last executing test programs: 19.127825954s ago: executing program 0 (id=12509): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@generic={0x10, 0x8, 0x7, 0x3, 0x1aad}]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x23c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000090) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000440)=0x8, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0xff, 0x6, 0x0, @mcast2, @mcast2, 0x80, 0x8000, 0x1, 0x953}}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x3, 0x0, 0x5fc, 0x5, 0x24000, r4, 0x3, '\x00', r5, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r6, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000600)=0x5, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_team\x00'}, 0x18) unshare(0x6a040000) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448cb, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c0100001600010000000000010000000a01010000000000000000000000000000000000000000000000ffff000000004e240000000000000000802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414aa0000000033000000ffffffff000000000000000000000000200000000000000000000000000000000000000000000000050000000000000068482c4500000000f1ffffffffffffff03000000000000000000000000000000000000000000004000000000000000000100000000004000feffffffffffffff000000000000000096070000000800000000000000000000030000000000000000000000b1a001000c001c00", @ANYRES32=0x0, @ANYBLOB="0100000008"], 0x10c}}, 0x0) 15.280956177s ago: executing program 0 (id=12528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="580000000002010100000000008f9131ed4a9be8c393c60000000a00000504000180040003803c0002800c00028005000100210000002c00018014000300fc02000000000000000000000000000014000400fe8000000000"], 0x58}}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000000)='GPL\x00', 0x108, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="580000000002010100000000008f9131ed4a9be8c393c60000000a00000504000180040003803c0002800c00028005000100210000002c00018014000300fc02000000000000000000000000000014000400fe8000000000"], 0x58}}, 0x8044) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000000)='GPL\x00', 0x108, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) (async) 15.116571074s ago: executing program 0 (id=12532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)=0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000480)) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x80}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000460000000e0001006e657464657673696d0000000f0002006e50cbb500eeb5e39a657464657673696d30000008008e00030000000c008f00000090000000000000000000"], 0x54}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES64], 0xc4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x2, {{0xa, 0x4e22, 0x3, @private2, 0x8}}, {{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}}}, 0x108) 14.811058231s ago: executing program 0 (id=12536): socketpair(0x22, 0xa, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000009000000000000000800000081118600000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x9a, &(0x7f0000000200)={@broadcast, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000100", 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0xfffe, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "75462d59cf0d72118137e1d8c01d4641aa2936006171375e0c0d70a00038f8cb", "85bf05267ec510575a1cdf03bc75bb00", {"850d58622eee203833d9c122aabe7075", "f071ffd6f854a9c51535886ee02e0af9"}}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf250300000014000180100001006574683a6970366772653000c4c846725afda43dbe30896e856cc4acef8253648080530830036937701660b2023307afd9a34fd8529223a7e84e6614244a553edddec0a5c7737448cd052309bc7137319d46da62ef583c63170eb1615f69157339d5e18007cb2102c3658a9f727140fa7feb2fa72432a6fab738be6286d412f75ae30f0d76404d7908331bd86813cca76197850a6b137617517761270c07128faa07a45303fdc04e09a7b600341b6abe1511a8afa5b6bef8d0a0bef4faf4f037a3a0330cf80d4155a5017b3551dd094f"], 0x28}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 14.610688228s ago: executing program 0 (id=12541): getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000600)={{r0, &(0x7f00000000c0)='\x00', 0x8800, &(0x7f0000000100)={@align=0xc12, {0x0, 0xfffa, 0x7f, 0x8}}, 0xffffffff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x1}, 0x6, &(0x7f0000000540)=[{0x3, 0x8, &(0x7f00000001c0)='\x00', &(0x7f0000000200)="cc9ad9152f44407189208cccb2917610d7688f74a6a231878f2b38a76b458066b594a9edac84eca02487fde97a2eeec6f2729388d1a9d341c1b393964431d58df3db0b7aa42448e1eb06", 0x4a, 0x38}, {0x2, 0x6, &(0x7f0000000280)='[$\x00', &(0x7f00000002c0)="4d31bba1c333abcf58", 0x9}, {0x1, 0x1000, &(0x7f0000000300)='@!@\x00', &(0x7f0000000340)="b48af2d6362707251a6e5080a3db9a3aa6ffb73251a7f89ad4387c7ce6c15fdf9f255d5157011605afbb153ba67442bce2791dd75877a9e02e85d83034a9", 0x3e, 0x2}, {0x3, 0x95d7, &(0x7f0000000380)='&\x00', &(0x7f00000003c0)="153eae570672283bd9c25835b469f6e994d98c17052df6458cc2e78575c2bf9817b2bdce13602585795dab8f8faf0a31b4f62ab11d28086eb5f6556f4dcd570bcce61fb3f5078dc20d1a5ca05bbfa793bd1e501106e22bd807baaa2296aeb806beced410c441ced8", 0x68, 0x12}, {0x2, 0x8, &(0x7f0000000440)='+^\x00', &(0x7f0000000480)="bf349ac8c25d474dd5e4459b831f0fa0aa341620abc342f931748a1f39cced61dcb29b25b7e36f57b6c294c9bafabcba221a269c8f3fa0824a9d569910510be5", 0x40, 0x32}, {0x1, 0x70, &(0x7f00000004c0)='&\x00)\x00', &(0x7f0000000500)="364392224204bd94e9177e90cc73fe2619284e46d85347aa1d7f4578a26603bac3b6181d32b69ec4e4ef062d0812db8e08100b406d2c4a", 0x37, 0x10}]}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000740)={0x1, 0x2, 0x1000, 0x5, &(0x7f0000000680)="f52bca0c0d", 0x72, 0x0, &(0x7f00000006c0)="f446c3f787d942942f0c499fcaf40735db96d6588be8b50db6cccd01f47e3a2b015e330e5bad087988dc113e18a4106b337e4c8c566f629fbf0b9c6fde2202b1a91ed26116c5d273fc68558a86a47b0d2e6cb88669e6e544364f1333627592a2297cdeea626d76d59076a560ac2ca7f8db81"}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000007c0)={0x0, 0xb, 0x4, [0x6, 0x2, 0x150, 0x36]}, &(0x7f0000000800)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000840)={r3, 0x6}, &(0x7f0000000880)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x6, 0x6, "dbfc"}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40004) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00)={r1}, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000b40)={r6, &(0x7f0000000a40)='&\x00)\x00', 0x200, &(0x7f0000000a80)={@_ha_fsid={[0x8, 0x2]}, {0x7, 0x7, 0x0, 0xe5a2}}, 0xb17, &(0x7f0000000ac0), &(0x7f0000000b00)=0x42d039e0}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000b80)) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000c80)=0x28c3b81c0f9dc4c5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000cc0)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000d00)={0x1d, r8}, 0x10) bind$tipc(r1, &(0x7f0000000d40)=@name={0x1e, 0x2, 0x2, {{0x43, 0x2}, 0x2}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000e40)={'gretap0\x00', &(0x7f0000000d80)={'tunl0\x00', r8, 0x20, 0x40, 0x3, 0xffffd076, {{0x1e, 0x4, 0x3, 0x7, 0x78, 0x65, 0x0, 0xff, 0x2f, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x45, 0x2, [{0x5, 0xc, "d17c9fb7cd58d3495d7b"}, {0x7, 0x5, "757f0e"}, {0x2, 0xd, "5ea082f3385ee74daa580d"}, {0x5, 0xf, "14217e1d528f3f87f421cf2247"}, {0x7, 0x9, "911491b1a3c00c"}, {0x2, 0x9, "35f994edc3181a"}]}, @ssrr={0x89, 0x1f, 0x94, [@private=0xa010100, @multicast2, @rand_addr=0x64010101, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000e80), 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000ec0)={r4, 0x8, 0x10, 0x1ff, 0x7f, 0x8, 0x762, 0xd7, {0x0, @in6={{0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x401}}, 0xfffffffd, 0x0, 0x5, 0x9, 0x10}}, &(0x7f0000000f80)=0xb0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000000fc0)={0x0, 0x2, [0x24, 0xe1b, 0x1220, 0x2, 0x6, 0x25e45cbb]}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001040), r6) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x38, r11, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa48}]}, 0x38}, 0x1, 0x0, 0x0, 0x40048081}, 0x404c011) recvmsg$can_bcm(r6, &(0x7f0000001380)={&(0x7f0000001140)=@x25={0x9, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f00000011c0)=""/93, 0x5d}, {&(0x7f0000001240)=""/86, 0x56}, {&(0x7f00000012c0)=""/119, 0x77}], 0x3}, 0x0) sendmsg$nl_route(r6, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)=@mpls_delroute={0xa8, 0x19, 0x4, 0x70bd2c, 0x25dfdbfb, {0x1c, 0x10, 0x80, 0x0, 0xff, 0x3, 0x0, 0x8}, [@RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0x1}, {0x1, 0x0, 0x1}, {0xf0caf, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6}, {0xffffe, 0x0, 0x1}, {0x300, 0x0, 0x1}, {}, {0xffff, 0x0, 0x1}, {0xfffff}, {0x2}, {0xc, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1}, {0x25e}, {0xb07, 0x0, 0x1}, {0x6}, {0x8000, 0x0, 0x1}, {0x9}, {0x56c8}, {0x1}, {0x8, 0x0, 0x1}, {0x5}, {0x0, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x7ff}, {0xf7, 0x0, 0x1}, {0x2}]}, @RTA_OIF={0x8, 0x4, r9}]}, 0xa8}}, 0xe4761076f177cdac) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000001540)={0x8, 'syz_tun\x00', {'veth1_to_bridge\x00'}, 0x8ec0}) sendmsg$can_raw(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)=@canfd={{0x1}, 0x33, 0x2, 0x0, 0x0, "3f24d0c3d9aacb21db8139b0fd246c0459b0e7786b5bd67c50f6552b2e7445ad1928b50c04b42baf28d6da07b36c2a656be20c610baa86bf3e95fcaad583753b"}, 0x48}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000004) r12 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0}, &(0x7f00000016c0)=0xc) setsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000001700)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x4e20, 0x1, 0x4e21, 0x7f, 0xa, 0x60, 0xa0, 0x87, 0x0, r13}, {0x223, 0x4, 0x401, 0xf, 0xa142, 0x8, 0x7ff, 0x6}, {0x3, 0x1, 0x7, 0x8}, 0x1, 0x6e6bb9, 0x2}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x34ff, 0x0, 0x3, 0x5, 0x8, 0x7, 0x76f244da}}, 0xe8) 14.294156281s ago: executing program 0 (id=12547): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) (async, rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xcc, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x7ff}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x9}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3991}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40002) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4.073370457s ago: executing program 2 (id=12601): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000), 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0000d20b0600050001"], 0x24}}, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0xa, [{0x3, 0x401}, {0x0, 0x64}, {0xffff, 0x1}, {0xfffff78d}, {0x6, 0xfff}, {0x1, 0x1}, {0x4, 0xfffffffc}, {0x5, 0xb}, {0x3, 0x400}, {0x0, 0x10000000}]}}) (async) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000000)={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}) 3.962697211s ago: executing program 2 (id=12604): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x14, 0x1, 0xa, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x20004040) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x4ead0b5480efff64, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x10f, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000804) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b920, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x27d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.282641411s ago: executing program 2 (id=12613): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, @sadb_x_sa2={0x2, 0x13, 0x32, 0x0, 0x0, 0x70bd2c, 0x103503}]}, 0x50}, 0x1, 0x7}, 0x48000) 3.184002436s ago: executing program 2 (id=12615): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, 0x0, &(0x7f0000000140)=""/75}, 0x20) (rerun: 64) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x2b, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5c}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x3, 0x7, 0xb, 0x2, 0x6}, @generic={0x7, 0xc, 0x5, 0x7, 0xd7a}, @call={0x85, 0x0, 0x0, 0x8a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x4, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0xf, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xffe, &(0x7f0000001cc0)=""/4094, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2.671771044s ago: executing program 1 (id=12617): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000fc0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034084000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a830a1620ba", 0xd8}], 0x1}, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r2, 0x84}], 0x1, 0x9) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, 0x0, 0x0) (async) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [{0x1, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269008e254c1e4a8a8b3f0ab0c430d3be27df3e34060c00ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}]}}}}}}, 0x0) (async) sendmmsg(r9, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x2, 0xc040) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x5}, 0x8) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3, @ANYBLOB='>1', @ANYRES64=r8, @ANYRESHEX=r9, @ANYRES8=r9, @ANYRESDEC=r4], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r10) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x6, '\x00', r13, r15, 0x5, 0x2, 0x5}, 0x50) 2.21102688s ago: executing program 2 (id=12623): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ldst={0x1, 0x1, 0x3, 0x0, 0xa, 0xfffffffffffffffc}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x94) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400f2000000000009000000850000000f000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f11800000000000000240000002400000002000000000000000200000400000003000000090000000000000000000000000000000c000000000000"], 0xffffffffffffffff, 0x3e, 0xb2, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0xd6e27e7aa205ffa0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.207520001s ago: executing program 1 (id=12624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="400100001a000100feffff1a454036cd63a198ad486901010000ac1e010100000000000000000000d4c4357ae7e9b24cfeff0000000000000001000107174e23c5d30a7714f4bdf5763293c24f250c8a1abe83e9ac46097e0b65219415387b10280904021b92789f1b0e5efc6b5f9fa828490800"/130, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x844) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000100)=0x1) setsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x36e8c}, @IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x8a}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x74}}, 0x0) 1.924599026s ago: executing program 1 (id=12627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c00000800018004"], 0x1c}}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=@newtaction={0x60, 0x30, 0x871a15abc695fc3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x1000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20014004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0xd}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4911}, 0x1) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, 0x40, 0x119, 0xfffffffe, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0xc, 0x141, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @str=',\xee^\x00'}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='e1'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 1.835400002s ago: executing program 2 (id=12628): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x8c, &(0x7f0000001300)=""/140, 0x41100}, 0x94) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) (async) write$tun(r2, 0x0, 0xd) unshare(0x6a040000) r3 = socket(0x8, 0x0, 0x8000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x61d1, 0x0) (async, rerun: 64) r4 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) (async) r5 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r4) unshare(0x20000400) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pwrite64(r8, 0x0, 0x0, 0x8) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x18, 0x18, {0xffffffff, @bearer=@l2={'eth', 0x3a, 'virt_wifi0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x40011) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) (rerun: 64) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r9, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x50) (async) close(0x4) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x20000036, &(0x7f0000000600)=ANY=[@ANYRESHEX=r7, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000028000000b70400000100000085000000a800000095", @ANYRESHEX=r10], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) 1.250811647s ago: executing program 4 (id=12631): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @local}, 0xfee1) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0bae7f174a8d026b5209da8ffa6a2526e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe", 0x43}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0xa090) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket(0x11, 0x80000, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048011}, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41, 0x20000003}}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYRES16=r7, @ANYRES64=r3, @ANYBLOB="80442614459151fb0000010000000800010040010f0000000000000c00060003000000000000000a000a00272d5d29212b0000143fb6d47736649c5651dbf41788b31b7f56f54d6364022cbb22d10edf41bc3dc8a5acba5e551d8f2714e1e24a8b55ed79c20a7d4074db04625a24aa1b203098fedf5d0e53bf55df695ee00d7f"], 0x6c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x24000041) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000040601010000000000929511c7000009050001000700140eb1c0efb00000"], 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) (async) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="240000000000000000000000000000000a0000010900010073797a310000000004"], 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x24040084) (async) r9 = socket$caif_stream(0x25, 0x1, 0x1) sendmsg(r9, &(0x7f00000005c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x7}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="4e1ac01395f1dac0859894da0089100acfdf39690c0f5be8d496371e7efe450445161839ceeb635c4fa9429b5dc3b1d92116957bae0d736046c4351b850b2f2776636f2e939d53a0d017c4c202a81f4856fc9d9e8b1a9a2126236c7034c7063b4402d2c7", 0x64}, {&(0x7f0000000380)="0685357f916897ce12b14e7f6c93c065151f71bd0a7f5db8fa6f84009388cd3da4dff0e472a44dec7e6f475d9f50f09e28e0939bb3eadecc", 0x38}, {&(0x7f00000007c0)="fb0c22f679e21077c58db4071d035ddb3822f608a063276002489008865b5380a5375e8c5fa494a68f3a904baffe8c90f3e18cc3fba5b15a7cd63ae37754193198393b5d96c4a4a2f8bb2241f1c0877af751992578d2bd8cb003bf77a6000576a9272f1fd559343c79e5ccb4f4124900a0d77346bb85f75e21b3ccc455eb01f6d997aab026f49c6209d2b8abeb94e62752c0ae9f39ee02a719d7c5a7d0a8a9f4c041489f88b71acb0f453ee03f68cb3629447f8ffd0bade23f2dc46c668462ec44cc982eb31ce360d7f6085e1eec148154e5ab83f253fa2d47e909893406f9ab6670cc14953f2c3e9f9eebdeba348eb0c971001f85c8a5", 0xf7}, {&(0x7f0000000500)="609ea99d90bd24496816bac9629c6cf4a0305cf5b517773552f88c52a62913f4b7b8fb44f2dd2ad57a92e0c39cdc2eb1285a45ed3639643ad4e5f356d61eab6c5a9d2c697a92f4469b784640a0521587e5c5b15a699b09017e178bd83ed514d81b5cfd9baf", 0x65}], 0x4}, 0x40000) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.206325855s ago: executing program 1 (id=12632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xc3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x638}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\f'}]}], {0x14}}, 0x88}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10080}, 0x80) 1.035128822s ago: executing program 4 (id=12634): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000000000000000005e00000085000000300000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.034869125s ago: executing program 1 (id=12635): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x9}, 0x8) 1.015820828s ago: executing program 3 (id=12636): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x40844) close(r0) 937.685953ms ago: executing program 4 (id=12637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000000a01040000000000000000010008032c000000030a010100000000000000000100fff90900010073797a3000000000ee0dd9ff73797a300000000014000000060a0104000000000000000001000000140000001100010000000000000000000700000a"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 835.05877ms ago: executing program 3 (id=12638): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x36, 0x24}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) sendfile(r2, r1, 0x0, 0xf03a0005) close(0x4) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x7fff}], 0x18, 0x8800}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmmsg$sock(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="01000000729017080008fbc2a51cdf", 0xf}], 0x1, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0xffffff78}}], 0x18}}], 0x1, 0x20000000) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0x3) 730.101444ms ago: executing program 4 (id=12639): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) recvmmsg$unix(r1, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x2}, 0x8) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/174, 0xae}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000000d80)=""/4046, 0xfce}, {&(0x7f0000001d80)=""/4124, 0x101c}, {&(0x7f00000001c0)=""/204, 0xcc}], 0x5}, 0x120) 489.611326ms ago: executing program 4 (id=12640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)='%pK \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x3, 0x4, 0x0, 0x70bd28, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}]}, 0x20}}, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004780)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "8181"}]}, @NFT_MSG_DELSETELEM={0x39dc, 0xe, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3994, 0x3, 0x0, 0x1, [{0x23f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1a8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd3, 0x1, "c2471d660b8e5f30fa68e1a931cff4fe0226de08a9fcfd584ad47299ddc932ad9fe1aa1e9e7e2fac2d996da1586893f1b7906872efa43b27580af7d8dd1516f5ab07e6ece6adeaafbc6a9bb6171d0e0650172380aa3fe5a415898649fea84ce0ceba54d3810d8f41102916cb25572c080dc89047bfbc6a119f140b0ae02b4738b3b81641194bbfba9730d0743b8e2ca0a048fcf76c91e38349daeae8a0743ee86f443982020e01285e7e955689dfe49ca90d001244060b8a2d7219f84c63b43faec6991e5a53ff76b8fc925345e22f"}, @NFTA_DATA_VALUE={0xaf, 0x1, "5cf880acc59bd175abbaa4eff7e6e4c61806502702496b78eef0a84dfe48584f6d8a49af8fafccdaebd2364901976c8f8b215a6572ec3c5c802d608eab48aa57319f335053f389d765f9885b3d28ccfcd64b950f61de20d054f81fe5e93b090ac60d71581f8ebeabb176aefaf1d6e48ce15aef885e23656a3ef14c50a37b42b89ce5a627d1217eec9be6e419db147281649bcda430d79eee48bda85660b820ec8a9f19e6ee2b0b9dc237fc"}]}, @NFTA_SET_ELEM_KEY={0x10c4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "862cae8d2aa15bf0a0852003c856896cd8a7dd4d92c3837482b029312807e0b752"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x21, 0x1, "2ab237b4ec6d5fef87c642f9041f4a93396f8e1e29efc2f6ac53e59939"}, @NFTA_DATA_VALUE={0x1004, 0x1, "1f4fc7f0b52dcb3639405ee53be8c4d4ac04712bdcf130fe3bd4c9b87591a65ca10cf02f934f5fd03f49f1821028085fe9c89588e37ca5b1c18b32caaa9876b40d5f6be14df8898138c2316a809cfa76eab1dc189ba66d0eaba01c4ec06c698f9394e48f5be24dbf5f2d2c487b74301a161cc3741026c4467866b9f50db4936e0986d017cde00e087b524de09ae90bf8e4bd6f7fbde6a117c9b56820f65c8a017e579e1c37ccb25490847331b4ee8d9717ac740e541e64a36cff9c43a338318847d74e6fcfbf32f14083f5b6e39eaae6041fc295cd46b18e29b5fae24ddc17695c60af93db2f7166d8efe830aa2af2427e73a8d8708e9cd24cd930678247f185cf3875ae7d8edc235ad5c7ade073f7726f8be0ab74ff08b51fd9b49dceab2dfe56ae1272533a70c654c4b4ad551e9fa76ee512fbb9c0c279c98baca5c2bfeea17d431c94fe9b783705076e61a1d53f80abb8bb6362f9be2552ae6dec0f6f93e05ab0cae269c3a8b67a248e0cf60e6bb2e8e2016fd80a71fc8c3919ff7ec475c886a5a8e5ce7598b083d4e7e6569b5fdb1861b76f4b1e33029152b84769f62733c5e194ba15cc4880389a0a6040dc45c50b891eac8d90ec41123b35e9dfafe0637ca48ecffddc7d8809d73d8e8ff4dbadca00743415f790546f2d1fdc9bfd79be5886835d637277892d18feb78aa43dd08948eb4eadc11d9c7175b21f2dd9d0af1351a06f321d23bd587987bd9124a2e12555587877d31749fb02b21440a3f76bf520b511d37be0bf07b447c3fae2330ba05a4831b9a3473a575866d1d707565393dc4501827f03bb7de9d53fde314d0dcb6c0613415181117086464010184d5ed073a871902d30f765b193a9d4d4433fe4cbdba7d39ac2e48a43dc049d9d6a0cbed81295bf37dbb0457dbb2a2787245f911c2d8b6173275a3cb59f927fcc506c3b83430568d4a06cc4c3bd38e3646c11e5a1fa306082dbf32054e9cbcdaa6cd859ef187a8edb4f4b6f3f83b05e10c9f6803f189ef5c123f6eec3cc4a422362e5339a17421424ff0ba7bc0ebac5a7f55e7cc80641440489413e9538f41315a5bb282864231a5f16ae20e5a7660eba71e85c8760f58e96c190bdf5bc2bf5c2aceab874c42838a9c558cdf1b896b3ea89fc8ab7b68358850a0975019695a0124c906c4fed23602a0a1f29408910fbca4ad4c63cb4b68f1e525095ad505887cfb61d45401b83a11d75dbe7373426b4078abdeab11e1c7199e24fd11a4e615401d29aeef73e2fe1436016a93ef131233c44d9f2d1d3cb5682b0a53cf2237ee91529a1a2aeb02c26daab2c62aa174167be4dfb25f6e7a5fe26f9f31a32afcca77744c7c2b08363f309385518af60dfd9385c54bb5b5ff18500d7dc84883f0275d4d9509c2825e7148e72a6cad6aa22e6a1fe7b47eb0a62604726915e5f0477b1eddaba3f10821b0e8c85c1db49f679d059dab14546d4f2b307a128e956ce8616ee1ded8cea565dd10c1eca67fa834c1fd16f77ea2ca8da1fc9fe3485ecce54932da9e2820e1519f5cf0e372273b92139dde2d6d8589d9be57ec77b95db5fb7eacb7a5d2667ace6d3b3dcabc91c6ae17c29b1dc729db99357b96671dd994c74caab7380dd9fc2f2985159ea0418dd4944880d72f43628f8d3287db86f0f0fc9397990d8b537d2564b593e2e8e123201af3722f40ea8c1f27ea7ec1bb2a9eb2759b41d1d6ecd6877d32f1e5fa4addb84a1ebb729939e5757fdb6edc399f4b4fe7d44441b2ccdf01e2861b11c593fb3668a99336a6dc9b3875b3be9af5c6a6829ee360d39ff8af0723701b3eb541c97e8dc1efebf5b3940e39ee980a615c414c3233c3233a05ec163cd035210686d072d97e0e59e2da4894c1ef5020d8e3445c66f81b7a311016ebcfe1fd5a5f193a794fb898b25aa89505a1e7e104dcd5a68cd36df990bff3d7cb8fbfb2ce8613c426d715bb3d7e4865c3a7d944399a0864860a429136a5037c6f13c1c123462952fff5f53a8fd3894221b77a25bceec9bad7e5b90187ac2e2598923dd48a7f9f91f0b94834e56156aee62759daad3dcdf6bb9d0665568342a2c630ff382d353e6d0a02fe47107ce8dead911b67fef7af30f2f857385a521d1cd399b5ecd96018b26d73bc11e37ec009946a0d906ee0e7dbe9c7cb33bd5181df6d96106684b5a74abcfe83c323330e630ef9831f4ce1d04e93e5f21e5c070df9c34ecd73f985576a4eefc7f91ee8e004f4664a4e0d699a7707d01703081c6538c9ddb919ccde338562b676efcfe8f1b64cf0325b03404f50b5881d643ca362da55ee6a340ec96c3d339261190de52d33030bf9c24163e2fc3585c8f493fc13be42e469c5faa9424d2673214a0fe96f811e5ba3b51972030eac32c09362b0c4dad17eb86da7d42a5bce75b3e67f1d25f7d3f07ea59dd8258b009d60ee174bec150c215514873f046c0e8e38243c805eebd831c76645f6d9f5b9a4ba2644fa69180832a6aa08308583c53b893e679db49c9a16219173ca611546050cb9ad36fbe57e4a0de089500417e6dd39fa74a7eda0f74814e221bf4459b04840559a101985e031fb691997cf8898a29164a785ec73799eada9ad88c09752133419abdbc7f1f78a715c13a164c0efa1634db9d4b79dae7d8c440f8374c62456275a8fc88808d9cd0b71005509cdee8767f959f0476114347664956b1aa86f6765944313c1337fd3312ac8c84465d5b38412d77e44a88032349a9edded9eb42e8e9b7b20005b40f0490e0422bc8c4e54cb72ee1b45ca8cc96fbd3a7d8aa72f3c7f449662f4f18783a34d3ba1ac5c622658ae5c6fb1afccd5658ebe9f938a76511f7ec93ffccdffa9f2eaac7f59c9fbbeef4a09ce3c8adf82686388d1eb5d698e4d10da85c35d3ed7faac01036c51ce9e49e22b03d5d20cc824ab2e4746cfa4fd42807dc74aa3d1f6703217502c4e5cbe8f50c282feb726fb99ea60b8c8b280ffeaebc6b4a2c00d2f8b7719c64b3e0b1e3517886be55c6bf52ae04d0b7d4e88bae5209f3bb41533cee41109a6ce21b4a8194a8d9e2b87026cec5862e0a39da3d095c40057fa1abfd1b87fe9fcd569983760747d3328c599ba214e84634f4c35ecb69c3f4ca71e86394bf168d26350552b0e5e747cd64d5b835b5c4e538372046bc8f82640f59ba8e70d7e86a6aabe4990458d29c3a5f7fd8155e4a12eade1e23b2afcaa701df48426ab6037f0ecc9fd979b2f5838c10b19a35f0c6cbf8df60ccc4241facea91e0987f00037b33db9d31d64bc2e008da74dad7d8884368e7cff3f8c513e0718e1f361ecbbea22a3554ddd117f00dca322d5a96cc628f155e5f316d4d45b3baaf6f9dd95a22ae63c9dfe1a2e42897b513ce63ec0ff417aeb913317d7e25e745153a679e5a4305113542bc2b559c87cecbb5d48b105d04e008e79f50db35a97240bc8fdd5f5e022693c3045454d49ecdb63a95d8b6608ba94277ccc411c50353510501b1644eff9243efda92a6070e6da559c127d5b74dd9897b67c859e16fc75b01a67046ba1481161f97c5522f87db209d02f5ba2d9a15f1a25af2498a0faf725db3eac2ebce5847395664df26aff289e26b8b14a4e259f90f88c23164f5894120b62a1633f293bdc5ac84f306d308925e769352a8db26a5ce642520b2f22f2152ae0eab93a3092f09347ede8b0efb6d5c768f09b5b8dad29a66d4bdabefd9aa2dcd884193582cb51a4d250de9297b67a8952312e740643a61c4b2b08d84cc88004d0eac1f2adccaa2f7cf9f2e634466e2bdb1513eb8710c8416e4333211320beb1dd7ad865fc9c6d3d0955d046495e4af752d836aeb8e4fa3c1b310c01ecbce88324d4953c43f8af45b1d3c978359191157afb53505d47bcf9d2c9c9ac24fc1e14702376f2430f5d4fcfc7132c4283781cf6bf674c54e5b5429f30558ae28861eb889f459faf0ae7419613a1dbc9c090e00c7d3081fc31ba605c027d4f021dbec772ba2a1ca175e4cc06da978325a5efa556ceffb6c29b403823b0658152cc321ce4d7cbd13870a3fd2bdf8bced51aef9670d59bd7e822752bbe348868cee43b0c62c9289c3857aab1418c94038008b4563be4f0c8c388c81df7144bad4ba5cff2796278d1a1b026b38107591965f4163d82696f08711acbe9abde280a0f1649c008870f369edc5e9562ed541fc445f6581ea3a3c9cbe28f8401ddb10be14058189d05032ceb46e3045a6dca87632993175424160017d53bb71d94324dd999381b0b1f3ba473b1637faf3c924688e05956c585f3c502d189524d8321ba404e4c65f2ecaf99b581160a97dc8a42564631cf66fe97f033d687a392a273e700da10bbf6515d39b63b3f638acc73641957a9c144ce2f07b5392c614194f19408d5b056a9b26037c82494cc9d46b8d3435cac517887b16d2042a64321b47086c5faf61e42af82815c5bc7db79b0af87816d1af3cdad074e3bd94026d457cbfca7920427079f141a049fe3805d27718c26719d2937a3f02b3c0e9679159c267c1b7b1ef7283b93af9b71be13c7848f17b0d4eda2b0a3d28ce3b882bbe14d9c51ba7712deec37e936851d8761e4e07048b25bc9ba49bb89097081632e2f6346175fe33e63f22616c3dcb1f4b8b1108a669437b503301f0ab2b53c02d1c2e25db567479236d19dfbf061600e82a81dc97b089b45af4e399b587eafbd314b93de670f3ed95693fc2adbf8e32c39875c2aa978a1ef8ba759a1ba717325123d54689850377c29e4cbc072170278fc3854c1442770f2b716010eb51d8d7723fce2c19b6bb53824f0be27606807943c66d3804a4756daf29b83218ec316cc13dde6ffa19530348dade7c9b8c4109547017beae19297376ae5f745e6b554d80740c2b8d458688e7200f37528abd00bc248916afb970b119fccb4137bd2109d6c485fed5dfbfbe1507be9401ad48e79c43885511c5a7edd4eb3dcf0acbf4d3b7e76308dbbfe824e331cb28d3ac99744f425888cac0b6620c0dd612e97de989b9086e91a898cde07bd9a3f45a99f13d165bf26f221fb6d9fb0da8567c7d2f0f410506919babb50a3d2b4416686af61b417af062b319092562d7aaa0c32b1249a39ddb999f442b0bcfaaad30e256bd4e2d44edfaaf178b99e41bfe880c3439054c68f5a1f018273e6e5a3b5aab44633880ef0873517e19d74af1388be6b46efab26eedaba91145802c153e8bcd7b9f27a56e0515b19094f01795bdcff8ef1f081e6dc031fe3b752ede12d563f0e0b4a11654df9a5fc20f4b9f709c260957b52233d86c91820e69d29643f5f456fd799fc072ce7d77ebb06ffaf0d83377be414b55e2c0471f8be6e95d4ddd7f7054ca2cd88a5f7bcb42d8bab85e70cedc93960005a904bf498272a6d490c6110ca098cac632505f0db6e6a80c8616cbc295211dfb2b34b78ac990e3c8be8b3cbece56a52d900c0a1dc06850afd8e3d5ad708128fd38ae51d7b24df065843916dd8f4a5dd5b5a58103e3bf7b3ed09b595b3616ea6b5c69c8502391ae07fefbbe8f23352130cd448d5179cd813352f3f1e29540374d3a2defe4456caf4089b3e64a74e632932830984233303e3ba2af5a32e4aef14b7ab48e9bb408568e6351c5f06917aecca4b9d473764ba19f3f22c1b5c9b827e1e580f9501a16929bab52132d89d0f9e8a0107035f87c18fb4e760de188693bdd9fe1c997cbeef94ad96c74c0b8c796bb6da16e6148ff5d98bdc23beac5a14aa0e4b5ecc051cbc0dbc795c3599a9452258ebfb479b9338ca3a0d1fece2da96f8f4b30253fcd"}, @NFTA_DATA_VALUE={0x1b, 0x1, "790b7dbe618380467c32b665cf068e9607b2a10d8d9098"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "6bcf86eb2a77115dbe8acf6ec2cfdc6e3fffe8e9d292b0f033"}, @NFTA_SET_ELEM_EXPR={0x1070, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x105c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_IMMEDIATE_DATA={0x1050, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x6c8}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_SET_ELEM_KEY_END={0x154, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3d, 0x1, "3ffb861846a576af6683aa09c328617300e9874858fcbe4a9d51123f428f2ce8d0c0b4d174e870c48b1c7f5e4dd9ccb5f5629c653fb6a379de"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x10, 0x1, "ddbacbd8ddf3c5e79ff1f09f"}, @NFTA_DATA_VALUE={0xde, 0x1, "afe546ce5db1ae6a057bd8a202a9afdd0debe297cf1f6120d787c20a9676d73e5f9479347b3bf520fd042be8cc84c491053fe5873ab4a570d6913b879ea9c5c95f754a275314c9028d1126e12b82b39f1f15aeccde6b399e866f674bfd2db2a29e1d7045fd5d14a733fdc21776964ff5d7573ec7c13cdfa44fce683daccab073f1b66036ef7e0edd31f6f1f0382227e50c4cbc53b7ad6e6e7cb4f684d1b3e829c0f28a2ff75f752d8cbe56838d2e07778ff0bd609d0b82568edee239035fae3022f22704102b43bbffdc62899c5260921453ded0b236a695ff99"}]}, @NFTA_SET_ELEM_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x68, 0x1, "9fd67e80f410eed25fe7e8b1986c59e3e9db73edbe7892f5a4218f6750d7c7c6a56137defc0345ae432397cefac491e6a59c29d91a85d326369398a15a90a5c462fe98d77adcc60a0f4599aa0c1c0448e6ab4d9b125a8160b7490ed9f1522b1a9e14aca3"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x1074, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1068, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xd4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x34, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}, {0x234, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x34, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz2\x00'}]}}}, {0x4c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x168, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x84, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0x6c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4d, 0x1, "dd426eff6def074bf8ed393fe8063cbcb6cf061783a05ccf6c4b04656ab3cfa262d0c6e1e6a22b7676f38594cd9990a4cd126607ac5ad72effcd6d0a426a4f1cae7dca2b9e91c86b6e"}, @NFTA_DATA_VALUE={0x17, 0x1, "b253e18275bc4bdd39cb343b01671b30358ecb"}]}]}}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x3a50}, 0x1, 0x0, 0x0, 0x850}, 0x0) 426.571105ms ago: executing program 3 (id=12641): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000061107900000000001f0100d500000000950000002200c4ac3d9f830000"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r5, 0xc7d07000) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x3, @private1, 0x7}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0xffffff04, @dev={0xfe, 0x80, '\x00', 0xc}, 0x9}], 0x48) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7800007, 0x32, 0xffffffffffffffff, 0xaf35d000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500000008000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="266d96438435c8dc1c419ef766570fe11528f09e0d02e51cc457f75b0776ead6e33baaa602b32be7ee460cdf6113194a08244a59f478", @ANYRES64=0x0], 0x20) sendto$inet6(r5, &(0x7f0000000800), 0x0, 0x480a4, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$nl_audit(0x10, 0x3, 0x9) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x1fffffffffffffa6, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r10, 0xffffffffffffffff, 0x6, 0x0, @val=@perf_event={0x8}}, 0x18) sendmsg$AUDIT_SIGNAL_INFO(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x400, 0x70bd27, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 253.706715ms ago: executing program 3 (id=12642): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) (async) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000eb64bb751fec57a903a53a02fd5c00663e15c05506ce76321ff0db40dfcb8afd0ef4416ca75c298339d3a3ddf4d45678ab15196c9f5ba2759c698ba61cc242ec8231753c52bc4f806bc1faf6879f69324f11d13b0b689b604d6e6327c62e8abed24f95b5e181434cc22aa0f6b5508c968d8b43b016cebc23e9115314eedfe71b5955773f76a53b8d113a1a1126af562e00c2d17cf649bc1bffefbff5f9514d0496a6ef4454d6e52aacb2efcc50241a9d0628a5a3a147", @ANYRES16=r3, @ANYBLOB="010000000000000000000700000014000800"/34], 0x28}}, 0x0) r4 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x1, 0x0, 0x2, {0xa, 0x4e20, 0x4, @private1, 0x7}}}, 0x32) 170.860899ms ago: executing program 3 (id=12643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x814) 59.03411ms ago: executing program 4 (id=12644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x200003}}}}]}, 0x4c}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffe6, 0xb}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) (async) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 56.16517ms ago: executing program 1 (id=12645): socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="200000400002010400000000000000000a00000008000440ac3204040002800053ee421721caa5523c804578bd43c2d66f6beaef306f38c9cb5c1083811d41ee8ee4f00f968f1aa2f580b064720e1e7fdcf29a7559df74032dce314c3d794687191725383c104ec408"], 0x20}}, 0x0) socket(0x3, 0x5, 0xc) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x238, 0x238, 0xffffffff, 0x2f0, 0x0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'bond_slave_1\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x160, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985d61d110b8602025e1200000000c5087ab16f67b18ca90a686400006a068f727f7d23fa5fad20a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6f0000493180cfda2cddfb412e9469d85abdb467ba", 0x40, 0x2, {0x1}}}, @common=@unspec=@connmark={{0x30}, {0x2, 0x3ff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @rand_addr=0x64010102, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x6}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {0x101}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x18, @private=0xa010102, @remote, @port=0x4e23, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) (async) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @netrom}, [@netrom, @rose, @default, @null, @netrom, @default, @default, @netrom]}, &(0x7f00000004c0)=0x48, 0x80800) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$tipc(0x0, r3) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x38, 0x301, 0x70bd27, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) connect$netrom(r2, &(0x7f00000005c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async, rerun: 32) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000640)={0x0, r1, 0x6, 0xecc7, 0xe, 0x2}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) (async, rerun: 32) shutdown(r5, 0x1) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r10, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000000) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x10}, {0xffe0, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x68, 0x2, [@TCA_BASIC_EMATCHES={0x64, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_META={0x54, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe19, 0x4e, 0x2}, {0x882, 0x40}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x35, 0x3, [@TCF_META_TYPE_VAR="b60dae162f8456e6a909", @TCF_META_TYPE_VAR="e6f8b4544c74eef2", @TCF_META_TYPE_VAR="31cd3d", @TCF_META_TYPE_VAR='Hr', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="51aec6e82264da2b71ce", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6]}]}}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) 0s ago: executing program 3 (id=12646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x7}}]}, 0x38}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000001180)) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)={r7}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001200)={r7, @in={{0x2, 0x4e22, @remote}}}, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r8, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) recvfrom(r2, &(0x7f0000001080)=""/89, 0x59, 0x10000, &(0x7f0000001100)=@ax25={{0x3, @null, 0x5}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xa, 0xa}, {0x2, 0x8}, {0x1, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000811}, 0x80) r9 = socket(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r10) sendmsg$NFC_CMD_VENDOR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000401000008001e00300b00000800010082"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0xffffffffffffffcc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x20048000) kernel console output (not intermixed with test programs): ng: No 802.3ad response from the link partner for any adapters in the bond [ 1232.345388][T16472] netlink: 'syz.2.11059': attribute type 8 has an invalid length. [ 1232.353854][T16472] sch_fq: defrate 0 ignored. [ 1232.525787][T16477] netlink: 'syz.3.11061': attribute type 10 has an invalid length. [ 1232.537329][T16477] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11061'. [ 1232.583755][T16477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1232.589048][T16482] netlink: 'syz.2.11062': attribute type 1 has an invalid length. [ 1232.595837][T16477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1232.603390][T16482] netlink: 'syz.2.11062': attribute type 2 has an invalid length. [ 1232.614224][T16477] hsr0: entered promiscuous mode [ 1232.627960][T16477] bridge0: port 1(hsr0) entered blocking state [ 1232.649553][T16477] bridge0: port 1(hsr0) entered disabled state [ 1232.705009][T16477] hsr0: entered allmulticast mode [ 1232.710092][T16477] hsr_slave_0: entered allmulticast mode [ 1232.743290][T16477] hsr_slave_1: entered allmulticast mode [ 1232.765051][T16491] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11064'. [ 1232.900548][T16495] batman_adv: batadv0: Interface deactivated: dummy0 [ 1232.971112][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11070'. [ 1233.065008][T16504] netlink: 424 bytes leftover after parsing attributes in process `syz.4.11069'. [ 1233.093742][T16504] netlink: 'syz.4.11069': attribute type 1 has an invalid length. [ 1233.179738][T16501] vlan2: entered promiscuous mode [ 1233.185455][T16501] bridge0: entered promiscuous mode [ 1233.207502][T24384] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.219112][T24384] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.236605][T24384] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.256030][T16507] FAULT_INJECTION: forcing a failure. [ 1233.256030][T16507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.274788][T16507] CPU: 1 UID: 0 PID: 16507 Comm: syz.3.11071 Not tainted syzkaller #0 PREEMPT(full) [ 1233.274813][T16507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1233.274824][T16507] Call Trace: [ 1233.274831][T16507] [ 1233.274839][T16507] dump_stack_lvl+0xe8/0x150 [ 1233.274871][T16507] should_fail_ex+0x412/0x560 [ 1233.274897][T16507] _copy_from_user+0x2d/0xb0 [ 1233.274924][T16507] kstrtouint_from_user+0xd6/0x180 [ 1233.274947][T16507] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1233.274984][T16507] proc_fail_nth_write+0x8e/0x210 [ 1233.275027][T16507] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1233.275054][T16507] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1233.275079][T16507] vfs_write+0x29a/0xb90 [ 1233.275105][T16507] ? __pfx_vfs_write+0x10/0x10 [ 1233.275124][T16507] ? __fget_files+0x2a/0x420 [ 1233.275152][T16507] ? __fget_files+0x3a0/0x420 [ 1233.275174][T16507] ? __fget_files+0x2a/0x420 [ 1233.275203][T16507] ksys_write+0x150/0x270 [ 1233.275221][T16507] ? __pfx_ksys_write+0x10/0x10 [ 1233.275251][T16507] do_syscall_64+0x14d/0xf80 [ 1233.275275][T16507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.275293][T16507] ? clear_bhb_loop+0x40/0x90 [ 1233.275315][T16507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.275333][T16507] RIP: 0033:0x7f8db755cfce [ 1233.275350][T16507] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1233.275365][T16507] RSP: 002b:00007f8db84aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1233.275385][T16507] RAX: ffffffffffffffda RBX: 00007f8db84af6c0 RCX: 00007f8db755cfce [ 1233.275397][T16507] RDX: 0000000000000001 RSI: 00007f8db84af0a0 RDI: 0000000000000005 [ 1233.275409][T16507] RBP: 00007f8db84af090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.275420][T16507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.275430][T16507] R13: 00007f8db7816038 R14: 00007f8db7815fa0 R15: 00007fff202e1238 [ 1233.275460][T16507] [ 1233.517748][T16509] syzkaller0: left promiscuous mode [ 1233.522998][T16509] syzkaller0: left allmulticast mode [ 1233.557305][T16516] netlink: 'syz.3.11074': attribute type 89 has an invalid length. [ 1233.579909][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11073'. [ 1233.764453][T12198] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1233.909458][T12198] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1233.984920][T16539] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1233.992445][T15456] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1234.060095][T16554] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1234.245761][T16556] lo speed is unknown, defaulting to 1000 [ 1235.166468][T16601] bridge10: port 1(veth15) entered blocking state [ 1235.173026][T16601] bridge10: port 1(veth15) entered disabled state [ 1235.214444][T16601] veth15: entered allmulticast mode [ 1235.222238][T16601] veth15: entered promiscuous mode [ 1235.241066][T15456] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1235.256710][T15456] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1235.289417][T16598] bridge10: port 2(veth0_to_bond) entered blocking state [ 1235.313374][T16598] bridge10: port 2(veth0_to_bond) entered disabled state [ 1235.321630][T16598] veth0_to_bond: entered allmulticast mode [ 1235.342718][T16598] veth0_to_bond: entered promiscuous mode [ 1235.466059][T16603] bridge10: port 3(veth17) entered blocking state [ 1235.477147][T16603] bridge10: port 3(veth17) entered disabled state [ 1235.494117][T16603] veth17: entered allmulticast mode [ 1235.503266][T16603] veth17: entered promiscuous mode [ 1235.664638][T10782] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1235.725730][T16609] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 1235.750051][T16612] netlink: 'syz.1.11101': attribute type 1 has an invalid length. [ 1235.774511][T16613] IPVS: stopping backup sync thread 16609 ... [ 1235.890159][T16615] bridge_slave_1: left allmulticast mode [ 1235.895994][T16615] bridge_slave_1: left promiscuous mode [ 1235.914779][T16615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.926517][T16615] bridge_slave_0: left allmulticast mode [ 1235.932190][T16615] bridge_slave_0: left promiscuous mode [ 1235.956078][T16615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.299524][T16642] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1236.658546][T16667] __nla_validate_parse: 12 callbacks suppressed [ 1236.658564][T16667] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11121'. [ 1236.723134][T16672] bridge10: entered promiscuous mode [ 1236.744409][T16672] bridge10: entered allmulticast mode [ 1237.001537][T16681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11123'. [ 1237.421348][T16708] lo speed is unknown, defaulting to 1000 [ 1237.530326][T16711] lo speed is unknown, defaulting to 1000 [ 1237.853404][T16730] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11132'. [ 1238.211403][T16752] netlink: 'syz.4.11137': attribute type 21 has an invalid length. [ 1238.240335][T16752] IPv6: NLM_F_CREATE should be specified when creating new route [ 1238.257508][T16752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1238.264817][T16752] IPv6: NLM_F_CREATE should be set when creating new route [ 1238.272090][T16752] IPv6: NLM_F_CREATE should be set when creating new route [ 1238.279353][T16752] IPv6: NLM_F_CREATE should be set when creating new route [ 1238.405565][T16754] netlink: 324 bytes leftover after parsing attributes in process `syz.0.11138'. [ 1238.585128][T16766] vlan3: entered promiscuous mode [ 1238.590230][T16766] syz_tun: entered promiscuous mode [ 1238.603342][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1238.987120][T16783] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11147'. [ 1239.135848][T16787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11149'. [ 1239.166980][T16790] xt_hashlimit: size too large, truncated to 1048576 [ 1239.208325][T16790] xt_hashlimit: overflow, try lower: 0/0 [ 1239.281969][T16794] netlink: 388 bytes leftover after parsing attributes in process `syz.3.11151'. [ 1239.305962][T16794] netlink: 'syz.3.11151': attribute type 4 has an invalid length. [ 1239.343310][T16798] netlink: 'syz.4.11153': attribute type 21 has an invalid length. [ 1239.351400][T16798] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11153'. [ 1239.541987][T16801] netlink: 148 bytes leftover after parsing attributes in process `syz.4.11153'. [ 1239.552432][T16801] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1239.620117][T16799] lo speed is unknown, defaulting to 1000 [ 1239.713501][T16811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11157'. [ 1239.724351][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1239.787282][T16811] veth1: left promiscuous mode [ 1239.834713][T16811] veth1: left allmulticast mode [ 1239.903708][T16811] syzkaller0: left promiscuous mode [ 1239.914455][T16811] syzkaller0: left allmulticast mode [ 1239.924335][T16811] gtp1: left promiscuous mode [ 1239.930958][T16811] gtp1: left allmulticast mode [ 1239.997564][T16811] bond6: left promiscuous mode [ 1240.002475][T16811] bridge7: left promiscuous mode [ 1240.041984][T16811] bridge8: left promiscuous mode [ 1240.055496][T16811] bond6: left allmulticast mode [ 1240.074649][T16811] bridge7: left allmulticast mode [ 1240.079777][T16811] bridge8: left allmulticast mode [ 1241.240018][T16874] netlink: 'syz.1.11175': attribute type 1 has an invalid length. [ 1241.270710][T16874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1241.353320][T16862] lo speed is unknown, defaulting to 1000 [ 1241.507797][T16884] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1241.534961][T16884] IPv6: sit3: Disabled Multicast RS [ 1242.306419][T16924] __nla_validate_parse: 8 callbacks suppressed [ 1242.306438][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11186'. [ 1242.343404][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11188'. [ 1242.379863][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11188'. [ 1242.405767][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11188'. [ 1242.443090][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11188'. [ 1242.465746][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11188'. [ 1242.475873][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11188'. [ 1242.486939][T16929] syzkaller1: entered promiscuous mode [ 1242.492551][T16929] syzkaller1: entered allmulticast mode [ 1242.499451][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11188'. [ 1242.512820][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11188'. [ 1242.535231][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11188'. [ 1242.808926][T16945] tipc: Enabled bearer , priority 10 [ 1242.852304][T16953] netlink: 'syz.1.11195': attribute type 1 has an invalid length. [ 1242.925353][T16953] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1242.939815][T16962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.967079][T16967] IPVS: set_ctl: invalid protocol: 1472 0.32.0.0:30720 [ 1242.992192][T16963] vlan3: entered promiscuous mode [ 1242.998408][T16963] bond10: entered promiscuous mode [ 1243.003664][T16963] vlan3: entered allmulticast mode [ 1243.011101][T16963] bond10: entered allmulticast mode [ 1243.529454][T17003] lo speed is unknown, defaulting to 1000 [ 1243.542277][T17008] nbd: couldn't find device at index 1 [ 1243.716487][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 1243.724567][ C0] lec:lec_tx_timeout: lec0 [ 1243.743720][T17017] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1243.812504][T17020] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1243.834428][T17020] syzkaller1: linktype set to 768 [ 1243.851945][T17010] lo speed is unknown, defaulting to 1000 [ 1243.860305][T17020] netlink: 'syz.0.11213': attribute type 6 has an invalid length. [ 1243.927146][T12198] tipc: Node number set to 4278321153 [ 1243.998010][T17026] netlink: 'syz.4.11216': attribute type 1 has an invalid length. [ 1244.663833][T17044] geneve2: entered promiscuous mode [ 1244.792868][ T8630] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.801978][ T8630] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.826789][ T8630] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.844218][ T8630] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.012295][T17056] netlink: 'syz.1.11223': attribute type 1 has an invalid length. [ 1245.257362][T17065] x_tables: duplicate underflow at hook 1 [ 1245.451611][T17077] tipc: New replicast peer: 255.255.255.255 [ 1245.458594][T17081] IPv6: Can't replace route, no match found [ 1245.466461][T17077] tipc: Enabled bearer , priority 10 [ 1245.475409][T17081] IPv6: Can't replace route, no match found [ 1245.652678][T17088] netlink: 'syz.2.11234': attribute type 2 has an invalid length. [ 1245.710890][T17090] xt_hashlimit: size too large, truncated to 1048576 [ 1245.739783][T17092] netlink: 'syz.3.11236': attribute type 10 has an invalid length. [ 1245.980991][T17104] Cannot find set identified by id 65534 to match [ 1246.304015][T17124] netlink: 'syz.0.11244': attribute type 1 has an invalid length. [ 1246.327169][T17121] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.398899][T17124] bond5: Unable to set up delay as MII monitoring is disabled [ 1246.409821][T17124] bond5 (unregistering): Released all slaves [ 1246.479316][T17121] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.603942][T17121] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.958179][T17121] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.108517][T24351] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.127621][T17165] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1247.139856][T17165] bridge5: entered allmulticast mode [ 1247.163000][ T4396] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.219758][T24351] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.253122][T24351] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.406223][T17175] ip6_vti0: Caught tx_queue_len zero misconfig [ 1247.516593][T17181] vlan4: entered promiscuous mode [ 1247.531156][T17181] bridge0: entered promiscuous mode [ 1247.576745][T17179] lo speed is unknown, defaulting to 1000 [ 1248.049463][T17215] __nla_validate_parse: 80 callbacks suppressed [ 1248.049480][T17215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11266'. [ 1248.268136][T17224] syzkaller0: entered promiscuous mode [ 1248.273773][T17224] syzkaller0: entered allmulticast mode [ 1248.576190][T17243] netlink: 'syz.4.11275': attribute type 1 has an invalid length. [ 1248.598893][T17239] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1248.707484][T17247] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1248.720402][T17247] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1248.739107][T17247] bond9: (slave ip6gre1): making interface the new active one [ 1248.747698][T17247] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 1248.834833][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1249.125423][T17268] tipc: Enabled bearer , priority 0 [ 1249.581858][T17286] xt_connbytes: Forcing CT accounting to be enabled [ 1250.087952][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11297'. [ 1250.168022][T17324] xt_hashlimit: size too large, truncated to 1048576 [ 1250.326222][T17331] syzkaller1: entered promiscuous mode [ 1250.335551][T17331] syzkaller1: entered allmulticast mode [ 1250.418083][T17339] lo speed is unknown, defaulting to 1000 [ 1250.488797][T17337] lo speed is unknown, defaulting to 1000 [ 1250.498961][T17342] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11301'. [ 1250.508359][T17342] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11301'. [ 1251.355015][T17360] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1251.511428][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11306'. [ 1251.601925][T17379] macsec2: entered promiscuous mode [ 1251.630850][T17381] xt_connbytes: Forcing CT accounting to be enabled [ 1251.657481][T17383] netlink: 'syz.4.11311': attribute type 1 has an invalid length. [ 1251.660561][T17379] macsec2: entered allmulticast mode [ 1251.677136][T17379] bridge0: entered allmulticast mode [ 1251.698197][T17379] bridge0: port 4(macsec2) entered blocking state [ 1251.705463][T17379] bridge0: port 4(macsec2) entered disabled state [ 1251.734462][T17379] bridge0: left allmulticast mode [ 1251.787709][T17383] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1252.597542][T17451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11325'. [ 1252.648686][T17451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11325'. [ 1252.680405][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11325'. [ 1253.003735][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11333'. [ 1253.014850][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11333'. [ 1253.231969][T17492] netlink: 'syz.2.11335': attribute type 9 has an invalid length. [ 1253.240810][T17492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1253.385018][T17492] netlink: 'syz.2.11335': attribute type 12 has an invalid length. [ 1253.392956][T17492] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1253.422155][T17498] IPv6: NLM_F_CREATE should be specified when creating new route [ 1253.445563][T17498] batadv_slave_0: entered promiscuous mode [ 1253.506280][T17498] batadv_slave_0: left promiscuous mode [ 1253.560111][T17503] netlink: 'syz.2.11338': attribute type 30 has an invalid length. [ 1253.569607][T17503] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1253.578816][T17505] tipc: Enabling of bearer rejected, already enabled [ 1253.823702][T17522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11342'. [ 1254.010193][T23483] lec:lec_start_xmit: lec0:No lecd attached [ 1254.144492][T17525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11342'. [ 1254.153589][T17525] nbd: nbd64 already in use [ 1254.491030][T17514] lec:lec_atm_close: lec0: Shut down! [ 1254.622787][T17542] netlink: 6 bytes leftover after parsing attributes in process `syz.4.11344'. [ 1254.657563][T16130] udevd[16130]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1254.673193][T17542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1254.713483][T17543] ip6tnl2: entered allmulticast mode [ 1254.901537][T17555] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.11347'. [ 1255.127816][T17580] TCP: TCP_TX_DELAY enabled [ 1255.253056][T17586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11355'. [ 1255.323945][T17596] netlink: 'syz.1.11358': attribute type 1 has an invalid length. [ 1255.365436][T17601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11360'. [ 1255.603987][T17615] netlink: 'syz.1.11363': attribute type 10 has an invalid length. [ 1255.696473][T17589] lec:lec_atm_close: lec0: Shut down! [ 1255.796540][T17631] netlink: 'syz.2.11368': attribute type 4 has an invalid length. [ 1255.821091][T17631] netlink: 'syz.2.11368': attribute type 4 has an invalid length. [ 1255.849719][T17632] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1255.936785][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11367'. [ 1256.034108][T24379] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.081602][T24379] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.105117][T24379] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.198138][T17637] syzkaller0: entered promiscuous mode [ 1256.216871][T17637] syzkaller0: entered allmulticast mode [ 1256.226739][T17654] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11371'. [ 1256.278847][T24379] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.353514][T17663] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1258.452772][T17662] lo speed is unknown, defaulting to 1000 [ 1258.629408][T17691] xt_hashlimit: size too large, truncated to 1048576 [ 1258.860596][T17706] netlink: 'syz.1.11386': attribute type 1 has an invalid length. [ 1258.889122][T17706] netlink: 240 bytes leftover after parsing attributes in process `syz.1.11386'. [ 1258.897249][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11387'. [ 1259.054189][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11389'. [ 1259.106599][T17717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11389'. [ 1259.138034][T17717] bond13: (slave bridge11): Enslaving as an active interface with an up link [ 1259.167965][T17717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11389'. [ 1259.200314][T17717] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1259.241887][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11393'. [ 1259.613187][T17741] lo speed is unknown, defaulting to 1000 [ 1260.100471][T17778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11404'. [ 1260.142066][T17780] bridge12: entered promiscuous mode [ 1260.147827][T17780] bridge12: entered allmulticast mode [ 1260.175842][T17776] lo speed is unknown, defaulting to 1000 [ 1260.535194][T17785] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1260.648296][T17802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11411'. [ 1260.754212][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms [ 1260.762243][ C0] lec:lec_tx_timeout: lec0 [ 1260.794471][T17804] macsec1: entered promiscuous mode [ 1260.799727][T17804] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1261.036368][T17817] lo speed is unknown, defaulting to 1000 [ 1261.040768][T17808] netlink: 'syz.4.11414': attribute type 29 has an invalid length. [ 1261.077525][T17826] xt_hashlimit: size too large, truncated to 1048576 [ 1261.571862][T17839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11421'. [ 1261.977171][T17848] lo speed is unknown, defaulting to 1000 [ 1262.019473][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11427'. [ 1262.266970][T17841] lec:lec_atm_close: lec0: Shut down! [ 1262.525330][T10781] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1262.586053][T17890] netlink: 'syz.1.11435': attribute type 4 has an invalid length. [ 1262.639714][T17890] netlink: 'syz.1.11435': attribute type 4 has an invalid length. [ 1262.712127][T17896] sctp: [Deprecated]: syz.0.11436 (pid 17896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1262.712127][T17896] Use struct sctp_sack_info instead [ 1262.776894][T17896] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1262.826847][T17896] nbd: must specify at least one socket [ 1263.228113][T17907] bond8: option broadcast_neighbor: invalid value (30) [ 1263.249208][T17923] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1263.265761][T17907] bond8 (unregistering): Released all slaves [ 1263.314468][T10781] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1263.839873][T17949] bpq0: entered allmulticast mode [ 1263.938758][T17952] __nla_validate_parse: 143 callbacks suppressed [ 1263.938775][T17952] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11455'. [ 1263.979638][T17956] netlink: 'syz.4.11456': attribute type 4 has an invalid length. [ 1263.991535][T17956] netlink: 'syz.4.11456': attribute type 4 has an invalid length. [ 1264.133975][T17957] bond4: entered promiscuous mode [ 1264.139533][T17957] bond4: entered allmulticast mode [ 1264.145492][T17957] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1264.152937][ T4396] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.161986][ T4396] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.173097][ T4396] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.184964][ T4396] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.241261][T17970] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11459'. [ 1264.247837][T17968] lo speed is unknown, defaulting to 1000 [ 1264.250799][T17970] gretap0: entered promiscuous mode [ 1264.361134][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11461'. [ 1264.380321][T17977] netlink: 41 bytes leftover after parsing attributes in process `syz.4.11460'. [ 1264.392532][T17977] netlink: 140 bytes leftover after parsing attributes in process `syz.4.11460'. [ 1264.402494][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11461'. [ 1264.416203][T17976] netlink: 'syz.0.11461': attribute type 2 has an invalid length. [ 1264.457110][T17978] netlink: 41 bytes leftover after parsing attributes in process `syz.4.11460'. [ 1264.486272][T17978] netlink: 140 bytes leftover after parsing attributes in process `syz.4.11460'. [ 1264.689907][T17989] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.11464'. [ 1264.705129][T17991] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11465'. [ 1264.709923][T17989] openvswitch: netlink: Key type 11488 is out of range max 32 [ 1264.862967][T17994] lo speed is unknown, defaulting to 1000 [ 1265.167835][T18010] xt_hashlimit: size too large, truncated to 1048576 [ 1265.714970][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 1265.874956][T18043] netlink: 'syz.1.11478': attribute type 1 has an invalid length. [ 1265.946211][T18043] bond14: entered promiscuous mode [ 1265.951720][T18043] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1265.989013][T18056] xt_hashlimit: size too large, truncated to 1048576 [ 1266.004486][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 1266.047532][T18050] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1266.085159][T18050] bond14: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1266.096612][T18050] bond14: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1266.111696][T18050] bond14: (slave wireguard0): making interface the new active one [ 1266.122648][T18050] wireguard0: entered promiscuous mode [ 1266.130254][T18050] bond14: (slave wireguard0): Enslaving as an active interface with an up link [ 1266.462716][T18078] bond5: option fail_over_mac: invalid value (127) [ 1266.505022][T18078] bond5 (unregistering): Released all slaves [ 1266.754298][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1266.853887][T18101] "syz.4.11495" (18101) uses obsolete ecb(arc4) skcipher [ 1266.907006][T18105] syzkaller0: entered promiscuous mode [ 1266.927936][T18105] syzkaller0: entered allmulticast mode [ 1266.999891][T18111] xt_hashlimit: size too large, truncated to 1048576 [ 1267.207972][T18124] ip6gre1: entered allmulticast mode [ 1267.714295][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5450 ms [ 1267.722344][ C0] lec:lec_tx_timeout: lec0 [ 1267.869414][T18161] pim6reg1: entered promiscuous mode [ 1267.880551][T18161] pim6reg1: entered allmulticast mode [ 1268.121273][T18169] lo speed is unknown, defaulting to 1000 [ 1268.336887][T18195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1268.951661][T18233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1268.980308][T18234] bpq0: left allmulticast mode [ 1269.452635][T18264] __nla_validate_parse: 16 callbacks suppressed [ 1269.452653][T18264] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11537'. [ 1269.506247][T18262] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1269.512273][T18262] pim6reg0: linktype set to 773 [ 1269.619031][T18270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1269.630034][T18270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1269.649101][T18270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1269.862649][T18291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11544'. [ 1269.874998][T18291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11544'. [ 1269.898578][T18293] netlink: 'syz.4.11546': attribute type 4 has an invalid length. [ 1270.132943][T18309] lo speed is unknown, defaulting to 1000 [ 1270.587870][T18338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.750137][T18319] lec:lec_atm_close: lec0: Shut down! [ 1271.119100][T18367] lo speed is unknown, defaulting to 1000 [ 1271.279766][T18384] netlink: 'syz.0.11569': attribute type 18 has an invalid length. [ 1271.294329][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11569'. [ 1271.306553][T18384] netlink: 'syz.0.11569': attribute type 18 has an invalid length. [ 1271.329715][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11569'. [ 1271.559275][T18391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11571'. [ 1271.630081][T18391] bond10: entered promiscuous mode [ 1271.647495][T18391] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1271.704688][T18390] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1271.711861][T18390] bond10: (slave sit1): The slave device specified does not support setting the MAC address [ 1271.785426][T18390] bond10: (slave sit1): Error -95 calling set_mac_address [ 1271.966933][T18414] SET target dimension over the limit! [ 1271.988159][T18414] nbd: couldn't find a device at index 0 [ 1272.215933][T18430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11583'. [ 1272.226594][T18430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11583'. [ 1273.283365][T18486] netlink: 83 bytes leftover after parsing attributes in process `syz.3.11596'. [ 1273.479077][T18501] can: request_module (can-proto-0) failed. [ 1273.485214][T18498] can: request_module (can-proto-0) failed. [ 1273.539192][T18510] xt_ecn: cannot match TCP bits for non-tcp packets [ 1273.640494][T18510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.817658][T18515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.831750][T18515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1273.866691][T18510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.908990][T18500] lec:lec_atm_close: lec0: Shut down! [ 1273.919338][T18532] netlink: 404 bytes leftover after parsing attributes in process `syz.2.11608'. [ 1273.963138][T18510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.088912][T18510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.241105][T18558] netlink: 'syz.1.11613': attribute type 29 has an invalid length. [ 1274.397494][T24384] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.426437][T24384] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.483253][T18575] netlink: ct family unspecified [ 1274.500295][T18575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1274.518194][T24388] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.570739][T15456] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.931287][T18600] lo speed is unknown, defaulting to 1000 [ 1275.232026][T18626] netlink: 'syz.3.11627': attribute type 6 has an invalid length. [ 1275.273759][T18626] __nla_validate_parse: 1 callbacks suppressed [ 1275.273776][T18626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11627'. [ 1275.278302][T18628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11628'. [ 1275.521455][T18610] lec:lec_atm_close: lec0: Shut down! [ 1275.538099][ T29] audit: type=1800 audit(1772531347.809:23): pid=18634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11629" name="memory.events" dev="tmpfs" ino=2748 res=0 errno=0 [ 1275.749174][T18640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11630'. [ 1275.865468][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11632'. [ 1275.925267][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11632'. [ 1275.976104][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11632'. [ 1275.988391][T18652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11634'. [ 1276.018011][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11633'. [ 1276.070522][T18652] lo speed is unknown, defaulting to 1000 [ 1276.503616][T18669] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.679556][T18676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11640'. [ 1276.842758][T18669] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.969433][T18669] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.044043][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11643'. [ 1277.065088][T18694] syzkaller0: left promiscuous mode [ 1277.081150][T18694] syzkaller0: left allmulticast mode [ 1277.173554][T18669] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.340207][T24384] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.378460][T24384] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.451296][T18691] FAULT_INJECTION: forcing a failure. [ 1277.451296][T18691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1277.479841][T18691] CPU: 0 UID: 0 PID: 18691 Comm: syz.1.11644 Not tainted syzkaller #0 PREEMPT(full) [ 1277.479866][T18691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1277.479877][T18691] Call Trace: [ 1277.479885][T18691] [ 1277.479893][T18691] dump_stack_lvl+0xe8/0x150 [ 1277.479925][T18691] should_fail_ex+0x412/0x560 [ 1277.479961][T18691] _copy_from_user+0x2d/0xb0 [ 1277.479987][T18691] do_ipt_get_ctl+0x314/0x1240 [ 1277.480094][T18691] ? do_ip_getsockopt+0x131d/0x1d40 [ 1277.480178][T18691] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 1277.480194][T18691] ? do_ip_getsockopt+0x131d/0x1d40 [ 1277.480219][T18691] ? __local_bh_enable_ip+0xd0/0x130 [ 1277.480247][T18691] ? __mutex_trylock_common+0x158/0x260 [ 1277.480276][T18691] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1277.480303][T18691] ? rcu_is_watching+0x15/0xb0 [ 1277.480327][T18691] ? trace_contention_end+0x3d/0x150 [ 1277.480362][T18691] ? nf_getsockopt+0x224/0x290 [ 1277.480440][T18691] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1277.480470][T18691] ? __pfx___mutex_lock+0x10/0x10 [ 1277.480495][T18691] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1277.480536][T18691] nf_getsockopt+0x26e/0x290 [ 1277.480567][T18691] ip_getsockopt+0x19e/0x230 [ 1277.480598][T18691] ? __pfx_ip_getsockopt+0x10/0x10 [ 1277.480627][T18691] ? sock_common_getsockopt+0x2d/0xb0 [ 1277.480648][T18691] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1277.480670][T18691] do_sock_getsockopt+0x2d3/0x3f0 [ 1277.480697][T18691] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1277.480722][T18691] ? __fget_files+0x3a0/0x420 [ 1277.480746][T18691] ? __fget_files+0x2a/0x420 [ 1277.480776][T18691] __x64_sys_getsockopt+0x1a4/0x240 [ 1277.480809][T18691] do_syscall_64+0x14d/0xf80 [ 1277.480832][T18691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.480850][T18691] ? clear_bhb_loop+0x40/0x90 [ 1277.480870][T18691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.480887][T18691] RIP: 0033:0x7fcf4f79c799 [ 1277.480906][T18691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.480921][T18691] RSP: 002b:00007fcf505de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1277.480940][T18691] RAX: ffffffffffffffda RBX: 00007fcf4fa15fa0 RCX: 00007fcf4f79c799 [ 1277.480960][T18691] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000a [ 1277.480969][T18691] RBP: 00007fcf505de090 R08: 0000200000000240 R09: 0000000000000000 [ 1277.480981][T18691] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1277.480992][T18691] R13: 00007fcf4fa16038 R14: 00007fcf4fa15fa0 R15: 00007fff9812db28 [ 1277.481021][T18691] [ 1277.482757][T24384] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.963294][T24384] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.070287][T18710] 0X: renamed from caif0 [ 1278.077616][T18710] 0X: entered allmulticast mode [ 1278.098104][T18710] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1278.673064][T18733] FAULT_INJECTION: forcing a failure. [ 1278.673064][T18733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1278.676694][T18735] 8021q: VLANs not supported on caif0 [ 1278.716324][T18715] lo speed is unknown, defaulting to 1000 [ 1278.735651][T18733] CPU: 1 UID: 0 PID: 18733 Comm: syz.3.11657 Not tainted syzkaller #0 PREEMPT(full) [ 1278.735675][T18733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1278.735686][T18733] Call Trace: [ 1278.735693][T18733] [ 1278.735701][T18733] dump_stack_lvl+0xe8/0x150 [ 1278.735738][T18733] should_fail_ex+0x412/0x560 [ 1278.735764][T18733] _copy_to_user+0x31/0xb0 [ 1278.735791][T18733] do_ipt_get_ctl+0x99f/0x1240 [ 1278.735815][T18733] ? do_ip_getsockopt+0x131d/0x1d40 [ 1278.735840][T18733] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 1278.735870][T18733] ? do_ip_getsockopt+0x131d/0x1d40 [ 1278.735895][T18733] ? __local_bh_enable_ip+0xd0/0x130 [ 1278.735923][T18733] ? __mutex_trylock_common+0x158/0x260 [ 1278.735952][T18733] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1278.735981][T18733] ? rcu_is_watching+0x15/0xb0 [ 1278.736005][T18733] ? trace_contention_end+0x3d/0x150 [ 1278.736048][T18733] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1278.736079][T18733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1278.736122][T18733] nf_getsockopt+0x26e/0x290 [ 1278.736154][T18733] ip_getsockopt+0x19e/0x230 [ 1278.736185][T18733] ? __pfx_ip_getsockopt+0x10/0x10 [ 1278.736214][T18733] ? sock_common_getsockopt+0x2d/0xb0 [ 1278.736234][T18733] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1278.736262][T18733] do_sock_getsockopt+0x2d3/0x3f0 [ 1278.736290][T18733] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1278.736315][T18733] ? __fget_files+0x3a0/0x420 [ 1278.736339][T18733] ? __fget_files+0x2a/0x420 [ 1278.736369][T18733] __x64_sys_getsockopt+0x1a4/0x240 [ 1278.736402][T18733] do_syscall_64+0x14d/0xf80 [ 1278.736426][T18733] ? trace_irq_disable+0x3b/0x150 [ 1278.736456][T18733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.736474][T18733] ? clear_bhb_loop+0x40/0x90 [ 1278.736496][T18733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.736513][T18733] RIP: 0033:0x7f8db759c799 [ 1278.736529][T18733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.736544][T18733] RSP: 002b:00007f8db84af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1278.736562][T18733] RAX: ffffffffffffffda RBX: 00007f8db7815fa0 RCX: 00007f8db759c799 [ 1278.736576][T18733] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000a [ 1278.736586][T18733] RBP: 00007f8db84af090 R08: 0000200000000240 R09: 0000000000000000 [ 1278.736597][T18733] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1278.736609][T18733] R13: 00007f8db7816038 R14: 00007f8db7815fa0 R15: 00007fff202e1238 [ 1278.736638][T18733] [ 1279.300091][T10370] block nbd12: Receive control failed (result -32) [ 1279.470306][T18762] netlink: 'syz.0.11665': attribute type 3 has an invalid length. [ 1279.807853][T18783] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1279.900006][T18788] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1280.131271][T18796] netlink: 'syz.1.11673': attribute type 39 has an invalid length. [ 1280.593507][T18824] syzkaller0: left promiscuous mode [ 1280.616785][T18824] syzkaller0: left allmulticast mode [ 1280.624343][T18827] __nla_validate_parse: 7 callbacks suppressed [ 1280.624359][T18827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11681'. [ 1280.646637][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11680'. [ 1280.754164][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 1280.762224][ C0] lec:lec_tx_timeout: lec0 [ 1280.826631][T18844] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1280.858787][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11689'. [ 1280.888077][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11689'. [ 1280.931209][T18848] netlink: 666 bytes leftover after parsing attributes in process `syz.1.11689'. [ 1281.036047][T18857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11692'. [ 1281.079314][T18857] wg1: entered promiscuous mode [ 1281.088792][T18857] wg1: entered allmulticast mode [ 1281.151542][T18864] bond5: entered promiscuous mode [ 1281.179671][T18874] macvlan0: entered promiscuous mode [ 1281.187906][T18874] macvlan0: entered allmulticast mode [ 1281.199083][T18864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11691'. [ 1281.215501][T18882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11697'. [ 1281.227464][T18874] bond5: (slave macvlan0): Opening slave failed [ 1281.244467][T18881] syzkaller1: entered promiscuous mode [ 1281.249962][T18881] syzkaller1: entered allmulticast mode [ 1281.276278][T18877] netlink: 'syz.4.11695': attribute type 1 has an invalid length. [ 1281.472844][T18882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11697'. [ 1281.494749][T18890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11695'. [ 1281.728592][T18881] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1281.743755][T18881] bond11: (slave bond12): making interface the new active one [ 1281.757509][T18881] bond11: (slave bond12): Enslaving as an active interface with an up link [ 1281.791218][T18885] bond11: (slave gretap1): Enslaving as a backup interface with an up link [ 1281.865262][T18890] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1282.071305][T18931] IPv6: sit1: Disabled Multicast RS [ 1282.167060][T18937] can: request_module (can-proto-0) failed. [ 1282.290189][T18949] netlink: 'syz.4.11715': attribute type 1 has an invalid length. [ 1282.399386][T18955] syzkaller1: left promiscuous mode [ 1282.404935][T18955] syzkaller1: left allmulticast mode [ 1282.650111][T18967] geneve3: entered promiscuous mode [ 1282.665369][T24388] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.673821][T24388] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.689524][T18967] No such timeout policy "syz1" [ 1282.695420][T24388] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.706809][T24388] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.128520][T18989] lo speed is unknown, defaulting to 1000 [ 1283.134871][T18992] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 1283.450256][T19004] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1283.463700][T19005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1285.298415][T19069] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1285.606591][T19083] vlan3: entered allmulticast mode [ 1285.651984][T19083] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1285.767654][T19090] x_tables: duplicate underflow at hook 1 [ 1285.958072][T19104] __nla_validate_parse: 13 callbacks suppressed [ 1285.958090][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11761'. [ 1285.992547][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11763'. [ 1286.014338][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11761'. [ 1286.027912][T19107] bond14: entered promiscuous mode [ 1286.033620][T19107] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1286.055870][T19104] netlink: 'syz.0.11761': attribute type 12 has an invalid length. [ 1286.062986][T19107] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1286.071685][T19107] bond14: (slave sit2): The slave device specified does not support setting the MAC address [ 1286.083580][T19107] bond14: (slave sit2): Error -95 calling set_mac_address [ 1286.084759][T19104] netlink: 'syz.0.11761': attribute type 11 has an invalid length. [ 1286.307378][T19110] lo speed is unknown, defaulting to 1000 [ 1286.518220][T19124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11768'. [ 1286.542982][T19124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11768'. [ 1286.826261][T19133] netlink: 'syz.3.11771': attribute type 2 has an invalid length. [ 1286.840911][T19133] 9: entered promiscuous mode [ 1286.885131][T19136] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1286.933260][T19136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11772'. [ 1286.959301][T19139] netlink: 'syz.3.11775': attribute type 3 has an invalid length. [ 1287.245722][T19116] dvmrp0: entered allmulticast mode [ 1287.278164][T19153] bond6: option arp_all_targets: invalid value (129) [ 1287.300385][T19153] bond6 (unregistering): Released all slaves [ 1287.521020][T19174] netlink: 'syz.1.11780': attribute type 10 has an invalid length. [ 1287.530354][T19174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.547311][T19174] team0: entered allmulticast mode [ 1287.552456][T19174] team_slave_0: entered allmulticast mode [ 1287.598967][T19174] team_slave_1: entered allmulticast mode [ 1287.656627][T19174] bond0: (slave team0): Enslaving as an active interface with an up link [ 1288.096098][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11787'. [ 1288.122414][T19198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11787'. [ 1288.141668][T19196] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11787'. [ 1288.194865][T19205] netlink: 'syz.2.11789': attribute type 7 has an invalid length. [ 1288.245368][T19205] netlink: 'syz.2.11789': attribute type 7 has an invalid length. [ 1288.321089][T19209] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11791'. [ 1288.344788][T19212] netlink: 'syz.1.11792': attribute type 7 has an invalid length. [ 1288.383474][T19212] netlink: 'syz.1.11792': attribute type 8 has an invalid length. [ 1288.404448][T19214] bridge0: mtu less than device minimum [ 1288.410344][T19214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1288.424604][T19214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1288.685850][T19245] IPv6: NLM_F_CREATE should be specified when creating new route [ 1288.826587][T19247] netlink: 'syz.1.11801': attribute type 1 has an invalid length. [ 1288.838741][T19250] netlink: 'syz.4.11800': attribute type 10 has an invalid length. [ 1288.852924][T19247] netlink: 'syz.1.11801': attribute type 1 has an invalid length. [ 1289.063130][T19274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1289.332712][T19291] bridge6: entered promiscuous mode [ 1289.643510][T19328] sctp: [Deprecated]: syz.2.11811 (pid 19328) Use of int in max_burst socket option. [ 1289.643510][T19328] Use struct sctp_assoc_value instead [ 1289.986165][T19368] xt_TCPMSS: Only works on TCP SYN packets [ 1291.409407][T19441] lo speed is unknown, defaulting to 1000 [ 1291.474339][T12204] page_pool_release_retry() stalled pool shutdown: id 182, 1 inflight 724 sec [ 1291.751289][T19450] dvmrp0: left allmulticast mode [ 1291.756592][T19450] dvmrp1: left allmulticast mode [ 1291.813082][T19452] ip6t_srh: unknown srh invflags BA61 [ 1292.030911][T19454] __nla_validate_parse: 8 callbacks suppressed [ 1292.030951][T19454] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11827'. [ 1292.783820][T19465] tipc: Enabling of bearer rejected, failed to enable media [ 1292.976541][T19472] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11831'. [ 1293.165545][T19476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11832'. [ 1293.233025][T19480] validate_nla: 1 callbacks suppressed [ 1293.233043][T19480] netlink: 'syz.2.11834': attribute type 1 has an invalid length. [ 1293.265422][T19480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11834'. [ 1293.850772][T19507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11843'. [ 1293.911150][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11843'. [ 1293.920491][T19507] macvtap1: entered promiscuous mode [ 1293.920515][T19507] erspan0: entered promiscuous mode [ 1293.920653][T19507] macvtap1: entered allmulticast mode [ 1293.920668][T19507] erspan0: entered allmulticast mode [ 1293.995065][T19516] erspan0: left allmulticast mode [ 1294.000140][T19516] erspan0: left promiscuous mode [ 1294.399986][T19533] C: renamed from team_slave_0 [ 1294.420423][T19533] netlink: 'syz.0.11849': attribute type 2 has an invalid length. [ 1294.427292][T19542] netlink: 276 bytes leftover after parsing attributes in process `syz.4.11851'. [ 1294.484333][T19533] netlink: 116 bytes leftover after parsing attributes in process `syz.0.11849'. [ 1294.503737][T19533] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1294.559401][T19546] netlink: 'syz.1.11852': attribute type 11 has an invalid length. [ 1294.574661][T19546] netlink: 'syz.1.11852': attribute type 23 has an invalid length. [ 1294.582589][T19546] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11852'. [ 1294.610956][T19547] netlink: 112 bytes leftover after parsing attributes in process `syz.4.11853'. [ 1295.016494][T19574] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1295.041094][T19574] bond6 (unregistering): Released all slaves [ 1295.602170][T19614] lo speed is unknown, defaulting to 1000 [ 1295.612977][T19623] nbd: must specify at least one socket [ 1295.691789][T19621] lo speed is unknown, defaulting to 1000 [ 1296.152271][T19652] geneve4: entered promiscuous mode [ 1296.172104][T15456] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.198371][T15456] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.248982][T15456] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.263187][T15456] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.711293][T19678] lo speed is unknown, defaulting to 1000 [ 1296.937341][T19689] netlink: 'syz.0.11894': attribute type 12 has an invalid length. [ 1296.946000][T19689] netlink: 'syz.0.11894': attribute type 11 has an invalid length. [ 1297.142403][T19698] __nla_validate_parse: 9 callbacks suppressed [ 1297.142421][T19698] netlink: 332 bytes leftover after parsing attributes in process `syz.0.11896'. [ 1297.175033][T19698] netlink: 'syz.0.11896': attribute type 9 has an invalid length. [ 1297.182887][T19698] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11896'. [ 1297.198311][T19698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11896'. [ 1297.558938][T19712] netlink: 'syz.2.11903': attribute type 61 has an invalid length. [ 1297.763498][T19719] xt_hashlimit: size too large, truncated to 1048576 [ 1297.779463][T19719] xt_hashlimit: max too large, truncated to 1048576 [ 1297.973161][T19735] mac80211_hwsim hwsim121 syzkaller0: entered promiscuous mode [ 1297.980959][T19735] mac80211_hwsim hwsim121 syzkaller0: entered allmulticast mode [ 1298.062457][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11911'. [ 1298.634320][T19770] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11916'. [ 1298.637498][T19765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11918'. [ 1298.855976][T19778] tipc: Started in network mode [ 1298.860946][T19778] tipc: Node identity 0e37f6e0829c, cluster identity 4711 [ 1298.879421][T19778] tipc: Enabled bearer , priority 0 [ 1298.890840][T19778] syzkaller0: entered promiscuous mode [ 1298.909690][T19778] syzkaller0: entered allmulticast mode [ 1298.914596][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 1298.955392][T19785] tipc: Resetting bearer [ 1298.964336][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 1298.976217][T19787] netlink: 516 bytes leftover after parsing attributes in process `syz.3.11922'. [ 1299.172774][T19805] geneve5: entered promiscuous mode [ 1299.191937][T19805] geneve5: entered allmulticast mode [ 1299.255040][T19809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11927'. [ 1299.424375][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 1299.489765][T19828] netlink: 'syz.2.11933': attribute type 16 has an invalid length. [ 1299.495008][T19832] netlink: 572 bytes leftover after parsing attributes in process `syz.4.11936'. [ 1299.507111][T19832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11936'. [ 1299.511848][T19828] netlink: 'syz.2.11933': attribute type 17 has an invalid length. [ 1299.539627][T19828] erspan0: entered promiscuous mode [ 1299.575877][T19828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.602538][T19828] bridge0: port 3(dummy0) entered blocking state [ 1299.609070][T19828] bridge0: port 3(dummy0) entered forwarding state [ 1299.620691][T19828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1299.638441][ T8630] syz_tun: tun_net_xmit 90 [ 1299.653118][T19835] gretap0: left promiscuous mode [ 1299.685502][T19835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1299.701368][T10498] syz_tun: tun_net_xmit 110 [ 1299.734645][T19838] macsec2: entered allmulticast mode [ 1299.747663][T19838] batadv0: entered allmulticast mode [ 1299.773973][T19838] batadv0: left allmulticast mode [ 1299.846108][ T8630] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1299.867140][ T8630] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1299.910362][ T8630] bond0: now running without any active interface! [ 1299.944655][T10498] syz_tun: tun_net_xmit 90 [ 1299.945595][T12209] tipc: Node number set to 2360080096 [ 1300.041625][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1300.173705][T28131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1300.190591][T28131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1300.199983][T28131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1300.208287][T28131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1300.218148][T28131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1300.260214][T10370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1300.270517][T10370] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1300.278207][T10370] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1300.295797][T10370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1300.305896][T10370] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1300.355860][T10781] syz_tun: tun_net_xmit 110 [ 1300.992646][T19856] lo speed is unknown, defaulting to 1000 [ 1301.041139][T19888] syzkaller1: entered promiscuous mode [ 1301.066924][T19888] syzkaller1: entered allmulticast mode [ 1301.102620][T24388] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.223633][T24388] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.294577][T24388] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.314351][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1301.356247][T24388] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.790224][T19934] netlink: 'syz.2.11964': attribute type 2 has an invalid length. [ 1301.953946][T19934] !: entered promiscuous mode [ 1302.037568][T19944] netlink: 'syz.0.11967': attribute type 61 has an invalid length. [ 1302.062734][T24388] bridge_slave_1: left allmulticast mode [ 1302.084373][T24388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.096172][T24388] bridge_slave_0: left promiscuous mode [ 1302.101912][T24388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.112332][T19949] netlink: 'syz.2.11969': attribute type 13 has an invalid length. [ 1302.123574][T19949] netlink: 'syz.2.11969': attribute type 17 has an invalid length. [ 1302.168043][T24388] tipc: Resetting bearer [ 1302.273275][T24388] bond9 (unregistering): (slave ip6gre1): Releasing backup interface [ 1302.355451][T10370] Bluetooth: hci4: command tx timeout [ 1302.513941][T24388] bond11 (unregistering): (slave gretap1): Releasing backup interface [ 1302.547253][T24388] dvmrp12 (unregistering): left allmulticast mode [ 1302.601055][T19956] __nla_validate_parse: 24 callbacks suppressed [ 1302.601073][T19956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11970'. [ 1302.901148][T24388] tipc: Disabling bearer [ 1302.930026][T24388] bond6 (unregistering): (slave bridge7): Removing an active aggregator [ 1302.939239][T24388] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 1302.948530][T24388] bond6 (unregistering): (slave bridge7): the permanent HWaddr of slave - a2:25:22:f5:da:36 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1302.980848][T24388] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 1303.225743][T24388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.240896][T24388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.251570][T24388] bond0 (unregistering): Released all slaves [ 1303.266807][T24388] bond1 (unregistering): Released all slaves [ 1303.297475][T24388] bond2 (unregistering): Released all slaves [ 1303.315928][T24388] bond3 (unregistering): Released all slaves [ 1303.334737][T24388] bond4 (unregistering): Released all slaves [ 1303.352577][T24388] bond5 (unregistering): Released all slaves [ 1303.386194][T24388] bond6 (unregistering): Released all slaves [ 1303.404578][T24388] bond7 (unregistering): Released all slaves [ 1303.431475][T24388] bond8 (unregistering): Released all slaves [ 1303.449135][T24388] bond9 (unregistering): Released all slaves [ 1303.473020][T24388] bond10 (unregistering): Released all slaves [ 1303.492075][T24388] bond11 (unregistering): (slave bond12): Releasing backup interface [ 1303.509487][T24388] bond11 (unregistering): Released all slaves [ 1303.527079][T24388] bond12 (unregistering): Released all slaves [ 1303.544292][T24388] bond13 (unregistering): Released all slaves [ 1303.562837][T24388] bond14 (unregistering): Released all slaves [ 1303.631143][T19949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1303.675764][T10782] syz_tun: tun_net_xmit 90 [ 1303.833330][T24388] tipc: Left network mode [ 1303.872606][T24388] IPVS: stopping master sync thread 13865 ... [ 1303.920593][T19961] lo speed is unknown, defaulting to 1000 [ 1304.080315][T19856] chnl_net:caif_netlink_parms(): no params data found [ 1304.091354][T19970] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1304.095676][T19978] SET target dimension over the limit! [ 1304.221694][T19970] netlink: 'syz.0.11973': attribute type 4 has an invalid length. [ 1304.237026][T19978] tipc: Enabling of bearer rejected, already enabled [ 1304.410132][T24384] syz_tun: tun_net_xmit 90 [ 1304.435715][T10498] syz_tun: tun_net_xmit 90 [ 1304.440383][T10370] Bluetooth: hci4: command tx timeout [ 1304.704267][T19856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.711399][T19856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.728608][T20006] xt_bpf: check failed: parse error [ 1304.748894][T19856] bridge_slave_0: entered allmulticast mode [ 1304.768207][T20006] siw: device registration error -23 [ 1304.769004][T19856] bridge_slave_0: entered promiscuous mode [ 1304.835957][T19856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.844401][T19856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.867318][T19856] bridge_slave_1: entered allmulticast mode [ 1304.877624][T12209] syz_tun: tun_net_xmit 90 [ 1304.909751][T20012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11981'. [ 1304.930570][T19856] bridge_slave_1: entered promiscuous mode [ 1304.952057][T24388] hsr_slave_0: left promiscuous mode [ 1304.958481][T24388] hsr_slave_1: left promiscuous mode [ 1305.416876][T24384] tipc: Resetting bearer [ 1305.485407][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11984'. [ 1305.541418][T19856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.592393][T19856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.714170][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 1305.722202][ C0] lec:lec_tx_timeout: lec0 [ 1305.759297][T20035] bond15: Removing last arp target with arp_interval on [ 1305.807913][T19856] team0: Port device team_slave_0 added [ 1305.816382][T19856] team0: Port device team_slave_1 added [ 1305.903870][T19856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.919343][T19856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.933279][T20046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11988'. [ 1305.945646][T19856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.968276][T20046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11988'. [ 1305.991795][T19856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.000751][T19856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.039031][T19856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.215777][T24388] IPVS: stop unused estimator thread 0... [ 1306.285014][T20060] netlink: 'syz.0.11992': attribute type 11 has an invalid length. [ 1306.299564][T19856] hsr_slave_0: entered promiscuous mode [ 1306.322754][T19856] hsr_slave_1: entered promiscuous mode [ 1306.359676][T19856] debugfs: 'hsr0' already exists in 'hsr' [ 1306.371703][T20067] netlink: 'syz.2.11993': attribute type 1 has an invalid length. [ 1306.379693][T19856] Cannot create hsr debugfs directory [ 1306.514444][T10370] Bluetooth: hci4: command tx timeout [ 1306.528178][T20067] bond8: entered promiscuous mode [ 1306.543812][T20067] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1306.837148][T20096] "syz.0.11999" (20096) uses obsolete ecb(arc4) skcipher [ 1307.174515][T20111] lo speed is unknown, defaulting to 1000 [ 1307.556448][T20122] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.12007'. [ 1307.581507][T20122] syzkaller0: entered promiscuous mode [ 1307.596848][T20122] syzkaller0: entered allmulticast mode [ 1307.614303][T20125] lec:lec_atm_close: lec0: Shut down! [ 1307.672760][T20124] sit3: entered promiscuous mode [ 1307.745435][T20127] netlink: 'syz.3.12006': attribute type 1 has an invalid length. [ 1307.823144][T20124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12006'. [ 1307.962048][T20137] netlink: 'syz.2.12009': attribute type 4 has an invalid length. [ 1307.970143][T20137] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12009'. [ 1308.019302][T20139] netlink: 'syz.0.12010': attribute type 1 has an invalid length. [ 1308.028280][T20139] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12010'. [ 1308.050357][T20124] sit3: left promiscuous mode [ 1308.061964][T20139] netlink: 658 bytes leftover after parsing attributes in process `syz.0.12010'. [ 1308.098287][T20139] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12010'. [ 1308.337742][T20137] .`: renamed from bond0 (while UP) [ 1308.595643][T10370] Bluetooth: hci4: command tx timeout [ 1308.661126][T19856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1308.843667][T19856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1308.893852][T19856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1308.961923][T19856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1309.338728][T20157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12013'. [ 1309.543046][T19856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.639902][T19856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.677746][T24351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.684954][T24351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.714020][T20204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12017'. [ 1309.740449][T24379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.747647][T24379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.988820][T20213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12018'. [ 1310.001506][T20213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12018'. [ 1310.012313][T20210] lo speed is unknown, defaulting to 1000 [ 1310.102165][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12019'. [ 1310.603063][T19856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.938510][T20244] netlink: 'syz.3.12022': attribute type 2 has an invalid length. [ 1311.031556][T20249] x_tables: duplicate entry at hook 2 [ 1311.407019][T20266] netlink: 'syz.1.12026': attribute type 89 has an invalid length. [ 1311.497739][T19856] veth0_vlan: entered promiscuous mode [ 1311.561597][T20271] netlink: 'syz.3.12028': attribute type 10 has an invalid length. [ 1311.665388][T19856] veth1_vlan: entered promiscuous mode [ 1311.820534][T19856] veth0_macvtap: entered promiscuous mode [ 1311.837226][T19856] veth1_macvtap: entered promiscuous mode [ 1311.887266][T19856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.907119][T19856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1311.923708][T24369] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.953656][T24369] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.002965][T24369] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.022131][T24369] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.246945][T15456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.264564][T15456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.400322][T24379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.409366][T24379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.423588][T20307] netlink: 'syz.1.12037': attribute type 1 has an invalid length. [ 1312.433778][T20307] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 1312.454042][T20312] netlink: 'syz.2.12038': attribute type 1 has an invalid length. [ 1312.508638][T20312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.764207][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 1312.772272][ C0] lec:lec_tx_timeout: lec0 [ 1313.122894][T20354] __nla_validate_parse: 1 callbacks suppressed [ 1313.122914][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12051'. [ 1313.173328][T20358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12053'. [ 1313.400194][T20346] bridge0: port 3(dummy0) entered disabled state [ 1313.451863][T20370] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12056'. [ 1313.611600][T20374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12057'. [ 1314.008005][T20406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12065'. [ 1314.017630][T20406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12065'. [ 1314.039206][T20406] netlink: 'syz.0.12065': attribute type 13 has an invalid length. [ 1314.152584][T20408] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1314.173992][T20408] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1314.193616][T20408] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1314.230580][T20408] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1314.253785][T20408] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1316.355075][T20408] Bluetooth: hci5: command tx timeout [ 1316.379544][T20418] macsec2: entered promiscuous mode [ 1316.537245][T20407] lo speed is unknown, defaulting to 1000 [ 1316.679114][T20438] lo speed is unknown, defaulting to 1000 [ 1316.818633][T20455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12076'. [ 1317.017675][T20464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12080'. [ 1317.192499][T20407] chnl_net:caif_netlink_parms(): no params data found [ 1317.209149][T20471] netlink: 'syz.1.12080': attribute type 1 has an invalid length. [ 1317.253718][T20471] netlink: 'syz.1.12080': attribute type 1 has an invalid length. [ 1317.396260][T20407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.403412][T20407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.412074][T20407] bridge_slave_0: entered allmulticast mode [ 1317.420204][T20407] bridge_slave_0: entered promiscuous mode [ 1317.453037][T20407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.461268][T20407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.470903][T20407] bridge_slave_1: entered allmulticast mode [ 1317.479507][T20407] bridge_slave_1: entered promiscuous mode [ 1317.535818][T20407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.549200][T20407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.623895][T20407] team0: Port device team_slave_0 added [ 1317.626231][T20485] netlink: 'syz.2.12085': attribute type 13 has an invalid length. [ 1317.655365][T20407] team0: Port device team_slave_1 added [ 1317.758687][T20407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.770618][T20407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.832794][T20407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.875028][T20407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.885189][T20407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.941875][T20407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.095484][T20407] hsr_slave_0: entered promiscuous mode [ 1318.114776][T20407] hsr_slave_1: entered promiscuous mode [ 1318.121250][T20407] debugfs: 'hsr0' already exists in 'hsr' [ 1318.128943][T20407] Cannot create hsr debugfs directory [ 1318.198150][T20506] netlink: 'syz.4.12092': attribute type 1 has an invalid length. [ 1318.358449][T20510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12094'. [ 1318.369823][T20510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12094'. [ 1318.436440][T20408] Bluetooth: hci5: command tx timeout [ 1318.503639][T20519] lo speed is unknown, defaulting to 1000 [ 1318.529657][T20407] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.628898][T20407] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.662493][T20533] syzkaller0: entered promiscuous mode [ 1318.720679][T20533] syzkaller0: entered allmulticast mode [ 1318.768100][T20407] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.903060][T20407] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.915907][T23483] lec:lec_start_xmit: lec0:No lecd attached [ 1318.991589][T20552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12106'. [ 1319.160404][T20407] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1319.181937][T20407] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1319.213487][T20407] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1319.299932][T20562] netlink: 'syz.4.12107': attribute type 10 has an invalid length. [ 1319.341497][T20407] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1319.397602][T20562] veth0_vlan: left promiscuous mode [ 1319.405070][T20562] veth0_vlan: entered promiscuous mode [ 1319.433594][T20562] team0: Device veth0_vlan failed to register rx_handler [ 1319.503612][T20565] lo speed is unknown, defaulting to 1000 [ 1319.687797][T20407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.753888][T20407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.767625][T24379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.774794][T24379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.802203][T24379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.809400][T24379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.453814][T20407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.530641][T20408] Bluetooth: hci5: command tx timeout [ 1320.582200][T20608] lo speed is unknown, defaulting to 1000 [ 1320.681148][T20612] batadv3: entered promiscuous mode [ 1320.694709][T20612] batadv3: entered allmulticast mode [ 1320.700335][T20616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12119'. [ 1320.719548][T20612] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1320.750091][T20599] lec:lec_atm_close: lec0: Shut down! [ 1320.783940][T20407] veth0_vlan: entered promiscuous mode [ 1320.817636][T20407] veth1_vlan: entered promiscuous mode [ 1320.832366][T20620] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.12120'. [ 1321.070277][T20624] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.12122'. [ 1321.083377][T20624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12122'. [ 1321.093220][T20624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12122'. [ 1321.367352][T20407] veth0_macvtap: entered promiscuous mode [ 1321.407225][T20634] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1321.440443][T20407] veth1_macvtap: entered promiscuous mode [ 1321.557343][T20636] syzkaller1: entered promiscuous mode [ 1321.567980][T20636] syzkaller1: entered allmulticast mode [ 1321.720284][T20407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.759148][T20651] tipc: Enabled bearer , priority 0 [ 1321.770929][T20651] tipc: Resetting bearer [ 1321.781773][T20647] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1321.807462][T20407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1321.845922][T20647] netlink: 'syz.1.12128': attribute type 4 has an invalid length. [ 1321.880847][T24388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.894499][T24388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.904801][T20659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12131'. [ 1321.920172][T20656] lo speed is unknown, defaulting to 1000 [ 1321.922846][T24388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.945889][T24388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.122110][T24388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.138096][T24388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.219798][ T8630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.233863][ T8630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.596287][T20408] Bluetooth: hci5: command tx timeout [ 1322.658525][T10370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1322.668369][T10370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1322.676917][T10370] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1322.685095][T10370] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1322.698038][T10370] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1322.855513][T20686] lo speed is unknown, defaulting to 1000 [ 1323.031947][T20701] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12141'. [ 1323.419827][T20724] __nla_validate_parse: 4 callbacks suppressed [ 1323.419846][T20724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12148'. [ 1323.455880][T20726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12149'. [ 1323.497441][T20731] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12148'. [ 1323.531254][T20724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12148'. [ 1323.540499][ T4396] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.560866][ T4396] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.603533][ T4396] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.712760][ T4396] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.744917][T20740] veth1: entered promiscuous mode [ 1323.753337][T20740] veth1: entered allmulticast mode [ 1323.764549][T20740] netlink: 'syz.1.12152': attribute type 2 has an invalid length. [ 1324.217934][T20746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1324.331367][T20753] pimreg3: entered allmulticast mode [ 1324.354025][T20742] lo speed is unknown, defaulting to 1000 [ 1324.457696][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12158'. [ 1324.572726][T20772] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12158'. [ 1324.622822][T20772] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12158'. [ 1324.752034][T20768] lo speed is unknown, defaulting to 1000 [ 1324.760124][T10370] Bluetooth: hci3: command tx timeout [ 1324.805281][T20686] chnl_net:caif_netlink_parms(): no params data found [ 1324.933343][T20790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12164'. [ 1324.947566][T20790] netlink: 'syz.1.12164': attribute type 7 has an invalid length. [ 1324.955873][T20790] netlink: 'syz.1.12164': attribute type 8 has an invalid length. [ 1324.964623][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12164'. [ 1325.067201][T20686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.094317][T20686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.106623][T20686] bridge_slave_0: entered allmulticast mode [ 1325.139532][T20686] bridge_slave_0: entered promiscuous mode [ 1325.175002][T20686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.191079][T20686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.207613][T20686] bridge_slave_1: entered allmulticast mode [ 1325.220084][T20686] bridge_slave_1: entered promiscuous mode [ 1325.241800][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12167'. [ 1325.315384][T20686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.328730][T20686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.359970][T20802] tipc: Started in network mode [ 1325.375753][T20802] tipc: Node identity 52cba2ac7832, cluster identity 4711 [ 1325.386543][T20802] tipc: Enabled bearer , priority 0 [ 1325.496395][T20802] syzkaller0: left promiscuous mode [ 1325.501689][T20802] syzkaller0: left allmulticast mode [ 1325.521681][T20686] team0: Port device team_slave_0 added [ 1325.536733][T20686] team0: Port device team_slave_1 added [ 1325.692596][T10781] IPVS: starting estimator thread 0... [ 1325.703272][T20814] netlink: 'syz.0.12171': attribute type 1 has an invalid length. [ 1325.751639][T20686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.758809][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1325.758839][ C0] lec:lec_tx_timeout: lec0 [ 1325.789346][T20686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.804447][T20815] IPVS: using max 33 ests per chain, 79200 per kthread [ 1325.822710][T20686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.851370][T20822] netlink: 'syz.1.12173': attribute type 10 has an invalid length. [ 1325.868011][T20814] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1325.868653][T20819] 8021q: VLANs not supported on gre0 [ 1325.900004][T20686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.910940][T20686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.945926][T20686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.057054][T20686] hsr_slave_0: entered promiscuous mode [ 1326.063630][T20686] hsr_slave_1: entered promiscuous mode [ 1326.070115][T20686] debugfs: 'hsr0' already exists in 'hsr' [ 1326.076146][T20686] Cannot create hsr debugfs directory [ 1326.264949][T20834] nbd: must specify at least one socket [ 1326.398219][T12198] tipc: Node number set to 721003180 [ 1326.846035][T20854] : renamed from bond_slave_0 (while UP) [ 1326.846561][T10370] Bluetooth: hci3: command tx timeout [ 1326.972366][T20686] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1327.028438][T20686] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1327.062373][T20686] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1327.092370][T20686] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1327.098376][T20867] nbd: must specify at least one socket [ 1327.189560][T20878] netlink: 'syz.0.12192': attribute type 3 has an invalid length. [ 1327.200226][T20878] netlink: 'syz.0.12192': attribute type 3 has an invalid length. [ 1327.443005][T20890] lo speed is unknown, defaulting to 1000 [ 1327.578701][T20686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.645465][T20686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.706735][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.713919][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.764000][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.771198][ T4396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.423231][T20686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.555204][T20928] __nla_validate_parse: 7 callbacks suppressed [ 1328.555222][T20928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12203'. [ 1328.741914][T20686] veth0_vlan: entered promiscuous mode [ 1328.801736][T20686] veth1_vlan: entered promiscuous mode [ 1328.852008][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12204'. [ 1328.918387][T10370] Bluetooth: hci3: command tx timeout [ 1328.938626][T20686] veth0_macvtap: entered promiscuous mode [ 1328.986035][T20686] veth1_macvtap: entered promiscuous mode [ 1329.125579][T20686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.205162][T20686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.263427][T24379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.289543][T24379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.309865][T24379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.351053][T20957] netlink: 'syz.1.12210': attribute type 21 has an invalid length. [ 1329.359516][T20957] IPv6: NLM_F_CREATE should be specified when creating new route [ 1329.372194][T20957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1329.379469][T20957] IPv6: NLM_F_CREATE should be set when creating new route [ 1329.386766][T20957] IPv6: NLM_F_CREATE should be set when creating new route [ 1329.393982][T20957] IPv6: NLM_F_CREATE should be set when creating new route [ 1329.492234][T24379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.515050][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12210'. [ 1329.593328][T20965] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1329.756967][T24388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.774532][T24388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.806626][T20981] netlink: 11 bytes leftover after parsing attributes in process `syz.4.12213'. [ 1329.825702][T20982] netlink: 'syz.3.12216': attribute type 50 has an invalid length. [ 1329.825702][T20980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12217'. [ 1329.862318][T24379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.867046][T20978] netlink: 'syz.3.12216': attribute type 50 has an invalid length. [ 1329.880103][T24379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.994360][T10370] Bluetooth: hci3: command tx timeout [ 1332.950469][ T29] audit: type=1800 audit(1772531405.219:24): pid=21008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12223" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=24 res=0 errno=0 [ 1333.163570][T21019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12226'. [ 1333.208945][T20408] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1333.226314][T20408] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1333.229381][T21019] netlink: 'syz.2.12226': attribute type 3 has an invalid length. [ 1333.244039][T20408] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1333.278596][T20408] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1333.286686][T20408] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1333.299459][T21019] netlink: 666 bytes leftover after parsing attributes in process `syz.2.12226'. [ 1333.332362][T21026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12227'. [ 1333.450746][T21020] lo speed is unknown, defaulting to 1000 [ 1333.601483][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12228'. [ 1333.654043][T21035] syz_tun: entered promiscuous mode [ 1333.723198][T21043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12232'. [ 1333.800396][T21043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12232'. [ 1334.006357][T21058] netlink: 'syz.2.12237': attribute type 8 has an invalid length. [ 1334.165774][T21064] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12239'. [ 1334.181616][T21065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12240'. [ 1334.221535][T21068] syzkaller1: entered promiscuous mode [ 1334.238389][T21068] syzkaller1: entered allmulticast mode [ 1334.306796][T21020] chnl_net:caif_netlink_parms(): no params data found [ 1334.501675][T21020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.509271][T21020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.519047][T21020] bridge_slave_0: entered allmulticast mode [ 1334.527486][T21020] bridge_slave_0: entered promiscuous mode [ 1334.538543][T21020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.545984][T21020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.553546][T21020] bridge_slave_1: entered allmulticast mode [ 1334.562026][T21020] bridge_slave_1: entered promiscuous mode [ 1334.606201][T21020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.620650][T21020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.716082][T21020] team0: Port device team_slave_0 added [ 1334.738446][T21020] team0: Port device team_slave_1 added [ 1334.897049][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12246'. [ 1335.315357][T20408] Bluetooth: hci2: command tx timeout [ 1335.350329][T21087] hsr0: entered promiscuous mode [ 1335.358105][T21088] hsr_slave_0: left promiscuous mode [ 1335.415981][T21088] hsr0 (unregistering): left promiscuous mode [ 1335.452303][T21020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.463047][T21020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.519127][T21020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.687652][T21020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.724245][T21020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.799775][T21020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.814063][T21106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12252'. [ 1335.948083][T21108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12251'. [ 1335.981883][T21020] hsr_slave_0: entered promiscuous mode [ 1336.025621][T21020] hsr_slave_1: entered promiscuous mode [ 1336.036855][T21020] debugfs: 'hsr0' already exists in 'hsr' [ 1336.047362][T21020] Cannot create hsr debugfs directory [ 1336.440171][T21126] netlink: 'syz.0.12257': attribute type 5 has an invalid length. [ 1336.450956][T21126] netlink: 'syz.0.12257': attribute type 5 has an invalid length. [ 1336.553047][T21130] lo speed is unknown, defaulting to 1000 [ 1336.636522][T21137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12261'. [ 1336.647051][T21141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12263'. [ 1336.722935][T21137] nbd: must specify a size in bytes for the device [ 1337.036202][ T29] audit: type=1800 audit(1772531409.309:25): pid=21157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12268" name="memory.events" dev="tmpfs" ino=2823 res=0 errno=0 [ 1337.106512][ T29] audit: type=1804 audit(1772531409.309:26): pid=21157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.12268" name="/newroot/551/memory.events" dev="tmpfs" ino=2823 res=1 errno=0 [ 1337.132747][T21156] netlink: 'syz.3.12269': attribute type 4 has an invalid length. [ 1337.211391][T21156] Cannot find del_set index 49151 as target [ 1337.316018][T21020] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1337.333733][T21020] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1337.399770][T20408] Bluetooth: hci2: command tx timeout [ 1337.458999][T21020] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1337.489030][T21020] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1337.663383][ T29] audit: type=1804 audit(1772531409.919:27): pid=21191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.12279" name="/newroot/33/cgroup.controllers" dev="tmpfs" ino=184 res=1 errno=0 [ 1337.755718][ T29] audit: type=1800 audit(1772531409.929:28): pid=21191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12279" name="cgroup.controllers" dev="tmpfs" ino=184 res=0 errno=0 [ 1337.803475][T21020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.061009][T21211] netlink: 'syz.4.12284': attribute type 9 has an invalid length. [ 1338.099395][T21020] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.181586][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.188767][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.207813][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.214977][ T4396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.231952][T21216] netlink: 'syz.3.12285': attribute type 6 has an invalid length. [ 1338.387652][T21220] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1338.395695][T21220] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1338.637142][T21233] __nla_validate_parse: 11 callbacks suppressed [ 1338.637161][T21233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12290'. [ 1338.741324][T21235] netlink: 140 bytes leftover after parsing attributes in process `syz.3.12292'. [ 1338.753630][T21020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.774502][T21235] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12292'. [ 1338.785681][T21237] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20002 [ 1338.961665][T21251] IPVS: stopping backup sync thread 20965 ... [ 1338.985366][T21020] veth0_vlan: entered promiscuous mode [ 1339.088905][T21020] veth1_vlan: entered promiscuous mode [ 1339.103261][T21256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12298'. [ 1339.106657][T21257] bridge4: entered promiscuous mode [ 1339.114179][T21256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12298'. [ 1339.148653][T21020] veth0_macvtap: entered promiscuous mode [ 1339.160537][T21020] veth1_macvtap: entered promiscuous mode [ 1339.227588][T21020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1339.267086][T21265] netlink: 116 bytes leftover after parsing attributes in process `syz.4.12302'. [ 1339.291812][T21020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1339.356504][T21272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12303'. [ 1339.357238][T24369] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.406657][T21269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12302'. [ 1339.416396][T24369] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.475306][T20408] Bluetooth: hci2: command tx timeout [ 1339.495278][T24369] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.570091][T24369] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.615316][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12304'. [ 1339.647982][T21286] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12307'. [ 1339.758523][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.783015][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.877986][T24369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.895833][T24369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.988162][T21301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.995813][T21301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.236329][T21313] lo speed is unknown, defaulting to 1000 [ 1340.830740][T21346] netlink: 'syz.4.12326': attribute type 1 has an invalid length. [ 1341.014480][T21353] bond1: (slave geneve2): making interface the new active one [ 1341.028782][T21353] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1341.053644][T21350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1341.101647][T24379] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1341.125026][T24379] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1341.177734][T24379] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1341.231892][T24379] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1341.433305][T24384] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.458980][T24384] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.513105][T24384] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.550533][T24384] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.564249][T20408] Bluetooth: hci2: command tx timeout [ 1341.625597][T21358] tipc: Resetting bearer [ 1342.035714][T21399] ip6gre1: entered promiscuous mode [ 1342.041718][T21399] ip6gre1: entered allmulticast mode [ 1342.075006][T21398] netlink: 'syz.4.12342': attribute type 1 has an invalid length. [ 1342.400023][T21431] syzkaller0: entered promiscuous mode [ 1342.406722][T21431] syzkaller0: entered allmulticast mode [ 1342.506894][T21442] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1342.538828][T21433] lo speed is unknown, defaulting to 1000 [ 1343.011814][T21462] lo speed is unknown, defaulting to 1000 [ 1343.041405][T21471] ipt_ECN: cannot use operation on non-tcp rule [ 1343.052846][T21471] netlink: 'syz.0.12360': attribute type 32 has an invalid length. [ 1343.070812][T21471] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1343.240298][T24384] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1343.261426][T24384] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1343.312039][T21486] netlink: 'syz.2.12365': attribute type 4 has an invalid length. [ 1343.365615][T21490] netlink: 'syz.2.12365': attribute type 4 has an invalid length. [ 1343.401267][T21486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1343.426276][T21492] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1343.480666][T21495] netlink: 'syz.3.12367': attribute type 12 has an invalid length. [ 1343.484247][T21492] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1343.490882][T21495] openvswitch: netlink: EtherType 0 is less than min 600 [ 1343.530504][T21492] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1343.862856][T21475] lo speed is unknown, defaulting to 1000 [ 1343.966911][T21518] netlink: 'syz.1.12374': attribute type 1 has an invalid length. [ 1343.977355][T21518] __nla_validate_parse: 24 callbacks suppressed [ 1343.977371][T21518] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12374'. [ 1344.060541][T21517] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12375'. [ 1344.072081][T21521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12376'. [ 1344.096676][T21521] syz_tun: entered allmulticast mode [ 1344.102538][T21521] syz_tun: left allmulticast mode [ 1344.259782][T21528] tipc: Started in network mode [ 1344.267771][T21528] tipc: Node identity 263f2e74a1e8, cluster identity 4711 [ 1344.276253][T21528] tipc: Enabled bearer , priority 0 [ 1344.285866][T21528] syzkaller0: entered promiscuous mode [ 1344.291457][T21528] syzkaller0: entered allmulticast mode [ 1344.390401][T21533] bond0: (slave bond_slave_1): Releasing backup interface [ 1344.405454][T21526] tipc: Resetting bearer [ 1344.416583][T21525] tipc: Resetting bearer [ 1344.466786][T21534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12379'. [ 1344.534793][T21525] tipc: Disabling bearer [ 1344.614192][T21531] hsr0: entered promiscuous mode [ 1344.943992][T21551] lo speed is unknown, defaulting to 1000 [ 1345.050982][T21566] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12387'. [ 1345.101015][T21566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12387'. [ 1345.348963][T21566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.356694][T21566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.684946][T21595] netlink: 'syz.1.12384': attribute type 1 has an invalid length. [ 1345.785450][T21566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.811550][T21566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.069706][T21573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.082457][T21573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.094968][T21573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1346.141453][T21596] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12387'. [ 1346.169095][T15456] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.201121][T15456] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1346.210494][T15456] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.219792][T15456] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1346.255109][T15456] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.264018][T15456] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1346.273420][T15456] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.283799][T15456] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1346.479048][T21615] x_tables: duplicate underflow at hook 1 [ 1346.608963][T21625] syzkaller0: entered promiscuous mode [ 1346.617424][T21625] syzkaller0: entered allmulticast mode [ 1346.660400][T21631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12400'. [ 1346.679005][T21631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12400'. [ 1346.829446][T21640] sctp: [Deprecated]: syz.3.12404 (pid 21640) Use of int in max_burst socket option deprecated. [ 1346.829446][T21640] Use struct sctp_assoc_value instead [ 1347.345041][T21663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12413'. [ 1347.565144][T21682] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1347.965611][T21709] tipc: Started in network mode [ 1347.988516][T21709] tipc: Node identity 5a95bcae43a3, cluster identity 4711 [ 1348.012001][T21709] tipc: Enabled bearer , priority 0 [ 1348.111768][T21714] syzkaller0: entered promiscuous mode [ 1348.119818][T21714] syzkaller0: entered allmulticast mode [ 1348.120754][T21720] netlink: 'syz.0.12428': attribute type 1 has an invalid length. [ 1348.126528][T21714] tipc: Resetting bearer [ 1350.657141][T21720] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1350.660626][T24384] tipc: Resetting bearer [ 1350.683946][T21725] __nla_validate_parse: 8 callbacks suppressed [ 1350.683963][T21725] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12429'. [ 1350.720220][T21702] tipc: Resetting bearer [ 1350.783705][T21702] tipc: Disabling bearer [ 1350.795635][T12206] tipc: Node number set to 423017646 [ 1350.808137][T21725] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12429'. [ 1350.898364][T21780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12443'. [ 1351.755544][T21815] : entered promiscuous mode [ 1352.034755][T12204] page_pool_release_retry() stalled pool shutdown: id 182, 1 inflight 785 sec [ 1353.827736][T21773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1353.839906][T21797] netlink: 260 bytes leftover after parsing attributes in process `syz.2.12443'. [ 1353.858152][T21809] netlink: 'syz.4.12450': attribute type 11 has an invalid length. [ 1354.000268][T21824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12456'. [ 1354.023393][T21824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12456'. [ 1354.088711][T21824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12456'. [ 1354.108024][T21824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12456'. [ 1354.344721][T21824] syzkaller0: entered promiscuous mode [ 1354.351359][T21824] syzkaller0: entered allmulticast mode [ 1354.621322][T21863] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12462'. [ 1354.784781][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12464'. [ 1354.893739][T21875] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1354.944282][T21882] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1354.954995][T21876] netlink: 'syz.3.12467': attribute type 26 has an invalid length. [ 1355.284775][T24384] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1355.301259][T21892] netlink: 'syz.0.12470': attribute type 16 has an invalid length. [ 1355.374246][T21892] netlink: 'syz.0.12470': attribute type 17 has an invalid length. [ 1355.376382][T21889] tipc: Resetting bearer [ 1355.393491][T21889] tipc: Resetting bearer [ 1355.409876][T24384] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1355.578736][T21892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1355.602372][T24384] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1355.655608][T24384] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1355.688291][T21901] __nla_validate_parse: 2 callbacks suppressed [ 1355.688310][T21901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12471'. [ 1355.712745][T21899] syzkaller0: entered promiscuous mode [ 1355.729397][T21899] syzkaller0: entered allmulticast mode [ 1355.825374][T21920] bridge0: entered allmulticast mode [ 1355.910424][T21920] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1355.975810][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12477'. [ 1356.004475][T21927] netlink: 'syz.3.12477': attribute type 18 has an invalid length. [ 1356.012417][T21927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12477'. [ 1356.150107][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12477'. [ 1356.204368][T21927] netlink: 'syz.3.12477': attribute type 18 has an invalid length. [ 1356.212554][T21927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12477'. [ 1356.462210][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12480'. [ 1356.779767][T21956] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 1357.017966][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12486'. [ 1357.036588][T21974] macvtap1: entered allmulticast mode [ 1357.042004][T21974] batadv0: entered allmulticast mode [ 1357.073648][T21976] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1357.078439][T21974] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1357.120820][T21974] batadv0: left allmulticast mode [ 1357.197619][T21976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12489'. [ 1357.214250][T21976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12489'. [ 1357.223764][T21981] ipt_ECN: cannot use operation on non-tcp rule [ 1357.238296][T21981] netlink: 'syz.1.12490': attribute type 32 has an invalid length. [ 1357.258715][T21981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12490'. [ 1357.294017][T21978] lo speed is unknown, defaulting to 1000 [ 1357.307836][T21981] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1357.393480][T21985] syzkaller1: entered promiscuous mode [ 1357.413333][T21985] syzkaller1: entered allmulticast mode [ 1357.467721][T21991] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1357.515693][T21981] lo speed is unknown, defaulting to 1000 [ 1358.639169][T22039] netlink: 'syz.2.12507': attribute type 16 has an invalid length. [ 1358.829660][T22039] geneve2: entered promiscuous mode [ 1358.835220][T22039] geneve2: entered allmulticast mode [ 1358.865762][T22044] netlink: 'syz.0.12509': attribute type 4 has an invalid length. [ 1359.101884][T22053] IPVS: Error connecting to the multicast addr [ 1359.183236][T22048] lo speed is unknown, defaulting to 1000 [ 1359.347184][T22059] Unsupported ieee802154 address type: 0 [ 1359.392437][T22061] lo speed is unknown, defaulting to 1000 [ 1360.105338][T22104] xt_l2tp: v2 doesn't support IP mode [ 1361.482476][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1362.689583][T22123] __nla_validate_parse: 9 callbacks suppressed [ 1362.689599][T22123] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12528'. [ 1362.731377][T22126] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12528'. [ 1362.864626][T22099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1362.880791][T22132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12532'. [ 1362.922940][T22132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12532'. [ 1362.975467][T22137] Bluetooth: MGMT ver 1.23 [ 1363.089833][T22146] xfrm1: entered allmulticast mode [ 1363.101604][T22147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12534'. [ 1363.176186][T22151] tipc: Enabled bearer , priority 10 [ 1363.326230][T22161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12540'. [ 1363.517656][T10781] IPVS: starting estimator thread 0... [ 1363.592432][T22180] netlink: 'syz.1.12546': attribute type 1 has an invalid length. [ 1363.614644][T22182] IPVS: using max 36 ests per chain, 86400 per kthread [ 1363.810406][T22172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12544'. [ 1363.950313][T22197] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12549'. [ 1363.985825][T22204] lo speed is unknown, defaulting to 1000 [ 1364.014766][T22210] netlink: 'syz.1.12549': attribute type 13 has an invalid length. [ 1364.109241][T22208] lo speed is unknown, defaulting to 1000 [ 1364.162563][T22210] netlink: 'syz.1.12549': attribute type 5 has an invalid length. [ 1364.265195][T20408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1364.277501][T20408] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1364.285696][T20408] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1364.293535][T20408] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1364.301581][T20408] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1364.613375][T22226] netlink: 'syz.4.12558': attribute type 12 has an invalid length. [ 1364.621903][T22226] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.12558'. [ 1364.748780][T22227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12556'. [ 1364.937877][T22217] lo speed is unknown, defaulting to 1000 [ 1365.361353][T22256] netlink: 'syz.1.12563': attribute type 29 has an invalid length. [ 1365.515004][T22262] netlink: 'syz.1.12565': attribute type 21 has an invalid length. [ 1365.527890][T22262] IPv6: NLM_F_CREATE should be specified when creating new route [ 1365.892492][T22257] lo speed is unknown, defaulting to 1000 [ 1365.936796][T22259] lo speed is unknown, defaulting to 1000 [ 1366.103460][T22263] lo speed is unknown, defaulting to 1000 [ 1366.319463][T22217] chnl_net:caif_netlink_parms(): no params data found [ 1366.354376][T10370] Bluetooth: hci0: command tx timeout [ 1366.507286][T15456] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1366.544220][T15456] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.667007][T15456] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1366.684916][T15456] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.697251][T22298] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1366.721053][T22298] netlink: 'syz.1.12574': attribute type 5 has an invalid length. [ 1366.754137][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 1366.762190][ C0] lec:lec_tx_timeout: lec0 [ 1366.805649][T15456] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1366.839747][T15456] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.931611][T22217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.939171][T22217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.956262][T22217] bridge_slave_0: entered allmulticast mode [ 1366.975088][T22217] bridge_slave_0: entered promiscuous mode [ 1367.031647][T15456] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1367.044291][T15456] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.063773][T22217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.072102][T22217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.101663][T22217] bridge_slave_1: entered allmulticast mode [ 1367.125458][T22217] bridge_slave_1: entered promiscuous mode [ 1367.276480][T22217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.361779][T22217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.442413][T22320] tap0: tun_chr_ioctl cmd 1074025692 [ 1367.611775][T22217] team0: Port device team_slave_0 added [ 1367.642059][T22217] team0: Port device team_slave_1 added [ 1367.961125][T22217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.985480][T22217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.058745][T22217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.100523][T22217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.118566][T22217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.159644][T22217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.327985][T22355] __nla_validate_parse: 8 callbacks suppressed [ 1368.328003][T22355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12584'. [ 1368.329017][T22332] lo speed is unknown, defaulting to 1000 [ 1368.420487][T22358] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.12583'. [ 1368.434248][T10370] Bluetooth: hci0: command tx timeout [ 1368.685582][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12586'. [ 1368.701228][T22217] hsr_slave_0: entered promiscuous mode [ 1368.713212][T22217] hsr_slave_1: entered promiscuous mode [ 1368.729189][T22217] debugfs: 'hsr0' already exists in 'hsr' [ 1368.747557][T22217] Cannot create hsr debugfs directory [ 1368.757713][T15456] bridge_slave_1: left allmulticast mode [ 1368.766658][T15456] bridge_slave_1: left promiscuous mode [ 1368.775697][T15456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.821079][T15456] tipc: Resetting bearer [ 1368.832483][T15456] tipc: Resetting bearer [ 1368.958652][T15456] tipc: Disabling bearer [ 1369.371260][T15456] dvmrp0 (unregistering): left allmulticast mode [ 1369.741096][T15456] tipc: Disabling bearer [ 1369.873822][T15456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.886494][T15456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.899568][T15456] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1369.912654][T15456] bond0 (unregistering): Released all slaves [ 1369.925824][T15456] bond1 (unregistering): Released all slaves [ 1369.942913][T15456] bond2 (unregistering): Released all slaves [ 1369.963976][T15456] bond3 (unregistering): Released all slaves [ 1369.983841][T15456] bond4 (unregistering): Released all slaves [ 1370.008095][T15456] bond5 (unregistering): Released all slaves [ 1370.048908][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12586'. [ 1370.211393][T22373] syzkaller0: entered promiscuous mode [ 1370.217870][T22373] syzkaller0: entered allmulticast mode [ 1370.237694][T15485] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.524347][T10370] Bluetooth: hci0: command tx timeout [ 1372.594456][T10370] Bluetooth: hci0: command tx timeout [ 1372.597324][T15456] tipc: Disabling bearer [ 1372.606072][T15456] tipc: Left network mode [ 1372.612586][T15485] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1372.623439][T15485] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1372.784264][T15485] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1372.939014][T22399] netlink: 'syz.1.12592': attribute type 1 has an invalid length. [ 1373.110127][T22406] Cannot find del_set index 0 as target [ 1373.192273][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12594'. [ 1373.257745][T22413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12594'. [ 1373.655988][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12598'. [ 1373.691763][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12598'. [ 1373.712901][T22431] netlink: 'syz.1.12599': attribute type 1 has an invalid length. [ 1373.805589][T22431] bond2: entered promiscuous mode [ 1373.811091][T22431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1373.897716][T22440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12602'. [ 1373.967701][T22431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1373.991245][T22431] bond2: (slave bond3): making interface the new active one [ 1374.001890][T22431] bond3: entered promiscuous mode [ 1374.008244][T22431] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1374.063770][T22454] tipc: Enabling of bearer rejected, failed to enable media [ 1374.337018][T22454] syzkaller0: entered promiscuous mode [ 1374.344735][T22454] syzkaller0: entered allmulticast mode [ 1374.626828][T22486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12611'. [ 1374.667339][T22486] netlink: 11 bytes leftover after parsing attributes in process `syz.1.12611'. [ 1374.860649][T22217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1374.899182][T22503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12614'. [ 1374.916110][T22503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1374.982866][T22505] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12614'. [ 1375.027476][T22503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1375.147254][T22217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1375.177512][T22476] tipc: Enabling of bearer rejected, failed to enable media [ 1375.187741][T22217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1375.257735][T15456] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1375.265589][T22515] netlink: 'syz.1.12617': attribute type 21 has an invalid length. [ 1375.418717][T15456] team0 (unregistering): Port device team_slave_1 removed [ 1375.448809][T15456] team0 (unregistering): Port device C removed [ 1375.537205][T22528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12621'. [ 1375.613346][T22217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1375.623108][T22515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12617'. [ 1375.632657][T22515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12617'. [ 1375.807406][T22544] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1376.029812][T22217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.101525][T22217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.139187][T22562] bridge_slave_0: left allmulticast mode [ 1376.153526][T22562] bridge_slave_0: left promiscuous mode [ 1376.178945][T22562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.291159][T22562] bridge_slave_1: left allmulticast mode [ 1376.304809][T22561] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1376.310747][T22562] bridge_slave_1: left promiscuous mode [ 1376.311988][T22561] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1376.320712][T22562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.393887][T22562] bond0: (slave c5): Releasing backup interface [ 1376.529290][T22562] team0: Port device team_slave_0 removed [ 1376.560997][T22562] team0: Port device team_slave_1 removed [ 1376.574343][T22562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1376.591277][T22562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.630275][T22562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1376.723129][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.731383][ T8630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.799729][T15456] IPVS: stop unused estimator thread 0... [ 1376.807854][T15485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.815020][T15485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.828208][T22563] lo speed is unknown, defaulting to 1000 [ 1376.834318][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1376.845117][T22592] wg1: entered promiscuous mode [ 1376.849990][T22592] wg1: entered allmulticast mode [ 1377.076777][T22603] netlink: 'syz.4.12637': attribute type 1 has an invalid length. [ 1377.098588][T22603] NCSI netlink: No device for ifindex 0 [ 1377.320578][T22217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.543385][T22617] vlan2: entered allmulticast mode [ 1377.550888][T22617] bridge_slave_0: entered allmulticast mode [ 1377.558857][T22617] bridge0: port 1(vlan2) entered blocking state [ 1377.566973][T22617] bridge0: port 1(vlan2) entered disabled state [ 1377.596550][T22617] vlan2: entered promiscuous mode [ 1377.601987][T22617] bridge_slave_0: entered promiscuous mode [ 1377.609991][T22617] bridge0: mtu less than device minimum [ 1377.664391][T22217] veth0_vlan: entered promiscuous mode [ 1377.743156][T22217] veth1_vlan: entered promiscuous mode [ 1377.839347][T22217] veth0_macvtap: entered promiscuous mode [ 1377.868007][T22627] tipc: Started in network mode [ 1377.872997][T22627] tipc: Node identity ea4ab8ccd606, cluster identity 4711 [ 1377.900418][T22627] tipc: Enabled bearer , priority 0 [ 1377.912003][T22217] veth1_macvtap: entered promiscuous mode [ 1377.920409][T22630] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1377.945630][T22627] tipc: Resetting bearer [ 1377.975607][T22626] tipc: Disabling bearer [ 1377.995653][T22217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1378.001319][T22563] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1378.009987][T22217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1378.014743][T22563] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1378.014761][T22563] CPU: 1 UID: 0 PID: 22563 Comm: syz.2.12628 Not tainted syzkaller #0 PREEMPT(full) [ 1378.014779][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1378.014789][T22563] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 1378.014929][T22563] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 cd e8 57 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 a5 e8 57 f7 4d 8b 75 00 4d 8d a7 30 [ 1378.014944][T22563] RSP: 0018:ffffc90004427828 EFLAGS: 00010046 [ 1378.028798][T15485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.030518][T22563] [ 1378.092215][T22563] RAX: 0000000000000000 RBX: ffff8880530d3800 RCX: dffffc0000000000 [ 1378.100175][T22563] RDX: 0000000000000000 RSI: ffffffff8c27a9e0 RDI: ffff8880530d3800 [ 1378.108130][T22563] RBP: ffff88805bcc0000 R08: ffffffff8ef1bef3 R09: 1ffffffff1de37de [ 1378.116086][T22563] R10: dffffc0000000000 R11: fffffbfff1de37df R12: ffff88802aa7d650 [ 1378.124042][T22563] R13: 0000000000000000 R14: ffff8880530d3830 R15: ffff88802aa7d000 [ 1378.131997][T22563] FS: 0000000000000000(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 1378.140906][T22563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.147470][T22563] CR2: 0000001b2fe23ffc CR3: 0000000025a3e000 CR4: 00000000003526f0 [ 1378.155427][T22563] Call Trace: [ 1378.158690][T22563] [ 1378.161611][T22563] lec_push+0x3cb/0x19d0 [ 1378.165844][T22563] ? __local_bh_enable_ip+0xd0/0x130 [ 1378.171114][T22563] ? __pfx_lec_push+0x10/0x10 [ 1378.175775][T22563] vcc_release+0x15f/0x580 [ 1378.180242][T22563] sock_close+0xc3/0x240 [ 1378.184467][T22563] ? __pfx_sock_close+0x10/0x10 [ 1378.189302][T22563] __fput+0x44f/0xa70 [ 1378.193271][T22563] task_work_run+0x1d9/0x270 [ 1378.197845][T22563] ? __pfx_task_work_run+0x10/0x10 [ 1378.202936][T22563] ? do_raw_spin_unlock+0xf5/0x210 [ 1378.208034][T22563] do_exit+0x69b/0x2320 [ 1378.212170][T22563] ? cgroup1_freezing+0x20/0x350 [ 1378.217091][T22563] ? __pfx_do_exit+0x10/0x10 [ 1378.221660][T22563] ? cgroup1_freezing+0x20/0x350 [ 1378.226580][T22563] ? cgroup1_freezing+0x20/0x350 [ 1378.231502][T22563] do_group_exit+0x21b/0x2d0 [ 1378.236074][T22563] ? _raw_spin_unlock_irq+0x23/0x50 [ 1378.241320][T22563] get_signal+0x1284/0x1330 [ 1378.245814][T22563] arch_do_signal_or_restart+0xbc/0x830 [ 1378.251365][T22563] ? unshare_nsproxy_namespaces+0x143/0x160 [ 1378.257240][T22563] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1378.263373][T22563] ? ksys_unshare+0x825/0x930 [ 1378.268040][T22563] exit_to_user_mode_loop+0x86/0x480 [ 1378.273310][T22563] ? rcu_is_watching+0x15/0xb0 [ 1378.278062][T22563] do_syscall_64+0x32d/0xf80 [ 1378.282640][T22563] ? trace_irq_disable+0x3b/0x150 [ 1378.287651][T22563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.293700][T22563] ? clear_bhb_loop+0x40/0x90 [ 1378.298369][T22563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.304257][T22563] RIP: 0033:0x7f32bb19c799 [ 1378.308658][T22563] Code: Unable to access opcode bytes at 0x7f32bb19c76f. [ 1378.315659][T22563] RSP: 002b:00007f32bc06f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1378.324059][T22563] RAX: fffffffffffffffc RBX: 00007f32bb416090 RCX: 00007f32bb19c799 [ 1378.332023][T22563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1378.339979][T22563] RBP: 00007f32bb232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1378.347934][T22563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1378.355891][T22563] R13: 00007f32bb416128 R14: 00007f32bb416090 R15: 00007ffeb6b2a418 [ 1378.363887][T22563] [ 1378.366904][T22563] Modules linked in: [ 1378.370794][T22563] ---[ end trace 0000000000000000 ]--- [ 1378.376228][T22563] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 1378.381948][T22563] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 cd e8 57 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 a5 e8 57 f7 4d 8b 75 00 4d 8d a7 30 [ 1378.401544][T22563] RSP: 0018:ffffc90004427828 EFLAGS: 00010046 [ 1378.407599][T22563] RAX: 0000000000000000 RBX: ffff8880530d3800 RCX: dffffc0000000000 [ 1378.415555][T22563] RDX: 0000000000000000 RSI: ffffffff8c27a9e0 RDI: ffff8880530d3800 [ 1378.423509][T22563] RBP: ffff88805bcc0000 R08: ffffffff8ef1bef3 R09: 1ffffffff1de37de [ 1378.431461][T22563] R10: dffffc0000000000 R11: fffffbfff1de37df R12: ffff88802aa7d650 [ 1378.439418][T22563] R13: 0000000000000000 R14: ffff8880530d3830 R15: ffff88802aa7d000 [ 1378.447381][T22563] FS: 0000000000000000(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 1378.456307][T22563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.462878][T22563] CR2: 0000001b2fe23ffc CR3: 0000000025a3e000 CR4: 00000000003526f0 [ 1378.470851][T22563] Kernel panic - not syncing: Fatal exception [ 1378.477160][T22563] Kernel Offset: disabled [ 1378.481465][T22563] Rebooting in 86400 seconds..