last executing test programs: 1.768951091s ago: executing program 1 (id=2558): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(r3, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x0) 1.681106166s ago: executing program 3 (id=2559): getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x10}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x594}, &(0x7f0000000140)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) write$tun(r3, &(0x7f00000001c0)={@void, @void, @eth={@multicast, @empty, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0x6, 0x6, "5ff0bb", 0x5b, 0x73, 0x1, @mcast1, @rand_addr=' \x01\x00', {[@routing={0x33, 0x6, 0x2, 0x5, 0x0, [@local, @loopback, @dev={0xfe, 0x80, '\x00', 0xa}]}], "dc66df9940b45c75b0a4f6930a86db25b9a4aa325aad9834ebfafa3c15230c0d6d767d"}}}}}}, 0x95) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e22, @multicast2}}, 0xe6, 0x4, 0x7, 0x9078, 0x40, 0x7fff, 0x9}, 0x9c) r4 = socket$nl_crypto(0x10, 0x3, 0x15) getsockname$netlink(r4, &(0x7f0000000340), &(0x7f0000000380)=0xc) r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r5, &(0x7f00000003c0)=""/29, 0x1d, 0x40000001, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={r1, @in={{0x2, 0x4e24, @multicast1}}, [0x8000000000000001, 0x5, 0x0, 0x9, 0x6, 0x7, 0x6, 0xffffffff, 0x7fffffff, 0x9, 0x0, 0x200, 0x8, 0x3, 0xad5]}, &(0x7f0000000540)=0x100) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000580)={r6, @in6={{0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0xc, 0x7, 0x4, 0x0, 0x5}, &(0x7f0000000640)=0x98) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000680)={r6, 0x4}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000700)={r10, 0xa6d, 0x40, 0x7, 0x6, 0x9}, &(0x7f0000000740)=0x14) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000780), &(0x7f00000007c0)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000800)={0x2, [0x0, 0x0]}, &(0x7f0000000840)=0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000880)={r11, 0xfff}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000008c0)={r8, @in6={{0xa, 0x4e21, 0x3713, @empty, 0x9}}}, &(0x7f0000000980)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f00000009c0)={r12, 0x1}, 0x8) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r7) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r7, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xd4, r13, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r14 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCGIFPFLAGS(r14, 0x8935, &(0x7f0000000c00)={'ip6gre0\x00'}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r7) sendmsg$BATADV_CMD_GET_ORIGINATORS(r15, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, r16, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x85}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x1) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000d80)={{r7}, {@void, @actul_num={@void, 0x8000000000000000, 0x74}}}) 1.620596692s ago: executing program 4 (id=2561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2a, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3528}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000002, 0x8032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf256800000008000300", @ANYRES32=r6, @ANYBLOB="3600c7000106040408050105050309df6d"], 0xb4}, 0x1, 0x0, 0x0, 0x20004041}, 0x44040012) 1.4063088s ago: executing program 1 (id=2563): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r1, 0x0, 0x0, 0x20044080, &(0x7f0000000040)={0xa, 0x4e22, 0x7fffff7c, @private1, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @local, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x18}}], 0x2, 0x40005) 1.360460664s ago: executing program 4 (id=2565): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1410, 0x724, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) 1.308525256s ago: executing program 3 (id=2566): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x6, 0x4, "d631f9fe"}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x14}, 0x800) 1.302110614s ago: executing program 1 (id=2567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x23, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048084) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x5, 0xf7f, 0x6}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000340)="df6650d4b5e92645f9a0d64aff23e0303b7c52675c7b0cfd833b34e60ea4d00f43ecaa6936b3a8f3162a3b92e6f89c3bb712812bd6aa143b59b5270083a920b9384d49668f9194eb72d202bab79d6f1d4e5053d0618fa6032449d48b2c18a0bb", 0x60, 0x4008805, &(0x7f00000003c0)={0x11, 0x1b, r6, 0x1, 0x70, 0x6, @local}, 0x14) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010100}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r6, 0x2, {0x3, 0xff, 0x1}, 0xfe}, 0x18) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x3, {0x2, 0xf0, 0x1}}, 0x18) bind$can_j1939(r5, &(0x7f00000018c0)={0x1d, r6, 0x1, {0x3, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r4, 0x234, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x20000040) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x0, 0x8001, {{0x6, 0x4, 0x1, 0x11, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@lsrr={0x83, 0x3, 0xfc}]}}}}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}]}, 0x28}}, 0x20000080) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='rxrpc_conn\x00', r12, 0x0, 0x8}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) r13 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r13, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004dc0)={0x14, 0x1a, 0x229, 0x70bd2d, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) unshare(0x40020000) 1.249908314s ago: executing program 4 (id=2569): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0xf8, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0xdc, 0x6, "7cc92674c2ff3fcd3c55d0a3a4af534ddacfc125ba885065ad7a3dc4601cd3ac598df867acc3e8fdb7cfb1cefab55e5440a5e1654b7ceb7030010f2c0489fe52369f2c2268b76048478312cd14bec27c546033ef6d8c0d7fd70a86339053f3ba7f368ebf4b9fdc58a8cf4db37154d6d146549184eee88a773df3b70feeb3f9f25af657b8d89d5ce9250470a5485964fec5a4b6af2b398e7bcf5a57a8333708c6b167f59a5da984a5d072dbaaae525ae0686dbeeb9cded979485ba2a4be04211ce5388bb1ea55494562a3d539672486ab3bbce2017c579d3d"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x120}}, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) socket$key(0xf, 0x3, 0x2) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000500)="00214717a70700000000030600710a5e31163ceb9d04", 0x16}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001814010000000000400000000800010000000000"], 0x18}}, 0x0) 1.194592137s ago: executing program 3 (id=2570): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd25, 0x0, {0xa, 0x3f, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000000)=""/27, &(0x7f0000000240)=0x1b) (async) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x14, 0x0, 0x1b, 0x0, 0x3}, 0x14}}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@dev, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000340)=0xc) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x400}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x200000, 0x10, &(0x7f00000003c0), 0x10}, 0x90) 1.07487091s ago: executing program 0 (id=2572): r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = accept4(r0, &(0x7f0000000080)=@phonet, &(0x7f0000000100)=0x80, 0x80800) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000140)={0x2c, @multicast1, 0x4e21, 0x2, 'fo\x00', 0x5, 0x5, 0x46}, 0x2c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000180)=@generic={0x3, 0x7, 0x8000}) recvfrom$llc(r1, &(0x7f00000001c0)=""/19, 0x13, 0x10000, &(0x7f0000000200)={0x1a, 0xffff, 0x9, 0x4a, 0x4, 0x2, @broadcast}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r1) sendmsg$kcm(r1, &(0x7f0000001a80)={&(0x7f0000000280)=@in={0x2, 0x4e20, @private=0xa010100}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="4cbb66610cf9107cbee45fcc093b9db7dcc4bb712a1bff2be2701cd910888d802c5a7a246b175f46df53dd716a676e9159acd7df7c37c238f73b69bef3f9a70967", 0x41}, {0xffffffffffffffff}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="c8682859cca070efe31f1d7159ac5177df3e39ac2f6f5eed596e00d20193114cc5586fe0f4f60745c1aec508f52ebf44800cba5fc0810bf22cab30e9cf288f4dfbcda5281b2ad30173dd2e98f5b4e84371f5f93a354b9d67cfc7faf5e86b5e693d77b617836417a8a7295e5a5ce729dab149fda2bb5fb1c9c25aaefa03546d51d9cbc63dd5b27e52dd89312cc066afce4279075f754a4020d8fa0bf0a400972ce1b7becb704fe5d601f5f6116a9edb719204c4ce9452024207d8cb33f38575dc8dada537c8dd7af566e4bb4c4cabd0f1ad77a1e9d358d1435625d8be1feca4d35f8ee1a611da33b76570705b1f908e23ded27846", 0xf4}, {&(0x7f00000004c0)="e44b0af7117bf2638f7776fedc9c7b141afeebc43c9f8681ad008cc06b78fe8bacaacefc4ff19f87cbba17aca0929cbb0538ab0de0252507be3a3b43ee26960b6660ba353ab633db1c362084c3ed44f7f1f0dedf5bbb8c4149f3497fb3b9e9b1e7385d350097fc09d3ad46c27363b82712109ac18a708f655c06a18c8d1803611539a30024081dfba5c76a9d07686aed7a67e6e59c8e0de82aec3ecae5295880c2a0157dfaef930caaad394027a9eb5da2b440dd7ef4b69ac159edc3c5e7958bd0f8d147352b96a9f6531dbd8fcba7d39313b5050409b7ff894f58213416307d2c3b0dcd61de1cba9b0352078c26fe82ac6913bb422c9097db55dbf65e", 0xfd}, {&(0x7f00000005c0)="4698b5f8c48cdd1f93ee2be5c066826006431999c0e1d1464170f555a29fdec8cf805ff7bd4c1c45650ccd95fb092fda4f671cf9174f1c82f7e89327352e12c9167f5c1624406b045b9baca5ab5cb7f0b83e40376dfcee2b1785f4147d6af7ab6891c0", 0x63}, {&(0x7f0000000640)="10800ab11ba24c542ad8940655ce8fade973e811e7f3f1e2c1a58181116dc21d82db2bb576818184204923c4ffabf553c7627cb181c95e88745c192597cfb4c41e5be3f79267e510fd5af4a0cfae72afd8d67e9fa774757247532d69ae36c5ea521fd73810044629ff3e33fa562ba41c54715a4051c078ee7d7095edc1b008587609d8541695f6e794835ab66c398ec78debfd140bb17dd7671f5aa775036043c3bd789213a767add3bd653b8ec76263674fb298b3fa7a1269c568df0f4d8d4657aed4ee152d1e7f19d42fb33cac44691d0df2dcaeb76854da73317540da1904f3f0e186c939381061ca", 0xea}, {&(0x7f0000000740)="b836b5ce8fe32e13f235f65a9b3bc23552b25f5f7ea28e84d0b0f97e11aa5355fc3a4f6bbd819672871a4adfd6836302a5c02e34b42dffbe87858e9ec7dd2c8ef192e825411666f964a7189086aadef93962292ee4989d3645b7a27f654df805f28b4006674e2d774621cfc1e59351d5cf466eb8ab84c5621ad72d9a5963c72b39a7554faf2679c59e1d4a8b1478d7fa7b34c218f938c4de5828e2dbf8d77bd35e3e1641a1f6171ffbbf4f6757237033672921d438983654325b693409d39b84f4f816dd84166656d88ffd39a4b53683c3f3f90d5ea2d05542c621e6fcd81de413564545e0fe2c104a434ffc460f3d", 0xef}], 0x8, &(0x7f00000008c0)=[{0xe8, 0x115, 0x2, "87dc45308306a99bce46bd7d27281f74a862e47eb44513d5627e0f13d459b85660df555cf63384a5a1ee98e426708fc24e92094a13495694d1ca4e2b6d914a242f3e9f5d1af4ddb12c9cc127f3b69857b4463a43b331fded80dcc20ca4c15f0848c4ea156635515446698cb2b4afae4ee7f60d92cfdc9bc111196acfc39a4ba756ece81f647c30e2a1bd6bb854fd99d21bdb7434ee562a317b649cfa46223e94afd97883f0cefb2495abba8e3ce09d3ff51d6f4b87225d712598897e050cbdaa5bf7f21fa61602f752d840abc9a4a2bc617382d14ade"}, {0x1010, 0x108, 0x7ff, "0c6127e0476a689ff390ce3143927cea9acded6ccc4e1d3514c20632d7d257fd7c770f66184c20cd1bf662114586302e524990c6ca6614605965e4d5fbdcd9e4f0ace118ad6288fb31098de7c27dbe3feea2e93c8a327a9004c602a68a63f102ceb58f7c666387ae780694c26bbe56a47e79761fe7ce93b266fb60041862863a36f37968008dd0aef0b5419a1bfa430bfa3cc8c695cff7d4ee5d63ad2ebff83b4b0acc1e485843a78cf1ea0e7a222bbaee8de093b1e40fa17cf33de29b60af486a66c6d67c6b47e15e00a25eb2c43f8dd3b1e519fde0bd33e2ff45de60028ced2361d6c829c4bf5210d09fd4cda23dadcdc26614cfae7c173a5a83f73efc20299fbb789f2efa5b2e82c588e78ea3b443988896e9f941a22d7d4cb9b10c3b6af7bdf80c03ad6d4534541082559a2ef5c731e3a0313a50e557224e52cb464f59cbb24641a6a44f7d7ab632f4e10fa0910f67b49fdb250c05585074cfafcdbf56dc2401f82e816b30a7a04f0951a3d0722e836d40f0a01f74cc93b3e4fc98f39a9bd5018020bab61450308e237f78c0c46bb9eb388d3d630bdfc2c40ff9f17cda9868f06f4d6c36be90b815cef26f7d5202855e5322b31a2392d3f9823533a960ca170982bd45dd81d0c870a9d53950a7ea8c1d98c4c4fc480aee02c20167fb8929a33ae7366d434949e596aff42c47f89a7ff23d718a3ade2a22d46beb7c248e26cd323f96f6716ce7d08e581cc95ad8955e8d12a2d0a95ff829c9e8c67c3d7c2cc68956920e8eed5dbbb92c56f00259d943451b6975d206cfb3591c40fff626e8e6d7faa3298d292503ecf2f588a8c3dc9cfd248cdc5a0ca4e45435821d7b3e9e718e94e7458eabf9e81fa5134249a9f1aa116ec57d9fa0446aa682e024facdeea592d3583dc1ed90c3f5c42982c921ede466c84a86ce176eb514641f5b51a4b5179b03e6f0c55e3ce950abd177b0bcc83b512cfa7fe6c7c256bbbb5855617f21b715dbba863bc89c9868bceef3894edf448e296a8bd88fe8cb2974c138c08adddd0585995195ab38c0309ddefcaa0783656c007d06641738a74843ddb3258244a44c1186cacee26b1b0ce2e50da7de7db3adc6f07b0613e8da0d71f37d79a342fc25648e0e188bbdf9cb289a8abbcb4fddaca25372cbc2cf5c01988c597def7d3a1a0e452e3424179f532deae23da3f4aa4cebc951a5a5638086e331f1a9d16297159c538738898f696c3bc325d1bfd72607788e28e8bb2845a2d0b24eac4166e9b7151b33c3d4f555ecfc1c0f19c1fed246c40da9231910de16c10b78dc94d433250c6c990349cea0a9f673bfed600c6ab77629f2f51dafb0b9ff7991ce8de0ca3480ae65b08d67115f0c5e28c78f028ef8057cdafb085b4f7c6454e18e2424e1c5aee320a029c076efa8ec82fc2b43c91693c2fc5d746efdcf2a8f5ad6436f74d5b96cb3c4f4d04d753bb35b062708a3f76fc5a0ee60b6659e42158f6e71f687366a0bcdfdd7dc5883e3aa4324642f5f94e9288b562379c0bbcd8f9614e56e89c5e20f97bc14a7650bf5c4d452176f70788c98800d5f46eb0b3ea90e71637026e9e3e23bbd8c75f2d8a3ad8cc93e2ff0a9b86dfce630b2595132b801a2fd86607d99861d154576e172f9c1b4a88684ac05218aed3992884f712cfc133601a8d5cce9ed9bd2491cfcd10b49b33bb831d158b2e9c6a6a82d22d62c14eefe8bd19aff9ebcb79dee06ce56cc41c23abf38f239f9fd4e06f5f80e94403159f6b635956150433dc78ccb5114a5e61d037c098aa90f34b2380eded5da0e033d27b243dfccfc83885b9a5ebea9a1a140179f7ec1a1d039537b864b8b09ce9014da27de1e7fb2f500698af81e218d369ede4db684b0a1f6e45de5a305cc451b6bce024135e42d3bbd378fe3a95d99c93a9e984ada8a42e974aef4bcf0a9e9a9e95796bbbc81ff566762787b53cdf14c51edef171eecda5ee94ea5668363cc20262f0b3a545438c68687a32a7e81ecbd74ccf2db3203d10c51dfe5a27779fe523ea425c19eba4a50bf125132db7c5b0f39b72aacf5c1953b924136c9a2e002fdf2849e4f466eab39214f36129a5e9a52e6aed6b2d9138dc6a472c534a99f081aee03a1a9ef07542cc022fc4ae40ab0504a1af4887c596ffa6656d76ae2121f1ec3b2d7af2f9716a938fb06af88cb4dcef09e331cfa55f6ee78a50a4b17bd223270cdf86ab2414f36e9e0e298aa9868f657a4ddb5d723fb8cf108c5da7582756fc5c3022f7b3394c2960d1d5b92adb9c8189612cc57c8a62a9932a58cb2d3edf4a07d0d0c2094f6f6ad697f42322b5d44af10603ab32b469f45c718dd1996e380bac2e4764d88f8a75bc12afeea670e10458a5e6bcf3e7dc31daa0163e54b1183d2593b7ba1151268c866874bad6d3ed3a45614953a2a53ca5e1e583c3d1a266a819c285196d8a4d1f91eb728a2468d8fc631b48ef9ffdca81f52028f64cd169bf4e434372f7399aadceae9a7a6a260bcc275884dae1092426653aa4bbb1106c4864cc3ca5466460bccaf72d43ced5cd35a7ce3a908e180dc50e1292885b4e03ccc7c70cd1b9811ae8c67acd9a1e3ffe46d2f05eba3ac3e9d3ddfd8f02cebc9c1ed0ed97217286638537dd416ee1b69937241cc8dd98b6847faa4ecf236a1b0f6efcbd9f199544b2e853391633554752d0c40fcceadf1cd497134b40a4b00bb711fd6ef7eb965214709cfc037ffa7cc825f08796927ee7fdc0540642fcb308379de48cc934ffd7a3bfaac8daac17f154b216ba41505e3fe8717bc2278f49716282b3b12d0173981ba2cd699ac0a2e66785870b3463e70378d1f9f853a8c6e66b4bed26b09e331c6622fc37c8111518b8a68e6bf663a007fea8ac18c6121a5f49f61e8362708f8615154b78586c817213f7bb1f9b88ceaa1d94c037915b43fea4f58f8cc2a17b41aa22c87f3c4872006c6eaa32e49e1a95fb621529b5579a9feeee80ed8f4f2f8d9ffc03929bdfbdd3b14dbe19656cc8622cd8f2ae8b6290e392c454af1fb24ef35a143005474be836fa19522e8d3478f43c4d4907ea8215786e5fa04abaf0ffd28b72a53cd5ea2b3f71316fc8cc6a2b5f11250cea935b9741691456237f49cbbb015ea239cf7dd84f89c10f014245bf627136e9f38407eae74b6c92f78c5a9fcdaacf096ff55a351dbc5398b75c5fb5ed9c68145b4b342edaf213b3ce600ce3618924e4a9d70a29a7eac3f1c3d3b4860f5e30c302762cc22d45ee4a362617b4d684751110c3ace5f7898f5757d70525bc2bf6fadf4c2a0ef82a2dba3028f9130bb9bf8032b1b5b42ceb1810c87c52af35c3af42f1658929ebbfbaa1fda5dbc7a533ba00afa41f8d966c063715c8605853a3f526b84e5cf01a2c2619faceabc1391ef7d02ff24a386e194a829f3f9dda5cc85826c29d9299fc03c1d05f0036b593dcf2b81691f8b213cf31400ef4f5c4e9b65960344fa496b74e422ef6fa3ef09ee459024e49851220889d212ef107f0402abbad615d2988d7be767e9e2ad78a725ad47ff036e94f3dc81f6c6fe26b677464be0a4a04b565fc3fb9b290a2f2b1da5e296427db35a0f6f0e29b4a60def4e131dd3b37969a025145cf40cb08d38c29cf0909adbe9e2e26ef6c988b968447ad47f04748901d1e488a4d3074594aad316ef960859fef10767db128fea4000c8bedb3a7d3eb88ac2f68c84ed166bf7f0568cfe71b028a91d2824e16a85145e3b65defd2d6c1be6ec79c7a99a98647f66d68ef7d7f24cfdf0411d735a5838d55eecdef2f618b3638ed53a8d74540aaef847f80c7631b0f93066abdf4b4ed1adcb0f5f22c6d7e3c98a102502edf5e247354d5c9ec0c13fd7857f50c6b8453b2911d67d7078db0da78b4f4ed3c30e1300b5a645ab0e4bd456082f10094fbd293dbc6bfa3dc5a724c51bd9d685a2750d23de2e709fad0242ff4d73d9f727f0ade41d2ff5b04078362871a0b57161a942c9a063fd406faa56ed98c1244d09300b835fd60a90c9da599756983725414d63641f26c41603c92d53adaac13049cd41f3849a97354abb9ceba128a218f990b977185b0d25d8eee052086f36a9c2285eccedd463bc25d37d4b7d7c0dc844cc0161c783b6ef0a683b7b5f856e3d260beac04226453ceb9a923b80931dc176e9e96990f9e4e11e1273f5323f5747153a7efe0a323c2823cec34eb52c10cab9a90b4b0106b0691c08cfbc2f4b73965e74fb6781749fc823a590417947e0f072a3024ebb0054806f9d7f93891ff877c6bdebb8cc3a28b2d5e8757416444c15fa5329827b8b977ba7e53345020fedd775f1d15cbf43c574e4a74cae743295c967cbdfb6d262c01a95d8c95931fa73c760722847cb4b1ed4564243e46880290e2fb7a9b3a80c1d0993376f4d73d78ffe236703daaa6b0768b64e1f8d17a845ea3a78f85f986631dab2fe16ab5aaf5156be067f078a362ec09f418e0567656442594f602168dd64fe980eb55fb974459581ac117c3546872a790b391f0303597583bbb5bed632bc4e95e98c99a35ba5acabb6e9b2276c33621fd69c36ecbec3445d80326e559631add84c77e177da0e7b50ce0846b0df04ded637eebc35f7f40e2ec2f3613e106b77ba70a2818297bb3b48ab78603b99f24b9822010d69c3ad6dcbd16be300c5479fe386e2a5dac1249864cb01f492daae5e538aafbd552711dbcc583806aa1be28535247fd12ec4f84e0fa2f5f08d50d239f5a37f54a97fce37d67472deee11f72c1f2b984b13798a79cc59f4651fa24ae3b0b8fd8a264a5d3174318be2091b0ab46bf94d6d01f0a06ddae75d158f8e177152e927874b1021b3ff01cf206b88779e6bf52e27c78cb36d7265d2c0f8726e2dd9f1a60cf7f19a87e2e41130a2fa5d8af3a75fe7c9c434a242c4ae39596e67060a31d42dc245739e3c642d020d35910c50ff29a5a52268856cbc4c1f42b95357805597f55d84a252475130cfc967ce0e4611b24e42a4341a1919833588844c57124cac2214a0593125321409591f7b105d0c18334cc10ac2a749d076163ced6b6da7d498d1ea8cde426f1702fb4243ca662347df08c9bd6f4fc7c0ba7b4ae3052bc665f9190eb56bf111f1b1f1e1d042d674370874a1f794f5c12d3e1816c3cc15949faf8f608f84cdf5dc6ff1b61ef1c8e4fdff991421d322468e4a26cf8fef5cb8a7c19f96ba0739b99e2f784fa9ad491c425882bfd7812528499b6b895ccee0aeda97a8f19ae3241c187bcd157c0164483e1ae387efbeeee6bfbc9baa6313d9133476900faf6e1b3b2347a08a481a0520dd2fdd139c32a5bc6cb8383cf6304ddf05900b0964c2d5cddeb5fda6b7eb6536b5516aa31a23ff58ce66165191481a8031b5529b1ab7d6cfd8596744d3e2409ee64f7eb94c05e70fe53c768d819ae7fa4204f210056842d9b8250c48e9c6b8e5894c72e066dcac4ab6c8e1ff201a0155df7dd6fcd7ec324329ffcbe7c19e76ce47e891d44afd166a712c4ae32c6865d881a1cc210ec26660a52d0360b6a752f73a7971b4f8f350ceea6e499f14717c77a15326abefee2c5b4d38660854c513dc8ad68698e5c9aa2eaa2b804b889e50c970ecd750f6aef5970637ac62b67cf979f9ee10326a663c1881381e17f82db961d3656541b864f07ac8c9d7a65fce0d27813567317d8a567851b2d6b8fc9b032ca82840fec79b3375dcd741afda61267c06cd1cbe77d727a88dd6276bd490dc0c42ad43042afc081088716073dc85ef7a67fb7a863d5c7c850932c7cf4bdd1415cba894f258896a1511"}, {0xa8, 0x109, 0x5, "71258ff8fade5f9f6a1b4fdbe7d11432ae2edd19802fb00e672bb4a321210a17f106b578b183183ed3eb22f15b88ea056f302b74cb4cc6f48a747d0bce62d6e3b60c36d6bc69f1cc244f278f0c64fd923a6368d0e5b18d697b94c356aa1de41a3eb5ec16c8824a0e808b78d5a3e53c03d6da9bdf9b0d508d5f1388d2e58dcfe5eb7022d61f4e702fcb119928894ea0b7375c198873ee"}], 0x11a0}, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001ac0)={r0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x58, r4, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x28, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x200040c0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000001cc0)) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d40)={0xe8, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x800, 0x5e}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_IE={0xbd, 0x2a, [@ht={0x2d, 0x1a, {0x40, 0x1, 0x7, 0x0, {0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x800, 0x1}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @preq={0x82, 0x46, {{0x0, 0x0, 0x1}, 0x38, 0x8, 0xd76d, @device_a, 0x7, @void, 0x2da, 0x800, 0x4, [{{}, @broadcast, 0x80000000}, {{}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1}, @device_a, 0x400}]}}, @preq={0x82, 0x3b, {{0x0, 0x0, 0x1}, 0x8, 0x6, 0x7, @broadcast, 0x0, @void, 0x8001, 0x45, 0x3, [{{0x1, 0x0, 0x1}, @broadcast, 0x81}, {{}, @device_a, 0x2}, {{0x1}, @device_a, 0x8100}]}}, @ibss={0x6, 0x2, 0x6}]}]}, 0xe8}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001f00), r1) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x54, r4, 0x200, 0x70bd26, 0xfff, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xca}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xd31}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) connect$vsock_stream(r3, &(0x7f0000002140)={0x28, 0x0, 0x2711}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '/+-\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000001) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000002500)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x148, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd62}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9694}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x596f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40041}, 0x1) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000002540), &(0x7f0000002580)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002600), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000002700)={'syztnl2\x00', &(0x7f0000002640)={'erspan0\x00', 0x0, 0x40, 0x40, 0x2, 0xc, {{0x23, 0x4, 0x3, 0x2, 0x8c, 0x65, 0x0, 0xfe, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x17, 0x52, [@remote, @multicast1, @loopback, @private=0xa010101, @multicast1]}, @timestamp_addr={0x44, 0x54, 0xd3, 0x1, 0x2, [{@multicast2, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x4}, {@multicast1, 0x2}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x9}, {@rand_addr=0x64010102, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x6}, {@local, 0xfffffffe}, {@multicast1}]}, @ra={0x94, 0x4, 0x1}, @noop, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002740)={'team_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r9, &(0x7f0000002800)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x38, r10, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4045) 1.022445721s ago: executing program 3 (id=2573): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r2, 0x12}, 0x20) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160005000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)={@multicast1, 0x1, 0x0, 0x40, 0x0, [{@loopback}, {@multicast1}, {@remote}, {@initdev}]}}) 929.577816ms ago: executing program 2 (id=2574): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x10, 0x2d, 0x1, 0x0, 0x259fdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) 880.651264ms ago: executing program 4 (id=2575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, {0x1, @link_local}, 0x4a, {0x2, 0x4e23, @private=0xa010102}, 'veth0_to_bond\x00'}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x50, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x3c, 0x1, [@m_mirred={0x38, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x9, 0x6, "040000004c"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x2b1e}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000440)=0xfffffffe, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x20008100, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 870.029035ms ago: executing program 0 (id=2576): socket(0x1a, 0x80000, 0x40000006) (async) r0 = socket(0x1a, 0x80000, 0x40000006) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8fd8e52b0d6bc589914a7eacafaa3850c7f127f21db462f1235b4eafc33d14b4cd771249c072dcf17da15e0683a1be92760762262802af03ca7e9b9d884c00f3c3cb8600a0ea8b70871338e6965cb70cfd63eb8702142d8a2b8c4fa519e969106bce2c78747ab02eda95d5fbd41a4283e3920fa7313be89d5ff400253bd5e00652ce8f6bcc98af18fefd458d3512f2d43ba6d266812b782596f74ae4fef519a69ed814ab4b3e5bee4308d01d208c5fbd76691e3d2e544eabcfbe56685a260d1cdfd7d58d412c22185f1ebf9197e25e0408700030cb34719e4421f6f2fd787b5cbf92222e5282fe768b5982409db0", @ANYRES32=r0, @ANYRES64=r1, @ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8fd8e52b0d6bc589914a7eacafaa3850c7f127f21db462f1235b4eafc33d14b4cd771249c072dcf17da15e0683a1be92760762262802af03ca7e9b9d884c00f3c3cb8600a0ea8b70871338e6965cb70cfd63eb8702142d8a2b8c4fa519e969106bce2c78747ab02eda95d5fbd41a4283e3920fa7313be89d5ff400253bd5e00652ce8f6bcc98af18fefd458d3512f2d43ba6d266812b782596f74ae4fef519a69ed814ab4b3e5bee4308d01d208c5fbd76691e3d2e544eabcfbe56685a260d1cdfd7d58d412c22185f1ebf9197e25e0408700030cb34719e4421f6f2fd787b5cbf92222e5282fe768b5982409db0", @ANYRES32=r0, @ANYRES64=r1, @ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) (async) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r4]) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000847b256f3090e1e49fdb4684a656b000007110b1000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x14, 0x29, 0x107, 0x0, 0x0, {0x3, 0x7c}}, 0x14}}, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@default, @default}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61154400000000006113100000000000bfa000000000000007000000ee00160e5e0301000000000014050000000000006916320000000000bf07000000000000360507000fff0720670600001f000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)={0x1c, 0x27, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0) connect$caif(0xffffffffffffffff, &(0x7f0000000080)=@rfm={0x25, 0x6c, "d97dd621aa5b38f974fbb6f8f80a1266"}, 0x18) (async) connect$caif(0xffffffffffffffff, &(0x7f0000000080)=@rfm={0x25, 0x6c, "d97dd621aa5b38f974fbb6f8f80a1266"}, 0x18) r9 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x100000000000001, 0x12) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f00000002c0)) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000300)=0x4d07, 0x4) 797.488563ms ago: executing program 1 (id=2577): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x3c, &(0x7f0000000100), 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}}, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r7, &(0x7f0000001480)=0x80000000003, 0x12) close(r4) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="416a2f8ecf84a807692e924f"], 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x40004) 796.471807ms ago: executing program 2 (id=2578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)="6dd3403ec9c826f56189fb0c6a1002117696cfd7084e1678380770558aba4b3f5b88118f709b50bfad31a66f0aff8883d12d40625164b7d326fcc6f193d128cd6c3ecc"}, {&(0x7f0000000140)="5a29ab02dc835f848614f44e33664ff94a326ed7ac6bd1ae2838ade4379fefd9aef255af0d0a504d1ac58232f6470aabfc71057ea359d3e1ea3ca2da4ada7d583087cf176ae639ed82863cd18d3963908660b131208a0f099e2154f7e0ec4ea06cacf6591008c3bf56a0b1d5dce69d822e4250260bd9d96232ba0b22073b7f178e29bea4f9dbee7feb36c1c746f336c4b76de70bea5963764a7cd10dec4823bd00d9602bcf822fa7fc56a9bfd22b9a44f79f15f1b0db5e593dae3a08b1de382346367109fe9a2a79885d5cf9319d7a736cc9a1c8c3182169"}], 0x127d) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465d18c00080002849afa728d653d8f6cf118a9df0477bd338fb6bc9ecb7cee4a1f0086e9c572"], 0xd0}}, 0x0) 739.522004ms ago: executing program 3 (id=2579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket(0x1d, 0x2, 0x6) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b80000796cb2bbf498af0842ef9a"], 0x54}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x24, 0x0, &(0x7f0000000180)) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0x10, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x8084) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r12, 0x107, 0x17, 0x0, &(0x7f0000000100)) (async) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r14, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYRES16, @ANYRES64, @ANYRESHEX=r1, @ANYBLOB="d88142d805baa994b9a0540d280d2bc99a4c39807a97f60445f95724dc0b104a68d8dd5a1532cf0ddb8b5a64cbe64e0cb48a06fd1401c5f00c7f3323f7f3264a1ae9324d457f08973ebedabc3f7817ae5d489e5eb035ec9ef76c51e10cdb48fe38fe3401398acecdc0a5903454790380a4ae770cbbeea63ed4c0265efcee74d77e", @ANYRES8=r13, @ANYRESOCT=r2], 0x3) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r13, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 721.010867ms ago: executing program 2 (id=2580): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80181, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) close(0x4) 653.472976ms ago: executing program 4 (id=2581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0xa, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x10800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000030007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x401}, 0x14}}, 0x0) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r7, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 652.205619ms ago: executing program 0 (id=2582): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0201010000000000080000000100000080000000d7338c926578c3dda1da5fab4d24f2dee57b7fad0f0b83cf8d272fea838cd98a059b94", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000500000000000000000000000000000000000000000000000000676a137eaec32c8eb7ec7e2d00a3fe851764a72f7c39b36d202f4538c0cff05c6360f7b80acbac4c245c53ceba062a7f1dad1fe759cdee7cc4cced78"], 0x48) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) 556.997791ms ago: executing program 1 (id=2583): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xa2ec8b013dc0bd73, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x5}]}, 0x14}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x0, 0x1}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x12e8, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x324, 0x3, 0x0, 0x1, [{0x320, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcc, 0x1, "b417127eac69b0b0182a9fd0596be6cb0ef1824ca020c7d4c8cbfba419935e84bf5af9a13e2aea18a582c453e46f52c0388b9f86ecb8852d6e93efff774ca51c941495c6bdabcf4f22ceba4f42668ddd19d7fe8e1999a0488ed9fb449f1cf1af87d08dd4bb270e9851a37464a8d1ac0af7b96509d8129df57cc84ded025ce6b7a43f56fdb976da13a6d03283b9c0a33d9d88203f5b9da9e26da85b5c6e03a1fdc653f2e89a62f0c1601133e3b36eebcf87130b16484b22c703fd6dd0fdee9d351cf863c4e263c99c"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xe8, 0x1, "a128dd87f8927f7d4bcfb11fd851c35564c075bae14025efd6f8ffd7d17021bf9cc5d35db37751656a65b0837c6b5e71cdd3ed6e2e6d9a030164a8d326282c8bc8c798e775f223e68e67516ab14012762b1a39f10afdf819b40cefecefde8e6d3f7ea02af0500ebd1c01df8b54d76b7a4923085e9cdaac9c7a791507bc13ef098b35a965cc0c77285f4f02b45452cbdbb9aad8cd157b7737a4d29afe96458d8d3d6cf5aa13d64b3ebac6fe2c812b3baf36c4da8da3089c6046ad73aa61ef7800d5e6a43367bb584656053eed142aefc87e0dea1de2418356bed72990450bb0093275917b"}]}, @NFTA_SET_ELEM_KEY={0x160, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "2bbedddfa053b54de4507627865c79b15c1ff4e184118a0cfe6ea71c52df555fcff07a5355b1ea16789cca4b318cf88110f30f3bd74c8b6505d60c7b0e59cc0193ee66995e4876d7d15c0096ba0a98abc7d313e0b673ae5e"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x93, 0x1, "e7ccb827859a2dd7292fad0c8737b721b22868bbf14921920714adebc907bef7b636aca435c601220a9bade3e257c413b909611e5578f6de852272af86b160d2e06c31400ee21ff78a668cc7724ce9353c0ab010558af98b254d6b53d5eee2f48b0b91fac19947b91e9ff22728117d7525a9295d330c23a9b49ac27edc67a6a7357eb267e8e66dac950f8de0b10b25"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xf90, 0x3, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3ff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x19}]}, {0x69c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "abc4e72f6908b0f4bac8fe4eef50f47ab52eee186a685384030dfc3799b296bdbac03f8c7b785a4dfae6051efd48013b3479deef1c0a41703b852535e2fb3b16941a6c0bc536b007572fbdf918ae52068e58febc9b67558c630f95a4be0f3fc19ffa7380c3f7a212947ea38a67c4d47d16af24f5614ce05c235e9e48f40b6d74fc3e04ee5ed00e0fc1c7cb91a2a5709236d5745d7a19eba3a70b1de471d8708be77687273a04d1633cddfb4a5a404c5db7bb6eaacaf2b59067df21b56fee5f3890631273f5cf4372a3212dc9925a2dfc3d0a90299a34a27bb7422cc3851c27585607ac0435"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "2c6ade37c1eb4581f794e730646921eb16e0bd7b303b22f0d1f5a0052fdb4e93a7ac0a623f07de3b9ab97505be04615e6451db9ebbdf2dd61d5587c8e33b6476196aed69ebd6232a65b3da003710f827346757dcfecd88e76d3be65bae5ba840e16e9d417845dc696a23d87d8fbeba5f3eea12bd874cf765c6d539"}]}, @NFTA_SET_ELEM_EXPR={0x320, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x30c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x7c, 0x1, "4203c7dd4661ee3dfa69a89789418d7ee4aaa7218c67ecc2228f7276c730e019a4f017e4164d36e1e585a88d26d79b758afb64ce3844d45e67dadeb037083817f69bc9b3a140080cd6546a5bf5a7bfc02129a5d6aa88c0726b7feb50c75c087685e24aec7176cd1affae85e8788bffbfb5f077ecbea1b4ac"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DATA={0x128, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "3eb02ed5fc198ff8a8f5accebfa316a7f7fa147057cce06a1d2dfa96144e8cbd5f8803037f0679a1d22f1ec16e1857f7b572fcf1b119e9a4ba3e2734088aca18005c16fbfe312638273ef060978f5f6c718deb8c9fb93acf4c43177150508056993d7c34bb2328b8ebdb5978a35e91b833af33030755a0ee1546e460a3b7c6e5009f78f189db1a4efb98ae2fa992aa752bd43d2a58ec66303c9459b16e953a81687311a1e49707b313a12c3c2370e19faef63c128fb0026e6e6d1e417ad8498ebb33daa0d6e0abbbcc16922ee10208e6508d8cdcce0653301ce17531232c681e4bf3"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DATA={0x14c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x73, 0x1, "5a3d0a9a035d4465f270ca4db2f48e65083ec751831cf7c728fb2a824e68e33f9567ecb310cf874fe5acf50c07ed9babf4d574a77ed0ae7eb2681b22b937bc50388c6b8fee62bea085985a6668d4df89ec1854b8ef1b63a2667a027cc95847b015f153943b065d3b3fa5b8a85c5567"}, @NFTA_DATA_VALUE={0x88, 0x1, "6647849a5a11fcd330788b9d6e2b2e1d7dd301449f8eca846c4c97ddb85f158aaa462dfdba48ba34bc39dba21f1fea0738ee7e8ecd5c7cd4b8a57c2d2e73546c2c55a5f31a6ad1d0dda860e4a918f190ec5217c56306403550ddc34d179d108cd57107aa13f8503ec83612356af4deefa6a7dcda005b703c7db2cd0228480bcd33826acf"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}, @NFTA_SET_ELEM_USERDATA={0x6e, 0x6, 0x1, 0x0, "03b48606a74c61e5c831620a90a974c36cb808e2d2beb26801f3508e327507e5596b456b1a97dcb38509f2b2b109b1452d6a3db758d0e85ca40809ce69a7cbe08348960fdf973cc89aa7c48c1ab42bc1a7c57b5c59ee374b505fcede4eb3151234d93850572b3f4786ce"}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, {0x3a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x21c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "d0251a8400594b703bddd8b08e53b29930fc1f6f5fbf8e4051fc89698306a8916e"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "65f6a9474733a7fc2aa16334d27baa6a6f60eac7ceb39f6b0021c609e30c7372bdb7cef194f494878f048687ab097dd8987b2e5adb9287cb20285a4f7e537e0bae1b93696784dad715524948ae588c6ca688ac3dbc955251805bf9f7f22ab5eea980890bd85d09028e27a8ed10957e2dbc8225ed9c29751453d9f91122d931ca68b0c183ffa9a249f78feba0d1ec22a9edfdd64be295"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0x188, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x9b, 0x1, "2724b00b25ebb78f705a043e44b469e51da9ba599eccd3b2f670759677478854d7c6f230743db2a185b64ab4f1e01b2786688f7c90c72041df59db904c8b550ff57a5c409112da263e4c5682c06fedf79afa429b41d0b3a678bae3d378e0dfc5fe1d6fc2a7d19f7b78b75150a1e788efddc8e452682155d7d37ca800bfd10d698b523fce33a083606cfe5b978f83d5ab7c4b6f356c1add"}, @NFTA_DATA_VALUE={0x75, 0x1, "5f3221b128d8162f2ec2c15003cba745a46f5be6dff2adba96f8c0538444188e6cbef94b35ed7d37f619f1311add1759ba96268f3238f66f6dd7ab3e6e57f5206580fa63d39467b4e3b5afd06cb8f4046f95ad99f9c50c624d65ae90a84cbd67306d135b7aa153ec58aa5799a06aebd599"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x254, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x204, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x24, 0x1, "2ae9ba42b3313b1739e417c39cefff940694dbbd35a1f249b0fd26bfd55c4317"}, @NFTA_DATA_VALUE={0xef, 0x1, "862887b743049878b99defa6017c00a3ad74f67dd387fce176a1dbc44b72e5b35a681d754c806e8b72adbe79b505182393b507e684b8733a4f48e032021ce358633b066c13758d28d917a0d2aec25ae4f279eb1deac23e24a7eb72ebbf3ccc4d950134c1a12fbbc5996c635f835ca55384b1c8681867685a9e44fb466da3461cf5c9f07df6006d285d2676478f73643dd1f60c421610e2e5ce7188a46da716180e8a6bad90468126fe08315d8a8b0d5ff471a38afcae791fd5d9788645aa55859e5a3c588460825000069936ff0ecf79cb2d93f4ba2ab40232643fb153ece8c95cef757935503b9f182aaf"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x11, 0x1, "116428df76224088a21516b3b6"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x98, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x60cddbee431014b7}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffff27d}]}}}, @NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x93e7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6000000}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_USERDATA={0x82, 0x6, 0x1, 0x0, "4b7e49d78c67a73eb14c7300d3dbfb626825ef48455d174adb2e8bc1c5ac8737b3e643ffab1e925d17c10e77334ea19c205c0567715ab75acb8faceb0b7d8ce986799c6b527119cfaf769cc65f993e5f93d1a29675938d21c3c5e6bfd01bfa050a8b12b33b8d4de8808d0bf7ac579e15e9ef00669a0c3e587d5e9f8953a3"}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1310}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xa2ec8b013dc0bd73, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x5}]}, 0x14}], 0x1}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r2) (async) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x0, 0x1}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x12e8, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x324, 0x3, 0x0, 0x1, [{0x320, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcc, 0x1, "b417127eac69b0b0182a9fd0596be6cb0ef1824ca020c7d4c8cbfba419935e84bf5af9a13e2aea18a582c453e46f52c0388b9f86ecb8852d6e93efff774ca51c941495c6bdabcf4f22ceba4f42668ddd19d7fe8e1999a0488ed9fb449f1cf1af87d08dd4bb270e9851a37464a8d1ac0af7b96509d8129df57cc84ded025ce6b7a43f56fdb976da13a6d03283b9c0a33d9d88203f5b9da9e26da85b5c6e03a1fdc653f2e89a62f0c1601133e3b36eebcf87130b16484b22c703fd6dd0fdee9d351cf863c4e263c99c"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xe8, 0x1, "a128dd87f8927f7d4bcfb11fd851c35564c075bae14025efd6f8ffd7d17021bf9cc5d35db37751656a65b0837c6b5e71cdd3ed6e2e6d9a030164a8d326282c8bc8c798e775f223e68e67516ab14012762b1a39f10afdf819b40cefecefde8e6d3f7ea02af0500ebd1c01df8b54d76b7a4923085e9cdaac9c7a791507bc13ef098b35a965cc0c77285f4f02b45452cbdbb9aad8cd157b7737a4d29afe96458d8d3d6cf5aa13d64b3ebac6fe2c812b3baf36c4da8da3089c6046ad73aa61ef7800d5e6a43367bb584656053eed142aefc87e0dea1de2418356bed72990450bb0093275917b"}]}, @NFTA_SET_ELEM_KEY={0x160, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "2bbedddfa053b54de4507627865c79b15c1ff4e184118a0cfe6ea71c52df555fcff07a5355b1ea16789cca4b318cf88110f30f3bd74c8b6505d60c7b0e59cc0193ee66995e4876d7d15c0096ba0a98abc7d313e0b673ae5e"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x93, 0x1, "e7ccb827859a2dd7292fad0c8737b721b22868bbf14921920714adebc907bef7b636aca435c601220a9bade3e257c413b909611e5578f6de852272af86b160d2e06c31400ee21ff78a668cc7724ce9353c0ab010558af98b254d6b53d5eee2f48b0b91fac19947b91e9ff22728117d7525a9295d330c23a9b49ac27edc67a6a7357eb267e8e66dac950f8de0b10b25"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xf90, 0x3, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3ff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x19}]}, {0x69c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "abc4e72f6908b0f4bac8fe4eef50f47ab52eee186a685384030dfc3799b296bdbac03f8c7b785a4dfae6051efd48013b3479deef1c0a41703b852535e2fb3b16941a6c0bc536b007572fbdf918ae52068e58febc9b67558c630f95a4be0f3fc19ffa7380c3f7a212947ea38a67c4d47d16af24f5614ce05c235e9e48f40b6d74fc3e04ee5ed00e0fc1c7cb91a2a5709236d5745d7a19eba3a70b1de471d8708be77687273a04d1633cddfb4a5a404c5db7bb6eaacaf2b59067df21b56fee5f3890631273f5cf4372a3212dc9925a2dfc3d0a90299a34a27bb7422cc3851c27585607ac0435"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "2c6ade37c1eb4581f794e730646921eb16e0bd7b303b22f0d1f5a0052fdb4e93a7ac0a623f07de3b9ab97505be04615e6451db9ebbdf2dd61d5587c8e33b6476196aed69ebd6232a65b3da003710f827346757dcfecd88e76d3be65bae5ba840e16e9d417845dc696a23d87d8fbeba5f3eea12bd874cf765c6d539"}]}, @NFTA_SET_ELEM_EXPR={0x320, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x30c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x7c, 0x1, "4203c7dd4661ee3dfa69a89789418d7ee4aaa7218c67ecc2228f7276c730e019a4f017e4164d36e1e585a88d26d79b758afb64ce3844d45e67dadeb037083817f69bc9b3a140080cd6546a5bf5a7bfc02129a5d6aa88c0726b7feb50c75c087685e24aec7176cd1affae85e8788bffbfb5f077ecbea1b4ac"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DATA={0x128, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "3eb02ed5fc198ff8a8f5accebfa316a7f7fa147057cce06a1d2dfa96144e8cbd5f8803037f0679a1d22f1ec16e1857f7b572fcf1b119e9a4ba3e2734088aca18005c16fbfe312638273ef060978f5f6c718deb8c9fb93acf4c43177150508056993d7c34bb2328b8ebdb5978a35e91b833af33030755a0ee1546e460a3b7c6e5009f78f189db1a4efb98ae2fa992aa752bd43d2a58ec66303c9459b16e953a81687311a1e49707b313a12c3c2370e19faef63c128fb0026e6e6d1e417ad8498ebb33daa0d6e0abbbcc16922ee10208e6508d8cdcce0653301ce17531232c681e4bf3"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DATA={0x14c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x73, 0x1, "5a3d0a9a035d4465f270ca4db2f48e65083ec751831cf7c728fb2a824e68e33f9567ecb310cf874fe5acf50c07ed9babf4d574a77ed0ae7eb2681b22b937bc50388c6b8fee62bea085985a6668d4df89ec1854b8ef1b63a2667a027cc95847b015f153943b065d3b3fa5b8a85c5567"}, @NFTA_DATA_VALUE={0x88, 0x1, "6647849a5a11fcd330788b9d6e2b2e1d7dd301449f8eca846c4c97ddb85f158aaa462dfdba48ba34bc39dba21f1fea0738ee7e8ecd5c7cd4b8a57c2d2e73546c2c55a5f31a6ad1d0dda860e4a918f190ec5217c56306403550ddc34d179d108cd57107aa13f8503ec83612356af4deefa6a7dcda005b703c7db2cd0228480bcd33826acf"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}, @NFTA_SET_ELEM_USERDATA={0x6e, 0x6, 0x1, 0x0, "03b48606a74c61e5c831620a90a974c36cb808e2d2beb26801f3508e327507e5596b456b1a97dcb38509f2b2b109b1452d6a3db758d0e85ca40809ce69a7cbe08348960fdf973cc89aa7c48c1ab42bc1a7c57b5c59ee374b505fcede4eb3151234d93850572b3f4786ce"}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, {0x3a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x21c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "d0251a8400594b703bddd8b08e53b29930fc1f6f5fbf8e4051fc89698306a8916e"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "65f6a9474733a7fc2aa16334d27baa6a6f60eac7ceb39f6b0021c609e30c7372bdb7cef194f494878f048687ab097dd8987b2e5adb9287cb20285a4f7e537e0bae1b93696784dad715524948ae588c6ca688ac3dbc955251805bf9f7f22ab5eea980890bd85d09028e27a8ed10957e2dbc8225ed9c29751453d9f91122d931ca68b0c183ffa9a249f78feba0d1ec22a9edfdd64be295"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0x188, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x9b, 0x1, "2724b00b25ebb78f705a043e44b469e51da9ba599eccd3b2f670759677478854d7c6f230743db2a185b64ab4f1e01b2786688f7c90c72041df59db904c8b550ff57a5c409112da263e4c5682c06fedf79afa429b41d0b3a678bae3d378e0dfc5fe1d6fc2a7d19f7b78b75150a1e788efddc8e452682155d7d37ca800bfd10d698b523fce33a083606cfe5b978f83d5ab7c4b6f356c1add"}, @NFTA_DATA_VALUE={0x75, 0x1, "5f3221b128d8162f2ec2c15003cba745a46f5be6dff2adba96f8c0538444188e6cbef94b35ed7d37f619f1311add1759ba96268f3238f66f6dd7ab3e6e57f5206580fa63d39467b4e3b5afd06cb8f4046f95ad99f9c50c624d65ae90a84cbd67306d135b7aa153ec58aa5799a06aebd599"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x254, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x204, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x24, 0x1, "2ae9ba42b3313b1739e417c39cefff940694dbbd35a1f249b0fd26bfd55c4317"}, @NFTA_DATA_VALUE={0xef, 0x1, "862887b743049878b99defa6017c00a3ad74f67dd387fce176a1dbc44b72e5b35a681d754c806e8b72adbe79b505182393b507e684b8733a4f48e032021ce358633b066c13758d28d917a0d2aec25ae4f279eb1deac23e24a7eb72ebbf3ccc4d950134c1a12fbbc5996c635f835ca55384b1c8681867685a9e44fb466da3461cf5c9f07df6006d285d2676478f73643dd1f60c421610e2e5ce7188a46da716180e8a6bad90468126fe08315d8a8b0d5ff471a38afcae791fd5d9788645aa55859e5a3c588460825000069936ff0ecf79cb2d93f4ba2ab40232643fb153ece8c95cef757935503b9f182aaf"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x11, 0x1, "116428df76224088a21516b3b6"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x98, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x60cddbee431014b7}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffff27d}]}}}, @NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x93e7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6000000}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_USERDATA={0x82, 0x6, 0x1, 0x0, "4b7e49d78c67a73eb14c7300d3dbfb626825ef48455d174adb2e8bc1c5ac8737b3e643ffab1e925d17c10e77334ea19c205c0567715ab75acb8faceb0b7d8ce986799c6b527119cfaf769cc65f993e5f93d1a29675938d21c3c5e6bfd01bfa050a8b12b33b8d4de8808d0bf7ac579e15e9ef00669a0c3e587d5e9f8953a3"}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1310}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) (async) 553.030486ms ago: executing program 2 (id=2584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffff8, 0x0, r0}, 0x48) r2 = socket$inet6(0xa, 0xa, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) listen(r3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x700, 0x8000, 0x3, 0x3, {{0x33, 0x4, 0x1, 0x1c, 0xcc, 0x65, 0x0, 0x5, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x5d, 0x3, [{0x2, 0xf, "9085417463a980e2538442f395"}, {0x0, 0x9, "42ee1b2af91aba"}, {0x5, 0xa, "302061c220300686"}, {0x7, 0x5, "fe6bcf"}, {0x2, 0xd, "c262b70de07011b17961d0"}, {0x7, 0xd, "d2d7041f0af38a06575a2a"}, {0x2, 0xf, "2732a4b2c7b38a8e6befd195bc"}, {0x2, 0x7, "c1649af6a5"}]}, @end, @noop, @ssrr={0x89, 0xb, 0x71, [@loopback, @remote]}, @rr={0x7, 0x1b, 0x38, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x10}, @local]}, @generic={0x7, 0x11, "4b2e7c0244a020bd94a534a200ba93"}, @generic={0x89, 0x10, "4f14ad2480320839eafddf83a292"}, @generic={0x44, 0x2}, @rr={0x7, 0xb, 0x33, [@private=0xa010101, @loopback]}]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0x1f, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0xf22}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x98c4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x26}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0x5, 0x97, &(0x7f0000000740)=""/151, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000840)=[r0, r1, r0, r1, r0, r1, r0, r1, r1], &(0x7f0000000880)=[{0x2, 0x2, 0x7}, {0x3, 0x4, 0x3, 0x8}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xd, 0x10, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x5, 0xb, 0xf, 0x8, 0xfffffffffffffff8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000300)='GPL\x00', 0x7f, 0x2c, &(0x7f0000000340)=""/44, 0x40f00, 0x4, '\x00', r4, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xe, 0x2, 0xff7}, 0x10, 0x0, r5, 0x6, 0x0, &(0x7f0000000980)=[{0x0, 0x2, 0x1, 0x5}, {0x1, 0x61, 0xa, 0x8}, {0x0, 0x5, 0x0, 0x1}, {0x1, 0x4, 0xc, 0x4}, {0x1, 0x1, 0x3, 0x6}, {0x5, 0x1, 0x3, 0x3}], 0x10, 0x8}, 0x94) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xffff, @remote, 'geneve0\x00'}}, 0x1e) close(r6) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 477.42999ms ago: executing program 4 (id=2585): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) close(r3) socket$nl_generic(0x10, 0x3, 0x10) listen(r2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x34}}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0xb987f000) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x6, 0x17, 0xfffffffffffffffd, &(0x7f0000000340)=0x33) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={0xffffffffffffffff, 0x0, 0x8a, 0x1000, &(0x7f0000000840)="7d4001882a80aeb64910ab4f697f4480f40d5691c4bc29d9d249071dab761815ee133b0072ec677640197fa13d777c484e7d97d8e938f54c1c037483868993fa1c28784c696817c7f6ec7a456c24e9719afdbc961fff46324499db05dfa4740e23d0f2cba82a4d2036fe81dd61d10506dd1db36491c9e6b3a2a81cb527a9c0caabb0990104a2aabd5019", &(0x7f0000000900)=""/4096, 0x1000, 0x0, 0x0, 0x1e, &(0x7f0000001900), &(0x7f00000019c0)="e9187299bbf33477aef5bdea217526bc99ee38e15c912998087f487e66a7", 0x6, 0x0, 0x8}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc02}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 462.627177ms ago: executing program 0 (id=2586): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x20300}, 0x1c) ioctl$SIOCAX25ADDUID(r2, 0x890c, 0x0) 348.004716ms ago: executing program 1 (id=2587): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) connect$pppoe(r0, &(0x7f0000000540)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1_to_team\x00'}}, 0x1e) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000002c0)={r1, 0x7}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x3}}}, 0x24}}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wrr\x00', 0x10, 0x80005, 0x6f}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2800, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000300)=0x80000001, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 269.392053ms ago: executing program 3 (id=2588): r0 = socket$inet(0x2, 0x3, 0x5) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfffff4f7, 0x0, 0x0, 0x6, 0x8, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) ioctl(r2, 0x8b32, &(0x7f0000000040)) 252.319072ms ago: executing program 2 (id=2589): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8", 0x20}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x2, @rand_addr=0x64010101, 0x4e21, 0x0, 'lc\x00', 0x14, 0x0, 0x4a}, 0x2c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020505090e000000000000000000000005000600000000000a000000001c0000fc000000000000000000000000000000000000000000000002000100000004d4130002040000000005000500000000000a004e2100000000ff0100000000000000000000000000010000000000000000"], 0x70}}, 0x40) 153.032407ms ago: executing program 2 (id=2590): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x8000000b, 0x8}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', r5, r4}, 0x50) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040), 0x10) listen(r8, 0x0) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) sendmmsg$alg(r9, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\bv', 0x2}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) close(0x4) r10 = accept4$unix(r8, 0x0, 0x0, 0x0) recvfrom$unix(r10, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r7, @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x27, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000140003800800024000000009080001400001"], 0xc8}}, 0x0) 57.188367ms ago: executing program 0 (id=2591): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffdba, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x24000050) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000780)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) bind$802154_dgram(r3, &(0x7f0000000780)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2}, 0x810) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@bcast, @default, 0x1, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000180)={@empty, @empty, 0x3, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000180)={@empty, @empty, 0x3, 0x8}}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}}, 0x0) bind$802154_dgram(r0, &(0x7f00000004c0)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xd) (async) write$cgroup_devices(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xd) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r10, 0x1, 0x28, 0x0, &(0x7f0000000580)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 0s ago: executing program 0 (id=2592): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x41100, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2000000}, 0x10}, 0x94) kernel console output (not intermixed with test programs): face lo may have been left with an inconsistent configuration, please check. [ 107.858673][ T3584] tipc: Subscription rejected, illegal request [ 108.148035][ T7536] netlink: 'syz.0.390': attribute type 5 has an invalid length. [ 108.172283][ T30] audit: type=1107 audit(1759140057.308:2): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 108.529392][ T7559] netlink: 'syz.3.399': attribute type 8 has an invalid length. [ 108.866071][ T7568] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 109.120948][ T7592] netlink: 'syz.1.408': attribute type 1 has an invalid length. [ 109.160683][ T7592] bond1: entered promiscuous mode [ 109.166734][ T7592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.220909][ T7592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.229963][ T7592] bond1: (slave bond2): making interface the new active one [ 109.238166][ T7592] bond2: entered promiscuous mode [ 109.247544][ T7592] bond1: (slave bond2): Enslaving as an active interface with an up link [ 109.256147][ T7589] : renamed from ipvlan0 [ 109.734178][ T7593] netlink: 'syz.1.408': attribute type 12 has an invalid length. [ 109.901834][ T7626] __nla_validate_parse: 7 callbacks suppressed [ 109.901858][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 110.068909][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.417'. [ 110.120030][ T7643] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 110.176064][ T7643] team0: Device hsr_slave_0 failed to register rx_handler [ 110.188826][ T7641] syzkaller1: entered promiscuous mode [ 110.212391][ T7641] syzkaller1: entered allmulticast mode [ 110.280022][ T7651] sctp: [Deprecated]: syz.1.419 (pid 7651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.280022][ T7651] Use struct sctp_sack_info instead [ 110.426235][ T7660] netlink: 'syz.3.421': attribute type 15 has an invalid length. [ 110.540093][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 110.563515][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 110.615676][ T7664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.422'. [ 110.653120][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 110.692198][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 111.073836][ T7699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.431'. [ 111.278725][ T7712] netlink: 144 bytes leftover after parsing attributes in process `syz.2.435'. [ 111.324696][ T7712] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 111.358649][ T7712] netlink: 'syz.2.435': attribute type 2 has an invalid length. [ 111.375714][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'. [ 111.393422][ T7712] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 111.423265][ T7712] netlink: 'syz.2.435': attribute type 2 has an invalid length. [ 111.920958][ T7746] veth0_macvtap: left promiscuous mode [ 112.214261][ T7756] tipc: Started in network mode [ 112.243779][ T7756] tipc: Node identity aea9e670562e, cluster identity 4711 [ 112.263604][ T7756] tipc: Enabled bearer , priority 0 [ 112.298453][ T7770] syzkaller0: entered promiscuous mode [ 112.347319][ T7770] syzkaller0: entered allmulticast mode [ 112.571797][ T7770] tipc: Resetting bearer [ 113.013271][ T7755] tipc: Resetting bearer [ 113.112830][ T7755] tipc: Disabling bearer [ 114.061532][ T7849] bond0: entered allmulticast mode [ 114.067624][ T7849] bond_slave_0: entered allmulticast mode [ 114.075572][ T7849] bond_slave_1: entered allmulticast mode [ 114.517449][ T7880] tunl0: entered promiscuous mode [ 114.543772][ T7877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.544307][ T7880] validate_nla: 7 callbacks suppressed [ 114.544320][ T7880] netlink: 'syz.3.469': attribute type 3 has an invalid length. [ 114.603139][ T7887] sctp: [Deprecated]: syz.4.471 (pid 7887) Use of int in max_burst socket option. [ 114.603139][ T7887] Use struct sctp_assoc_value instead [ 114.905127][ T7905] __nla_validate_parse: 18 callbacks suppressed [ 114.905145][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.475'. [ 115.033066][ T7911] netlink: 56 bytes leftover after parsing attributes in process `syz.0.476'. [ 115.298459][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 115.328341][ T7923] nbd: must specify at least one socket [ 115.411304][ T7934] sit0: entered promiscuous mode [ 115.456986][ T7934] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 115.520659][ T7934] netlink: 1 bytes leftover after parsing attributes in process `syz.3.482'. [ 115.609559][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.484'. [ 115.692942][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 115.788539][ T7950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.487'. [ 116.282234][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.493'. [ 116.995369][ T8010] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20002 [ 117.043326][ T8010] netlink: 44 bytes leftover after parsing attributes in process `syz.0.497'. [ 117.216434][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 117.327562][ T8016] netlink: 'syz.1.499': attribute type 7 has an invalid length. [ 117.355213][ T8019] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 117.391202][ T8016] : entered promiscuous mode [ 117.798701][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.829499][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.131314][ T5930] IPVS: starting estimator thread 0... [ 118.143583][ T8055] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 118.225538][ T8063] IPVS: using max 28 ests per chain, 67200 per kthread [ 118.564869][ T8082] netlink: 'syz.3.514': attribute type 3 has an invalid length. [ 118.617422][ T8082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.312286][ T8118] netlink: 'syz.1.525': attribute type 23 has an invalid length. [ 120.156279][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.183667][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.198852][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.281969][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.302183][ T8173] delete_channel: no stack [ 120.318506][ T8171] __nla_validate_parse: 10 callbacks suppressed [ 120.318521][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 120.385061][ T8171] bridge_slave_1: left allmulticast mode [ 120.390723][ T8171] bridge_slave_1: left promiscuous mode [ 120.450831][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 120.457923][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.466261][ T8181] netlink: 'syz.0.539': attribute type 1 has an invalid length. [ 120.495586][ T8171] bridge_slave_0: left allmulticast mode [ 120.503654][ T8189] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 120.513324][ T8181] nbd: error processing sock list [ 120.541857][ T8171] bridge_slave_0: left promiscuous mode [ 120.551590][ T8181] block nbd1: shutting down sockets [ 120.582653][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.614443][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.659963][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.681146][ T8171] bond0: (slave bridge0): Releasing backup interface [ 120.706256][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.762743][ T8203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'. [ 120.779089][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.799391][ T8207] netlink: 132 bytes leftover after parsing attributes in process `syz.4.546'. [ 120.832020][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.889376][ T8193] bond2 (unregistering): Released all slaves [ 120.890874][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.937454][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.949978][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.961404][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.963700][ T8198] ip6tnl1: entered promiscuous mode [ 121.014777][ T8198] ip6tnl1: entered allmulticast mode [ 121.021614][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.039836][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.067011][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.084073][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.102957][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.114469][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.142498][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.159802][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.179846][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.203614][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.232379][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.249170][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.277460][ T8220] syzkaller1: entered promiscuous mode [ 121.282996][ T8220] syzkaller1: entered allmulticast mode [ 121.290351][ T8222] netlink: 'syz.3.550': attribute type 21 has an invalid length. [ 121.291504][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.319708][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.339023][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.381076][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.406798][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.431148][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.471064][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.892693][ T8239] syzkaller0: entered promiscuous mode [ 121.914892][ T8239] syzkaller0: entered allmulticast mode [ 123.566436][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 124.062236][ T8252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.557'. [ 124.136498][ T8292] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 124.321545][ T8304] netlink: 'syz.3.565': attribute type 8 has an invalid length. [ 124.609132][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 124.668032][ T8323] openvswitch: netlink: Tunnel attr 4 has unexpected len 16 expected 1 [ 124.685490][ T8326] netlink: 'syz.2.573': attribute type 10 has an invalid length. [ 124.781911][ T8326] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 124.886317][ T8333] sctp: [Deprecated]: syz.4.575 (pid 8333) Use of int in maxseg socket option. [ 124.886317][ T8333] Use struct sctp_assoc_value instead [ 125.016267][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'. [ 125.028280][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'. [ 125.030912][ T8338] netlink: 'syz.2.578': attribute type 8 has an invalid length. [ 125.038448][ T55] block nbd0: Possible stuck request ffff888025040000: control (read@0,1024B). Runtime 30 seconds [ 125.057614][ T55] block nbd0: Possible stuck request ffff8880250401c0: control (read@1024,1024B). Runtime 30 seconds [ 125.069479][ T55] block nbd0: Possible stuck request ffff888025040380: control (read@2048,1024B). Runtime 30 seconds [ 125.080520][ T55] block nbd0: Possible stuck request ffff888025040540: control (read@3072,1024B). Runtime 30 seconds [ 125.347035][ T8345] netlink: 11 bytes leftover after parsing attributes in process `syz.1.580'. [ 125.373649][ T8345] netlink: 11 bytes leftover after parsing attributes in process `syz.1.580'. [ 125.454982][ T8347] netlink: 11 bytes leftover after parsing attributes in process `syz.1.580'. [ 125.552232][ T8347] netlink: 11 bytes leftover after parsing attributes in process `syz.1.580'. [ 125.708317][ T8376] netlink: 'syz.3.588': attribute type 26 has an invalid length. [ 125.860956][ T8385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 125.927046][ T8388] bond0: entered promiscuous mode [ 125.959894][ T8388] bond_slave_0: entered promiscuous mode [ 126.004073][ T8388] bond_slave_1: entered promiscuous mode [ 126.017463][ T9] IPVS: starting estimator thread 0... [ 126.033608][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'. [ 126.082536][ T8388] bridge_slave_1: entered promiscuous mode [ 126.143458][ T8397] IPVS: using max 29 ests per chain, 69600 per kthread [ 126.209546][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.591'. [ 126.323518][ T8411] netlink: 9 bytes leftover after parsing attributes in process `syz.3.594'. [ 126.644967][ T8428] netlink: 68 bytes leftover after parsing attributes in process `syz.4.599'. [ 126.808088][ T8443] lo: entered allmulticast mode [ 126.814721][ T8443] lo: left allmulticast mode [ 126.891155][ T8443] dvmrp1: entered allmulticast mode [ 127.068977][ T8456] netlink: 48 bytes leftover after parsing attributes in process `syz.0.604'. [ 127.346835][ T8467] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 127.534463][ T8469] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 127.602772][ T8469] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 127.659228][ T8469] bond2: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 127.944164][ T8489] netlink: 'syz.2.614': attribute type 11 has an invalid length. [ 128.178646][ T8494] netlink: 'syz.0.609': attribute type 4 has an invalid length. [ 129.494187][ T8550] netlink: 'syz.3.632': attribute type 23 has an invalid length. [ 129.763766][ T8564] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 129.792494][ T8564] 0ªî{X¹¦: entered allmulticast mode [ 129.806266][ T8564] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 129.831996][ T8556] netlink: 'syz.2.633': attribute type 19 has an invalid length. [ 130.080563][ T8579] dvmrp0: entered allmulticast mode [ 130.571431][ T8607] __nla_validate_parse: 8 callbacks suppressed [ 130.571449][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.647'. [ 130.598626][ T8609] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.658055][ T8607] netlink: 144 bytes leftover after parsing attributes in process `syz.4.647'. [ 130.853801][ T8630] ieee802154 phy0 wpan0: encryption failed: -90 [ 131.176457][ T8648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.653'. [ 131.271135][ T8652] tipc: Started in network mode [ 131.283706][ T8652] tipc: Node identity 3ad054bccd8b, cluster identity 4711 [ 131.312533][ T8652] tipc: Enabled bearer , priority 0 [ 131.358497][ T8654] syzkaller0: entered promiscuous mode [ 131.384716][ T8654] syzkaller0: entered allmulticast mode [ 131.412436][ T8652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.421891][ T8656] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 131.518561][ T8652] tipc: Resetting bearer [ 131.571816][ T8651] tipc: Resetting bearer [ 131.578814][ T8666] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 131.585678][ T8666] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 131.707876][ T8651] tipc: Disabling bearer [ 131.717302][ T8671] netlink: 100 bytes leftover after parsing attributes in process `syz.3.660'. [ 131.835507][ T8672] tipc: Started in network mode [ 131.855678][ T8672] tipc: Node identity 22a9e9125ae1, cluster identity 4711 [ 131.892608][ T8672] tipc: Enabled bearer , priority 0 [ 131.905987][ T8677] syzkaller0: entered promiscuous mode [ 131.911468][ T8677] syzkaller0: entered allmulticast mode [ 132.044279][ T8672] tipc: Resetting bearer [ 132.090012][ T8697] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 132.128510][ T8669] tipc: Resetting bearer [ 132.236803][ T8669] tipc: Disabling bearer [ 132.296222][ T8708] netlink: 'syz.2.668': attribute type 83 has an invalid length. [ 132.335879][ T8710] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.671'. [ 132.360277][ T8704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.374277][ T8711] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.671'. [ 132.641230][ T8730] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 132.721681][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.728971][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.219652][ T8761] vxlan1: entered promiscuous mode [ 133.253684][ T8761] vxlan1: entered allmulticast mode [ 134.238624][ T8812] netlink: 10 bytes leftover after parsing attributes in process `syz.0.694'. [ 134.447739][ T8822] can: request_module (can-proto-0) failed. [ 134.754126][ T8845] netlink: 'syz.3.702': attribute type 28 has an invalid length. [ 134.792535][ T8845] netlink: 'syz.3.702': attribute type 3 has an invalid length. [ 134.832470][ T8845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.702'. [ 135.078519][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 135.429399][ T8863] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.708'. [ 135.501389][ T8869] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 135.734278][ T8869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.861866][ T8870] veth5: entered promiscuous mode [ 135.888016][ T8866] bond3: entered allmulticast mode [ 135.924284][ T8895] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 136.108878][ T8902] __nla_validate_parse: 1 callbacks suppressed [ 136.108896][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 136.239619][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 136.261107][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'. [ 136.274163][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 136.438027][ T8928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.725'. [ 136.506883][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.726'. [ 136.516608][ T8923] netlink: 'syz.4.726': attribute type 7 has an invalid length. [ 136.524348][ T8923] netlink: 'syz.4.726': attribute type 8 has an invalid length. [ 136.532225][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 136.550178][ T8930] veth0_virt_wifi: renamed from vlan1 [ 136.751138][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 136.788149][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 136.898581][ T8947] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 136.914116][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 136.932206][ T8946] netlink: 'syz.4.730': attribute type 2 has an invalid length. [ 137.080126][ T8957] netlink: 'syz.0.732': attribute type 1 has an invalid length. [ 137.093778][ T8959] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 137.177585][ T8957] veth5: entered promiscuous mode [ 137.457117][ T8976] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 137.484801][ T8976] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 137.492458][ T8976] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 137.535016][ T8976] netlink: 'syz.2.737': attribute type 2 has an invalid length. [ 137.867583][ T8996] netlink: 'syz.2.744': attribute type 29 has an invalid length. [ 137.932048][ T9000] netlink: 'syz.0.745': attribute type 1 has an invalid length. [ 137.945880][ T8996] netlink: 'syz.2.744': attribute type 29 has an invalid length. [ 138.006229][ T8996] block nbd2: not configured, cannot reconfigure [ 138.334355][ T9021] IPVS: length: 143 != 24 [ 138.414223][ T9011] syz.3.749 (9011) used greatest stack depth: 17544 bytes left [ 138.719376][ T9039] pim6reg: entered allmulticast mode [ 139.281948][ T9060] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 139.335574][ T9060] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 139.349235][ T9060] gretap0: entered promiscuous mode [ 139.354597][ T9060] gretap0: entered allmulticast mode [ 139.679158][ T9085] openvswitch: netlink: Missing key (keys=40, expected=100) [ 139.740049][ T9090] nbd: illegal input index -8454144 [ 139.972064][ T9096] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 140.026161][ T9096] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 140.065844][ T9101] netlink: 'syz.2.778': attribute type 21 has an invalid length. [ 140.084899][ T9101] netlink: 'syz.2.778': attribute type 22 has an invalid length. [ 140.141747][ T9101] netlink: 'syz.2.778': attribute type 23 has an invalid length. [ 140.376983][ T9116] bridge_slave_1: left allmulticast mode [ 140.404630][ T9116] bridge_slave_1: left promiscuous mode [ 140.423994][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.475410][ T9116] bridge_slave_0: left allmulticast mode [ 140.492059][ T9116] bridge_slave_0: left promiscuous mode [ 140.512883][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.687642][ T9126] 8021q: VLANs not supported on ip6tnl0 [ 140.776425][ T9134] raw_sendmsg: syz.0.789 forgot to set AF_INET. Fix it! [ 141.277100][ T9158] __nla_validate_parse: 20 callbacks suppressed [ 141.277119][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 141.371675][ T9159] macvtap1: entered allmulticast mode [ 141.393605][ T9159] veth0_macvtap: entered allmulticast mode [ 141.827521][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 141.856945][ T9178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.802'. [ 141.900995][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 141.910164][ T9178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.802'. [ 142.188299][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.810'. [ 142.359390][ T9211] openvswitch: netlink: Key type 29 is not supported [ 142.570488][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 142.618322][ T9221] nbd: must specify a device to reconfigure [ 142.876608][ T9240] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.820'. [ 142.926575][ T9243] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.823'. [ 142.946391][ T9239] netlink: 32 bytes leftover after parsing attributes in process `syz.0.824'. [ 142.973545][ T9239] bridge2: entered promiscuous mode [ 142.979014][ T9239] bridge2: entered allmulticast mode [ 143.612745][ T9272] validate_nla: 2 callbacks suppressed [ 143.612764][ T9272] netlink: 'syz.4.829': attribute type 9 has an invalid length. [ 143.730037][ T9276] openvswitch: netlink: Missing key (keys=40, expected=80) [ 143.929121][ T9284] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 144.098056][ T9297] C: renamed from lo (while UP) [ 144.126338][ T9297] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 144.163055][ T9299] netlink: 'syz.4.836': attribute type 1 has an invalid length. [ 144.191956][ T9299] netlink: 'syz.4.836': attribute type 8 has an invalid length. [ 144.300333][ T9307] tipc: Enabled bearer , priority 0 [ 144.323115][ T9307] syzkaller0: entered promiscuous mode [ 144.348465][ T9307] syzkaller0: entered allmulticast mode [ 144.515890][ T9319] tipc: Resetting bearer [ 145.119447][ T9303] tipc: Resetting bearer [ 145.164378][ T9303] tipc: Disabling bearer [ 146.072145][ T9412] netlink: 'syz.0.860': attribute type 10 has an invalid length. [ 146.174552][ T9412] team0: Port device geneve0 added [ 146.337664][ T9428] __nla_validate_parse: 8 callbacks suppressed [ 146.337683][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 146.487096][ T9433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.863'. [ 146.703582][ T9433] openvswitch: netlink: Actions may not be safe on all matching packets [ 147.145076][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 147.159092][ T9481] tipc: Enabled bearer , priority 0 [ 147.180804][ T9472] openvswitch: netlink: Message has 4 unknown bytes. [ 147.192979][ T9472] tipc: Resetting bearer [ 147.220423][ T9477] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 147.300517][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 147.334325][ T9471] tipc: Resetting bearer [ 147.352926][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 147.371221][ T9493] openvswitch: netlink: Flow actions attr not present in new flow. [ 147.993451][ T9506] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 148.001832][ T9506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.879'. [ 148.011085][ T9506] nbd: couldn't find device at index 1048576 [ 148.185954][ T886] tipc: Node number set to 4149957820 [ 148.399771][ T9471] tipc: Disabling bearer [ 148.583597][ T9519] netem: unknown loss type 0 [ 148.590756][ T9519] netem: change failed [ 148.890447][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.887'. [ 149.017855][ T9540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.890'. [ 149.099961][ T9543] syzkaller1: entered promiscuous mode [ 149.116925][ T9543] syzkaller1: entered allmulticast mode [ 149.217950][ T9552] netlink: 96 bytes leftover after parsing attributes in process `syz.1.895'. [ 149.235761][ T9552] vlan4: entered allmulticast mode [ 149.240900][ T9552] syz_tun: entered allmulticast mode [ 149.334287][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 149.454067][ T9563] netlink: 'syz.3.900': attribute type 16 has an invalid length. [ 149.470086][ T9563] netlink: 'syz.3.900': attribute type 17 has an invalid length. [ 149.484689][ T9563] tunl0: left promiscuous mode [ 149.509233][ T9563] sit0: left promiscuous mode [ 149.606132][ T9563] bond0: left allmulticast mode [ 149.611107][ T9563] bond_slave_0: left allmulticast mode [ 149.630467][ T9563] bond_slave_1: left allmulticast mode [ 149.657187][ T9563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.358916][ T9605] netlink: 'syz.3.912': attribute type 5 has an invalid length. [ 150.820964][ T9622] netlink: 'syz.3.917': attribute type 4 has an invalid length. [ 150.898142][ T9622] netlink: 'syz.3.917': attribute type 4 has an invalid length. [ 151.353266][ T9648] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 151.389157][ T9649] syzkaller1: entered promiscuous mode [ 151.401796][ T9649] syzkaller1: entered allmulticast mode [ 151.411904][ T9649] __nla_validate_parse: 8 callbacks suppressed [ 151.411919][ T9649] netlink: 36 bytes leftover after parsing attributes in process `syz.4.922'. [ 151.511422][ T9653] macvlan2: entered promiscuous mode [ 151.521982][ T9657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.925'. [ 151.527147][ T9653] macvlan2: entered allmulticast mode [ 151.543262][ T9653] bond4: entered promiscuous mode [ 151.551473][ T9653] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 151.563385][ T9653] bond4: left promiscuous mode [ 151.590737][ T9654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.924'. [ 151.826962][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 151.854972][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 151.896015][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 151.957239][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 151.988694][ T9679] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 152.410640][ T9662] infiniband syz1: set active [ 152.417540][ T9662] infiniband syz1: added bond0 [ 152.445771][ T9704] netlink: 224 bytes leftover after parsing attributes in process `syz.3.939'. [ 152.482028][ T9662] RDS/IB: syz1: added [ 152.491052][ T9662] smc: adding ib device syz1 with port count 1 [ 152.497980][ T9662] smc: ib device syz1 port 1 has pnetid [ 152.632895][ T9706] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.938'. [ 152.752714][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'. [ 152.806187][ T9719] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 152.831429][ T9719] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 152.839488][ T9719] netlink: 'syz.3.940': attribute type 2 has an invalid length. [ 152.940024][ T9721] syzkaller1: entered promiscuous mode [ 152.946613][ T9721] syzkaller1: entered allmulticast mode [ 153.085304][ T9735] tipc: Enabling of bearer rejected, failed to enable media [ 154.026730][ T9783] pimreg: entered allmulticast mode [ 154.101835][ T9786] netlink: 'syz.4.959': attribute type 2 has an invalid length. [ 155.129675][ T55] block nbd0: Possible stuck request ffff888025040000: control (read@0,1024B). Runtime 60 seconds [ 155.140573][ T55] block nbd0: Possible stuck request ffff8880250401c0: control (read@1024,1024B). Runtime 60 seconds [ 155.152821][ T55] block nbd0: Possible stuck request ffff888025040380: control (read@2048,1024B). Runtime 60 seconds [ 155.164319][ T55] block nbd0: Possible stuck request ffff888025040540: control (read@3072,1024B). Runtime 60 seconds [ 155.550477][ T9786] siw: device registration error -23 [ 156.048224][ T9853] bridge_slave_0: default FDB implementation only supports local addresses [ 156.451760][ T9873] __nla_validate_parse: 8 callbacks suppressed [ 156.451780][ T9873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.983'. [ 157.044112][ T24] IPVS: starting estimator thread 0... [ 157.044565][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'. [ 157.135588][ T9913] IPVS: using max 27 ests per chain, 64800 per kthread [ 157.150109][ T9917] macvlan3: entered promiscuous mode [ 157.156345][ T9917] macvlan3: entered allmulticast mode [ 157.162836][ T9917] bond2: (slave macvlan3): Opening slave failed [ 157.232661][ T9923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.276355][ T9917] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 157.317883][ T9917] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 157.590337][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1005'. [ 157.669675][ T9942] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1005'. [ 157.681416][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1005'. [ 157.691115][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1005'. [ 157.701313][ T9942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1005'. [ 157.721543][ T9946] validate_nla: 1 callbacks suppressed [ 157.721557][ T9946] netlink: 'syz.4.1006': attribute type 21 has an invalid length. [ 157.745118][ T9946] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1006'. [ 157.773480][ T9946] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 157.786650][ T9946] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 158.010975][ T9963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.030086][ T9965] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 158.046103][ T9965] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1014'. [ 158.056982][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'. [ 158.089501][ T9965] netlink: zone id is out of range [ 159.207336][T10048] netlink: 'syz.2.1035': attribute type 6 has an invalid length. [ 159.737751][T10078] netlink: 'syz.3.1046': attribute type 5 has an invalid length. [ 159.867728][T10091] netlink: 'syz.1.1050': attribute type 83 has an invalid length. [ 159.884030][T10085] netlink: 'syz.2.1047': attribute type 10 has an invalid length. [ 159.942420][T10085] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 160.044684][T10102] syzkaller1: entered promiscuous mode [ 160.075966][T10102] syzkaller1: entered allmulticast mode [ 160.419883][ T3488] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.456357][ T3488] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.475366][ T3488] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.484591][ T3488] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.530497][T10132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.562222][T10132] bond0: (slave rose0): Enslaving as an active interface with an up link [ 160.599450][T10137] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 160.607843][T10129] openvswitch: netlink: Duplicate or invalid key (type 0). [ 160.607888][T10129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.811660][T10155] syzkaller1: entered promiscuous mode [ 160.838965][T10155] syzkaller1: entered allmulticast mode [ 161.330205][T10187] team0: Device ip6gre2 is of different type [ 161.463646][T10205] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 161.484185][T10205] netlink: 'syz.0.1082': attribute type 2 has an invalid length. [ 161.632585][T10215] vlan3: entered promiscuous mode [ 161.735872][ T3488] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.762597][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.771522][ T3488] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.896568][T10220] syzkaller1: entered promiscuous mode [ 161.902867][T10220] syzkaller1: entered allmulticast mode [ 162.061898][T10242] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 162.171410][T10254] netlink: 'syz.3.1096': attribute type 1 has an invalid length. [ 162.174333][T10256] netlink: 'syz.2.1095': attribute type 10 has an invalid length. [ 162.360239][T10260] __nla_validate_parse: 15 callbacks suppressed [ 162.360257][T10260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1098'. [ 162.401633][T10269] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1099'. [ 162.413234][T10269] 8021q: VLANs not supported on gre0 [ 162.428688][T10260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1098'. [ 162.469188][T10260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1098'. [ 162.485242][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.518238][T10279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1102'. [ 162.563950][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.636788][T10280] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 162.814196][T10293] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1109'. [ 162.842389][T10301] xt_time: unknown flags 0xf4 [ 162.846159][T10299] netlink: 'syz.3.1108': attribute type 8 has an invalid length. [ 162.876145][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 162.961367][T10303] syzkaller0: entered promiscuous mode [ 162.978592][T10303] syzkaller0: entered allmulticast mode [ 163.236591][T10325] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1115'. [ 163.369641][T10331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1118'. [ 163.378864][T10331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1118'. [ 163.396930][T10331] netlink: 'syz.4.1118': attribute type 21 has an invalid length. [ 164.774257][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 164.824039][T10369] nbd: must specify an index to disconnect [ 164.915152][T10381] lo: entered allmulticast mode [ 165.173458][T10402] IPVS: length: 212 != 24 [ 165.397044][T10419] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 165.416934][T10416] Driver unsupported XDP return value 0 on prog (id 209) dev N/A, expect packet loss! [ 165.604507][T10435] sch_fq: defrate 0 ignored. [ 165.710636][T10441] trusted_key: syz.4.1149 sent an empty control message without MSG_MORE. [ 165.853073][T10445] netlink: 'syz.0.1151': attribute type 29 has an invalid length. [ 165.876236][T10445] netlink: 'syz.0.1151': attribute type 29 has an invalid length. [ 165.948479][T10459] netlink: 'syz.1.1156': attribute type 29 has an invalid length. [ 165.977404][T10462] tipc: Started in network mode [ 165.982316][T10462] tipc: Node identity f6e05e58740d, cluster identity 4711 [ 165.998869][T10462] tipc: Enabled bearer , priority 0 [ 166.045354][T10450] veth0_macvtap: left promiscuous mode [ 166.088232][T10445] syzkaller0: entered promiscuous mode [ 166.093774][T10445] syzkaller0: entered allmulticast mode [ 166.133454][T10462] tipc: Resetting bearer [ 166.160861][T10469] netlink: 'syz.1.1159': attribute type 1 has an invalid length. [ 166.188050][T10444] tipc: Resetting bearer [ 166.217536][T10471] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 166.235012][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.264553][T10444] tipc: Disabling bearer [ 166.421837][T10488] IPv6: sit1: Disabled Multicast RS [ 166.441830][T10488] sit1: entered allmulticast mode [ 166.479622][T10485] syz.4.1162: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.498986][T10485] CPU: 0 UID: 0 PID: 10485 Comm: syz.4.1162 Not tainted syzkaller #0 PREEMPT(full) [ 166.499010][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.499030][T10485] Call Trace: [ 166.499038][T10485] [ 166.499046][T10485] dump_stack_lvl+0x189/0x250 [ 166.499084][T10485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.499107][T10485] ? __pfx__printk+0x10/0x10 [ 166.499139][T10485] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 166.499163][T10485] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 166.499188][T10485] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 166.499214][T10485] warn_alloc+0x214/0x310 [ 166.499245][T10485] ? stack_depot_save_flags+0x40/0x860 [ 166.499277][T10485] ? __pfx_warn_alloc+0x10/0x10 [ 166.499310][T10485] ? kasan_save_track+0x4f/0x80 [ 166.499335][T10485] ? xskq_create+0x56/0x170 [ 166.499353][T10485] ? xsk_init_queue+0xb0/0x110 [ 166.499369][T10485] ? xsk_setsockopt+0x4dc/0x8d0 [ 166.499396][T10485] ? do_sock_setsockopt+0x179/0x1b0 [ 166.499418][T10485] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 166.499438][T10485] ? do_syscall_64+0xfa/0x3b0 [ 166.499458][T10485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.499485][T10485] __vmalloc_node_range_noprof+0x125/0x12f0 [ 166.499548][T10485] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.499583][T10485] ? __kasan_kmalloc+0x93/0xb0 [ 166.499613][T10485] vmalloc_user_noprof+0xad/0xf0 [ 166.499641][T10485] ? xskq_create+0xbf/0x170 [ 166.499661][T10485] xskq_create+0xbf/0x170 [ 166.499684][T10485] xsk_init_queue+0xb0/0x110 [ 166.499707][T10485] xsk_setsockopt+0x4dc/0x8d0 [ 166.499737][T10485] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.499767][T10485] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.499801][T10485] ? aa_sock_opt_perm+0xff/0x1b0 [ 166.499824][T10485] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 166.499845][T10485] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.499875][T10485] do_sock_setsockopt+0x179/0x1b0 [ 166.499905][T10485] __x64_sys_setsockopt+0x13f/0x1b0 [ 166.499935][T10485] do_syscall_64+0xfa/0x3b0 [ 166.499955][T10485] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.499981][T10485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.500004][T10485] ? clear_bhb_loop+0x60/0xb0 [ 166.500028][T10485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.500083][T10485] RIP: 0033:0x7fc9a8d8eec9 [ 166.500106][T10485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.500122][T10485] RSP: 002b:00007fc9a9b46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.500142][T10485] RAX: ffffffffffffffda RBX: 00007fc9a8fe5fa0 RCX: 00007fc9a8d8eec9 [ 166.500157][T10485] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 166.500168][T10485] RBP: 00007fc9a8e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 166.500180][T10485] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.500193][T10485] R13: 00007fc9a8fe6038 R14: 00007fc9a8fe5fa0 R15: 00007fff513d75c8 [ 166.500227][T10485] [ 166.797491][T10485] Mem-Info: [ 166.800692][T10485] active_anon:4894 inactive_anon:0 isolated_anon:0 [ 166.800692][T10485] active_file:2564 inactive_file:39907 isolated_file:0 [ 166.800692][T10485] unevictable:768 dirty:41 writeback:0 [ 166.800692][T10485] slab_reclaimable:11530 slab_unreclaimable:101705 [ 166.800692][T10485] mapped:29936 shmem:1363 pagetables:1000 [ 166.800692][T10485] sec_pagetables:0 bounce:0 [ 166.800692][T10485] kernel_misc_reclaimable:0 [ 166.800692][T10485] free:1325492 free_pcp:14623 free_cma:0 [ 166.846414][T10485] Node 0 active_anon:19476kB inactive_anon:0kB active_file:10256kB inactive_file:159424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119744kB dirty:164kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12404kB pagetables:3860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.878302][T10485] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.909028][T10485] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.938234][T10485] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 166.944663][T10485] Node 0 DMA32 free:1399576kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19332kB inactive_anon:0kB active_file:10256kB inactive_file:157856kB unevictable:1536kB writepending:164kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:40764kB local_pcp:20192kB free_cma:0kB [ 166.978299][T10485] lowmem_reserve[]: 0 0 1 1 1 [ 166.983196][T10485] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 167.012289][T10485] lowmem_reserve[]: 0 0 0 0 0 [ 167.017113][T10485] Node 1 Normal free:3887008kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17856kB local_pcp:8864kB free_cma:0kB [ 167.048823][T10485] lowmem_reserve[]: 0 0 0 0 0 [ 167.053605][T10485] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.066561][T10485] Node 0 DMA32: 2214*4kB (UM) 942*8kB (UME) 251*16kB (UM) 243*32kB (UME) 134*64kB (UME) 75*128kB (UME) 48*256kB (UME) 25*512kB (UME) 13*1024kB (UME) 6*2048kB (UM) 318*4096kB (M) = 1399576kB [ 167.085495][T10485] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 167.097946][T10485] Node 1 Normal: 194*4kB (UE) 53*8kB (UME) 43*16kB (UME) 64*32kB (UME) 27*64kB (UME) 9*128kB (UME) 5*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3887008kB [ 167.116143][T10485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.126186][T10485] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.137328][T10485] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.150457][T10485] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.205769][T10485] 43831 total pagecache pages [ 167.214181][T10485] 0 pages in swap cache [ 167.265361][T10485] Free swap = 124996kB [ 167.269544][T10485] Total swap = 124996kB [ 167.273701][T10485] 2097051 pages RAM [ 167.296766][T10485] 0 pages HighMem/MovableOnly [ 167.313133][T10485] 425673 pages reserved [ 167.334561][T10485] 0 pages cma reserved [ 167.442629][T10518] __nla_validate_parse: 6 callbacks suppressed [ 167.442646][T10518] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1175'. [ 167.561722][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 167.843585][T10556] netlink: 'syz.3.1184': attribute type 4 has an invalid length. [ 167.862721][T10556] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1184'. [ 168.120526][T10579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.309123][T10588] sctp: [Deprecated]: syz.3.1194 (pid 10588) Use of int in maxseg socket option. [ 168.309123][T10588] Use struct sctp_assoc_value instead [ 168.349168][T10594] veth1_macvtap: left promiscuous mode [ 168.414891][ T30] audit: type=1107 audit(1759140117.548:3): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 168.419809][T10594] veth1_macvtap: entered promiscuous mode [ 168.473822][T10598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1198'. [ 168.510645][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'. [ 168.754294][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1202'. [ 168.796017][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 168.820012][T10616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1202'. [ 169.042934][T10640] tipc: Started in network mode [ 169.053348][T10640] tipc: Node identity 080211, cluster identity 4711 [ 169.071897][T10640] tipc: Enabled bearer , priority 0 [ 169.122926][T10628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.274022][T10654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1214'. [ 169.410176][T10662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1217'. [ 169.790343][T10687] xt_l2tp: missing protocol rule (udp|l2tpip) [ 169.816329][T10687] sit1: entered promiscuous mode [ 169.821305][T10687] sit1: entered allmulticast mode [ 170.043495][T10700] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 170.184912][T10560] tipc: Node number set to 134353152 [ 170.238150][T10714] netlink: 'syz.0.1234': attribute type 1 has an invalid length. [ 170.257295][T10714] netlink: 'syz.0.1234': attribute type 2 has an invalid length. [ 170.422146][T10722] sctp: [Deprecated]: syz.2.1237 (pid 10722) Use of int in max_burst socket option. [ 170.422146][T10722] Use struct sctp_assoc_value instead [ 170.537780][T10729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.695812][T10738] chnl_net:caif_netlink_parms(): no params data found [ 170.721775][T10733] netlink: 'syz.2.1241': attribute type 1 has an invalid length. [ 170.743768][T10739] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.371181][T10832] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 172.582615][ T12] tipc: Subscription rejected, illegal request [ 172.816068][T10860] __nla_validate_parse: 11 callbacks suppressed [ 172.816086][T10860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1279'. [ 172.889580][T10860] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1279'. [ 172.937552][T10860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1279'. [ 173.109898][T10874] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1285'. [ 173.134678][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1286'. [ 173.143581][T10874] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1285'. [ 173.168562][T10874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1285'. [ 173.359757][T10855] infiniband syz0: set down [ 173.364429][T10855] infiniband syz0: added ipvlan1 [ 173.424322][T10855] RDS/IB: syz0: added [ 173.428751][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1290'. [ 173.428908][T10881] nbd3: detected capacity change from 0 to 63 [ 173.434238][T10888] block nbd3: NBD_DISCONNECT [ 173.465751][T10888] block nbd3: Disconnected due to user request. [ 173.479123][T10855] smc: adding ib device syz0 with port count 1 [ 173.486093][T10855] smc: ib device syz0 port 1 has pnetid [ 173.494449][T10888] block nbd3: shutting down sockets [ 173.662761][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'. [ 173.875544][T10913] netlink: 'syz.3.1296': attribute type 5 has an invalid length. [ 173.901614][T10913] netlink: 'syz.3.1296': attribute type 5 has an invalid length. [ 173.920300][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'. [ 174.569032][T10947] tunl0: entered promiscuous mode [ 174.591710][T10947] netlink: 'syz.3.1306': attribute type 3 has an invalid length. [ 174.761470][T10960] IPVS: Unknown mcast interface: nicvf0 [ 174.964882][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.017117][T10974] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 175.043772][ T1330] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.073832][ T1330] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.098810][ T1330] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.116647][ T1330] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 175.149289][T10979] netlink: 'syz.3.1312': attribute type 83 has an invalid length. [ 175.406788][T10991] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 175.510183][T10996] netlink: 'syz.3.1315': attribute type 1 has an invalid length. [ 175.761045][ T30] audit: type=1107 audit(1759140124.898:4): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='R-•²ÎÍo||3§-ÌŒkDT¿gªùø/r66‘ºu1`X¿í³L×bz-TO$Hz›ÇXÁë€Ô•Ýå%Ò' [ 175.897900][T11017] veth0_to_team: entered promiscuous mode [ 175.915862][T11017] veth0_to_team: entered allmulticast mode [ 175.953441][T11020] netlink: 'syz.2.1325': attribute type 1 has an invalid length. [ 176.234626][T11029] netlink: 'syz.2.1328': attribute type 5 has an invalid length. [ 176.345438][T11038] netlink: 'syz.0.1329': attribute type 21 has an invalid length. [ 176.353666][T11038] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 176.572874][T11052] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 176.590029][T11052] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 176.726073][T11064] netlink: 'syz.3.1339': attribute type 1 has an invalid length. [ 176.797510][T11060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.808427][T11060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.832507][T11060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 176.946476][T11064] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.088595][T11060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.100954][T11060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.121160][T11060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 177.193543][T11098] tipc: Enabling of bearer rejected, already enabled [ 177.289812][T11060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.306904][T11060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.317371][T11060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 177.333210][T11099] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 177.341725][T11099] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 177.349820][T11099] tipc: Resetting bearer [ 177.365098][T11107] netlink: 'syz.4.1346': attribute type 10 has an invalid length. [ 177.387956][T11107] team0: Port device dummy0 added [ 177.407059][T11060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.418372][T11060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.432307][T11060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 177.525487][T11112] team0: Device wireguard0 is of different type [ 177.570848][ T3569] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.582364][ T3569] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.591124][ T3569] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.613156][ T3569] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.627571][ T3569] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.637120][ T3569] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.666066][T11117] xt_l2tp: v2 tid > 0xffff: 1114244 [ 177.669575][ T3569] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.680465][ T3569] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.695145][ T3569] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 177.739199][ T1330] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.773170][ T1330] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.783248][ T1330] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 178.132249][T11104] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 178.269352][T11156] __nla_validate_parse: 13 callbacks suppressed [ 178.269369][T11156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1360'. [ 178.297120][T11159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1361'. [ 178.608906][T11187] openvswitch: netlink: IP tunnel dst address not specified [ 178.774007][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1369'. [ 178.917954][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'. [ 178.939035][T11201] vlan0: entered promiscuous mode [ 178.944603][T11201] vlan0: entered allmulticast mode [ 178.952716][T11201] veth0_vlan: entered allmulticast mode [ 179.163498][T11220] pim6reg1: entered promiscuous mode [ 179.174244][T11220] pim6reg1: entered allmulticast mode [ 179.185644][T11220] netlink: 'syz.2.1378': attribute type 1 has an invalid length. [ 179.187848][T11219] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1379'. [ 179.245667][T11219] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1379'. [ 179.270448][T11219] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1379'. [ 179.421640][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1384'. [ 179.603438][T11244] netlink: 'syz.3.1388': attribute type 21 has an invalid length. [ 179.616152][T11245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1387'. [ 179.783663][T11257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1393'. [ 179.789546][T11255] tipc: Enabled bearer , priority 0 [ 179.824392][T11255] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 179.846580][T11255] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 179.962978][T11250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.981047][T11255] tipc: Resetting bearer [ 180.588745][T11304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.740534][T11314] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.819421][T11321] ieee802154 phy0 wpan0: encryption failed: -90 [ 180.835079][T10559] tipc: Node number set to 2018044178 [ 181.189015][T11333] netlink: 'syz.0.1415': attribute type 10 has an invalid length. [ 181.221241][T11333] team0: Device hsr_slave_0 failed to register rx_handler [ 181.333061][T11335] can: request_module (can-proto-0) failed. [ 181.402987][T11344] netlink: 'syz.2.1420': attribute type 29 has an invalid length. [ 181.412301][T11344] netlink: 'syz.2.1420': attribute type 29 has an invalid length. [ 181.612111][T11361] bridge_slave_1: entered promiscuous mode [ 182.484419][T11406] sock: sock_set_timeout: `syz.0.1438' (pid 11406) tries to set negative timeout [ 182.500111][T11409] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 182.538965][T11417] macvlan0: entered promiscuous mode [ 182.568507][T11417] batadv0: entered promiscuous mode [ 182.575510][T11417] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 182.588379][T11417] hsr1: entered allmulticast mode [ 182.594969][T11417] macvlan0: entered allmulticast mode [ 182.615806][T11417] batadv0: entered allmulticast mode [ 182.692046][T11417] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 182.715349][T11417] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 182.863164][T11434] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 182.884196][T11435] netlink: 'syz.0.1445': attribute type 1 has an invalid length. [ 182.926478][T11435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.032986][T11446] netlink: zone id is out of range [ 183.040752][T11446] netlink: zone id is out of range [ 183.051290][T11442] tipc: Enabling of bearer rejected, already enabled [ 183.075437][T11446] netlink: zone id is out of range [ 183.080567][T11446] netlink: zone id is out of range [ 183.089080][T11442] tipc: Resetting bearer [ 183.139226][T11446] netlink: zone id is out of range [ 183.144436][T11446] netlink: zone id is out of range [ 183.280557][T11459] __nla_validate_parse: 29 callbacks suppressed [ 183.280574][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1452'. [ 183.383970][T11463] batadv_slave_1: entered promiscuous mode [ 183.470929][T11461] batadv_slave_1: left promiscuous mode [ 183.484173][T11471] netlink: 'syz.4.1455': attribute type 39 has an invalid length. [ 183.639057][T11489] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1464'. [ 183.796092][T11501] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1466'. [ 183.825633][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 184.089693][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 184.219343][T11529] net_ratelimit: 1 callbacks suppressed [ 184.219361][T11529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.272286][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1474'. [ 184.393950][T11540] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20003 [ 184.428950][T11539] netlink: 'syz.3.1479': attribute type 1 has an invalid length. [ 184.451054][T11539] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1479'. [ 184.496202][T11539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1479'. [ 184.498687][T11543] netlink: 'syz.2.1478': attribute type 1 has an invalid length. [ 184.540585][T11543] netlink: 'syz.2.1478': attribute type 1 has an invalid length. [ 184.579222][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 184.758115][T11559] netlink: 'syz.2.1485': attribute type 11 has an invalid length. [ 184.773779][T11562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1484'. [ 184.784685][T11559] netlink: 'syz.2.1485': attribute type 11 has an invalid length. [ 184.854334][T11565] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 184.855204][T11562] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:0 [ 184.863251][ T36] tipc: Subscription rejected, illegal request [ 185.201276][ T55] block nbd0: Possible stuck request ffff888025040000: control (read@0,1024B). Runtime 90 seconds [ 185.212074][ T55] block nbd0: Possible stuck request ffff8880250401c0: control (read@1024,1024B). Runtime 90 seconds [ 185.223266][ T55] block nbd0: Possible stuck request ffff888025040380: control (read@2048,1024B). Runtime 90 seconds [ 185.234276][ T55] block nbd0: Possible stuck request ffff888025040540: control (read@3072,1024B). Runtime 90 seconds [ 185.387891][T11597] syzkaller1: entered promiscuous mode [ 185.393397][T11597] syzkaller1: entered allmulticast mode [ 185.623956][T11625] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 185.801774][T11634] team0: Device veth1_macvtap failed to register rx_handler [ 185.863931][T11635] tipc: New replicast peer: 0.0.0.0 [ 185.879776][T11635] tipc: Enabled bearer , priority 10 [ 185.913308][T11640] tipc: New replicast peer: 255.255.255.255 [ 186.020241][T11644] sctp: [Deprecated]: syz.4.1506 (pid 11644) Use of int in maxseg socket option. [ 186.020241][T11644] Use struct sctp_assoc_value instead [ 186.076417][T11649] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 186.204684][T11644] bond3: (slave gretap2): making interface the new active one [ 186.255800][T11644] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 186.945705][T11700] validate_nla: 3 callbacks suppressed [ 186.945722][T11700] netlink: 'syz.3.1522': attribute type 42 has an invalid length. [ 187.187636][T11715] netlink: 'syz.1.1525': attribute type 6 has an invalid length. [ 187.255984][T11715] netlink: 'syz.1.1525': attribute type 6 has an invalid length. [ 187.313938][T11724] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 187.641152][T11731] team0: Port device dummy0 removed [ 187.655485][T11731] bridge_slave_0: left allmulticast mode [ 187.661536][T11731] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.688716][T11731] bridge_slave_1: left allmulticast mode [ 187.697433][T11731] bridge_slave_1: left promiscuous mode [ 187.703287][T11731] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.720865][T11731] bond0: (slave bond_slave_0): Releasing backup interface [ 187.740524][T11731] bond0: (slave bond_slave_1): Releasing backup interface [ 187.766500][T11731] team0: Port device team_slave_0 removed [ 187.788531][T11731] team0: Port device team_slave_1 removed [ 187.801828][T11731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.811690][T11731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.831339][T11731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.863894][T11731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.899523][T11731] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 188.045463][T11740] syzkaller1: entered promiscuous mode [ 188.051141][T11740] syzkaller1: entered allmulticast mode [ 188.229465][T11756] tipc: Enabling of bearer rejected, already enabled [ 188.449063][T11771] __nla_validate_parse: 10 callbacks suppressed [ 188.449082][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 188.467045][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'. [ 188.471052][T11773] netlink: 'syz.4.1542': attribute type 33 has an invalid length. [ 188.499603][T11774] netlink: 'syz.4.1542': attribute type 33 has an invalid length. [ 188.534213][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'. [ 188.557082][T11778] nbd: socks must be embedded in a SOCK_ITEM attr [ 188.557478][T11773] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 188.582885][T11774] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 188.611128][T11774] netlink: 'syz.4.1542': attribute type 3 has an invalid length. [ 188.623634][T11771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.891156][T11798] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1549'. [ 188.913121][T11789] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 188.924995][T11789] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 188.948504][T11791] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1548'. [ 189.060299][T11805] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1550'. [ 189.117463][T11807] tipc: Enabled bearer , priority 0 [ 189.125157][T11807] syzkaller0: entered promiscuous mode [ 189.131132][T11807] syzkaller0: entered allmulticast mode [ 189.167390][T11807] tipc: Resetting bearer [ 189.195033][T11806] tipc: Resetting bearer [ 189.231112][T11806] tipc: Disabling bearer [ 189.456109][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1558'. [ 189.558595][T11837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1564'. [ 189.558595][T11836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1564'. [ 189.573706][T11836] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 189.594202][T11832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.607810][T11837] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 189.943721][T11863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1571'. [ 190.286394][T11883] tipc: Enabled bearer , priority 0 [ 190.316010][T11883] syzkaller0: entered promiscuous mode [ 190.339457][T11883] syzkaller0: entered allmulticast mode [ 190.398506][T11883] tipc: Resetting bearer [ 190.422905][T11881] tipc: Resetting bearer [ 190.469616][T11881] tipc: Disabling bearer [ 190.503577][T11895] netlink: 'syz.3.1580': attribute type 1 has an invalid length. [ 190.564408][T11895] 8021q: adding VLAN 0 to HW filter on device bond7 [ 190.753051][T11904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.867365][T11904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.954893][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.723361][T11965] netlink: 'syz.3.1599': attribute type 10 has an invalid length. [ 191.761970][T11965] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 191.857007][T11976] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 191.889630][T11975] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.978526][T11982] netlink: 'syz.1.1605': attribute type 15 has an invalid length. [ 192.165313][T11995] macvtap1: entered promiscuous mode [ 192.171893][T11995] macvtap1: entered allmulticast mode [ 192.184311][T11995] bond_slave_0: entered promiscuous mode [ 192.190264][T11995] bond_slave_1: entered promiscuous mode [ 192.226835][T11995] bond0: entered allmulticast mode [ 192.248836][T11995] bond_slave_0: entered allmulticast mode [ 192.261324][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 192.261401][T11995] bond_slave_1: entered allmulticast mode [ 192.282209][T11995] bond0: entered promiscuous mode [ 192.290198][T11995] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 192.296669][T12004] netlink: 'syz.2.1611': attribute type 12 has an invalid length. [ 192.299740][T11995] team0: Device macvtap1 failed to register rx_handler [ 192.317879][T11995] bond0: left allmulticast mode [ 192.323472][T11995] bond_slave_0: left allmulticast mode [ 192.329440][T11995] bond_slave_1: left allmulticast mode [ 192.335409][T11995] bond0: left promiscuous mode [ 192.341028][T11995] bond_slave_0: left promiscuous mode [ 192.346576][T11995] bond_slave_1: left promiscuous mode [ 192.627909][T12011] tipc: Enabled bearer , priority 0 [ 192.638136][T12018] netlink: 'syz.3.1615': attribute type 1 has an invalid length. [ 193.047383][T12047] netlink: 'syz.4.1623': attribute type 1 has an invalid length. [ 193.414645][T12072] openvswitch: netlink: Message has 4 unknown bytes. [ 193.562269][T12078] netlink: 'syz.4.1635': attribute type 62 has an invalid length. [ 193.598889][T12076] netlink: 'syz.0.1633': attribute type 1 has an invalid length. [ 193.638257][T12082] __nla_validate_parse: 14 callbacks suppressed [ 193.638276][T12082] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1636'. [ 193.698088][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 193.760310][T12085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1638'. [ 193.810676][T12084] delete_channel: no stack [ 194.169657][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.179348][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.245078][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 194.320319][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1650'. [ 194.478304][T12145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1655'. [ 194.510820][T12145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1655'. [ 194.550830][ T36] smc: removing ib device syz0 [ 194.563290][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 194.595225][T12154] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.1656'. [ 194.616211][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 194.646619][T12152] macsec1: entered promiscuous mode [ 194.651992][T12152] bridge0: entered promiscuous mode [ 194.658407][T12152] macsec1: entered allmulticast mode [ 194.663857][T12152] bridge0: entered allmulticast mode [ 194.673580][T12152] bridge0: port 1(macsec1) entered blocking state [ 194.680671][T12152] bridge0: port 1(macsec1) entered disabled state [ 194.697478][T12152] bridge0: left allmulticast mode [ 194.704246][T12152] bridge0: left promiscuous mode [ 194.791091][T12156] macsec1: entered promiscuous mode [ 194.797136][T12156] bridge0: entered promiscuous mode [ 194.802571][T12156] macsec1: entered allmulticast mode [ 194.815510][T12156] bridge0: entered allmulticast mode [ 194.833623][T12156] bridge0: port 1(macsec1) entered blocking state [ 194.843097][T12156] bridge0: port 1(macsec1) entered disabled state [ 194.874022][T12156] bridge0: left allmulticast mode [ 194.879997][T12156] bridge0: left promiscuous mode [ 195.626190][T12181] tipc: New replicast peer: 255.255.255.255 [ 195.634373][T12181] tipc: Enabled bearer , priority 10 [ 195.689081][T12181] gretap1: entered promiscuous mode [ 195.714989][T12181] gretap1: entered allmulticast mode [ 195.914073][T12191] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.237404][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.243564][ T5877] Bluetooth: hci3: command 0x0406 tx timeout [ 196.249859][ T5189] Bluetooth: hci1: command 0x0406 tx timeout [ 196.479970][T12224] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 196.574322][T12224] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 196.593601][T12232] tipc: Enabled bearer , priority 0 [ 196.646448][T12232] syzkaller0: entered promiscuous mode [ 196.667213][T12232] syzkaller0: entered allmulticast mode [ 196.755016][T10559] tipc: Node number set to 2196594264 [ 196.783441][T12232] tipc: Resetting bearer [ 196.898050][T12229] tipc: Resetting bearer [ 196.966185][T12229] tipc: Disabling bearer [ 197.431449][T12294] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 197.432442][T12290] unsupported nlmsg_type 40 [ 197.492619][T12297] netlink: 'syz.3.1693': attribute type 1 has an invalid length. [ 197.580399][T12297] 8021q: adding VLAN 0 to HW filter on device bond8 [ 197.636633][T12299] 8021q: adding VLAN 0 to HW filter on device bond8 [ 197.646755][T12299] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 197.672435][T12299] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 197.691538][T12305] netlink: 'syz.4.1695': attribute type 4 has an invalid length. [ 198.100285][T12330] netlink: 'syz.4.1702': attribute type 3 has an invalid length. [ 198.235868][T12338] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 198.284530][T12343] netlink: 'syz.1.1706': attribute type 33 has an invalid length. [ 198.334069][T12345] netlink: 'syz.1.1707': attribute type 1 has an invalid length. [ 198.342183][T12345] netlink: 'syz.1.1707': attribute type 2 has an invalid length. [ 198.950437][T12383] __nla_validate_parse: 14 callbacks suppressed [ 198.950455][T12383] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1716'. [ 198.967254][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1717'. [ 199.043797][T12388] team0: left allmulticast mode [ 199.049927][T12388] team_slave_0: left allmulticast mode [ 199.055583][T12388] team_slave_1: left allmulticast mode [ 199.061381][T12388] team0: left promiscuous mode [ 199.071650][T12388] team_slave_0: left promiscuous mode [ 199.078241][T12388] team_slave_1: left promiscuous mode [ 199.090519][T12388] bridge0: port 3(team0) entered disabled state [ 199.102365][T12388] bridge_slave_0: left allmulticast mode [ 199.152389][T12388] bridge_slave_0: left promiscuous mode [ 199.175096][T12388] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.309509][T12383] erspan0: entered promiscuous mode [ 199.367107][T12411] tipc: Enabling of bearer rejected, already enabled [ 199.391560][T12411] tipc: Resetting bearer [ 199.416457][T12411] tipc: Resetting bearer [ 199.619977][T12430] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1726'. [ 199.645938][T12430] ip6gretap0: entered promiscuous mode [ 199.659119][T12430] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1726'. [ 199.755337][ T30] audit: type=1107 audit(1759140148.888:5): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 199.785694][T12445] syzkaller1: entered promiscuous mode [ 199.893963][T12444] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 199.980349][T12445] syzkaller1: entered allmulticast mode [ 200.001978][T12453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1733'. [ 200.125876][T12460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1736'. [ 200.202113][T12462] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1737'. [ 200.321436][T12466] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.359089][T12472] netlink: 'syz.4.1740': attribute type 13 has an invalid length. [ 200.593053][T12472] tipc: Resetting bearer [ 200.615183][ T5930] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.671286][T12501] netlink: 'syz.0.1747': attribute type 8 has an invalid length. [ 200.686837][ T5930] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.752251][T12501] Bluetooth: MGMT ver 1.23 [ 200.834029][T12503] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1747'. [ 200.848865][T12513] netlink: 'syz.4.1750': attribute type 8 has an invalid length. [ 200.862075][T12502] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1747'. [ 200.971749][T12519] syzkaller1: entered promiscuous mode [ 201.000372][T12519] syzkaller1: entered allmulticast mode [ 201.030154][T12521] bond0: entered allmulticast mode [ 201.154116][T12521] net veth1_virt_wifi .: renamed from virt_wifi0 [ 201.358950][T12539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1757'. [ 201.808097][T12575] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 201.859552][T12577] bridge17: entered allmulticast mode [ 202.127362][T12594] netlink: 'syz.4.1773': attribute type 6 has an invalid length. [ 202.492778][T12615] ip6tnl0: Caught tx_queue_len zero misconfig [ 202.745198][T12627] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 203.379224][T12664] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 203.512443][T12668] geneve3: entered promiscuous mode [ 203.542618][T12668] geneve3: entered allmulticast mode [ 203.562373][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 203.578252][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 203.666682][T12668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.711688][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 203.962964][T12692] __nla_validate_parse: 10 callbacks suppressed [ 203.962983][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'. [ 204.011633][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1805'. [ 204.020905][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1805'. [ 204.179230][T12703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1808'. [ 204.342532][T12714] validate_nla: 1 callbacks suppressed [ 204.342550][T12714] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 204.362814][T12714] netlink: 'syz.1.1811': attribute type 10 has an invalid length. [ 204.371060][T12714] netlink: 'syz.1.1811': attribute type 4 has an invalid length. [ 204.379767][T12714] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1811'. [ 204.590039][T12724] netlink: 'syz.3.1815': attribute type 32 has an invalid length. [ 204.615672][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 204.626886][T12724] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 204.941360][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 204.985249][T12741] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 205.053725][T12752] netlink: 'syz.3.1824': attribute type 1 has an invalid length. [ 205.104225][T12752] openvswitch: netlink: Message has 4 unknown bytes. [ 205.119932][T12752] netlink: 'syz.3.1824': attribute type 21 has an invalid length. [ 205.151406][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'. [ 205.199166][T12752] netlink: 'syz.3.1824': attribute type 21 has an invalid length. [ 205.204851][ T3516] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.225499][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'. [ 205.228060][ T3516] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.274197][ T3516] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.304381][ T3516] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.489724][T12668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.512020][T12668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 205.656728][T12668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.669160][T12668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 205.778874][T12668] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 205.811205][T12668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.822154][T12668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 205.896177][T12794] gtp0: entered promiscuous mode [ 205.904190][T12794] gtp0: entered allmulticast mode [ 205.967007][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1834'. [ 206.051303][T12808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.061583][T12808] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 206.153107][ T3516] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 206.161995][ T3516] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.505807][T12834] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 206.513726][T12837] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 206.574810][ T3584] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 206.590563][ T3584] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.615517][ T3584] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 206.623839][ T3584] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.680968][ T1146] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 206.691101][ T1146] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.431454][T12896] openvswitch: netlink: Actions may not be safe on all matching packets [ 207.551649][T12905] smc: removing ib device syz1 [ 208.020127][T12929] netlink: 'syz.3.1873': attribute type 64 has an invalid length. [ 208.660360][T12943] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 208.868471][T12947] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 208.933385][T12943] veth7: entered promiscuous mode [ 208.953882][T12943] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 209.090522][T12956] netlink: 'syz.2.1882': attribute type 21 has an invalid length. [ 209.102858][T12956] __nla_validate_parse: 3 callbacks suppressed [ 209.102874][T12956] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1882'. [ 209.369106][T12967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1886'. [ 209.417616][T12967] netlink: 'syz.0.1886': attribute type 1 has an invalid length. [ 209.473120][T12975] netlink: 'syz.2.1888': attribute type 3 has an invalid length. [ 209.487276][T12975] netlink: 'syz.2.1888': attribute type 3 has an invalid length. [ 209.726235][T12991] bridge_slave_0: default FDB implementation only supports local addresses [ 209.749966][T12993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1895'. [ 209.861851][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1897'. [ 209.895888][T13000] netlink: 'syz.1.1897': attribute type 10 has an invalid length. [ 209.919154][T13000] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 210.053228][T13009] IPVS: fo: FWM 3 0x00000003 - no destination available [ 210.268448][T13023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.360258][T13027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1906'. [ 210.381779][T13029] sctp: [Deprecated]: syz.2.1907 (pid 13029) Use of int in max_burst socket option deprecated. [ 210.381779][T13029] Use struct sctp_assoc_value instead [ 210.460349][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 210.931810][T13061] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 211.047834][T13067] openvswitch: netlink: Missing key (keys=40, expected=80) [ 211.352425][T13086] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1927'. [ 211.574641][T13104] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1932'. [ 211.590953][T13106] lo: Caught tx_queue_len zero misconfig [ 211.636535][T13110] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 211.683215][T13111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1934'. [ 211.692541][T13111] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1934'. [ 212.277327][T13147] af_packet: tpacket_rcv: packet too big, clamped from 124 to 4294967272. macoff=96 [ 213.726148][T13216] openvswitch: netlink: Flow actions attr not present in new flow. [ 213.787788][T13217] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 213.807207][ T5873] block nbd1: Receive control failed (result -32) [ 213.892564][T13217] pimreg5: entered allmulticast mode [ 213.902185][T13224] netlink: 'syz.3.1968': attribute type 3 has an invalid length. [ 214.359136][T13249] __nla_validate_parse: 7 callbacks suppressed [ 214.359155][T13249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1976'. [ 214.381987][T13250] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1973'. [ 214.383251][T13246] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1976'. [ 214.409590][T13250] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1973'. [ 214.509683][T13262] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 214.587018][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1981'. [ 214.609221][T13265] vlan0: entered promiscuous mode [ 214.614590][T13265] 0ªî{X¹¦: entered promiscuous mode [ 214.712218][T13270] netlink: 'syz.2.1984': attribute type 11 has an invalid length. [ 214.720421][T13270] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1984'. [ 214.923920][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 214.942610][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1988'. [ 215.003359][T13286] tipc: Enabled bearer , priority 10 [ 215.152086][T13287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.275207][ T55] block nbd0: Possible stuck request ffff888025040000: control (read@0,1024B). Runtime 120 seconds [ 215.286130][ T55] block nbd0: Possible stuck request ffff8880250401c0: control (read@1024,1024B). Runtime 120 seconds [ 215.297408][ T55] block nbd0: Possible stuck request ffff888025040380: control (read@2048,1024B). Runtime 120 seconds [ 215.311831][ T55] block nbd0: Possible stuck request ffff888025040540: control (read@3072,1024B). Runtime 120 seconds [ 215.386665][T13292] pim6reg1: entered promiscuous mode [ 215.391992][T13292] pim6reg1: entered allmulticast mode [ 215.494424][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 215.710584][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 216.164265][ T1146] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.177916][ T1146] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.191655][ T1146] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.256735][ T1146] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.151455][T13400] bond0: Caught tx_queue_len zero misconfig [ 217.250098][T13411] IPVS: set_ctl: invalid protocol: 137 100.1.1.2:20003 [ 217.310997][T13415] netlink: 'syz.0.2032': attribute type 10 has an invalid length. [ 217.404316][T13421] netlink: 'syz.4.2035': attribute type 1 has an invalid length. [ 217.434253][T13421] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.459117][T13421] bond4: (slave gretap3): making interface the new active one [ 217.468578][T13421] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 217.534162][T13424] geneve2: entered promiscuous mode [ 217.795777][T13428] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 217.982239][T13439] netlink: 'syz.3.2043': attribute type 16 has an invalid length. [ 217.996532][T13439] netlink: 'syz.3.2043': attribute type 3 has an invalid length. [ 218.012685][T13436] netlink: 'syz.4.2040': attribute type 6 has an invalid length. [ 218.034851][T13436] netlink: 'syz.4.2040': attribute type 5 has an invalid length. [ 218.116601][T13436] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.814974][T13499] net veth1_virt_wifi .: renamed from virt_wifi0 [ 219.041502][T13508] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 219.095406][T13513] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 219.340477][T13530] tipc: Enabling of bearer rejected, already enabled [ 219.378907][T13530] __nla_validate_parse: 24 callbacks suppressed [ 219.378923][T13530] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2070'. [ 219.425431][T13530] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2070'. [ 220.360488][T13583] netlink: 'syz.0.2084': attribute type 7 has an invalid length. [ 220.378148][T13596] tipc: Enabling of bearer rejected, already enabled [ 220.399139][T13590] syzkaller0: mtu less than device minimum [ 220.521804][T13600] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2091'. [ 220.712414][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2090'. [ 221.030295][T13633] netlink: 'syz.1.2101': attribute type 1 has an invalid length. [ 221.158117][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 221.266075][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2102'. [ 221.808823][T13656] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2101'. [ 222.028694][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2110'. [ 222.112978][T13686] delete_channel: no stack [ 222.130562][T13683] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2108'. [ 222.423183][T13703] sctp: [Deprecated]: syz.0.2116 (pid 13703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.423183][T13703] Use struct sctp_sack_info instead [ 222.445611][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'. [ 222.905712][T13718] net veth1_virt_wifi .: renamed from virt_wifi0 [ 223.098474][ T5873] Bluetooth: hci4: link tx timeout [ 223.104976][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.113738][ T5878] Bluetooth: hci4: link tx timeout [ 223.121727][ T5878] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.594987][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.668807][T13760] syz.3.2131: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 223.690027][T13760] CPU: 1 UID: 0 PID: 13760 Comm: syz.3.2131 Not tainted syzkaller #0 PREEMPT(full) [ 223.690054][T13760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.690067][T13760] Call Trace: [ 223.690075][T13760] [ 223.690084][T13760] dump_stack_lvl+0x189/0x250 [ 223.690117][T13760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.690142][T13760] ? __pfx__printk+0x10/0x10 [ 223.690171][T13760] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 223.690196][T13760] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 223.690223][T13760] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 223.690250][T13760] warn_alloc+0x214/0x310 [ 223.690283][T13760] ? stack_depot_save_flags+0x40/0x860 [ 223.690320][T13760] ? __pfx_warn_alloc+0x10/0x10 [ 223.690352][T13760] ? kasan_save_track+0x4f/0x80 [ 223.690379][T13760] ? xskq_create+0x56/0x170 [ 223.690398][T13760] ? xsk_init_queue+0xb0/0x110 [ 223.690414][T13760] ? xsk_setsockopt+0x4dc/0x8d0 [ 223.690442][T13760] ? do_sock_setsockopt+0x179/0x1b0 [ 223.690465][T13760] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 223.690488][T13760] ? do_syscall_64+0xfa/0x3b0 [ 223.690509][T13760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.690539][T13760] __vmalloc_node_range_noprof+0x125/0x12f0 [ 223.690604][T13760] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.690641][T13760] ? __kasan_kmalloc+0x93/0xb0 [ 223.690673][T13760] vmalloc_user_noprof+0xad/0xf0 [ 223.690703][T13760] ? xskq_create+0xbf/0x170 [ 223.690724][T13760] xskq_create+0xbf/0x170 [ 223.690747][T13760] xsk_init_queue+0xb0/0x110 [ 223.690770][T13760] xsk_setsockopt+0x4dc/0x8d0 [ 223.690804][T13760] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.690835][T13760] ? __pfx_aa_sk_perm+0x10/0x10 [ 223.690871][T13760] ? aa_sock_opt_perm+0xff/0x1b0 [ 223.690895][T13760] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 223.690918][T13760] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.690949][T13760] do_sock_setsockopt+0x179/0x1b0 [ 223.690984][T13760] __x64_sys_setsockopt+0x13f/0x1b0 [ 223.691005][T13760] do_syscall_64+0xfa/0x3b0 [ 223.691016][T13760] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.691027][T13760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.691037][T13760] ? clear_bhb_loop+0x60/0xb0 [ 223.691050][T13760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.691061][T13760] RIP: 0033:0x7f694b98eec9 [ 223.691071][T13760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.691081][T13760] RSP: 002b:00007f694c8c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.691092][T13760] RAX: ffffffffffffffda RBX: 00007f694bbe6090 RCX: 00007f694b98eec9 [ 223.691100][T13760] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 223.691107][T13760] RBP: 00007f694ba11f91 R08: 0000000000000004 R09: 0000000000000000 [ 223.691113][T13760] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.691120][T13760] R13: 00007f694bbe6128 R14: 00007f694bbe6090 R15: 00007ffc12530b58 [ 223.691138][T13760] [ 223.691255][T13760] Mem-Info: [ 223.720374][T13752] delete_channel: no stack [ 223.727747][T13760] active_anon:4841 inactive_anon:0 isolated_anon:0 [ 223.727747][T13760] active_file:2564 inactive_file:39932 isolated_file:0 [ 223.727747][T13760] unevictable:768 dirty:89 writeback:0 [ 223.727747][T13760] slab_reclaimable:12205 slab_unreclaimable:103447 [ 223.727747][T13760] mapped:28939 shmem:1363 pagetables:992 [ 223.727747][T13760] sec_pagetables:0 bounce:0 [ 223.727747][T13760] kernel_misc_reclaimable:0 [ 223.727747][T13760] free:1320006 free_pcp:14630 free_cma:0 [ 223.727835][T13760] Node 0 active_anon:19364kB inactive_anon:0kB active_file:10256kB inactive_file:159524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115756kB dirty:352kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12744kB pagetables:3828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.727899][T13760] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.727953][T13760] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.728014][T13760] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 223.728062][T13760] Node 0 DMA32 free:1377376kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19320kB inactive_anon:0kB active_file:10256kB inactive_file:157956kB unevictable:1536kB writepending:352kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:40912kB local_pcp:21132kB free_cma:0kB [ 223.728127][T13760] lowmem_reserve[]: 0 0 1 1 1 [ 223.728172][T13760] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 223.728233][T13760] lowmem_reserve[]: 0 0 0 0 0 [ 223.728279][T13760] Node 1 Normal free:3887264kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17600kB local_pcp:8608kB free_cma:0kB [ 223.728343][T13760] lowmem_reserve[]: 0 0 0 0 0 [ 223.728388][T13760] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) [ 224.240928][T13776] netlink: 'syz.0.2136': attribute type 8 has an invalid length. [ 224.241666][T13760] 3*4096kB (M) = 15360kB [ 224.287954][T13760] Node 0 DMA32: 346*4kB (ME) 486*8kB (UME) 137*16kB (UM) 319*32kB (UM) 121*64kB (UME) 57*128kB (UM) 51*256kB (UME) 18*512kB (UM) 9*1024kB (UM) 5*2048kB (UME) 317*4096kB (UM) = 1372872kB [ 224.307775][T13760] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 224.384806][T13760] Node 1 Normal: 194*4kB (UE) 53*8kB (UME) 43*16kB (UME) 70*32kB (UME) 28*64kB (UME) 9*128kB (UME) 5*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3887264kB [ 224.434892][T13760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.475581][T13760] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.512076][T13760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.521987][T13760] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.559779][T13760] 43856 total pagecache pages [ 224.584867][T13760] 0 pages in swap cache [ 224.604847][T13760] Free swap = 124996kB [ 224.609018][T13760] Total swap = 124996kB [ 224.613170][T13760] 2097051 pages RAM [ 224.641224][T13760] 0 pages HighMem/MovableOnly [ 224.649872][T13760] 425673 pages reserved [ 224.654154][T13760] 0 pages cma reserved [ 224.792156][T13802] __nla_validate_parse: 5 callbacks suppressed [ 224.792176][T13802] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2145'. [ 224.913480][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 224.928914][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2144'. [ 225.067218][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'. [ 225.132691][T13823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.195471][ T5878] Bluetooth: hci4: command 0x0405 tx timeout [ 225.219245][T13810] team0: No ports can be present during mode change [ 225.576507][T13842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.664267][T13846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2156'. [ 225.718779][T13850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2157'. [ 225.819274][T13853] syzkaller1: entered promiscuous mode [ 225.835635][T13860] xt_bpf: check failed: parse error [ 225.845681][T13853] syzkaller1: entered allmulticast mode [ 225.868267][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2157'. [ 225.885322][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 225.920641][T13853] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 225.941759][T13853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.207628][T13881] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2164'. [ 226.220403][T13882] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 226.312500][T13885] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.2166'. [ 226.322524][T13885] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 226.392126][T13891] bridge_slave_0: invalid flags given to default FDB implementation [ 226.574013][T13902] netlink: 'syz.4.2171': attribute type 1 has an invalid length. [ 226.591340][T13907] netlink: 'syz.4.2171': attribute type 1 has an invalid length. [ 226.647226][T13902] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.760201][T13921] netlink: 'syz.3.2177': attribute type 10 has an invalid length. [ 226.778065][T13921] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.832786][T13921] bridge_slave_1: left allmulticast mode [ 226.841000][T13921] bridge_slave_1: left promiscuous mode [ 226.855075][T13921] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.877260][T13921] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 226.926569][T13938] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 227.068418][T13941] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 227.105350][T13941] netlink: 'syz.4.2182': attribute type 11 has an invalid length. [ 227.114864][T13949] netlink: 'syz.1.2184': attribute type 1 has an invalid length. [ 227.438816][ T5878] Bluetooth: hci4: command 0x0405 tx timeout [ 227.549677][T13977] vlan5: entered promiscuous mode [ 227.598605][T13977] vlan5: entered allmulticast mode [ 227.628871][T13977] bond0: entered allmulticast mode [ 227.654360][T13977] bond_slave_0: entered allmulticast mode [ 227.695010][T13988] netlink: 'syz.3.2194': attribute type 1 has an invalid length. [ 227.703041][T13977] bond_slave_1: entered allmulticast mode [ 227.714218][T13977] bridge_slave_1: entered allmulticast mode [ 228.046593][T14021] netlink: 'syz.4.2201': attribute type 10 has an invalid length. [ 228.079146][T14021] team0: Device hsr_slave_0 failed to register rx_handler [ 228.658539][T14067] xfrm1: entered allmulticast mode [ 228.752932][T14080] macvtap1: entered promiscuous mode [ 228.764566][T14080] macvtap1: entered allmulticast mode [ 228.788737][T14080] bond_slave_0: entered promiscuous mode [ 228.794458][T14080] bond_slave_1: entered promiscuous mode [ 228.843352][T14080] bond0: entered allmulticast mode [ 228.856380][T14080] bond_slave_0: entered allmulticast mode [ 228.867172][T14080] bond_slave_1: entered allmulticast mode [ 228.896822][T14080] bond0: entered promiscuous mode [ 228.922944][T14080] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 228.945891][T14080] team0: Device macvtap1 failed to register rx_handler [ 228.954411][T14080] bond0: left allmulticast mode [ 228.971816][T14080] bond_slave_0: left allmulticast mode [ 228.978914][T14080] bond_slave_1: left allmulticast mode [ 228.984806][T14080] bond0: left promiscuous mode [ 228.990386][T14080] bond_slave_0: left promiscuous mode [ 228.995905][T14080] bond_slave_1: left promiscuous mode [ 229.338059][T14158] netlink: 'syz.1.2226': attribute type 10 has an invalid length. [ 229.893119][T14191] netlink: 'syz.3.2235': attribute type 10 has an invalid length. [ 229.932084][T14205] __nla_validate_parse: 14 callbacks suppressed [ 229.932104][T14205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2238'. [ 229.971346][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 230.021310][T14205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2238'. [ 230.025843][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 230.120213][T14215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2239'. [ 230.197254][T14209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2239'. [ 230.414964][T14233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2244'. [ 230.480634][T14231] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 230.533582][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2244'. [ 231.365708][T14280] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2255'. [ 231.467585][T14284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.643257][T14298] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2261'. [ 231.941959][T14317] netlink: 'syz.3.2268': attribute type 21 has an invalid length. [ 232.051488][T14321] tipc: Enabling of bearer rejected, already enabled [ 232.081059][T14321] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 235.660052][T14359] __nla_validate_parse: 8 callbacks suppressed [ 235.660072][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2281'. [ 235.727005][T14360] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2280'. [ 235.782794][T14360] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2280'. [ 236.313022][T14385] veth0: entered promiscuous mode [ 236.347203][T14385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2288'. [ 236.568259][T14400] netlink: 'syz.4.2294': attribute type 33 has an invalid length. [ 236.634260][T14397] bridge_slave_0: entered promiscuous mode [ 236.705420][T14411] netlink: 'syz.2.2292': attribute type 4 has an invalid length. [ 236.776939][T14413] netlink: 'syz.2.2292': attribute type 4 has an invalid length. [ 236.837100][T14417] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2295'. [ 237.013855][T14430] netlink: 'syz.1.2298': attribute type 1 has an invalid length. [ 237.026772][T14423] : renamed from hsr0 (while UP) [ 237.038342][T14402] tipc: Enabled bearer , priority 0 [ 237.060258][T14429] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 237.163839][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2299'. [ 237.216454][T14434] xt_l2tp: missing protocol rule (udp|l2tpip) [ 237.239471][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2299'. [ 237.382027][T14408] syzkaller0: entered promiscuous mode [ 237.389217][T14408] syzkaller0: entered allmulticast mode [ 237.405415][T14408] tipc: Resetting bearer [ 237.482757][T14399] tipc: Resetting bearer [ 238.056296][T14126] tipc: Node number set to 4169655920 [ 238.558271][T14468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2309'. [ 239.041939][T14399] tipc: Disabling bearer [ 239.339251][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2312'. [ 239.369961][T14479] veth1: entered allmulticast mode [ 239.390241][T14480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2312'. [ 239.482213][T14492] netlink: 'syz.1.2316': attribute type 4 has an invalid length. [ 239.564807][T14499] openvswitch: netlink: Actions may not be safe on all matching packets [ 239.912496][T14516] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.936464][T14516] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.167379][T14516] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.208152][T14516] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.353114][T14516] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.370270][T14516] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.522680][T14516] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.547165][T14516] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.726470][T14567] __nla_validate_parse: 1 callbacks suppressed [ 240.726490][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2337'. [ 240.762307][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 240.869089][T14567] bond6: entered allmulticast mode [ 240.874495][ T3569] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.902266][ T3569] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.911273][ T3569] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.916180][T14583] netlink: 'syz.2.2341': attribute type 11 has an invalid length. [ 240.921064][ T3569] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.951831][ T3569] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.975588][ T3569] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.992633][T14583] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2341'. [ 241.055658][T14139] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.082487][T14139] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.088801][T14590] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2342'. [ 241.148137][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 241.253114][T14605] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2347'. [ 241.282305][T14605] gretap0: entered promiscuous mode [ 241.305081][T14609] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2347'. [ 241.410878][T14609] 0ªî{X¹¦: renamed from gretap0 [ 241.452777][T14609] 0ªî{X¹¦: left promiscuous mode [ 241.479161][T14609] 0ªî{X¹¦: entered allmulticast mode [ 241.491876][T14609] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 241.609259][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 241.630571][T14629] netlink: 'syz.2.2351': attribute type 1 has an invalid length. [ 241.652058][T14624] openvswitch: netlink: IPv4 tunnel dst address is zero [ 241.696340][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 241.898660][T14647] netlink: 'syz.2.2357': attribute type 17 has an invalid length. [ 241.909603][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2357'. [ 241.955540][T14650] netlink: 'syz.3.2358': attribute type 12 has an invalid length. [ 242.021695][T14652] netlink: 'syz.1.2359': attribute type 9 has an invalid length. [ 242.050592][T14652] netlink: 'syz.1.2359': attribute type 9 has an invalid length. [ 242.139211][T14658] openvswitch: netlink: Flow actions attr not present in new flow. [ 242.437591][T14680] syz_tun: entered allmulticast mode [ 242.539409][T14680] syz_tun: left allmulticast mode [ 242.738246][T14693] nbd: device at index 2 is going down [ 242.827880][T14698] bridge_slave_0: left allmulticast mode [ 242.833779][T14698] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.896349][T14698] bond0: (slave bridge_slave_1): Releasing backup interface [ 242.936166][T14698] bond0: (slave bond_slave_0): Releasing backup interface [ 242.958176][T14698] bond0: (slave bond_slave_1): Releasing backup interface [ 243.001155][T14698] team0: Port device team_slave_0 removed [ 243.022478][T14698] team0: Port device team_slave_1 removed [ 243.030237][T14698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.038671][T14698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.057801][T14698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.065830][T14698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.084920][T14698] bond0: (slave wlan1): Releasing backup interface [ 243.121118][T14698] vlan2: left promiscuous mode [ 243.126983][T14698] bridge0: left promiscuous mode [ 243.133369][T14698] bridge2: port 1(vlan2) entered disabled state [ 243.148621][T14698] tipc: Resetting bearer [ 243.323339][T14716] netlink: 'syz.2.2378': attribute type 2 has an invalid length. [ 243.430120][T14724] xt_socket: unknown flags 0x50 [ 243.460476][T14724] nbd: nbd0 already in use [ 243.559488][T14731] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 243.741338][T14749] netlink: 'syz.0.2387': attribute type 2 has an invalid length. [ 243.756073][T14750] netlink: 'syz.1.2390': attribute type 21 has an invalid length. [ 243.768967][T14750] netlink: 'syz.1.2390': attribute type 21 has an invalid length. [ 243.771454][ T30] audit: type=1800 audit(1759140192.908:6): pid=14752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2389" name="memory.events" dev="tmpfs" ino=2296 res=0 errno=0 [ 243.918451][T14755] tipc: Resetting bearer [ 243.927119][T14755] tipc: Resetting bearer [ 244.008776][T14761] netlink: 'syz.4.2393': attribute type 1 has an invalid length. [ 244.069188][T14765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.312736][T14781] tipc: Enabling of bearer rejected, already enabled [ 244.323145][T14780] tipc: Enabling of bearer rejected, already enabled [ 244.574196][T14793] tipc: Enabling of bearer rejected, already enabled [ 244.600058][T14793] tipc: Resetting bearer [ 245.270897][T14833] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.370336][ T55] block nbd0: Possible stuck request ffff888025040000: control (read@0,1024B). Runtime 150 seconds [ 245.381425][ T55] block nbd0: Possible stuck request ffff8880250401c0: control (read@1024,1024B). Runtime 150 seconds [ 245.392773][ T55] block nbd0: Possible stuck request ffff888025040380: control (read@2048,1024B). Runtime 150 seconds [ 245.403946][ T55] block nbd0: Possible stuck request ffff888025040540: control (read@3072,1024B). Runtime 150 seconds [ 246.391483][T14159] tipc: Subscription rejected, illegal request [ 246.416897][T14883] __nla_validate_parse: 14 callbacks suppressed [ 246.416917][T14883] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.2420'. [ 246.956965][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 247.019186][T14911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2429'. [ 247.594016][T14941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2441'. [ 247.616033][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2441'. [ 247.741237][T14953] validate_nla: 6 callbacks suppressed [ 247.741255][T14953] netlink: 'syz.2.2442': attribute type 7 has an invalid length. [ 247.821181][T14953] : entered promiscuous mode [ 247.834539][T14953] netlink: 'syz.2.2442': attribute type 7 has an invalid length. [ 247.847172][T14953] netlink: 'syz.2.2442': attribute type 7 has an invalid length. [ 247.857242][T14953] netlink: 'syz.2.2442': attribute type 7 has an invalid length. [ 247.873602][T14953] netlink: 'syz.2.2442': attribute type 7 has an invalid length. [ 247.884214][T14953] netlink: 'syz.2.2442': attribute type 7 has an invalid length. [ 247.893935][T14953] netlink: 'syz.2.2442': attribute type 7 has an invalid length. [ 247.904529][T14953] netlink: 'syz.2.2442': attribute type 7 has an invalid length. [ 247.914105][T14953] netlink: 'syz.2.2442': attribute type 7 has an invalid length. [ 247.931665][T14960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2445'. [ 247.952097][T14953] netlink: 'syz.2.2442': attribute type 7 has an invalid length. [ 248.732937][T14986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.055282][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 249.482496][T15021] veth17: entered promiscuous mode [ 249.498470][T15021] veth17: entered allmulticast mode [ 249.895157][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 250.284455][T15056] tipc: Enabling of bearer rejected, already enabled [ 250.466034][T15064] tipc: Enabling of bearer rejected, already enabled [ 250.690976][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'. [ 250.723273][T15069] IPv6: Can't replace route, no match found [ 250.754336][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2481'. [ 250.909607][T15084] xt_socket: unknown flags 0x50 [ 250.950229][T15089] policy can only be matched on NF_INET_PRE_ROUTING [ 250.950249][T15089] unable to load match [ 250.992161][T15090] openvswitch: netlink: Message has 4 unknown bytes. [ 251.083239][T15089] policy can only be matched on NF_INET_PRE_ROUTING [ 251.083261][T15089] unable to load match [ 251.100012][T15086] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 251.727056][T15123] __nla_validate_parse: 2 callbacks suppressed [ 251.727075][T15123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2494'. [ 251.754140][T15123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2494'. [ 251.830701][T15125] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 252.180645][T15140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'. [ 252.319679][T15140] nbd: socks must be embedded in a SOCK_ITEM attr [ 252.328290][T15135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2500'. [ 252.348203][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2502'. [ 252.739153][T15155] bond7: (slave bridge0): making interface the new active one [ 252.756528][T15155] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 252.812077][T15164] validate_nla: 26 callbacks suppressed [ 252.812095][T15164] netlink: 'syz.2.2507': attribute type 2 has an invalid length. [ 252.918204][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2510'. [ 253.027675][T15179] sctp: [Deprecated]: syz.2.2513 (pid 15179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.027675][T15179] Use struct sctp_sack_info instead [ 253.057768][T15179] sctp: [Deprecated]: syz.2.2513 (pid 15179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.057768][T15179] Use struct sctp_sack_info instead [ 253.088098][T15179] openvswitch: netlink: Actions may not be safe on all matching packets [ 253.284170][T15198] openvswitch: netlink: Multiple metadata blocks provided [ 253.363078][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'. [ 253.417680][T15210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2521'. [ 253.535678][T15214] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 253.575563][T15214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.346942][T15258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2540'. [ 254.889476][T15274] batadv_slave_0: entered promiscuous mode [ 254.983721][T15274] batadv_slave_0: left promiscuous mode [ 255.372601][T15304] tipc: Enabling of bearer rejected, already enabled [ 255.577968][T15317] netlink: 'syz.4.2554': attribute type 1 has an invalid length. [ 255.602640][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.741663][T15326] netlink: 'syz.1.2558': attribute type 1 has an invalid length. [ 255.789712][T15325] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 255.801736][T15325] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 255.863283][T15326] vlan5: entered allmulticast mode [ 255.869698][T15326] bridge0: entered allmulticast mode [ 255.877669][T15326] bridge0: entered promiscuous mode [ 255.884493][T15326] bridge0: left promiscuous mode [ 255.901195][T15326] bond8: (slave vlan5): making interface the new active one [ 255.913689][T15326] bridge0: entered promiscuous mode [ 255.922068][T15326] bond8: (slave vlan5): Enslaving as an active interface with an up link [ 255.963574][T15333] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2561'. [ 256.135301][T15345] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 256.154013][T15345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.328769][T15357] tipc: Enabled bearer , priority 15 [ 256.819941][T15391] xt_l2tp: missing protocol rule (udp|l2tpip) [ 257.101587][T15415] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 257.105220][T15412] netlink: 'syz.0.2586': attribute type 10 has an invalid length. [ 257.168621][T15418] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 257.179753][T15418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.211074][T15412] batman_adv: batadv0: Adding interface: team0 [ 257.244262][T15412] batman_adv: batadv0: The MTU of interface team0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 257.282205][T15412] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 257.476794][T15438] ================================================================== [ 257.484869][T15438] BUG: KASAN: slab-out-of-bounds in ieee80211_ie_split_ric+0x8fa/0x950 [ 257.493122][T15438] Read of size 1 at addr ffff8880538220c1 by task syz.0.2592/15438 [ 257.500994][T15438] [ 257.503307][T15438] CPU: 1 UID: 0 PID: 15438 Comm: syz.0.2592 Not tainted syzkaller #0 PREEMPT(full) [ 257.503321][T15438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.503336][T15438] Call Trace: [ 257.503341][T15438] [ 257.503346][T15438] dump_stack_lvl+0x189/0x250 [ 257.503362][T15438] ? __virt_addr_valid+0x1c8/0x5c0 [ 257.503377][T15438] ? rcu_is_watching+0x15/0xb0 [ 257.503393][T15438] ? __kasan_check_byte+0x12/0x40 [ 257.503421][T15438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.503443][T15438] ? rcu_is_watching+0x15/0xb0 [ 257.503462][T15438] ? lock_release+0x4b/0x3e0 [ 257.503479][T15438] ? __virt_addr_valid+0x1c8/0x5c0 [ 257.503492][T15438] ? __virt_addr_valid+0x4a5/0x5c0 [ 257.503504][T15438] print_report+0xca/0x240 [ 257.503515][T15438] ? ieee80211_ie_split_ric+0x8fa/0x950 [ 257.503529][T15438] kasan_report+0x118/0x150 [ 257.503543][T15438] ? ieee80211_ie_split_ric+0x8fa/0x950 [ 257.503559][T15438] ieee80211_ie_split_ric+0x8fa/0x950 [ 257.503579][T15438] cfg80211_connect+0x10bb/0x21a0 [ 257.503598][T15438] cfg80211_mgd_wext_connect+0x4b0/0x610 [ 257.503611][T15438] cfg80211_wext_siwessid+0xc4/0x160 [ 257.503622][T15438] ioctl_standard_iw_point+0x686/0xd40 [ 257.503638][T15438] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 257.503649][T15438] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 257.503663][T15438] ? full_name_hash+0x92/0xe0 [ 257.503674][T15438] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 257.503684][T15438] ioctl_standard_call+0xaf/0x1b0 [ 257.503696][T15438] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 257.503706][T15438] wext_ioctl_dispatch+0xee/0x410 [ 257.503716][T15438] ? __pfx_ioctl_standard_call+0x10/0x10 [ 257.503728][T15438] wext_handle_ioctl+0x100/0x1c0 [ 257.503740][T15438] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 257.503751][T15438] ? __lock_acquire+0xab9/0xd20 [ 257.503769][T15438] sock_ioctl+0x15f/0x790 [ 257.503789][T15438] ? __pfx_sock_ioctl+0x10/0x10 [ 257.503803][T15438] ? __fget_files+0x2a/0x420 [ 257.503812][T15438] ? __fget_files+0x3a0/0x420 [ 257.503820][T15438] ? __fget_files+0x2a/0x420 [ 257.503830][T15438] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.503843][T15438] ? __pfx_sock_ioctl+0x10/0x10 [ 257.503857][T15438] __se_sys_ioctl+0xf9/0x170 [ 257.503870][T15438] do_syscall_64+0xfa/0x3b0 [ 257.503881][T15438] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.503891][T15438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.503902][T15438] ? clear_bhb_loop+0x60/0xb0 [ 257.503913][T15438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.503923][T15438] RIP: 0033:0x7fda6dd8eec9 [ 257.503933][T15438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.503943][T15438] RSP: 002b:00007fda6ec55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.503955][T15438] RAX: ffffffffffffffda RBX: 00007fda6dfe5fa0 RCX: 00007fda6dd8eec9 [ 257.503963][T15438] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000004 [ 257.503970][T15438] RBP: 00007fda6de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 257.503976][T15438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.503983][T15438] R13: 00007fda6dfe6038 R14: 00007fda6dfe5fa0 R15: 00007ffd700ba618 [ 257.503995][T15438] [ 257.503999][T15438] [ 257.819962][T15438] Allocated by task 11663: [ 257.824353][T15438] kasan_save_track+0x3e/0x80 [ 257.829019][T15438] __kasan_kmalloc+0x93/0xb0 [ 257.833615][T15438] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 257.840033][T15438] kmemdup_noprof+0x2b/0x70 [ 257.844523][T15438] cfg80211_wext_siwgenie+0x1ad/0x320 [ 257.849891][T15438] ioctl_standard_iw_point+0x686/0xd40 [ 257.855365][T15438] ioctl_standard_call+0xaf/0x1b0 [ 257.860385][T15438] wext_ioctl_dispatch+0xee/0x410 [ 257.865395][T15438] wext_handle_ioctl+0x100/0x1c0 [ 257.870332][T15438] sock_ioctl+0x15f/0x790 [ 257.874669][T15438] __se_sys_ioctl+0xf9/0x170 [ 257.879259][T15438] do_syscall_64+0xfa/0x3b0 [ 257.883749][T15438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.889631][T15438] [ 257.891954][T15438] The buggy address belongs to the object at ffff8880538220c0 [ 257.891954][T15438] which belongs to the cache kmalloc-8 of size 8 [ 257.905660][T15438] The buggy address is located 0 bytes to the right of [ 257.905660][T15438] allocated 1-byte region [ffff8880538220c0, ffff8880538220c1) [ 257.919964][T15438] [ 257.922272][T15438] The buggy address belongs to the physical page: [ 257.928678][T15438] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888053822e40 pfn:0x53822 [ 257.938743][T15438] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 257.946795][T15438] page_type: f5(slab) [ 257.950771][T15438] raw: 00fff00000000200 ffff88801a441500 ffffea0001b2fad0 ffffea00014e9f10 [ 257.959342][T15438] raw: ffff888053822e40 0000000000800068 00000000f5000000 0000000000000000 [ 257.967909][T15438] page dumped because: kasan: bad access detected [ 257.974307][T15438] page_owner tracks the page as allocated [ 257.980008][T15438] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11644, tgid 11643 (syz.4.1506), ts 186114687557, free_ts 185745645903 [ 257.999445][T15438] post_alloc_hook+0x240/0x2a0 [ 258.004209][T15438] get_page_from_freelist+0x21e4/0x22c0 [ 258.009744][T15438] __alloc_frozen_pages_noprof+0x181/0x370 [ 258.015533][T15438] alloc_pages_mpol+0x232/0x4a0 [ 258.020374][T15438] allocate_slab+0x8a/0x370 [ 258.024863][T15438] ___slab_alloc+0xbeb/0x1420 [ 258.029552][T15438] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 258.035958][T15438] kvasprintf+0xdc/0x190 [ 258.040199][T15438] kobject_set_name_vargs+0x61/0x110 [ 258.045479][T15438] kobject_init_and_add+0xdd/0x190 [ 258.050578][T15438] netdev_queue_update_kobjects+0x249/0x6c0 [ 258.056457][T15438] netdev_register_kobject+0x258/0x310 [ 258.061907][T15438] register_netdevice+0x126c/0x1ae0 [ 258.067093][T15438] bond_newlink+0x60/0xb0 [ 258.071409][T15438] rtnl_newlink_create+0x310/0xb00 [ 258.076511][T15438] rtnl_newlink+0x16d6/0x1c70 [ 258.081183][T15438] page last free pid 11632 tgid 11632 stack trace: [ 258.087664][T15438] __free_frozen_pages+0xbc4/0xd30 [ 258.092773][T15438] __tlb_remove_table+0x2d2/0x3b0 [ 258.097788][T15438] tlb_remove_table_rcu+0x85/0x100 [ 258.102882][T15438] rcu_core+0xca8/0x1770 [ 258.107115][T15438] handle_softirqs+0x283/0x870 [ 258.111861][T15438] __irq_exit_rcu+0xca/0x1f0 [ 258.116441][T15438] irq_exit_rcu+0x9/0x30 [ 258.120676][T15438] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 258.126294][T15438] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 258.132267][T15438] [ 258.134573][T15438] Memory state around the buggy address: [ 258.140194][T15438] ffff888053821f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 258.148241][T15438] ffff888053822000: 06 fc fc fc 06 fc fc fc fa fc fc fc fa fc fc fc [ 258.156292][T15438] >ffff888053822080: fa fc fc fc 05 fc fc fc 01 fc fc fc 00 fc fc fc [ 258.164345][T15438] ^ [ 258.170483][T15438] ffff888053822100: 00 fc fc fc 00 fc fc fc 05 fc fc fc 05 fc fc fc [ 258.178527][T15438] ffff888053822180: 05 fc fc fc 05 fc fc fc 05 fc fc fc fa fc fc fc [ 258.186568][T15438] ================================================================== [ 258.205399][T15438] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 258.212610][T15438] CPU: 0 UID: 0 PID: 15438 Comm: syz.0.2592 Not tainted syzkaller #0 PREEMPT(full) [ 258.221974][T15438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 258.232016][T15438] Call Trace: [ 258.235279][T15438] [ 258.238193][T15438] dump_stack_lvl+0x99/0x250 [ 258.242773][T15438] ? __asan_memcpy+0x40/0x70 [ 258.247351][T15438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.252540][T15438] ? __pfx__printk+0x10/0x10 [ 258.257130][T15438] vpanic+0x281/0x750 [ 258.261098][T15438] ? __pfx_print_hex_dump+0x10/0x10 [ 258.266280][T15438] ? __pfx_vpanic+0x10/0x10 [ 258.270771][T15438] ? preempt_schedule_common+0x83/0xd0 [ 258.276212][T15438] ? preempt_schedule+0xae/0xc0 [ 258.281048][T15438] panic+0xb9/0xc0 [ 258.284754][T15438] ? __pfx_panic+0x10/0x10 [ 258.289160][T15438] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.295474][T15438] ? ieee80211_ie_split_ric+0x8fa/0x950 [ 258.301011][T15438] check_panic_on_warn+0x89/0xb0 [ 258.305940][T15438] ? ieee80211_ie_split_ric+0x8fa/0x950 [ 258.311474][T15438] end_report+0x78/0x160 [ 258.315708][T15438] kasan_report+0x129/0x150 [ 258.320226][T15438] ? ieee80211_ie_split_ric+0x8fa/0x950 [ 258.325767][T15438] ieee80211_ie_split_ric+0x8fa/0x950 [ 258.331135][T15438] cfg80211_connect+0x10bb/0x21a0 [ 258.336157][T15438] cfg80211_mgd_wext_connect+0x4b0/0x610 [ 258.341783][T15438] cfg80211_wext_siwessid+0xc4/0x160 [ 258.347052][T15438] ioctl_standard_iw_point+0x686/0xd40 [ 258.352504][T15438] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 258.358381][T15438] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 258.364352][T15438] ? full_name_hash+0x92/0xe0 [ 258.369014][T15438] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 258.374896][T15438] ioctl_standard_call+0xaf/0x1b0 [ 258.379915][T15438] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 258.385792][T15438] wext_ioctl_dispatch+0xee/0x410 [ 258.390808][T15438] ? __pfx_ioctl_standard_call+0x10/0x10 [ 258.396430][T15438] wext_handle_ioctl+0x100/0x1c0 [ 258.401354][T15438] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 258.406796][T15438] ? __lock_acquire+0xab9/0xd20 [ 258.411646][T15438] sock_ioctl+0x15f/0x790 [ 258.416001][T15438] ? __pfx_sock_ioctl+0x10/0x10 [ 258.420851][T15438] ? __fget_files+0x2a/0x420 [ 258.425422][T15438] ? __fget_files+0x3a0/0x420 [ 258.430086][T15438] ? __fget_files+0x2a/0x420 [ 258.434659][T15438] ? bpf_lsm_file_ioctl+0x9/0x20 [ 258.439593][T15438] ? __pfx_sock_ioctl+0x10/0x10 [ 258.444439][T15438] __se_sys_ioctl+0xf9/0x170 [ 258.449016][T15438] do_syscall_64+0xfa/0x3b0 [ 258.453510][T15438] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.458691][T15438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.464759][T15438] ? clear_bhb_loop+0x60/0xb0 [ 258.469444][T15438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.475324][T15438] RIP: 0033:0x7fda6dd8eec9 [ 258.479725][T15438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.499328][T15438] RSP: 002b:00007fda6ec55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.507733][T15438] RAX: ffffffffffffffda RBX: 00007fda6dfe5fa0 RCX: 00007fda6dd8eec9 [ 258.515691][T15438] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000004 [ 258.523657][T15438] RBP: 00007fda6de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 258.531614][T15438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.539570][T15438] R13: 00007fda6dfe6038 R14: 00007fda6dfe5fa0 R15: 00007ffd700ba618 [ 258.547534][T15438] [ 258.550817][T15438] Kernel Offset: disabled [ 258.555127][T15438] Rebooting in 86400 seconds..