa0 R15: 00007ffc7fc359a8 [ 621.628988][T22126] [ 621.629005][T22126] Mem-Info: [ 622.003316][T22126] active_anon:5018 inactive_anon:0 isolated_anon:0 [ 622.003316][T22126] active_file:3077 inactive_file:40027 isolated_file:0 [ 622.003316][T22126] unevictable:768 dirty:90 writeback:0 [ 622.003316][T22126] slab_reclaimable:12338 slab_unreclaimable:127125 [ 622.003316][T22126] mapped:36365 shmem:1363 pagetables:1091 [ 622.003316][T22126] sec_pagetables:0 bounce:0 [ 622.003316][T22126] kernel_misc_reclaimable:0 [ 622.003316][T22126] free:1285111 free_pcp:14237 free_cma:0 [ 622.084223][T22126] Node 0 active_anon:20072kB inactive_anon:0kB active_file:12308kB inactive_file:159908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145460kB dirty:360kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13948kB pagetables:4300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 622.134563][T22126] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 622.169798][T22157] netlink: 'syz.5.4467': attribute type 1 has an invalid length. [ 622.170241][T22126] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 622.190221][T22157] netlink: 'syz.5.4467': attribute type 2 has an invalid length. [ 622.240772][T22126] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 622.247049][T22159] team_slave_0: Caught tx_queue_len zero misconfig [ 622.255445][T22126] Node 0 DMA32 free:1240828kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20072kB inactive_anon:0kB active_file:12308kB inactive_file:159908kB unevictable:1536kB writepending:360kB zspages:0kB present:3129332kB managed:2559500kB mlocked:0kB bounce:0kB free_pcp:36352kB local_pcp:15416kB free_cma:0kB [ 622.289486][T22126] lowmem_reserve[]: 0 0 1 1 1 [ 622.315719][T22126] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 622.360934][T22126] lowmem_reserve[]: 0 0 0 0 0 [ 622.366070][T22126] Node 1 Normal free:3884640kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20976kB local_pcp:10320kB free_cma:0kB [ 622.464457][T22126] lowmem_reserve[]: 0 0 0 0 0 [ 622.470131][T22126] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 622.489154][T22126] Node 0 DMA32: 5214*4kB (UME) 4597*8kB (UME) 1811*16kB (UME) 285*32kB (UME) 155*64kB (UME) 204*128kB (UM) 190*256kB (UME) 112*512kB (UM) 80*1024kB (UM) 36*2048kB (UME) 207*4096kB (M) = 1241264kB [ 622.524766][T22126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 622.552815][T22172] bond7: option mode: unable to set because the bond device has slaves [ 622.576661][T22126] Node 1 Normal: 196*4kB (UE) 76*8kB (UME) 47*16kB (UME) 78*32kB (UME) 31*64kB (UME) 7*128kB (UME) 7*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 0*2048kB 945*4096kB (M) = 3884640kB [ 622.636911][T22126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 622.664724][T22126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 622.687271][T22126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 622.712510][T22126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 622.745456][T22126] 44464 total pagecache pages [ 622.750203][T22126] 0 pages in swap cache [ 622.784708][T22126] Free swap = 124996kB [ 622.809321][T22126] Total swap = 124996kB [ 622.828041][T22126] 2097051 pages RAM [ 622.848924][T22126] 0 pages HighMem/MovableOnly [ 622.876171][T22126] 425086 pages reserved [ 622.890797][T22126] 0 pages cma reserved [ 623.005950][T22199] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 623.331741][T22228] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 623.429312][T22238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4490'. [ 623.466717][T22236] IPVS: ip_vs_add_dest(): server weight less than zero [ 623.473934][T22236] netlink: 'syz.0.4489': attribute type 26 has an invalid length. [ 623.587122][T22251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4492'. [ 623.599059][T22252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4493'. [ 623.790810][T22256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4495'. [ 623.923761][T22274] tap0: tun_chr_ioctl cmd 2148553947 [ 624.051269][T22288] netlink: 272 bytes leftover after parsing attributes in process `syz.5.4503'. [ 624.249065][T22298] bond7: option mode: unable to set because the bond device has slaves [ 624.258612][T22299] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4508'. [ 624.269372][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4507'. [ 624.401622][T22306] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.4510'. [ 624.585693][T22321] netlink: 'syz.5.4517': attribute type 14 has an invalid length. [ 624.604012][T22321] netlink: 'syz.5.4517': attribute type 13 has an invalid length. [ 624.640263][T22328] bond3: option mode: unable to set because the bond device has slaves [ 624.665801][T22328] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 624.845031][T22339] netlink: 'syz.4.4524': attribute type 1 has an invalid length. [ 624.858207][T22339] netlink: 'syz.4.4524': attribute type 2 has an invalid length. [ 624.866840][T22339] netlink: 'syz.4.4524': attribute type 1 has an invalid length. [ 624.875236][T22339] netlink: 'syz.4.4524': attribute type 3 has an invalid length. [ 625.385960][T22366] netlink: 'syz.5.4529': attribute type 1 has an invalid length. [ 625.394913][T22366] netlink: 'syz.5.4529': attribute type 1 has an invalid length. [ 625.489079][T22374] sctp: [Deprecated]: syz.5.4531 (pid 22374) Use of int in max_burst socket option. [ 625.489079][T22374] Use struct sctp_assoc_value instead [ 625.539109][T22375] syzkaller1: entered promiscuous mode [ 625.545569][T22375] syzkaller1: entered allmulticast mode [ 625.770670][T22389] Cannot find del_set index 4 as target [ 626.069357][T22406] ip6gre1: entered promiscuous mode [ 626.079870][T22406] ip6gre1: entered allmulticast mode [ 626.089340][T22409] syz_tun: left promiscuous mode [ 626.218220][T22417] __nla_validate_parse: 10 callbacks suppressed [ 626.218238][T22417] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4542'. [ 626.238449][T22417] openvswitch: netlink: Missing key (keys=40, expected=100) [ 626.273468][T22414] IPVS: persistence engine module ip_vs_pe_ not found [ 626.336104][T22425] ipt_REJECT: TCP_RESET invalid for non-tcp [ 626.525945][T22431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4547'. [ 626.544228][T22431] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 626.577562][T22441] netlink: 'syz.0.4551': attribute type 1 has an invalid length. [ 626.611234][T22445] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4553'. [ 626.629397][T22445] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4553'. [ 626.650764][T22441] syzkaller0: entered promiscuous mode [ 626.661090][T22445] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 626.674368][T22441] syzkaller0: entered allmulticast mode [ 626.810685][T22460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.861063][T22460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4556'. [ 627.081651][T22473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4560'. [ 627.120554][T22478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.160316][T22471] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4559'. [ 627.187950][T22471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4559'. [ 627.290092][T22484] xt_hashlimit: size too large, truncated to 1048576 [ 627.360378][T22493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4567'. [ 627.849396][T22503] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.459664][T22538] IPVS: sed: FWM 3 0x00000003 - no destination available [ 628.495040][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 628.689495][T22552] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 630.001442][T22547] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 630.009052][T22552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4578'. [ 630.291884][T22561] bond0 (unregistering): left promiscuous mode [ 630.299101][T22561] bond0 (unregistering): Released all slaves [ 631.148969][ T9793] IPVS: starting estimator thread 0... [ 631.240085][T22646] __nla_validate_parse: 5 callbacks suppressed [ 631.240103][T22646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4608'. [ 631.260366][T22646] validate_nla: 2 callbacks suppressed [ 631.260384][T22646] netlink: 'syz.0.4608': attribute type 7 has an invalid length. [ 631.265141][T22641] IPVS: using max 30 ests per chain, 72000 per kthread [ 631.266426][T22646] netlink: 'syz.0.4608': attribute type 8 has an invalid length. [ 631.295282][T22646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4608'. [ 631.306028][T22647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.323970][T22647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4601'. [ 631.339309][T22646] gretap0: entered promiscuous mode [ 631.344976][T22654] netlink: 'syz.1.4609': attribute type 1 has an invalid length. [ 631.382230][T22646] batadv_slave_1: entered promiscuous mode [ 631.417516][T22646] batadv_slave_1: left promiscuous mode [ 631.448316][T22646] gretap0: left promiscuous mode [ 631.458610][T22647] can: request_module (can-proto-3) failed. [ 631.476914][T22654] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 631.620830][T22668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4611'. [ 631.649269][T22666] ip6gre2: entered allmulticast mode [ 631.742955][T22676] netlink: 'syz.1.4614': attribute type 1 has an invalid length. [ 631.758503][T22673] syzkaller1: entered promiscuous mode [ 631.772992][T22673] syzkaller1: entered allmulticast mode [ 631.790898][T22678] syzkaller1: entered promiscuous mode [ 631.796987][T22678] syzkaller1: entered allmulticast mode [ 631.855145][T22682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4613'. [ 631.960165][T22687] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4616'. [ 632.031115][T22687] syzkaller0: entered promiscuous mode [ 632.038018][T22687] syzkaller0: entered allmulticast mode [ 632.140645][T22691] syzkaller0: entered promiscuous mode [ 632.154759][T22691] syzkaller0: entered allmulticast mode [ 632.413239][T22711] tipc: Started in network mode [ 632.429881][T22711] tipc: Node identity c608709e1d21, cluster identity 4711 [ 632.444636][T22711] tipc: Enabled bearer , priority 0 [ 632.513061][T22711] tipc: Disabling bearer [ 632.720242][T22729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4628'. [ 632.734543][T22728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.769758][T22731] syzkaller0: entered promiscuous mode [ 632.781802][T22731] syzkaller0: entered allmulticast mode [ 632.858973][T22733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4631'. [ 632.868993][T22733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4631'. [ 633.104866][T22756] netlink: 'syz.1.4633': attribute type 1 has an invalid length. [ 633.198005][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4638'. [ 633.229264][T22760] vxcan2: entered allmulticast mode [ 633.639540][ T30] audit: type=1107 audit(1768124100.860:9): pid=22777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='glzxdB [ 633.639540][ T30] gٷ.uKs+_ ?:ih/, [ 633.639540][ T30] ik [ 633.639540][ T30] .s!r 5`{{IRm'!CHL<2qņx gEIߏPZ`sQc~UZ5' [ 633.959293][T22795] tipc: Enabling of bearer rejected, failed to enable media [ 633.999831][T22796] ip6erspan0: entered promiscuous mode [ 634.012910][T22796] ip6erspan0: entered allmulticast mode [ 634.031270][T22795] tipc: Enabling of bearer rejected, failed to enable media [ 634.083172][T22804] macsec1: entered promiscuous mode [ 634.114269][T22804] bridge0: entered promiscuous mode [ 634.131701][T22804] macsec1: entered allmulticast mode [ 634.163654][T22804] bridge0: entered allmulticast mode [ 634.178611][T22804] bridge0: port 1(macsec1) entered blocking state [ 634.204430][T22804] bridge0: port 1(macsec1) entered disabled state [ 634.218827][T22804] bridge0: left allmulticast mode [ 634.238447][T22804] bridge0: left promiscuous mode [ 634.277911][T22767] lo speed is unknown, defaulting to 1000 [ 634.298857][T22812] netlink: 'syz.4.4654': attribute type 1 has an invalid length. [ 634.456613][T22822] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 634.584946][T22825] netlink: 'syz.3.4657': attribute type 1 has an invalid length. [ 635.663524][T22889] netlink: 'syz.1.4678': attribute type 158 has an invalid length. [ 636.068540][T22919] netlink: 'syz.5.4688': attribute type 1 has an invalid length. [ 636.121486][T22926] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 636.146728][T22926] bond5 (unregistering): Released all slaves [ 636.240656][T22937] netlink: 'syz.5.4695': attribute type 12 has an invalid length. [ 636.312747][T22941] bridge2: entered promiscuous mode [ 636.318121][T22941] bridge2: entered allmulticast mode [ 636.333046][T22941] team0: Port device bridge2 added [ 636.352861][T22941] bridge0: port 1(team0) entered blocking state [ 636.361822][T22941] bridge0: port 1(team0) entered disabled state [ 636.369817][T22946] __nla_validate_parse: 12 callbacks suppressed [ 636.369834][T22946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4698'. [ 636.386321][T22941] team0: entered allmulticast mode [ 636.393225][T22941] bond0: entered allmulticast mode [ 636.398678][T22941] syz_tun: entered allmulticast mode [ 636.419698][T22941] team0: entered promiscuous mode [ 636.425131][T22941] bond0: entered promiscuous mode [ 636.430258][T22941] syz_tun: entered promiscuous mode [ 636.642030][T22953] syzkaller0: entered promiscuous mode [ 636.651625][T22953] syzkaller0: entered allmulticast mode [ 636.965946][T22985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4706'. [ 638.647840][T22987] bond8: Removing last arp target with arp_interval on [ 638.759202][T23018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4717'. [ 638.771461][T23015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4716'. [ 638.804443][T23015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.872349][T23018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4717'. [ 638.923670][T22591] block nbd64: NBD_DISCONNECT [ 638.986415][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4721'. [ 639.003489][T23015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.079492][T22830] udevd[22830]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 639.163121][T23039] siw: device registration error -23 [ 639.184859][T23039] netlink: 'syz.4.4723': attribute type 27 has an invalid length. [ 639.397517][T23054] wireguard0: entered promiscuous mode [ 639.403684][T23054] wireguard0: entered allmulticast mode [ 639.436194][T23054] team0: Device wireguard0 is of different type [ 639.493189][T23063] Bluetooth: MGMT ver 1.23 [ 639.512347][T23063] bridge0: port 3(veth0_to_bridge) entered blocking state [ 639.524999][T23063] bridge0: port 3(veth0_to_bridge) entered disabled state [ 639.532351][T23063] veth0_to_bridge: entered allmulticast mode [ 639.546667][T23063] veth0_to_bridge: entered promiscuous mode [ 639.581019][T23066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4731'. [ 639.741358][T23076] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4733'. [ 639.784317][T23080] netlink: 'syz.0.4735': attribute type 9 has an invalid length. [ 640.177016][T23114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4742'. [ 640.279356][T23119] netlink: 'syz.4.4743': attribute type 10 has an invalid length. [ 640.305752][T23119] dummy0: entered promiscuous mode [ 640.385301][T23119] dummy0: entered allmulticast mode [ 640.400947][T23119] team0: Port device dummy0 added [ 640.744341][T23137] netlink: 576 bytes leftover after parsing attributes in process `syz.3.4749'. [ 640.884616][T23148] netlink: 'syz.5.4752': attribute type 4 has an invalid length. [ 640.993241][T23159] ipt_ECN: cannot use operation on non-tcp rule [ 641.200302][T23163] netlink: 'syz.3.4758': attribute type 3 has an invalid length. [ 641.332793][T23174] netlink: 'syz.5.4763': attribute type 2 has an invalid length. [ 641.354804][T23174] netlink: 'syz.5.4763': attribute type 11 has an invalid length. [ 641.495138][T23181] ip6t_REJECT: ECHOREPLY is not supported [ 641.690903][T23198] netlink: 'syz.3.4769': attribute type 10 has an invalid length. [ 641.728241][T23198] bridge0: port 1(team0) entered blocking state [ 641.757075][T23198] bridge0: port 1(team0) entered disabled state [ 641.777800][T23198] team0: entered allmulticast mode [ 641.791957][T23198] team0: entered promiscuous mode [ 641.855700][T23207] __nla_validate_parse: 3 callbacks suppressed [ 641.855717][T23207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4772'. [ 641.998570][T23217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4775'. [ 642.030316][T23217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4775'. [ 642.133282][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4776'. [ 642.165733][T23228] macvtap0: Device is already in use. [ 642.181010][T23223] bond0: Caught tx_queue_len zero misconfig [ 642.439728][T23243] tipc: Enabled bearer , priority 0 [ 642.477319][T23243] syzkaller0: entered promiscuous mode [ 642.483010][T23243] syzkaller0: entered allmulticast mode [ 642.498270][T23254] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 642.514413][T23255] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 642.647282][T23238] tipc: Resetting bearer [ 642.694429][T23238] tipc: Disabling bearer [ 642.702734][T23272] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4791'. [ 642.716188][T23272] 8021q: VLANs not supported on gre0 [ 642.779659][T23267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4788'. [ 642.859937][T23280] netlink: 'syz.5.4792': attribute type 1 has an invalid length. [ 643.057711][T23292] netem: incorrect gi model size [ 643.063076][T23292] netem: change failed [ 643.112781][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4798'. [ 643.131901][T23295] team0: left allmulticast mode [ 643.143998][T23295] team0: left promiscuous mode [ 643.187432][T23295] bridge0: port 1(team0) entered disabled state [ 643.379763][T23301] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4799'. [ 643.568717][T23333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4804'. [ 643.580333][T23333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4804'. [ 644.248969][T23387] netlink: 'syz.3.4820': attribute type 13 has an invalid length. [ 644.271178][T23387] netlink: 'syz.3.4820': attribute type 58 has an invalid length. [ 644.589750][T23407] bond3: (slave lo): Releasing backup interface [ 644.605147][T23407] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 644.620253][T23407] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 644.675983][T23415] sctp: [Deprecated]: syz.0.4829 (pid 23415) Use of int in max_burst socket option deprecated. [ 644.675983][T23415] Use struct sctp_assoc_value instead [ 645.056700][T23412] lo speed is unknown, defaulting to 1000 [ 645.501189][T23453] netlink: 'syz.4.4839': attribute type 1 has an invalid length. [ 646.312279][T23498] tipc: Started in network mode [ 646.318343][T23498] tipc: Node identity d67a4bf7d502, cluster identity 4711 [ 646.330508][T23498] tipc: Enabled bearer , priority 0 [ 646.349680][T23498] syzkaller0: entered promiscuous mode [ 646.357037][T23498] syzkaller0: entered allmulticast mode [ 646.365619][T23504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.460775][T23498] tipc: Resetting bearer [ 646.514563][T23497] tipc: Resetting bearer [ 646.587179][T23517] netlink: 'syz.0.4856': attribute type 6 has an invalid length. [ 646.606530][T23497] tipc: Disabling bearer [ 646.813090][T23529] netlink: 'syz.0.4862': attribute type 10 has an invalid length. [ 646.843869][T23529] batman_adv: batadv0: Adding interface: netdevsim0 [ 646.864829][T23529] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.896568][T23533] netlink: 'syz.0.4862': attribute type 10 has an invalid length. [ 646.908445][T23529] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 646.940727][T23537] __nla_validate_parse: 11 callbacks suppressed [ 646.940747][T23537] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4864'. [ 647.272096][T23565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4870'. [ 647.286895][T23544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4866'. [ 647.383935][T23568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.442365][T23576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4872'. [ 647.493439][T23581] netlink: 'syz.5.4872': attribute type 8 has an invalid length. [ 647.827593][T23613] tipc: Enabled bearer , priority 0 [ 647.835784][T23613] syzkaller0: entered promiscuous mode [ 647.841342][T23613] syzkaller0: entered allmulticast mode [ 647.925145][T23616] tipc: Resetting bearer [ 647.934608][T23612] tipc: Resetting bearer [ 647.957641][T23612] tipc: Disabling bearer [ 647.989170][T23624] lo: Caught tx_queue_len zero misconfig [ 648.016384][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4886'. [ 648.030852][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4886'. [ 648.380416][T23648] bond9: (slave lo): Device is not our slave [ 648.386929][T23648] bond9: option active_slave: invalid value (lo) [ 648.413085][T23648] bond9 (unregistering): Released all slaves [ 648.535633][T23670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4897'. [ 648.701095][T23685] netlink: 'syz.4.4898': attribute type 1 has an invalid length. [ 648.710271][T23685] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4898'. [ 648.796478][T23689] batadv_slave_0: Caught tx_queue_len zero misconfig [ 648.898831][T23696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4905'. [ 648.962607][T23696] bond5: entered allmulticast mode [ 649.079843][T23707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 649.159332][T23711] netem: incorrect ge model size [ 649.167383][T23711] netem: change failed [ 649.193390][T23713] syzkaller0: entered promiscuous mode [ 649.199026][T23713] syzkaller0: entered allmulticast mode [ 649.204919][T23709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4908'. [ 649.498331][T23724] bond9: Invalid ad_actor_system MAC address. [ 649.506734][T23724] bond9: option ad_actor_system: invalid value (1) [ 649.516333][T23724] bond9 (unregistering): Released all slaves [ 649.546517][T23714] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.698658][ T3825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.823867][T23753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.888304][T23758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.915681][T23758] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 649.965663][T23758] bond0: (slave vxcan5): Error -95 calling set_mac_address [ 650.007847][T23767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.020282][T23761] : entered promiscuous mode [ 650.167482][T23773] IPv6: NLM_F_CREATE should be specified when creating new route [ 650.565730][T23801] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 650.847497][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.112643][T23853] dvmrp0: left allmulticast mode [ 651.124390][T23853] dvmrp1: left allmulticast mode [ 651.224782][T23857] netlink: 'syz.3.4949': attribute type 33 has an invalid length. [ 651.289600][T23861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.335186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.479231][T23846] lo speed is unknown, defaulting to 1000 [ 651.552961][T23876] netlink: 'syz.3.4955': attribute type 23 has an invalid length. [ 651.985533][ T3577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.054470][T23895] __nla_validate_parse: 7 callbacks suppressed [ 652.054488][T23895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4961'. [ 652.157097][T23901] batadv1: entered allmulticast mode [ 652.181021][T23902] batadv1: entered allmulticast mode [ 652.517024][T23903] lo speed is unknown, defaulting to 1000 [ 652.615220][T15687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.077009][T23927] bridge6: entered promiscuous mode [ 653.082355][T23927] bridge6: entered allmulticast mode [ 653.114798][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.185819][T23936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.194743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.241499][T23938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4970'. [ 654.026194][T23983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4983'. [ 654.037522][T23987] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4984'. [ 654.066815][T23983] tipc: Enabling of bearer rejected, failed to enable media [ 654.313489][T24008] syzkaller1: entered promiscuous mode [ 654.319849][T24008] syzkaller1: entered allmulticast mode [ 654.724284][T24034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4997'. [ 654.740732][T24034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4997'. [ 654.812208][T24044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4998'. [ 654.986589][T24052] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5002'. [ 655.221826][T24070] netlink: 'syz.3.5009': attribute type 1 has an invalid length. [ 655.266340][T24070] 8021q: adding VLAN 0 to HW filter on device bond7 [ 655.273766][T24068] netlink: 'syz.5.5008': attribute type 1 has an invalid length. [ 655.322018][T24068] netlink: 'syz.5.5008': attribute type 1 has an invalid length. [ 655.340388][T24068] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5008'. [ 655.351167][T15670] net_ratelimit: 5 callbacks suppressed [ 655.351182][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.441301][T24080] netlink: 'syz.0.5012': attribute type 13 has an invalid length. [ 655.458574][T24082] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 655.476094][T24082] bond3: (slave lo): Enslaving as a backup interface with an up link [ 655.486409][T24082] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 655.505309][T24080] veth0_macvtap: left promiscuous mode [ 655.526648][T24080] macvtap0: entered allmulticast mode [ 655.548026][T24085] netlink: 'syz.5.5014': attribute type 1 has an invalid length. [ 655.561745][T24085] xt_TCPMSS: Only works on TCP SYN packets [ 655.565513][T24080] macvtap0: refused to change device tx_queue_len [ 655.665787][T24089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5016'. [ 655.711158][T24093] netlink: 'syz.0.5018': attribute type 1 has an invalid length. [ 655.819585][T24099] netlink: 'syz.4.5020': attribute type 1 has an invalid length. [ 655.875827][T24099] 8021q: adding VLAN 0 to HW filter on device bond9 [ 655.989932][T24108] bond9: (slave veth5): Enslaving as an active interface with a down link [ 656.020390][T24099] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 656.029207][T24099] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 656.284806][ T5835] Bluetooth: hci3: link tx timeout [ 656.291490][ T5835] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 656.309127][T24134] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 656.401212][T24144] netlink: 'syz.4.5030': attribute type 1 has an invalid length. [ 656.409113][T24144] netlink: 'syz.4.5030': attribute type 2 has an invalid length. [ 656.508764][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.773523][T24164] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 656.793517][T24164] bond2 (unregistering): Released all slaves [ 656.805316][T24168] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 656.830247][ T6018] IPVS: starting estimator thread 0... [ 656.940067][T24172] IPVS: using max 53 ests per chain, 127200 per kthread [ 656.969621][T24180] syzkaller0: entered promiscuous mode [ 656.984805][T24180] syzkaller0: entered allmulticast mode [ 657.405310][T24205] __nla_validate_parse: 3 callbacks suppressed [ 657.405332][T24205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5041'. [ 657.410056][T24204] gre0: entered promiscuous mode [ 657.428684][T24204] gre0: entered allmulticast mode [ 657.439023][T24202] netlink: 'syz.3.5041': attribute type 75 has an invalid length. [ 657.615664][T24217] netlink: zone id is out of range [ 657.627912][T24217] netlink: zone id is out of range [ 657.634870][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.641510][T24217] netlink: zone id is out of range [ 657.665503][T24217] netlink: zone id is out of range [ 657.691565][T24217] netlink: zone id is out of range [ 657.726463][T24222] xt_TPROXY: Can be used only with -p tcp or -p udp [ 657.753755][T24226] netlink: 'syz.1.5050': attribute type 21 has an invalid length. [ 657.761805][T24226] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5050'. [ 657.771751][T24226] netlink: 'syz.1.5050': attribute type 4 has an invalid length. [ 657.775790][T24231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5051'. [ 657.787350][T24226] netlink: 'syz.1.5050': attribute type 5 has an invalid length. [ 657.810711][T24226] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5050'. [ 657.837873][T24233] netlink: 'syz.1.5050': attribute type 21 has an invalid length. [ 657.843705][T24234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5051'. [ 657.870758][T24229] ip6tnl0: Caught tx_queue_len zero misconfig [ 657.881093][T24233] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5050'. [ 657.944177][T24233] netlink: 'syz.1.5050': attribute type 4 has an invalid length. [ 657.952547][T24233] netlink: 'syz.1.5050': attribute type 5 has an invalid length. [ 657.961463][T24233] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5050'. [ 658.018433][T24240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5053'. [ 658.057708][T24244] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5055'. [ 658.166335][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5054'. [ 658.387604][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 660.984853][ T1302] net_ratelimit: 6 callbacks suppressed [ 660.984868][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.575340][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.584295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.593054][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.602291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.114538][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.214449][T15666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.314814][T15668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.424973][T10918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.536261][T15682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.644733][T15668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.615485][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.624188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.632595][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.754699][T15682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.254781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.854478][T10918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.954544][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.064540][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.165006][T15666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.264392][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.384789][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.657245][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.666255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.675490][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.683778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.494779][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.604706][T10918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.216887][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.704436][T15666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.814807][T10918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.914642][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.024304][T15682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.695298][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.703910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.124641][T15668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.224602][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.334770][T15668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.434411][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.544589][T10918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.814495][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.664479][ T3825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.737883][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.746835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.755267][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.763569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.784500][T15668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.885076][T15668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.984513][T15682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.085099][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.204457][T15668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.304515][T15668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.404728][ T4486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.779453][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.788099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.417349][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.514526][T15682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.624565][ T4486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.567970][T24265] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 699.575691][T24264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5061'. [ 699.586146][T24264] block nbd2: Unsupported socket: should be TCP or UNIX. [ 699.623160][T24263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5062'. [ 699.658094][T24266] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 699.697039][T24272] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5058'. [ 699.699677][T24266] bond10 (unregistering): Released all slaves [ 699.744955][ T4486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.797476][T24282] netlink: 'syz.3.5064': attribute type 8 has an invalid length. [ 699.856964][T24284] netlink: 'syz.3.5064': attribute type 8 has an invalid length. [ 699.973541][T24288] veth0: entered promiscuous mode [ 699.982971][T24288] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 700.025650][T24288] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 700.039496][T24287] veth0: left promiscuous mode [ 700.047063][T24296] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5068'. [ 700.258026][T24314] netlink: 'syz.4.5071': attribute type 8 has an invalid length. [ 700.294308][T24314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5071'. [ 700.329502][T24323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.556554][T24338] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5080'. [ 700.640373][T24344] netlink: 'syz.3.5080': attribute type 21 has an invalid length. [ 700.667765][T24344] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5080'. [ 700.687797][T24346] netlink: 'syz.1.5083': attribute type 1 has an invalid length. [ 700.697199][T24349] netlink: 'syz.0.5084': attribute type 2 has an invalid length. [ 700.705322][T24349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5084'. [ 700.726484][T24349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.736995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.747949][T24346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5083'. [ 700.761752][T24349] netlink: 'syz.0.5084': attribute type 2 has an invalid length. [ 700.769268][T24357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5086'. [ 700.791169][T24357] team0: left allmulticast mode [ 700.799167][T24357] bond0: left allmulticast mode [ 700.807094][T24357] syz_tun: left allmulticast mode [ 700.814289][T24357] dummy0: left allmulticast mode [ 700.824278][T24357] team0: left promiscuous mode [ 700.829176][T24357] bond0: left promiscuous mode [ 700.834521][T24357] syz_tun: left promiscuous mode [ 700.840724][T24357] dummy0: left promiscuous mode [ 700.847297][T24357] bridge0: port 1(team0) entered disabled state [ 700.915182][T15666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.086640][T24371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.096322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.141829][T24375] netlink: 'syz.1.5090': attribute type 1 has an invalid length. [ 701.159430][T24375] netlink: 'syz.1.5090': attribute type 2 has an invalid length. [ 701.175614][T24379] netlink: 'syz.5.5092': attribute type 3 has an invalid length. [ 701.311646][T24384] s5: renamed from vlan1 (while UP) [ 701.581663][T24402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.626355][T24401] bridge5: entered promiscuous mode [ 701.631629][T24401] bridge5: entered allmulticast mode [ 701.689094][T24412] syzkaller0: entered promiscuous mode [ 701.704341][T24412] syzkaller0: entered allmulticast mode [ 702.088792][T24434] 8021q: adding VLAN 0 to HW filter on device bond10 [ 702.162770][T24438] 8021q: adding VLAN 0 to HW filter on device bond8 [ 702.191630][T24439] bond10: (slave gretap2): making interface the new active one [ 702.206128][T24439] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 702.268573][T24443] 8021q: adding VLAN 0 to HW filter on device bond8 [ 702.279069][T24443] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 702.291636][T24443] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 702.355514][T24438] veth3: entered promiscuous mode [ 702.365577][T24438] bond8: (slave veth3): Enslaving as an active interface with a down link [ 702.377588][T24445] 8021q: adding VLAN 0 to HW filter on device bond8 [ 702.819091][T24494] nftables ruleset with unbound set [ 703.048475][T24498] tunl0: entered promiscuous mode [ 703.068719][T24501] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 703.298411][T24526] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 703.320256][T24526] gretap2: entered promiscuous mode [ 703.340166][T24526] gretap2: entered allmulticast mode [ 703.814898][ T3825] net_ratelimit: 4 callbacks suppressed [ 703.814920][ T3825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.829029][ T3825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.838827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.847410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.294861][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.344568][T24508] lo speed is unknown, defaulting to 1000 [ 704.405836][T24502] lo speed is unknown, defaulting to 1000 [ 704.451737][T24572] xt_hashlimit: size too large, truncated to 1048576 [ 704.945623][T24592] SET target dimension over the limit! [ 705.023815][T24598] __nla_validate_parse: 18 callbacks suppressed [ 705.023834][T24598] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5148'. [ 705.135081][T24602] validate_nla: 4 callbacks suppressed [ 705.135098][T24602] netlink: 'syz.3.5151': attribute type 1 has an invalid length. [ 705.172521][T24602] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5151'. [ 705.195117][T24605] Cannot find add_set index 2 as target [ 705.412406][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.580192][T24630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.696575][T24636] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5162'. [ 705.844247][T24643] netlink: 'syz.3.5161': attribute type 9 has an invalid length. [ 706.019057][T24657] netlink: 'syz.4.5168': attribute type 7 has an invalid length. [ 706.027827][T24643] netlink: 'syz.3.5161': attribute type 9 has an invalid length. [ 706.177516][T24657] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.5168'. [ 706.204904][T24643] netlink: 'syz.3.5161': attribute type 9 has an invalid length. [ 706.360655][T24643] netlink: 'syz.3.5161': attribute type 9 has an invalid length. [ 706.480940][T24680] tipc: Enabled bearer , priority 0 [ 706.489398][T24680] syzkaller0: entered promiscuous mode [ 706.498939][T24680] syzkaller0: entered allmulticast mode [ 706.545872][T24643] netlink: 'syz.3.5161': attribute type 9 has an invalid length. [ 706.557298][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.560294][T24680] tipc: Resetting bearer [ 706.649086][T24678] tipc: Resetting bearer [ 706.668263][T24678] tipc: Disabling bearer [ 706.728632][T24697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5178'. [ 706.805627][T24700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5179'. [ 706.834114][T24700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5179'. [ 706.890171][T24700] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5179'. [ 706.900922][T24705] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5181'. [ 706.942940][T24702] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 706.959627][T24702] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 706.970153][T24708] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5181'. [ 706.995365][T24713] netlink: 'syz.5.5180': attribute type 1 has an invalid length. [ 707.013565][T24713] netlink: 'syz.5.5180': attribute type 4 has an invalid length. [ 707.025517][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.042501][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.196204][T24729] syz_tun: entered allmulticast mode [ 707.223197][T24727] syz_tun: left allmulticast mode [ 707.536646][T24746] netdevsim netdevsim4: Direct firmware load for p failed with error -2 [ 707.550203][T24746] netdevsim netdevsim4: Falling back to sysfs fallback for: p [ 707.680566][T24722] lo speed is unknown, defaulting to 1000 [ 707.952880][T24779] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 708.172764][T24785] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 708.342647][T24797] netlink: 'syz.5.5208': attribute type 33 has an invalid length. [ 708.649555][T24815] tipc: Enabling of bearer rejected, failed to enable media [ 708.836566][T15672] net_ratelimit: 6 callbacks suppressed [ 708.836588][T15672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.428361][T24861] xt_CT: No such helper "snmp_trap" [ 709.503101][T24871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.577317][T15672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.586336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.607287][T24877] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.624205][T24877] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 709.671574][T24886] 8021q: VLANs not supported on tunl0 [ 709.697169][T24877] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.715035][T24877] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 709.867387][T24877] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.878748][T24877] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 709.906049][T24894] syzkaller0: entered promiscuous mode [ 709.912364][T24894] syzkaller0: entered allmulticast mode [ 709.923785][T24894] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 709.950827][T24877] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.961541][T24877] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 709.972725][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.033753][T24898] dvmrp0: entered allmulticast mode [ 710.043555][T24900] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 710.163658][T24905] __nla_validate_parse: 10 callbacks suppressed [ 710.163680][T24905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5242'. [ 710.239736][ T3825] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.257608][ T3825] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 710.300955][ T65] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.320857][ T65] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 710.405166][ T3825] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.435745][ T3825] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 710.482284][ T3825] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.510765][ T3825] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 710.710032][T24934] validate_nla: 1 callbacks suppressed [ 710.710050][T24934] netlink: 'syz.5.5250': attribute type 1 has an invalid length. [ 710.751198][T24934] 8021q: adding VLAN 0 to HW filter on device bond2 [ 710.792501][T24934] veth3: entered promiscuous mode [ 710.800498][T24934] bond2: (slave veth3): Enslaving as an active interface with a down link [ 711.104830][T15680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.183724][T24949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5252'. [ 711.226278][T24949] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5252'. [ 711.244147][T24949] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5252'. [ 711.266574][T24951] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5254'. [ 711.287740][T24951] netlink: 'syz.5.5254': attribute type 7 has an invalid length. [ 711.332263][T24951] netlink: 'syz.5.5254': attribute type 8 has an invalid length. [ 711.548196][T24976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5262'. [ 711.763334][T24991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.777224][T24991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.148651][ T3825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.310359][T25032] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5280'. [ 712.314787][T25023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5277'. [ 712.408900][T25023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5277'. [ 712.422253][T25032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5280'. [ 713.213755][T25096] syzkaller1: entered promiscuous mode [ 713.233757][T25096] syzkaller1: entered allmulticast mode [ 713.366984][T25107] mac80211_hwsim hwsim38 : renamed from wlan1 [ 713.486847][T25117] syzkaller0: entered promiscuous mode [ 713.522237][T25117] syzkaller0: entered allmulticast mode [ 714.223932][T25156] netlink: 'syz.1.5313': attribute type 10 has an invalid length. [ 714.484800][T15682] net_ratelimit: 8 callbacks suppressed [ 714.484820][T15682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.534683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.568282][T25179] openvswitch: netlink: Missing key (keys=40, expected=80) [ 714.862583][T25206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.872935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.933464][T25209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 715.185141][T25229] netlink: 'syz.0.5333': attribute type 1 has an invalid length. [ 715.234358][T25229] bond6: (slave ip6gretap1): making interface the new active one [ 715.243166][T25229] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 715.269791][T25234] __nla_validate_parse: 43 callbacks suppressed [ 715.269807][T25234] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5335'. [ 715.339205][ T4486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.348680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.615133][ T3577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.718501][T25248] team0 (unregistering): Port device bond0 removed [ 715.748586][T25248] team0 (unregistering): Port device bridge2 removed [ 715.764215][T25248] team0 (unregistering): Port device dummy0 removed [ 715.816732][T25266] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 715.948500][T25271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5346'. [ 715.986240][T25271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5346'. [ 715.995577][T25273] team0: Device ipvlan2 failed to register rx_handler [ 716.007803][T25271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5346'. [ 716.017195][T25271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5346'. [ 716.078156][T25280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5350'. [ 716.258827][T25290] netlink: 'syz.5.5353': attribute type 1 has an invalid length. [ 716.285541][T25297] netlink: 'syz.4.5356': attribute type 1 has an invalid length. [ 716.329215][T25301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5357'. [ 716.375953][T25297] 8021q: adding VLAN 0 to HW filter on device bond11 [ 716.487505][T25310] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5360'. [ 716.599316][T25310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5360'. [ 716.614902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.652852][T25311] macsec1: entered promiscuous mode [ 716.659830][T25311] macsec1: entered allmulticast mode [ 716.666807][T25311] bond4: (slave macsec1): Error -34 calling dev_set_mtu [ 716.697744][T25310] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5360'. [ 716.806815][T25318] macsec1: entered promiscuous mode [ 716.812123][T25318] macsec1: entered allmulticast mode [ 716.832314][T25318] bond4: (slave macsec1): Error -34 calling dev_set_mtu [ 717.028557][T25351] netlink: 'syz.4.5368': attribute type 1 has an invalid length. [ 717.095570][T25357] netlink: 'syz.5.5370': attribute type 178 has an invalid length. [ 717.140374][T25351] 8021q: adding VLAN 0 to HW filter on device bond12 [ 717.486900][T25373] bond13: Invalid ad_actor_system MAC address. [ 717.504120][T25373] bond13: option ad_actor_system: invalid value (1) [ 717.708134][T25373] bond13 (unregistering): Released all slaves [ 718.469124][T25424] IPVS: length: 8 != 1152 [ 720.184408][ T4486] net_ratelimit: 8 callbacks suppressed [ 720.184428][ T4486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.373843][T25476] __nla_validate_parse: 7 callbacks suppressed [ 720.373862][T25476] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.5398'. [ 720.417025][T25452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.466279][T15678] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.508486][T15678] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.545320][T15678] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.574850][T15678] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.582237][T25487] netlink: 'syz.4.5401': attribute type 1 has an invalid length. [ 720.596858][T15678] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.607015][T15678] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.617656][T15678] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.627658][T15678] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.632388][T25487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5401'. [ 720.696502][T25487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5401'. [ 720.771109][T25501] ip6erspan0: entered promiscuous mode [ 720.787919][T25501] ip6erspan0: entered allmulticast mode [ 720.820625][T25510] netlink: 'syz.4.5409': attribute type 2 has an invalid length. [ 720.841944][T25500] bond5: entered promiscuous mode [ 720.847666][T25500] bond5: entered allmulticast mode [ 720.853669][T25500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 720.862667][T25515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5404'. [ 720.872158][T25503] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5407'. [ 720.903722][T25510] : entered promiscuous mode [ 720.990064][T25518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5410'. [ 721.095535][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.104468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.145291][T25532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5411'. [ 721.295187][T15670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.419401][T25548] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5419'. [ 721.430350][T25548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5419'. [ 721.501016][T25551] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5422'. [ 721.746680][T25573] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 721.862553][T25580] netlink: 'syz.1.5431': attribute type 1 has an invalid length. [ 721.937465][T25580] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 721.994248][T25583] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 722.366010][T25621] wg1: left promiscuous mode [ 722.370855][T25621] wg1: left allmulticast mode [ 722.389867][T25621] veth0_to_bond: left allmulticast mode [ 722.416403][T25623] netlink: 'syz.3.5442': attribute type 5 has an invalid length. [ 722.457487][T25621] vlan2: left allmulticast mode [ 722.462405][T25621] mac80211_hwsim hwsim26 wlan0: left allmulticast mode [ 722.493165][T25621] vlan3: left allmulticast mode [ 722.500021][T25621] hsr0: left allmulticast mode [ 722.505373][T25621] hsr_slave_0: left allmulticast mode [ 722.510849][T25621] hsr_slave_1: left allmulticast mode [ 722.536796][T25621] hsr1: left promiscuous mode [ 722.603389][T25621] bridge5: left promiscuous mode [ 722.609165][T25621] bridge5: left allmulticast mode [ 722.624956][T25621] veth3: left promiscuous mode [ 722.643887][T25623] geneve4: entered promiscuous mode [ 722.649506][T25623] geneve4: entered allmulticast mode [ 722.657009][T15667] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.666580][T15667] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 722.676014][T15667] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 722.691600][T15667] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.700919][T15667] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 722.715389][T15667] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 722.725302][T15667] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.733320][T25645] netlink: 'syz.3.5448': attribute type 1 has an invalid length. [ 722.734573][T15667] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 722.750202][T15667] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 722.759379][T25633] netlink: 'syz.1.5443': attribute type 1 has an invalid length. [ 722.839341][T25645] bond9: entered promiscuous mode [ 722.855006][ T5883] IPVS: starting estimator thread 0... [ 722.862393][T25645] 8021q: adding VLAN 0 to HW filter on device bond9 [ 722.916677][T25657] bond9: (slave bridge6): making interface the new active one [ 722.925591][T25657] bridge6: entered promiscuous mode [ 722.932669][T25657] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 722.943211][T15667] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.952136][T25651] IPVS: using max 53 ests per chain, 127200 per kthread [ 722.956358][T15667] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 722.968880][T15667] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 723.021628][T25658] syzkaller0: entered promiscuous mode [ 723.034258][T25658] syzkaller0: entered allmulticast mode [ 723.434905][T25694] gretap0: entered promiscuous mode [ 723.457392][T25694] gretap0: left promiscuous mode [ 723.496120][T25697] netlink: 'syz.1.5464': attribute type 11 has an invalid length. [ 723.506370][T25697] netlink: 'syz.1.5464': attribute type 11 has an invalid length. [ 723.571151][T25704] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 723.679841][T25712] pim6reg: entered allmulticast mode [ 723.830245][T25722] netlink: 'syz.3.5475': attribute type 12 has an invalid length. [ 723.839094][T25711] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 723.846440][T25723] netlink: 'syz.3.5475': attribute type 12 has an invalid length. [ 724.114659][T25713] team_slave_0: left promiscuous mode [ 724.120524][T25713] team_slave_1: left promiscuous mode [ 724.395754][T25713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.930123][T25722] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 724.934939][T25723] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 724.954128][T25728] veth0_to_bridge: entered promiscuous mode [ 724.988431][ T3825] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.015525][ T3825] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.037097][ T3825] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.054960][ T3825] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.065022][ T3825] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.075324][ T3825] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.085433][T25735] veth0_to_bridge: left promiscuous mode [ 725.091782][T25747] netlink: 'syz.3.5480': attribute type 1 has an invalid length. [ 725.102285][ T3825] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.114216][ T3825] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.537323][T25774] __nla_validate_parse: 25 callbacks suppressed [ 725.537342][T25774] netlink: 288 bytes leftover after parsing attributes in process `syz.5.5488'. [ 725.621058][T25733] lo speed is unknown, defaulting to 1000 [ 725.689352][T25781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5491'. [ 725.790539][T25785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5492'. [ 726.012554][T25796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5497'. [ 726.033914][T25748] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 726.116998][T25796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5497'. [ 726.247041][T25807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5500'. [ 726.270217][T25807] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5500'. [ 726.384546][T25814] netlink: 'syz.0.5502': attribute type 1 has an invalid length. [ 726.407101][T25814] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5502'. [ 726.651582][T25839] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5506'. [ 726.799060][T25852] pim6reg: entered allmulticast mode [ 726.856374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.907653][T25847] syzkaller1: entered promiscuous mode [ 726.920769][T25847] syzkaller1: entered allmulticast mode [ 726.967967][T25862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5515'. [ 727.365308][T25888] validate_nla: 1 callbacks suppressed [ 727.365326][T25888] netlink: 'syz.1.5524': attribute type 3 has an invalid length. [ 727.932886][T25933] netlink: 'syz.1.5535': attribute type 8 has an invalid length. [ 728.117548][T25941] bridge3: entered promiscuous mode [ 728.133069][T25941] bridge3: entered allmulticast mode [ 728.452301][T25964] bond6: Invalid ad_actor_system MAC address. [ 728.462636][T25964] bond6: option ad_actor_system: invalid value (1) [ 728.473618][T25964] bond6 (unregistering): Released all slaves [ 728.952442][T26003] netlink: 'syz.3.5557': attribute type 11 has an invalid length. [ 729.060066][T26014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.132480][T26017] tipc: Failed to remove unknown binding: 66,1,1/0:4026291434/4026291436 [ 729.172221][T26017] tipc: Failed to remove unknown binding: 66,1,1/0:4026291434/4026291436 [ 729.817624][T26062] netlink: 'syz.1.5573': attribute type 11 has an invalid length. [ 729.827056][T26062] netlink: 'syz.1.5573': attribute type 4 has an invalid length. [ 729.854207][T26062] netlink: 'syz.1.5573': attribute type 5 has an invalid length. [ 729.865452][T26062] netlink: 'syz.1.5573': attribute type 6 has an invalid length. [ 729.987043][T26075] veth0: entered promiscuous mode [ 730.020085][T26072] bond7 (unregistering): Released all slaves [ 730.068524][T26075] veth0 (unregistering): left promiscuous mode [ 730.142708][T26033] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 730.398440][T26092] netlink: 'syz.4.5585': attribute type 29 has an invalid length. [ 730.643965][T26114] netlink: 'syz.4.5591': attribute type 11 has an invalid length. [ 730.664654][T26114] __nla_validate_parse: 26 callbacks suppressed [ 730.664676][T26114] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5591'. [ 730.943602][T26124] netlink: 'syz.4.5594': attribute type 2 has an invalid length. [ 730.968888][T26105] lo speed is unknown, defaulting to 1000 [ 730.984895][T26127] netlink: 'syz.1.5595': attribute type 1 has an invalid length. [ 731.042548][T26127] 8021q: adding VLAN 0 to HW filter on device bond7 [ 731.085133][T26134] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5597'. [ 731.087788][T26128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 731.103711][T26128] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 731.125714][T26128] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 731.191529][T26127] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 731.207080][T26127] bond7: (slave wlan0): Enslaving as an active interface with a down link [ 731.321084][T26140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5598'. [ 731.343227][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 731.534352][T26156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5601'. [ 731.780666][T26170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5604'. [ 731.861929][T26177] netlink: 'syz.1.5605': attribute type 10 has an invalid length. [ 731.923580][T26170] macvtap1: entered promiscuous mode [ 731.934088][T26170] vlan0: entered promiscuous mode [ 731.939591][T26170] macvtap1: entered allmulticast mode [ 731.984183][T26170] vlan0: entered allmulticast mode [ 731.989577][T26170] veth0_vlan: entered allmulticast mode [ 732.021371][T26178] gtp0: entered promiscuous mode [ 732.135544][T26183] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5608'. [ 732.314860][T26190] netlink: 'syz.4.5610': attribute type 11 has an invalid length. [ 732.333541][T26190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5610'. [ 732.361790][T26190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5610'. [ 808.573362][T26200] validate_nla: 1 callbacks suppressed [ 808.573385][T26200] netlink: 'syz.0.5612': attribute type 1 has an invalid length. [ 808.692683][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 808.702921][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 808.711272][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 808.719403][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 808.727537][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 809.116316][T26250] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 809.193532][T26252] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.5623'. [ 809.321995][T26255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5624'. [ 809.342439][T26260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5627'. [ 809.365846][T26263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5626'. [ 809.440695][T26260] macvtap2: entered promiscuous mode [ 809.446560][T26260] macvtap2: entered allmulticast mode [ 809.452733][T26215] lo speed is unknown, defaulting to 1000 [ 809.721198][T26279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5630'. [ 809.758670][T26283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5631'. [ 809.830439][T26287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5632'. [ 809.854617][T26287] openvswitch: netlink: Flow actions attr not present in new flow. [ 809.977849][T26279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5630'. [ 810.038913][T26215] chnl_net:caif_netlink_parms(): no params data found [ 810.264321][T26320] vlan3: entered promiscuous mode [ 810.269831][T26320] bridge0: entered promiscuous mode [ 810.351332][T26332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5642'. [ 810.427473][T26215] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.438049][T26215] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.446389][T26215] bridge_slave_0: entered allmulticast mode [ 810.461861][T26215] bridge_slave_0: entered promiscuous mode [ 810.487827][T26215] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.511475][T26215] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.519283][T26337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5645'. [ 810.530732][T26215] bridge_slave_1: entered allmulticast mode [ 810.539417][T26215] bridge_slave_1: entered promiscuous mode [ 810.547827][T26340] netlink: 'syz.0.5644': attribute type 1 has an invalid length. [ 810.649118][T26215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.677581][T26215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.762078][T26215] team0: Port device team_slave_0 added [ 810.774782][ T5834] Bluetooth: hci6: command tx timeout [ 810.790686][T26215] team0: Port device team_slave_1 added [ 810.793897][T26353] ipt_REJECT: TCP_RESET invalid for non-tcp [ 810.910403][T26215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.924273][T26215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.969409][T26215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.990917][T26215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.006061][T26215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.033331][T26215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.136368][T26215] hsr_slave_0: entered promiscuous mode [ 811.151151][T26215] hsr_slave_1: entered promiscuous mode [ 811.171594][T26215] debugfs: 'hsr0' already exists in 'hsr' [ 811.177738][T26215] Cannot create hsr debugfs directory [ 811.211342][T26376] netlink: 'syz.4.5658': attribute type 2 has an invalid length. [ 811.439300][T26215] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 811.450299][T26215] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 811.460008][T26215] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 811.469991][T26215] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 811.541290][T26215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.562457][T26215] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.575524][T15678] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.582706][T15678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.597190][T15672] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.604352][T15672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.768943][T26215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.972105][T26215] veth0_vlan: entered promiscuous mode [ 811.983436][T26215] veth1_vlan: entered promiscuous mode [ 812.010141][T26215] veth0_macvtap: entered promiscuous mode [ 812.019471][T26215] veth1_macvtap: entered promiscuous mode [ 812.037948][T26215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.051721][T26215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.068567][T15672] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.078629][T15672] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.089253][T15672] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.101106][T15672] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.171212][T15672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.179728][T15672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.206381][T15672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.215655][T15672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.854321][ T5834] Bluetooth: hci6: command tx timeout [ 814.944201][ T5834] Bluetooth: hci6: command tx timeout [ 817.015512][ T5834] Bluetooth: hci6: command tx timeout [ 826.214272][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 884.937387][ T31] INFO: task syz.5.5554:25999 blocked for more than 143 seconds. [ 884.945266][ T31] Not tainted syzkaller #0 [ 884.950210][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 884.959959][ T31] task:syz.5.5554 state:D stack:26080 pid:25999 tgid:25998 ppid:21231 task_flags:0x400140 flags:0x00080002 [ 884.972247][ T31] Call Trace: [ 884.975824][ T31] [ 884.978768][ T31] __schedule+0x149b/0x4fd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 884.983279][ T31] ? __pfx___schedule+0x10/0x10 [ 884.988246][ T31] ? schedule+0x91/0x360 [ 884.992504][ T31] schedule+0x165/0x360 [ 884.997877][ T31] schedule_preempt_disabled+0x13/0x30 [ 885.003362][ T31] __mutex_lock+0x7e6/0x1350 [ 885.008079][ T31] ? __mutex_lock+0x5bb/0x1350 [ 885.012860][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 885.018864][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 885.023909][ T31] ? __nlmsg_put+0xef/0x1b0 [ 885.030319][ T31] ? genlmsg_put+0x137/0x2e0 [ 885.045035][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 885.051406][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 885.101760][ T31] ? dev_hard_start_xmit+0x793/0x800 [ 885.123981][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 885.129633][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 885.164052][ T31] genl_rcv_msg+0x60e/0x790 [ 885.168623][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 885.173756][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 885.188411][ T31] ? __asan_memcpy+0x40/0x70 [ 885.193052][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 885.198581][ T31] netlink_rcv_skb+0x208/0x470 [ 885.203371][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 885.209693][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 885.215325][ T31] ? genl_rcv+0x19/0x40 [ 885.219654][ T31] ? down_read+0x274/0x2e0 [ 885.224636][ T31] ? genl_rcv+0xd/0x40 [ 885.228738][ T31] genl_rcv+0x28/0x40 [ 885.232739][ T31] netlink_unicast+0x82f/0x9e0 [ 885.237714][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 885.243017][ T31] ? __alloc_skb+0x198/0x3a0 [ 885.248062][ T31] ? netlink_sendmsg+0x642/0xb30 [ 885.253023][ T31] ? skb_put+0x11b/0x210 [ 885.257545][ T31] netlink_sendmsg+0x805/0xb30 [ 885.262348][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.267778][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 885.272824][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 885.278825][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.285121][ T31] __sock_sendmsg+0x21c/0x270 [ 885.289837][ T31] ____sys_sendmsg+0x505/0x820 [ 885.295043][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 885.300355][ T31] ? import_iovec+0x74/0xa0 [ 885.305621][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 885.310319][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.316071][ T31] ? futex_wake+0x4b2/0x560 [ 885.320620][ T31] ? __fget_files+0x2a/0x420 [ 885.325733][ T31] ? __fget_files+0x3a0/0x420 [ 885.330630][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 885.341901][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 885.347770][ T31] ? rcu_is_watching+0x15/0xb0 [ 885.352570][ T31] do_syscall_64+0xec/0xf80 [ 885.357548][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.363630][ T31] ? trace_irq_disable+0x37/0x100 [ 885.369473][ T31] ? clear_bhb_loop+0x60/0xb0 [ 885.374409][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.380317][ T31] RIP: 0033:0x7f9c3b58f749 [ 885.385855][ T31] RSP: 002b:00007f9c3c4d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.394649][ T31] RAX: ffffffffffffffda RBX: 00007f9c3b7e5fa0 RCX: 00007f9c3b58f749 [ 885.402626][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000006 [ 885.410798][ T31] RBP: 00007f9c3b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 885.418944][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.427284][ T31] R13: 00007f9c3b7e6038 R14: 00007f9c3b7e5fa0 R15: 00007ffd246b80d8 [ 885.435399][ T31] [ 885.438457][ T31] [ 885.438457][ T31] Showing all locks held in the system: [ 885.448644][ T31] 1 lock held by khungtaskd/31: [ 885.455006][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 885.524188][ T31] 2 locks held by getty/5587: [ 885.528918][ T31] #0: ffff88802fe360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 885.563988][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 885.594123][ T31] 3 locks held by kworker/1:3/5883: [ 885.599410][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 885.644274][ T31] #1: ffffc9000447fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 885.664299][ T31] #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 885.678790][ T31] 2 locks held by syz-executor/17370: [ 885.684317][ T31] #0: ffffffff8f311f48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 885.694012][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 885.714239][ T31] 2 locks held by syz.2.3926/20331: [ 885.719479][ T31] #0: ffffffff8f379bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 885.744056][ T31] #1: ffffffff8e237968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 885.764293][ T31] 2 locks held by syz.5.5554/25999: [ 885.769526][ T31] #0: ffffffff8f379bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 885.804441][ T31] #1: ffffffff8e237968 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 885.834395][ T31] 3 locks held by syz-executor/26215: [ 885.839828][ T31] [ 885.864419][ T31] ============================================= [ 885.864419][ T31] [ 885.872894][ T31] NMI backtrace for cpu 0 [ 885.872913][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 885.872936][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.872948][ T31] Call Trace: [ 885.872956][ T31] [ 885.872964][ T31] dump_stack_lvl+0xe8/0x150 [ 885.872995][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 885.873020][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 885.873053][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 885.873082][ T31] sys_info+0x135/0x170 [ 885.873103][ T31] watchdog+0xf95/0xfe0 [ 885.873133][ T31] ? watchdog+0x20a/0xfe0 [ 885.873164][ T31] kthread+0x711/0x8a0 [ 885.873192][ T31] ? __pfx_watchdog+0x10/0x10 [ 885.873217][ T31] ? __pfx_kthread+0x10/0x10 [ 885.873243][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 885.873277][ T31] ? __pfx_kthread+0x10/0x10 [ 885.873302][ T31] ret_from_fork+0x510/0xa50 [ 885.873323][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 885.873339][ T31] ? __switch_to+0xc9e/0x1480 [ 885.873369][ T31] ? __pfx_kthread+0x10/0x10 [ 885.873394][ T31] ret_from_fork_asm+0x1a/0x30 [ 885.873435][ T31] [ 885.873442][ T31] Sending NMI from CPU 0 to CPUs 1: [ 886.004046][ C1] NMI backtrace for cpu 1 [ 886.004064][ C1] CPU: 1 UID: 0 PID: 26215 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 886.004083][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 886.004094][ C1] RIP: 0010:do_raw_spin_unlock+0x40/0x240 [ 886.004122][ C1] Code: 00 00 fc ff df 4c 8d 77 04 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 84 01 00 00 41 81 3e ad 4e ad de 0f 85 f3 00 00 00 <48> 89 df be 04 00 00 00 e8 53 87 88 00 48 89 d8 48 c1 e8 03 42 0f [ 886.004136][ C1] RSP: 0018:ffffc90000a08af8 EFLAGS: 00000046 [ 886.004152][ C1] RAX: 0000000000000000 RBX: ffff8880b873a900 RCX: 0000000000000106 [ 886.004164][ C1] RDX: 0000000000000004 RSI: ffffffff8d976959 RDI: ffff8880b873a900 [ 886.004175][ C1] RBP: ffff88807c410000 R08: ffffffff8f822a77 R09: 1ffffffff1f0454e [ 886.004188][ C1] R10: dffffc0000000000 R11: fffffbfff1f0454f R12: dffffc0000000000 [ 886.004201][ C1] R13: 1ffff110170e76e6 R14: ffff8880b873a904 R15: ffff8880b873b730 [ 886.004214][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 886.004228][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 886.004239][ C1] CR2: 00007ffd9a379ffc CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 886.004254][ C1] Call Trace: [ 886.004260][ C1] [ 886.004269][ C1] _raw_spin_unlock+0x1e/0x50 [ 886.004293][ C1] try_to_wake_up+0x78d/0x12b0 [ 886.004320][ C1] kick_pool+0x47d/0x640 [ 886.004340][ C1] __queue_work+0xcdd/0xf90 [ 886.004360][ C1] ? __queue_work+0x1a2/0xf90 [ 886.004378][ C1] call_timer_fn+0x16e/0x590 [ 886.004396][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 886.004414][ C1] ? call_timer_fn+0xbe/0x590 [ 886.004431][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 886.004454][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 886.004475][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 886.004494][ C1] __run_timer_base+0x646/0x860 [ 886.004523][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 886.004538][ C1] ? clockevents_program_event+0x247/0x350 [ 886.004560][ C1] ? sched_clock_cpu+0x74/0x430 [ 886.004580][ C1] run_timer_softirq+0xb7/0x180 [ 886.004597][ C1] handle_softirqs+0x22b/0x7c0 [ 886.004615][ C1] ? __irq_exit_rcu+0x60/0x150 [ 886.004636][ C1] __irq_exit_rcu+0x60/0x150 [ 886.004651][ C1] irq_exit_rcu+0x9/0x30 [ 886.004666][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 886.004682][ C1] [ 886.004687][ C1] [ 886.004694][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 886.004710][ C1] RIP: 0010:__kasan_check_read+0xa/0x20 [ 886.004735][ C1] Code: 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 ef e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 886.004749][ C1] RSP: 0018:ffffc9000ef0fac8 EFLAGS: 00000246 [ 886.004762][ C1] RAX: 0000000000000000 RBX: ffff8880b8740b40 RCX: ffffffff819e930d [ 886.004774][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b8740b40 [ 886.004785][ C1] RBP: 0000000000000000 R08: ffff8880b8740b98 R09: 1ffff110170e8170 [ 886.004796][ C1] R10: 0000000000009a98 R11: ffffed1027fff830 R12: dffffc0000000000 [ 886.004808][ C1] R13: ffff8880b8740b40 R14: ffff8880b8740b44 R15: 0000000000000000 [ 886.004825][ C1] ? do_raw_spin_unlock+0x4d/0x240 [ 886.004849][ C1] do_raw_spin_unlock+0x4d/0x240 [ 886.004872][ C1] _raw_spin_unlock+0x1e/0x50 [ 886.004894][ C1] __free_frozen_pages+0x68b/0xd30 [ 886.004915][ C1] vfree+0x25a/0x400 [ 886.004939][ C1] ? __pfx_kcov_close+0x10/0x10 [ 886.004961][ C1] kcov_close+0x28/0x50 [ 886.004980][ C1] __fput+0x44c/0xa70 [ 886.005007][ C1] task_work_run+0x1d4/0x260 [ 886.005030][ C1] ? __pfx_task_work_run+0x10/0x10 [ 886.005052][ C1] ? kmem_cache_free+0x197/0x620 [ 886.005068][ C1] ? do_exit+0x68f/0x22f0 [ 886.005091][ C1] do_exit+0x694/0x22f0 [ 886.005115][ C1] ? __pfx_do_exit+0x10/0x10 [ 886.005134][ C1] ? do_raw_spin_lock+0x121/0x290 [ 886.005161][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.005186][ C1] do_group_exit+0x21c/0x2d0 [ 886.005210][ C1] __x64_sys_exit_group+0x3f/0x40 [ 886.005231][ C1] x64_sys_call+0x2210/0x2210 [ 886.005252][ C1] do_syscall_64+0xec/0xf80 [ 886.005269][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.005284][ C1] ? trace_irq_disable+0x37/0x100 [ 886.005304][ C1] ? clear_bhb_loop+0x60/0xb0 [ 886.005322][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.005338][ C1] RIP: 0033:0x7f82fcf8f749 [ 886.005351][ C1] Code: Unable to access opcode bytes at 0x7f82fcf8f71f. [ 886.005360][ C1] RSP: 002b:00007ffcc1324388 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 886.005376][ C1] RAX: ffffffffffffffda RBX: 00007f82fd01585d RCX: 00007f82fcf8f749 [ 886.005388][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 886.005398][ C1] RBP: 00007f82fd01586f R08: 00007ffcc1322127 R09: 00000000000927c0 [ 886.005410][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 886.005419][ C1] R13: 00000000000927c0 R14: 00000000000c6535 R15: 00007ffcc1324530 [ 886.005440][ C1] [ 886.516853][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 886.523721][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 886.532819][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 886.542968][ T31] Call Trace: [ 886.546242][ T31] [ 886.549158][ T31] vpanic+0x1e0/0x670 [ 886.553131][ T31] panic+0xb9/0xc0 [ 886.556924][ T31] ? __pfx_panic+0x10/0x10 [ 886.561345][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 886.566716][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 886.572866][ T31] watchdog+0xfdf/0xfe0 [ 886.577022][ T31] ? watchdog+0x20a/0xfe0 [ 886.581344][ T31] kthread+0x711/0x8a0 [ 886.585401][ T31] ? __pfx_watchdog+0x10/0x10 [ 886.590062][ T31] ? __pfx_kthread+0x10/0x10 [ 886.594656][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.599842][ T31] ? __pfx_kthread+0x10/0x10 [ 886.604416][ T31] ret_from_fork+0x510/0xa50 [ 886.608986][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 886.614080][ T31] ? __switch_to+0xc9e/0x1480 [ 886.618771][ T31] ? __pfx_kthread+0x10/0x10 [ 886.623358][ T31] ret_from_fork_asm+0x1a/0x30 [ 886.628131][ T31] [ 886.631583][ T31] Kernel Offset: disabled [ 886.635897][ T31] Rebooting in 86400 seconds..