last executing test programs: 34.48264663s ago: executing program 1 (id=4081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000b80)={@void, @void, @mpls={[{0x6}, {0x9, 0x0, 0x1}, {0x4}, {}, {0xdb5}, {0x19c0}, {0x9}, {0x7f}, {}, {}], @ipv6=@tipc_packet={0x8, 0x6, "64db84", 0x49, 0x6, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0x62, 0x0, 0xe, 0x1, 0x0, 0xf, 0x64}, @dstopts={0x2e, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x6b0}]}], @payload_named={{{{{0x31, 0x0, 0x0, 0x1, 0x0, 0xa, 0x2, 0x2, 0x80, 0x0, 0x3, 0xe, 0x2, 0x2, 0xcb, 0x3ff, 0x4, 0x4e24, 0x4e24}, 0x0, 0x4}, 0x4, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x99) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x1002}) syz_emit_ethernet(0x2a, &(0x7f0000000b40)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @broadcast, @local, @multicast1}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000940)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000c40)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7, 0xe, 0x80000001, 0x1, 0x5, 0xaa94, 0x7}}, {0x12, 0x2, [0x5, 0x4, 0x2, 0x0, 0x0, 0xb, 0x2]}}, {{0x1c, 0x1, {0x5, 0x1, 0x5, 0x3, 0x0, 0x3, 0x3ff, 0x1}}, {0x6, 0x2, [0x29]}}]}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r8, &(0x7f0000000b40)=ANY=[], 0x9dd7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x810) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000100001c0000001c00000004000000010000000000000f02000000f8020000001ba4006100"/56], &(0x7f0000000800)=""/2, 0x38, 0x2, 0x1}, 0x28) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x1c, 0x18, 0x9, 0xfffffffc, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x20000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 33.625716681s ago: executing program 1 (id=4087): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001780)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x10, 0x5, 0x0, 0x8f}, 0x3, 0x2, [{0x3, 0x4, 0x80000000, 0x800, 0x6, 0x8}]}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffdfff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x1, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001380)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000013c0), 0x56) sendmsg$kcm(r8, &(0x7f0000001400)={&(0x7f0000001440)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001500)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (fail_nth: 3) 32.978583256s ago: executing program 2 (id=4091): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r2, 0x0) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0xfff, 0x18}, 0xc) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x8, &(0x7f0000000380)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f00000003c0)='GPL\x00', 0x9, 0x54, &(0x7f0000000400)=""/84, 0x41100, 0x21, '\x00', 0x0, 0x0, r2, 0x8, 0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0x1, 0x9, 0xffff7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r3, r4], 0x0, 0x10, 0x1c}, 0x94) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0, @in=@multicast2, 0x1, 0x716, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4d8, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x192, 0x1, 0xffff, 0x8253c, 0x2, 0xffffffffeffffff8}, {0xffffffffffffffff, 0xffffffffffffffff, 0x800, 0x8000000000000000}, {0x3, 0x8}, 0x70bd2c, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_reorder_window={0x6, 0x25, 0x5}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000a80)={0x18, 0x0, {0x4, @empty, 'erspan0\x00'}}, 0x1e) (async) r6 = socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="e000000015000000000000000000000061656769733132382d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r6, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=ANY=[@ANYBLOB="e8000000100001"], 0xe8}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000300)=0x26, 0xffffffffffffff34) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x84, 0x7f, &(0x7f0000000b80)=""/4057, &(0x7f0000001b80)=0xfd9) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000002055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000012c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000"], 0x4ec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2200000004"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e00)={r10}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e40)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x5, 0xc, &(0x7f0000001f40)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f80)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002040)={0x6, 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[r11]}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1400000025009d0645fe7020f7dbdf2510000000"], 0x14}}, 0x1000) 32.896153014s ago: executing program 1 (id=4092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000180)=0xc) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000003c0)={0x1, [0x0]}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000440)={r4, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r1, 0x84, 0x80, &(0x7f0000000480)={r4, 0x2}, &(0x7f00000004c0)=0x8) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380fcd2fe100000800c00018006000100d65b00001400000011000100000000000000000007"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020071797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8890) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000180)=0xc) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000380)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000003c0)={0x1, [0x0]}, &(0x7f0000000400)=0x8) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000440)={r4, 0x9}, 0x8) (async) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r1, 0x84, 0x80, &(0x7f0000000480)={r4, 0x2}, &(0x7f00000004c0)=0x8) (async) close(0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380fcd2fe100000800c00018006000100d65b00001400000011000100000000000000000007"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020071797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8890) (async) 32.829912945s ago: executing program 2 (id=4094): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x2, r1}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_OKEY={0x8, 0x18}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) 32.79933885s ago: executing program 0 (id=4095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pS \x00'}, 0x20) ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f0000000380)={0x4, 0x6, 0x7, 0xe719}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xffffffff, 0xffffffff, 0xff000000]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) syz_emit_ethernet(0x82, &(0x7f0000000640)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2, @empty, @dev, {[@rr={0x7, 0x3, 0xee}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private=0x2, 0x8000}]}]}}}}}}}, 0x0) 32.726835382s ago: executing program 2 (id=4096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0xe0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000480), 0xf000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000004c0)={'veth1_to_bond\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000004c0)={'veth1_to_bond\x00', @multicast}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) close(r3) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000000000079b03f0000000000620040000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000000000079b03f0000000000620040000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0x7ffffffe, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0x7ffffffe, 0x0, 0x1}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) 32.58675289s ago: executing program 2 (id=4099): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0xb, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="114353012008ba00000037510800", 0x5b, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x7, 0x6, @local}, 0x14) (async) sendto$packet(r1, &(0x7f0000000080)="114353012008ba00000037510800", 0x5b, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x7, 0x6, @local}, 0x14) mmap(&(0x7f0000953000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x4b7b1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 32.488605985s ago: executing program 0 (id=4101): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x9, 0x7ff, 0x10001, 0x2, 0xfffffffffffffff0, 0x2}, {0x1ff, 0xf0000000, 0x401, 0x5, 0xe, 0xffffffffffffffff}], ['\x00', '\x00']}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000140)=0x9d0b, 0x4) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x40, 0x20, 0x9, 0xe, {{0x1f, 0x4, 0x3, 0x5, 0x7c, 0x66, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @private=0xa010102, {[@cipso={0x86, 0x36, 0x7e2b42d55ef507e8, [{0x2, 0xf, "3d7b06832e95765f5d6cdd47be"}, {0x2, 0x8, "891ba1068f4d"}, {0x5, 0xa, "98bc9022618f2672"}, {0x1, 0xf, "23fd1292cbd64e5dca8c6e3cad"}]}, @ra={0x94, 0x4}, @generic={0x0, 0xf, "543fde14ddd4842ab3f8d2afd4"}, @timestamp_addr={0x44, 0x1c, 0xe1, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@local, 0xfffffff7}, {@remote, 0x1}]}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x17, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x1}, @ldst={0x0, 0x2, 0x0, 0x0, 0x9, 0x18, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0xffffffffffffffc0, 0xfffffffffffffff0}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x1f, &(0x7f0000000700)=""/31, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x4, 0x4, 0x2, 0x5}, {0x0, 0x5, 0x10, 0xa}, {0x5, 0x4, 0x2, 0x1}, {0x3, 0x1, 0x1, 0xd}], 0x10, 0x2}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pB \x00'}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pI4 \x00'}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xb, 0x1, &(0x7f0000000300)=@raw=[@exit], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000380)=""/153, 0x40f00, 0x30, '\x00', r3, @fallback=0x11, r4, 0x8, &(0x7f0000000580)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x10, 0x2, 0x1}, 0x10, 0xffffffffffffffff, r5, 0x6, &(0x7f0000000ac0)=[0x1, r6, r7, 0x1, r8], &(0x7f0000000b00)=[{0x0, 0x5, 0x3, 0xc}, {0x0, 0x5, 0x3, 0x3}, {0x1, 0x2, 0x2, 0xb}, {0x1000, 0x4, 0x8, 0x4}, {0x4, 0x2, 0x6, 0x1}, {0x2, 0x5, 0xd, 0x1}], 0x10, 0x792}, 0x94) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x58, r10, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40850}, 0x8080) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000dc0)={{0x0, 0xff, 0x3, 0x8, 0x8000, 0xb, 0xffff, 0x1000, 0x7, 0x4, 0x8, 0xa, 0x8, 0xd, 0x4}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000000e80)={r11, 0x3a}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001ec0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x54, r10, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002040), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x34, r13, 0x208, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}}, 0x800) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002480)={&(0x7f00000021c0)={0x29c, r14, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xcfc}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x262, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x80}, @device_b, @broadcast, @random="b4e608916a27", {0x2, 0x2}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xc}, @void, @void, [{0xdd, 0x2e, "a8e144274557e9d1fd19f3bf070add99c89f737b842f2a62d5f10e1075c59241491cf4164323667a6a1dbc228c29"}, {0xdd, 0xab, "39e82a5a3318cbc9313510350ab998308f00f8a7dc5d2bddba774a432d19d64a4ccf7bd497b1b76bba3b1408c3d21a37792c15e92f25f951318cb416610c4d74218d235b5d4a2bca22651f0c75ba38b5bfd47fadec5082c335f041298f8eec06fe2802edd5deb120b49b5ae8693646eda9076f3c087b5be3ba1496758edd8dad0c417c7f6bf03c841c0cbc522f3d5b76ff4ef19e9ef5984ff6913dacbd22dcfadbc2e324fd32a7d6c19bd6"}, {0xdd, 0xba, "ff0f91e65cf2eabb95123d8589119c7c5a8892c7b8a540d5d8ab43a02e2ee74230f446006aeb3079cd4a190dde91cfe13df343c355e23f0f9650c58cfc94b845cbfbacca6eb901859cc9bf84d85cabd306405ed990361dbec4c9b0eec875f7c375b5f628905791b05702689e13a445153dc78c09ffb270b5124be301cf7e15e14d6916df72f49626b2898866fe877587dd3c8c6e03d936e9b62430645357c59aeab05c80ac3387d6db103108f29fe0da47eee2ead4a33b6d60ce"}, {0xdd, 0xa0, "e00e5e100ce8b4fbbcab0ab1b01eb1c1f75f41b5301e7e31adf0ce95a0f35d0aa1aa275acc2adfc692ade30c593edeb94b9525cb25141522b45acd771d34ba12c092f9510a7aea90527b45011df7e3b32fe326f143ef80f34e3721a10e526dad65057cedc527f533fe0f78f273375604652f2957c96a1947d2d8270c98ed43c205096788fb991e6c654ca79b6833b40c525d9d8513e04741ffc5f43a83d251ef"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x95d}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x1, 0x1, 0x5, 0x9]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4}, 0x20008091) (async) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002540), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000002680)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x48, r15, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x48}}, 0x20008000) (async) r17 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r17, &(0x7f00000026c0)={0x27, 0x0, 0xffffffffffffffff}, 0x10) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002700)={0xffffffffffffffff, 0x5, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002f80)={0x1, 0x24, &(0x7f00000028c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9e54, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r18}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x1, 0x2, 0x7, 0x1, 0xffffffffffffffe0, 0x10}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002a00)='GPL\x00', 0x5, 0xcf, &(0x7f0000002a40)=""/207, 0x41000, 0x2, '\x00', r3, @fallback=0x17, r4, 0x8, &(0x7f0000002b40)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002b80)={0x3, 0x0, 0x7, 0x3}, 0x10, 0x0, r9, 0x6, &(0x7f0000002ec0)=[r7, r6], &(0x7f0000002f00)=[{0x1, 0x2, 0x9, 0x3}, {0x2, 0x4, 0x7, 0x4}, {0x4, 0x3, 0x6, 0x9}, {0x0, 0x3, 0xa, 0x2}, {0x3, 0x3, 0xa, 0xa}, {0x1, 0x5, 0x9, 0x3}], 0x10, 0x4442}, 0x94) 32.373911881s ago: executing program 3 (id=4103): mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x1, 0x8010, 0xffffffffffffffff, 0x83815000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67100000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000180), 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x110c2300fe) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010000000000ffdbb9644959349cdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 32.284319474s ago: executing program 0 (id=4104): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x400}) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x1bc, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x8}, [@tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x6}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x4, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 31.906195944s ago: executing program 3 (id=4105): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r2, 0x4}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x18, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 31.835738032s ago: executing program 1 (id=4106): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000380)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f0000000480)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000580)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0) socket$kcm(0x2, 0xa, 0x2) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff"], 0x50}}, 0x0) 31.697555686s ago: executing program 3 (id=4108): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @sit={{0x8}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x73}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9f5}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x6c}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 31.559266549s ago: executing program 4 (id=4109): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b704000010000020620700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000b80)='GPL\x00'}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="cf04fdfffffffcffffff1300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a000600080211000001000006001200fc0700000600b500c90200000400ac000c00430001"], 0x12c}, 0x1, 0x0, 0x0, 0x404c000}, 0x240008c0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008050}, 0x4814) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x12048005}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x50) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000040)=0x1809, 0x4) 31.54205259s ago: executing program 0 (id=4110): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0xfdef, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f0000000500)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000540)='GPL\x00'}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r1, 0x3}, 0x8) syz_emit_ethernet(0x269, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0xa, 0x4, 0x2, 0x7, 0x25b, 0x68, 0x0, 0x7, 0x2f, 0x0, @local, @multicast2, {[@generic={0x83, 0x11, "116447d8dca697f09143ec50119500"}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa3, 0x1, [], "9500b00b36e428332ef0cca379cde4f9591b199cebc6721d1884c83078911f9f08932e75eb259fe896c8905554478dec467b8fc860a15700eab8f5bb1282d31142dc0178090b89827161b645f562c3021233495f8805b7a6f27861157c69325dc63e6244be7b8582b6ba72fa8a90d449e8a2b23cd0ac5d5aeefe2503757e6f7b9a1817088a42717391a473964e0a1621c0d57d02fc35c8f32794e29c678d557125b5a8"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "d3065bbe529bccbf2c40ada573b9afbe7f4f542801a18668e03e88e13aaef398b5e4c9b7d4d404390fffd9e3ad66da14cdaf8f236bff9bdc5bf2e77db797a8aa3b157945ab00c21e6eadefbf03ea295cb9b36d17bdc70aeef58f0cb5ddd8da489a3c5d113c880ffb703813c842ad9456176a3b2ea152b1efc41e4b424fffd48eb59a917a4a8dcfd1d710"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3], "8557e42ee222d257a8c5010f90d80f1de4a4b969227737ae657350b1abb710c935622bf42bd6739b9d36b0a2bae28e4c5ad408992a8d11b9db286746e90d772b436e962ec73a5279d0d90387e27e10f8d35375adb78153f97e56fcaadf217b9cde"}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0x3, 0x1, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x7, 0x3, 0x1, 0x3, 0x5, 0x9e}, 0x2, {0x4, 0x8, 0x2, 0x14, 0x1, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x4, "a9548e45855bb9d8dc44a68d17b0f930e0da27aae8e2602b698eb31f4e127f9ddbac5e5bb4f2f7b15830847cfeaf057a6c4abe76bfc49baceee0790b5968c91f1a21b03e5947ace013b11bc4ed18cfcb35bfde1ff0d4bcee5cb0a571132ed2"}}}}}}, &(0x7f0000000340)={0x0, 0x3, [0xdbf, 0x5d2, 0x598, 0x1f2]}) syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) 31.401471126s ago: executing program 3 (id=4111): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r5}, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x98, 0x198, 0x98, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x0, 'NFQUEUE\x00', 0x1, {0x8, 0x6}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r7, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x989680}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf, 0x0, 0xc, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x20, 0x10, 0x7, 0x7}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x101, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x1f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}]}, &(0x7f0000000340)='GPL\x00', 0x80, 0x9f, &(0x7f0000000380)=""/159, 0x41000, 0x0, '\x00', r8, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x9, 0xffffff44, 0x9}, 0x10, r9, 0xffffffffffffffff, 0xa, &(0x7f00000005c0)=[r2, 0xffffffffffffffff, r4, r4, r3, r3, r3, r4, 0x1], &(0x7f00000009c0)=[{0x1, 0x1, 0x9, 0xc}, {0x3, 0x4, 0x2, 0x5}, {0x1, 0x4, 0xc, 0x1}, {0x4, 0x2, 0x2, 0x6}, {0x0, 0x4, 0xd, 0xa}, {0x5, 0x4, 0x7, 0xc}, {0x1, 0x4, 0xe, 0x5}, {0x2, 0x1, 0x7, 0xb}, {0x2, 0x4, 0x8, 0xa}, {0x1, 0x1, 0x4}], 0x10, 0x5}, 0x94) 31.317272557s ago: executing program 0 (id=4112): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_deladdr={0x3c, 0x15, 0x4, 0x70bd27, 0x25dfdbff, {0x2, 0x8, 0x1, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x9, 0x2, 0x6}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x128, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40080}, 0x44) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44048800}, 0x80) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000580)={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x20000080) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r3) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x7c, r9, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x22}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r9, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000040) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r9, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc59}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x715f7e84d24b0635}, 0x80) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000b40)=0x80000000) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000b80)=""/38, &(0x7f0000000bc0)=0x26) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x4010, r10, 0x2200c000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r0) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000c40)={0x77359400}, 0x10) sendfile(r2, r5, &(0x7f0000000c80)=0x7fffffffffffffff, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000cc0)=[@timestamp, @mss={0x2, 0x6}, @mss={0x2, 0x200}, @window={0x3, 0xe9f, 0x5}, @window={0x3, 0x4, 0x7}], 0x5) accept4$inet(r10, &(0x7f0000000d00)={0x2, 0x0, @initdev}, &(0x7f0000000d40)=0x10, 0x0) 31.161509675s ago: executing program 4 (id=4113): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newchain={0x3c, 0x64, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffff, 0x3}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x959}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="030300501300fbdbdf250c001000"], 0x14}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4004010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x89}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) 30.905819359s ago: executing program 4 (id=4114): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x1, 0xc2, "9fe0e148f01919a9a3dd4dede204a7a302aa7b74f0d73692e2f9e6681986e08e12cd81792bf8a577de19999466dce5aa2525f702ca49e4602c9baf32e3b668d0a0a449432763d49f746c446e871ada5a2dd8b63748d9d8a479b24cbd3fbb33b5f525e16a763a99c09376ba0215f4d657f7caee232e0c0c165c16a07d71d4d498b387d476486deb6327185eeead886fe6ee8ae099f366c5b4116f9d7e8b8be9a312b5f1faf2f285a97b859a8fa4bc1e742b4b240eb55dc58e393286c325d9481e3f96"}, &(0x7f0000000200)=0xca) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x80000000}, &(0x7f0000000040)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x26000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x268, 0x41, 0x4, 0x70bd29, 0x25dfdbfd, {0x12}, [@nested={0x169, 0x111, 0x0, 0x1, [@typed={0x8, 0x88, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0x15c}, @typed={0x4, 0x8}, @generic="827e436d1e6193eeda1760aa45cfe8fd092baf6441131df640fa01607c4a6076e162af17b4034a010249daf948e450bd930743f817948070a8105054fe995ff54643b01dd64b69093debf89dc3b6a819c687d444793a4fb16e8bddaabcaed5", @typed={0xc, 0x8b, 0x0, 0x0, @str='skbedit\x00'}, @generic="e6e06ffc4739d5ce8b6afe18b14abf15bc87ffb0df2cf439119612d7827def42e6ce7e7082000c0852e872f6c5a0fd551215828e5b036cbce95b7d9668c80d7184d098a1e53ad30de392674185a0c5ce71c70fee66f20518f9dc8ede1ed8f9a01cbba1d6f912afb282b14f43979d5248e6c4cb722a043177e9621700d9da3d74b07fc25dc3af7b08894529221c0fa5a549ec042abc7a9c4d092eb81c9e7ed3d0f2ff63608b5d387a3c92b7644d8c49768bffb3a72454194ab0d939e1697a022aee88aee32942aca9c2e01be26f6024c9fae2b8fe46c26179e09d44bf8238b4013096ea8cf3443a20097e"]}, @typed={0x4, 0x160}, @generic="8b1036ed843f7f80d3be9fa982c8761b42deaa5d207545e2e5e8819f95231e93ae6f0ed3262799df9c39af70c52f065f28d5595f0a7666d2bd63571075502be6f924cb74894df6f16565e017250c852ce5af1cbdb09a97999b1dc5ed04ab790eecb05da2e4576e964442cec0b1f96b95df3fefdf51d30fd102fc2a08deb76beba3ca7caa70c13f68b4ab09bde514dd4362d009682f982e1a05f8eee9a45c7873c1857386bab5a0749e14d5241c898bcd4d90c437e63be58dc8ff98923862141e259ed99933fba2d67fa5ce655c6a3e286116aad45d36f3cea0c574382cc7aca785"]}, 0x268}, 0x1, 0x0, 0x0, 0x40042}, 0x240000c4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x60}}, 0x0) 30.903105336s ago: executing program 0 (id=4115): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) 30.865961704s ago: executing program 4 (id=4116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async) write$tun(r1, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 30.754049304s ago: executing program 1 (id=4117): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001780)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x10, 0x5, 0x0, 0x8f}, 0x3, 0x2, [{0x3, 0x4, 0x80000000, 0x800, 0x6, 0x8}]}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffdfff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x1, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001380)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000013c0), 0x56) sendmsg$kcm(r8, &(0x7f0000001400)={&(0x7f0000001440)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001500)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (fail_nth: 5) 30.662587767s ago: executing program 2 (id=4118): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x8, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001800010400000000000000000a"], 0x48}}, 0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) ppoll(&(0x7f0000000200)=[{r1, 0xa0}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000200), 0x4000000000001f2, 0x0) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000040)={0x2}, &(0x7f0000000080)=0x8) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 30.527195357s ago: executing program 3 (id=4119): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1002}) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a00a6", 0x8, 0x0, 0x0, @private0, @remote, {[@dstopts]}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r5, &(0x7f0000000500)=ANY=[], 0x9dd7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}}, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) (async) socket$unix(0x1, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1002}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a00a6", 0x8, 0x0, 0x0, @private0, @remote, {[@dstopts]}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) (async) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) (async) write$tun(r5, &(0x7f0000000500)=ANY=[], 0x9dd7) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) 30.507603377s ago: executing program 2 (id=4120): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xe9}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="400104"], 0x14) bind$vsock_stream(r2, &(0x7f0000000100), 0x10) listen(r2, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000140), 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) 30.386243234s ago: executing program 4 (id=4121): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"/323], 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 30.34223546s ago: executing program 4 (id=4122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x1, &(0x7f0000000380)="0100203200"/20, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x8, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @void, @mpls={[{0x8f4d, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x100}, {0x4}, {0x3}, {0x1000}, {0x4}, {0xee}, {0x7}, {0x5}], @ipv4=@igmp={{0x5, 0x4, 0x2, 0x9, 0xc4, 0x66, 0x0, 0x0, 0x2, 0x0, @local, @loopback}, {0x14, 0x6, 0x0, @local, "bafec4af7f3c2eade9f3a7c164181877227565f93adb2ad8a5c6a87132cad446fa4febcbabd04a5aae55e5566a8cf3ccfe3788dc3deb213bc95482e7565d47dc40ca2f642b9d0b765641ed1189956ac332f9e2c49dbcc09d9d9392ac41e2420751faee48e8401ae1eb011746717c6180fde69628cd591fb111ee746d69c2495549cc5b31394cba6a1ac95e696f942c7ad2d6a88304bf03b17f14fbd13ea6275d065af65d75544863"}}}}, 0xec) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) 30.286692213s ago: executing program 1 (id=4123): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x18002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="0011e30fd0509ec90100665427ca"}, @nested={0x4, 0x8002}, @nested={0x8, 0x8003, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00098027bd7000fbdbdf25040000000c0017"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 30.118027213s ago: executing program 3 (id=4124): syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x3}]}}}}}}}}, 0x0) r0 = socket(0x2, 0x3, 0x6) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff"], 0x50}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1f8, r2, 0x400, 0x70bd2b, 0x1, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd7e}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "5cbdbf66c7703fe340fab2f43e2ad6f1e2c81b4d3cde4ab1447044314fcf10"}}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x56}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xde, 0x3, "9f92ab6ba3e7d232d76772ae3f709a9bf160b445842bf3b19870e238836a455d56622f7c9b474a9955ff0fd051881e399f642f1c60c1c5bf76ce6b1916a7de30ef121b6b9f83844049b85ca017aa47d827845fc1610882c92520640447e1aaa67f4f60c5e50fca6675aa06946afb2acf6ea00b16479fa36371e98e2f6f66ade3e337d71d7f2051233d066ba929e7ab56b2ca962a6b78890e7ac4e607e8e73ce31cb509b53f285d38bdb2fced84bccf43ee38d0c39c39f88061c1f370ff4aea4990535b5f6672b631ee14047e26814aaa3b734173160f2ff6df34"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x10}, 0x4020004) 0s ago: executing program 32 (id=4115): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) kernel console output (not intermixed with test programs): in process `syz.2.2752'. [ 405.560530][T17259] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2756'. [ 405.574257][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2756'. [ 408.605220][T17268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.024322][T17323] netlink: 'syz.0.2773': attribute type 2 has an invalid length. [ 409.024352][T17323] netlink: 'syz.0.2773': attribute type 2 has an invalid length. [ 409.167777][T17329] syzkaller1: entered promiscuous mode [ 409.167803][T17329] syzkaller1: entered allmulticast mode [ 409.902103][T17365] IPv6: sit1: Disabled Multicast RS [ 410.063237][T17369] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 410.068340][T17369] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 410.273488][T17373] __nla_validate_parse: 8 callbacks suppressed [ 410.273512][T17373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2784'. [ 410.340107][T17376] Bluetooth: hci0: unsupported parameter 5161 [ 410.340134][T17376] Bluetooth: hci0: unsupported parameter 8192 [ 410.340150][T17376] Bluetooth: hci0: unsupported parameter 5161 [ 410.340165][T17376] Bluetooth: hci0: unsupported parameter 8192 [ 410.400188][T17376] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2786'. [ 410.661311][T17394] netlink: 'syz.0.2793': attribute type 4 has an invalid length. [ 410.661334][T17394] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2793'. [ 410.732024][T17393] ip6erspan0: entered allmulticast mode [ 410.735869][T17394] bond1: entered allmulticast mode [ 410.820886][T17390] bond1: left allmulticast mode [ 410.983199][T17403] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.2795'. [ 410.983311][T17403] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.2795'. [ 410.984012][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2795'. [ 410.984031][T17402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2795'. [ 410.984306][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2795'. [ 410.984322][T17402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2795'. [ 411.094733][T17409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2796'. [ 411.813888][T17426] IPv6: NLM_F_REPLACE set, but no existing node found! [ 413.135570][T17487] batman_adv: batadv0: Adding interface: gretap1 [ 413.135591][T17487] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.135622][T17487] batman_adv: batadv0: Interface activated: gretap1 [ 413.900525][T17517] netlink: 'syz.4.2822': attribute type 5 has an invalid length. [ 414.012153][ T4933] Bluetooth: hci1: unexpected event for opcode 0x203d [ 414.338971][T17527] pim6reg: entered allmulticast mode [ 414.595694][T17542] netlink: NAT attribute has 8 unknown bytes [ 414.595733][T17542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.641607][T17552] netlink: 'syz.2.2838': attribute type 1 has an invalid length. [ 414.646970][T17552] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 415.273135][T17574] netlink: 'syz.3.2843': attribute type 3 has an invalid length. [ 415.508423][T17584] ip_tables: iptables: counters copy to user failed while replacing table [ 415.712985][T17595] ip_tables: iptables: counters copy to user failed while replacing table [ 415.877129][T17600] netlink: 'syz.1.2853': attribute type 1 has an invalid length. [ 416.205984][T17616] __nla_validate_parse: 7 callbacks suppressed [ 416.206009][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2859'. [ 416.411348][T17628] netlink: 'syz.3.2861': attribute type 1 has an invalid length. [ 416.480778][T17628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2861'. [ 416.481045][T17631] ip_tables: iptables: counters copy to user failed while replacing table [ 416.481773][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2861'. [ 416.508934][T17628] bond12: (slave bridge5): making interface the new active one [ 416.509487][T17628] bond12: (slave bridge5): Enslaving as an active interface with an up link [ 416.520438][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2861'. [ 416.776634][T17658] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 417.441321][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2874'. [ 417.486645][T17688] ip6gre2: entered promiscuous mode [ 417.486671][T17688] ip6gre2: entered allmulticast mode [ 417.663766][T17699] bridge6: entered promiscuous mode [ 417.740073][T17706] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2879'. [ 417.839661][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2879'. [ 417.944098][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2879'. [ 418.142207][T17731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2883'. [ 418.171107][T17731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.326818][T17738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2885'. [ 418.400451][ T6835] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.400511][ T6835] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.400549][ T6835] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.400631][ T6835] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.457130][T17738] nbd: must specify at least one socket [ 418.578551][T17746] netlink: 'syz.3.2890': attribute type 2 has an invalid length. [ 418.578580][T17746] netlink: 'syz.3.2890': attribute type 2 has an invalid length. [ 419.098225][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 419.104014][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 419.106899][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 419.135953][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 419.146368][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 419.414154][T17784] xt_ecn: cannot match TCP bits for non-tcp packets [ 419.640402][T17793] IPv6: NLM_F_REPLACE set, but no existing node found! [ 419.783187][T17803] openvswitch: netlink: Flow key attr not present in new flow. [ 419.784731][T17801] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 419.922884][ T5624] tipc: Resetting bearer [ 419.979613][ T5624] tipc: Disabling bearer [ 420.010794][T17810] xt_IDLETIMER: timeout value is zero [ 420.053323][T17769] rxe_eth0 speed is unknown, defaulting to 1000 [ 420.329145][T17769] lo speed is unknown, defaulting to 1000 [ 420.330993][T17769] wg0 speed is unknown, defaulting to 1000 [ 420.614758][T17839] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 420.722263][T17841] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 420.851895][T17850] xt_IDLETIMER: timeout value is zero [ 421.059662][T17864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.195911][T17769] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.196095][T17769] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.196266][T17769] bridge_slave_0: entered allmulticast mode [ 421.200563][T17769] bridge_slave_0: entered promiscuous mode [ 421.215464][T17769] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.216164][T17769] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.216645][T17769] bridge_slave_1: entered allmulticast mode [ 421.224092][T17769] bridge_slave_1: entered promiscuous mode [ 421.239673][ T4933] Bluetooth: hci5: command tx timeout [ 421.323635][T17769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.341837][T17769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.406012][T17769] team0: Port device team_slave_0 added [ 421.406150][T17879] __nla_validate_parse: 10 callbacks suppressed [ 421.406168][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2923'. [ 421.431963][T17769] team0: Port device team_slave_1 added [ 421.513992][T17769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.514013][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.514042][T17769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.552444][T17769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.552496][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.552564][T17769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.742200][T17769] hsr_slave_0: entered promiscuous mode [ 421.754649][T17769] hsr_slave_1: entered promiscuous mode [ 421.763772][T17769] debugfs: 'hsr0' already exists in 'hsr' [ 421.763816][T17769] Cannot create hsr debugfs directory [ 421.801861][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 421.840503][T17890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2927'. [ 421.840540][T17890] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 421.867134][T17893] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 422.004719][T17893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2929'. [ 422.039738][T17897] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 422.062921][T17897] bond12 (unregistering): Released all slaves [ 422.143638][T17907] bridge7: entered promiscuous mode [ 422.157551][T17907] bond11: (slave bridge7): making interface the new active one [ 422.158032][T17907] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 422.400513][T17912] netlink: 540 bytes leftover after parsing attributes in process `syz.2.2932'. [ 422.433042][T17919] netlink: 540 bytes leftover after parsing attributes in process `syz.2.2932'. [ 422.500083][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2935'. [ 422.607118][T17769] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.607159][T17769] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.657778][T17928] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2936'. [ 422.657814][T17928] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2936'. [ 422.853006][T17769] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.853046][T17769] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.051165][T17948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2942'. [ 423.123090][T17769] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.123129][T17769] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.179043][T17950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.206783][T17959] syzkaller1: entered promiscuous mode [ 423.206832][T17959] syzkaller1: entered allmulticast mode [ 423.273366][T17769] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.273407][T17769] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.320429][ T4933] Bluetooth: hci5: command tx timeout [ 423.611127][T17974] tap0: tun_chr_ioctl cmd 2148553947 [ 423.624002][T17974] tap0: tun_chr_ioctl cmd 1074025675 [ 423.624025][T17974] tap0: persist enabled [ 423.712886][T17981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 424.077467][T18000] netlink: 'syz.4.2953': attribute type 1 has an invalid length. [ 424.143809][T18000] bond9: entered promiscuous mode [ 424.144291][T18000] 8021q: adding VLAN 0 to HW filter on device bond9 [ 424.145711][T17769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.178795][T17769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.217090][T17769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.234280][T17769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.235178][T17769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.251952][T17769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 424.256717][T17769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 424.287820][T17769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 424.451019][T17769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.492782][T17769] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.516303][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.516381][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.547662][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.547772][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.886775][T18041] bond0: entered promiscuous mode [ 424.890350][T18041] batadv0: entered promiscuous mode [ 424.893301][T18041] debugfs: 'hsr1' already exists in 'hsr' [ 424.893366][T18041] Cannot create hsr debugfs directory [ 424.893545][T18041] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 424.896158][T18041] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 424.933478][T18041] bond0: left promiscuous mode [ 424.945878][T18041] batadv0: left promiscuous mode [ 424.997614][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 425.397520][ T4933] Bluetooth: hci5: command tx timeout [ 425.475678][T18063] team0 (unregistering): Port device team_slave_0 removed [ 425.508515][T18063] team0 (unregistering): Port device team_slave_1 removed [ 425.559855][T18063] team0 (unregistering): Port device wlan0 removed [ 425.608021][T18063] team0 (unregistering): Port device dummy0 removed [ 425.819941][T18081] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 426.063846][T17769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.141536][T18102] netlink: 'syz.0.2976': attribute type 24 has an invalid length. [ 426.222000][T17769] veth0_vlan: entered promiscuous mode [ 426.284997][T17769] veth1_vlan: entered promiscuous mode [ 426.334861][T17769] veth0_macvtap: entered promiscuous mode [ 426.399917][T17769] veth1_macvtap: entered promiscuous mode [ 426.431627][T18109] __nla_validate_parse: 14 callbacks suppressed [ 426.431652][T18109] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2977'. [ 426.464698][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'. [ 426.555830][T17769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.572331][T17769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.628500][ T6830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.628978][ T6830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.629031][ T6830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.629068][ T6830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.843201][T18124] netlink: 'syz.0.2982': attribute type 10 has an invalid length. [ 427.477439][ T4933] Bluetooth: hci5: command tx timeout [ 429.562173][T18113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.660662][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.660703][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.755860][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.755885][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.811562][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 429.891218][T18138] xt_IDLETIMER: label is empty or not nul-terminated [ 430.003001][T18143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2987'. [ 430.508082][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.515384][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.542722][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.544975][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.545698][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.623253][T18166] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.623358][T18166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2992'. [ 431.186940][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2996'. [ 431.218282][T18181] hsr_slave_0: left promiscuous mode [ 431.234251][T18181] hsr_slave_1: left promiscuous mode [ 431.359337][T18193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2999'. [ 431.381982][T18197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2998'. [ 431.383866][T18197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2998'. [ 431.777873][T18163] rxe_eth0 speed is unknown, defaulting to 1000 [ 431.874134][T18222] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3006'. [ 431.876181][T18222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3006'. [ 432.046602][T18227] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3006'. [ 432.057148][T18231] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3008'. [ 432.086191][T18237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3006'. [ 432.195338][T18246] xt_socket: unknown flags 0x4 [ 432.265372][T18163] lo speed is unknown, defaulting to 1000 [ 432.273155][T18163] wg0 speed is unknown, defaulting to 1000 [ 432.501860][T18250] syzkaller0: entered promiscuous mode [ 432.501885][T18250] syzkaller0: entered allmulticast mode [ 432.677446][ T4933] Bluetooth: hci2: command tx timeout [ 432.871728][T18163] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.871858][T18163] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.872135][T18163] bridge_slave_0: entered allmulticast mode [ 432.873643][T18163] bridge_slave_0: entered promiscuous mode [ 432.905541][T18163] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.905666][T18163] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.905769][T18163] bridge_slave_1: entered allmulticast mode [ 432.932947][T18163] bridge_slave_1: entered promiscuous mode [ 432.965620][T18163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.978713][T18163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.012911][T18163] team0: Port device team_slave_0 added [ 433.015267][T18163] team0: Port device team_slave_1 added [ 433.049193][T18163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.049213][T18163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.049247][T18163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.050948][T18163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.050971][T18163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.051004][T18163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.176639][T18163] hsr_slave_0: entered promiscuous mode [ 433.183241][T18163] hsr_slave_1: entered promiscuous mode [ 433.183864][T18163] debugfs: 'hsr0' already exists in 'hsr' [ 433.183885][T18163] Cannot create hsr debugfs directory [ 433.398540][T18163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.398581][T18163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.511537][T18163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.511572][T18163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.614285][T18163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.614315][T18163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.672486][T18163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.673342][T18163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.757975][ T4933] Bluetooth: hci2: command tx timeout [ 434.773448][T18220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.806125][T18163] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.861964][T18163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.866498][T18163] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 434.908481][T18163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.911957][T18163] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 434.935664][T18163] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.936660][T18163] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 434.970346][T18163] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.027895][T18265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3011'. [ 435.032738][T18271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3012'. [ 435.363000][T18163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.426309][T18163] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.477234][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.477347][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.477462][T18298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3019'. [ 435.562713][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.562877][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.671369][T18306] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3021'. [ 436.182009][T18163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.232331][T18163] veth0_vlan: entered promiscuous mode [ 436.251714][T18163] veth1_vlan: entered promiscuous mode [ 436.292688][T18163] veth0_macvtap: entered promiscuous mode [ 436.304204][T18163] veth1_macvtap: entered promiscuous mode [ 436.326303][T18163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.340382][T18163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.430819][ T6835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.431248][ T6835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.431289][ T6835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.431321][ T6835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.837671][ T4933] Bluetooth: hci2: command tx timeout [ 438.303530][T18288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.551328][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.551352][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.594964][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3024'. [ 438.690779][ T6835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.690803][ T6835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.917655][ T4933] Bluetooth: hci2: command tx timeout [ 438.951586][T18347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2990'. [ 439.219284][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3030'. [ 439.354970][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.356764][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.375517][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.388167][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.391918][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 439.661521][T18367] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 439.661555][T18367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.856306][T18374] netlink: 'syz.3.3036': attribute type 16 has an invalid length. [ 439.856341][T18374] netlink: 'syz.3.3036': attribute type 17 has an invalid length. [ 440.021546][T18377] xt_l2tp: invalid flags combination: 8 [ 440.858575][T18360] rxe_eth0 speed is unknown, defaulting to 1000 [ 440.981013][T18436] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.055233][T18438] bridge0: port 2(bond0) entered blocking state [ 441.055361][T18438] bridge0: port 2(bond0) entered disabled state [ 441.073681][T18438] bond0: entered promiscuous mode [ 441.073705][T18438] bond_slave_0: entered promiscuous mode [ 441.073996][T18438] bond_slave_1: entered promiscuous mode [ 441.074153][T18438] veth0_to_bond: entered promiscuous mode [ 441.117178][ T4933] Bluetooth: hci3: unexpected cc 0x1003 length: 67 > 9 [ 441.121779][ T4933] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 441.121909][ T4933] Bluetooth: hci3: unexpected cc 0x1003 length: 67 > 9 [ 441.121932][ T4933] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 441.204961][T18443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3051'. [ 441.223530][T18443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3051'. [ 441.475199][ T61] IPVS: starting estimator thread 0... [ 441.480106][ T4933] Bluetooth: hci1: command tx timeout [ 441.500139][T18360] lo speed is unknown, defaulting to 1000 [ 441.533084][T18360] wg0 speed is unknown, defaulting to 1000 [ 441.558777][T18453] IPVS: using max 29 ests per chain, 69600 per kthread [ 441.691629][T18455] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3055'. [ 441.908697][T18462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3057'. [ 442.845905][T18495] h: entered promiscuous mode [ 442.846286][T18360] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.846469][T18360] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.846613][T18360] bridge_slave_0: entered allmulticast mode [ 442.856282][T18360] bridge_slave_0: entered promiscuous mode [ 442.867115][T18360] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.867668][T18360] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.867821][T18360] bridge_slave_1: entered allmulticast mode [ 442.876173][T18360] bridge_slave_1: entered promiscuous mode [ 443.026877][T18360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.078944][T18360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.311120][T18360] team0: Port device team_slave_0 added [ 443.419538][T18360] team0: Port device team_slave_1 added [ 443.569838][ T4933] Bluetooth: hci1: command tx timeout [ 443.627628][T18360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.627648][T18360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.627685][T18360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.630317][T18520] tipc: Started in network mode [ 443.630350][T18520] tipc: Node identity e0000001, cluster identity 4711 [ 443.630407][T18520] tipc: Enabling of bearer rejected, failed to enable media [ 443.636913][T18360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.636931][T18360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.636960][T18360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.879347][T18360] hsr_slave_0: entered promiscuous mode [ 443.880440][T18360] hsr_slave_1: entered promiscuous mode [ 443.881180][T18360] debugfs: 'hsr0' already exists in 'hsr' [ 443.881201][T18360] Cannot create hsr debugfs directory [ 444.273369][T18360] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.273409][T18360] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.273437][T18360] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 444.448619][T18360] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.448662][T18360] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.448691][T18360] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 444.573287][T18360] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.573346][T18360] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.573375][T18360] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 444.711349][T18360] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.711380][T18360] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.711401][T18360] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 444.909312][T18360] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.914448][T18360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.915880][T18360] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.941700][T18360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.943196][T18360] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.963220][T18360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.965058][T18360] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.985926][T18360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.100879][T18360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.133784][T18360] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.153532][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.153758][ T6835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.203285][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.203399][ T6835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.423210][T18586] ip_tables: iptables: counters copy to user failed while replacing table [ 445.622362][T18596] IPv6: Can't replace route, no match found [ 445.622699][T18596] IPv6: Can't replace route, no match found [ 445.647885][ T4933] Bluetooth: hci1: command tx timeout [ 446.262960][T18626] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3097'. [ 446.342068][T18635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3098'. [ 446.366299][T18632] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3097'. [ 446.381909][T18626] bond12 (unregistering): Released all slaves [ 446.581919][T18632] bond12 (unregistering): Released all slaves [ 446.723441][T18642] batman_adv: batadv0: Adding interface: syzkaller0 [ 446.723504][T18642] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.723537][T18642] batman_adv: batadv0: Interface activated: syzkaller0 [ 446.809760][T18633] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 446.821855][T18641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3099'. [ 446.898827][T18633] batman_adv: batadv0: Removing interface: syzkaller0 [ 446.976579][T18360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.012753][T18668] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.218575][T18680] openvswitch: netlink: IP tunnel dst address not specified [ 447.235999][T18683] openvswitch: netlink: IP tunnel dst address not specified [ 447.336819][T18677] ip_tables: iptables: counters copy to user failed while replacing table [ 447.352271][T18360] veth0_vlan: entered promiscuous mode [ 447.444530][T18360] veth1_vlan: entered promiscuous mode [ 447.584907][T18360] veth0_macvtap: entered promiscuous mode [ 447.622653][T18360] veth1_macvtap: entered promiscuous mode [ 447.691202][T18697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3111'. [ 447.719066][ T4933] Bluetooth: hci1: command tx timeout [ 447.820846][T18697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.842725][T18360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.944261][T18360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.987675][T18697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3111'. [ 448.066236][T18701] ip_tables: iptables: counters copy to user failed while replacing table [ 448.082683][T18701] netlink: 'syz.1.3111': attribute type 17 has an invalid length. [ 448.082722][T18701] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3111'. [ 448.167709][ T6835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.167760][ T6835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.167796][ T6835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.167832][ T6835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.408342][ T6835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.408367][ T6835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.530454][T18730] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 448.588435][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3122'. [ 448.621286][T18730] bond10: entered promiscuous mode [ 448.621959][T18730] 8021q: adding VLAN 0 to HW filter on device bond10 [ 448.625741][T18415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.625763][T18415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.683987][T18730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3121'. [ 448.780286][T18738] netlink: 'syz.1.3123': attribute type 49 has an invalid length. [ 448.873227][T18738] ip6gretap0: entered promiscuous mode [ 448.873254][T18738] ip6gretap0: entered allmulticast mode [ 449.048818][T18745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3125'. [ 449.150926][T18749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.150949][T18749] IPv6: NLM_F_CREATE should be set when creating new route [ 449.150981][T18749] IPv6: NLM_F_CREATE should be set when creating new route [ 449.634318][T18771] netlink: 'syz.4.3130': attribute type 49 has an invalid length. [ 449.912205][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.915587][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.933467][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.953412][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.965279][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 450.162190][T18793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.162231][T18793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.165086][T18793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.165116][T18793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.633399][T18778] rxe_eth0 speed is unknown, defaulting to 1000 [ 450.801205][T18778] lo speed is unknown, defaulting to 1000 [ 450.803242][T18778] wg0 speed is unknown, defaulting to 1000 [ 451.242085][T18778] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.242269][T18778] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.242456][T18778] bridge_slave_0: entered allmulticast mode [ 451.244818][T18778] bridge_slave_0: entered promiscuous mode [ 451.253666][T18778] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.254138][T18778] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.255342][T18778] bridge_slave_1: entered allmulticast mode [ 451.261188][T18778] bridge_slave_1: entered promiscuous mode [ 451.320694][T18778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.325598][T18778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.370824][T18778] team0: Port device team_slave_0 added [ 451.373101][T18778] team0: Port device team_slave_1 added [ 451.406197][T18778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.406217][T18778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.406250][T18778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.415068][T18778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.415118][T18778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.415190][T18778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.520559][T18778] hsr_slave_0: entered promiscuous mode [ 451.521358][T18778] hsr_slave_1: entered promiscuous mode [ 451.521893][T18778] debugfs: 'hsr0' already exists in 'hsr' [ 451.521914][T18778] Cannot create hsr debugfs directory [ 451.716786][T18778] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.716818][T18778] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 451.810556][T18778] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.810586][T18778] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 451.910401][T18778] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.910443][T18778] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 451.967160][T18778] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.967435][T18778] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 452.040300][ T4933] Bluetooth: hci0: command tx timeout [ 452.345067][T18758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.346706][T18782] __nla_validate_parse: 7 callbacks suppressed [ 452.346725][T18782] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3131'. [ 452.468040][T18778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 452.505224][T18778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.506232][T18778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 452.555508][T18778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.556446][T18778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.584538][T18778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.592971][T18778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.639649][T18778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.922408][T18778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.961727][T18778] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.981842][T18415] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.982063][T18415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.013783][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.013902][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.149061][T18842] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3141'. [ 453.283513][T18852] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3143'. [ 454.032435][T18887] netlink: 'syz.1.3152': attribute type 1 has an invalid length. [ 454.101557][T18887] bond2: entered promiscuous mode [ 454.102199][T18887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.122862][ T4933] Bluetooth: hci0: command tx timeout [ 454.193839][T18900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.213009][T18892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.213492][T18892] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 454.213517][T18892] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 454.278661][T18892] bond2: (slave wireguard0): making interface the new active one [ 454.278692][T18892] wireguard0: entered promiscuous mode [ 454.283973][T18892] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 454.504037][T18778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.641013][T18778] veth0_vlan: entered promiscuous mode [ 454.679409][T18778] veth1_vlan: entered promiscuous mode [ 454.779968][T18778] veth0_macvtap: entered promiscuous mode [ 454.804023][T18778] veth1_macvtap: entered promiscuous mode [ 454.848491][T18778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.894190][T18778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.937899][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.939276][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.939362][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.019009][T18399] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.200627][T18908] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3157'. [ 455.236436][T18908] netlink: 'syz.0.3157': attribute type 1 has an invalid length. [ 455.292954][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3157'. [ 455.528495][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.528519][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.106125][T18399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.106163][T18399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.198721][ T4933] Bluetooth: hci0: command tx timeout [ 456.408461][T18957] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3166'. [ 456.410969][T18958] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3166'. [ 456.836971][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 456.848411][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 456.855666][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 456.878419][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 456.879172][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 456.961930][T18970] netlink: 'syz.0.3170': attribute type 8 has an invalid length. [ 457.253859][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3173'. [ 457.284215][T18975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3172'. [ 457.386311][T18986] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3175'. [ 457.812853][T18997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3179'. [ 457.927879][T19008] Bluetooth: MGMT ver 1.23 [ 458.053903][T19011] bond3: invalid ARP target 0.0.0.0 specified for addition [ 458.053929][T19011] bond3: option arp_ip_target: invalid value (0) [ 458.080301][T19011] bond3 (unregistering): Released all slaves [ 458.107656][T19014] netlink: 'syz.1.3183': attribute type 10 has an invalid length. [ 458.197942][T19014] team0: Port device dummy0 added [ 458.285965][ T52] Bluetooth: hci0: command tx timeout [ 458.375981][T18967] rxe_eth0 speed is unknown, defaulting to 1000 [ 458.552063][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3189'. [ 458.552106][T19035] netlink: 'syz.3.3189': attribute type 3 has an invalid length. [ 458.606416][T19035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.726580][T18967] lo speed is unknown, defaulting to 1000 [ 458.737498][T18967] wg0 speed is unknown, defaulting to 1000 [ 458.895343][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 458.924621][ T52] Bluetooth: hci3: command tx timeout [ 459.021140][T19054] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3196'. [ 459.332752][T19068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 459.366974][T19068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 459.395598][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 459.427787][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 459.547855][T18417] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.547910][T18417] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.547951][T18417] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.547989][T18417] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.612042][T19083] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3205'. [ 459.653636][T19081] syzkaller1: entered promiscuous mode [ 459.653662][T19081] syzkaller1: entered allmulticast mode [ 459.961982][ T4933] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 460.326295][T18967] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.326510][T18967] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.327059][T18967] bridge_slave_0: entered allmulticast mode [ 460.336042][T18967] bridge_slave_0: entered promiscuous mode [ 460.358201][ T4933] Bluetooth: hci0: command 0x0c3a tx timeout [ 460.383754][T18967] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.385660][T18967] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.385792][T18967] bridge_slave_1: entered allmulticast mode [ 460.415723][T18967] bridge_slave_1: entered promiscuous mode [ 460.532894][T18967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.548844][T18967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.704019][T18967] team0: Port device team_slave_0 added [ 460.721881][T18967] team0: Port device team_slave_1 added [ 460.841652][T18967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.841672][T18967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.841700][T18967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.878590][T18967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.878642][T18967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.878716][T18967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.952634][ T4933] Bluetooth: hci0: connection err: -111 [ 460.952723][ T4933] Bluetooth: hci0: connection err: -111 [ 461.001010][ T4933] Bluetooth: hci3: command tx timeout [ 461.151020][T19147] netlink: Setting conntrack mark requires 'commit' flag. [ 461.151057][T19147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.199344][T18967] hsr_slave_0: entered promiscuous mode [ 461.205866][T18967] hsr_slave_1: entered promiscuous mode [ 461.216142][T18967] debugfs: 'hsr0' already exists in 'hsr' [ 461.216225][T18967] Cannot create hsr debugfs directory [ 461.293524][T19152] netlink: 'syz.0.3219': attribute type 1 has an invalid length. [ 461.492011][T19152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.604886][T19158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.643535][T19158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.710916][T19162] bond1: (slave veth0_to_bond): making interface the new active one [ 461.713630][T19162] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 461.854905][T19152] bond1: entered promiscuous mode [ 461.854929][T19152] veth0_to_bond: entered promiscuous mode [ 461.855097][T19152] bond1: entered allmulticast mode [ 461.855108][T19152] veth0_to_bond: entered allmulticast mode [ 461.923764][T19138] netlink: 'syz.3.3215': attribute type 3 has an invalid length. [ 462.349196][T19180] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 462.349348][T19180] syzkaller1: linktype set to 823 [ 462.546669][T18967] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.546710][T18967] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.546740][T18967] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 462.610403][T19188] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 462.926827][T18967] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.926868][T18967] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.926898][T18967] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 463.085579][ T4933] Bluetooth: hci3: command tx timeout [ 463.210061][T18967] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.210101][T18967] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.210130][T18967] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 463.405136][T18967] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.406503][T18967] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.406536][T18967] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 463.517420][T19217] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 463.526703][ T156] IPVS: starting estimator thread 0... [ 463.553483][T19219] ip_tables: iptables: counters copy to user failed while replacing table [ 463.574374][T19213] __nla_validate_parse: 38 callbacks suppressed [ 463.574398][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 463.574425][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 463.617385][T19221] IPVS: using max 27 ests per chain, 64800 per kthread [ 463.655175][T19219] netlink: 'syz.3.3233': attribute type 1 has an invalid length. [ 463.783778][T19231] netlink: 8000 bytes leftover after parsing attributes in process `syz.2.3236'. [ 463.783799][T19231] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3236'. [ 463.783810][T19231] netlink: 5788 bytes leftover after parsing attributes in process `syz.2.3236'. [ 463.905160][T18967] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 463.943660][T18967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.946104][T18967] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 463.978784][T18967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.980106][T18967] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 463.981139][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 463.981383][T19236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 464.025532][T18967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.055856][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 464.056627][T18967] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.062904][T19236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 464.089682][T18967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.190229][T18417] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.194893][T19251] ip_tables: iptables: counters copy to user failed while replacing table [ 464.198542][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.198651][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.198804][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.251352][T19251] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 464.474811][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3243'. [ 464.494190][T19257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.528290][T19257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.630193][T18967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.699571][T18967] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.734203][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.734314][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.776769][T18395] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.776882][T18395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.171038][ T4933] Bluetooth: hci3: command tx timeout [ 465.304181][T18967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.702474][T18967] veth0_vlan: entered promiscuous mode [ 465.715319][T18967] veth1_vlan: entered promiscuous mode [ 465.770900][T18967] veth0_macvtap: entered promiscuous mode [ 465.791856][T18967] veth1_macvtap: entered promiscuous mode [ 465.833856][T18967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.853471][T18967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.925375][T18395] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.925928][T18395] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.925967][T18395] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.975226][T18414] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.535186][T19273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.711504][T18417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.711528][T18417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.810523][T18417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.810548][T18417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.036761][T19330] tipc: Enabling of bearer rejected, failed to enable media [ 468.154490][T19344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.154938][T19344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.195406][T19344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.195967][T19344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.196191][T19344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.196422][T19344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.196644][T19344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.196857][T19344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.296107][T19344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.296335][T19344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.666700][T19359] __nla_validate_parse: 8 callbacks suppressed [ 468.666722][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3262'. [ 468.666743][T19359] block nbd2: Unsupported socket: should be TCP or UNIX. [ 468.928979][T19369] rdma_rxe: rxe_newlink: failed to add wg0 [ 469.205376][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3268'. [ 469.442166][T19404] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3273'. [ 469.442813][T19405] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3273'. [ 469.443326][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3273'. [ 469.443351][T19404] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3273'. [ 469.532479][T19409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.676555][T19394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.773646][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 469.774471][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 469.840858][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 470.185566][T19432] sctp: [Deprecated]: syz.1.3274 (pid 19432) Use of int in max_burst socket option. [ 470.185566][T19432] Use struct sctp_assoc_value instead [ 470.345900][T19439] veth0: entered allmulticast mode [ 470.671630][T19439] syzkaller1: entered promiscuous mode [ 470.671656][T19439] syzkaller1: entered allmulticast mode [ 471.035581][T19472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3286'. [ 471.331116][T19487] netlink: 'syz.1.3292': attribute type 21 has an invalid length. [ 471.331191][T19487] netlink: 'syz.1.3292': attribute type 6 has an invalid length. [ 471.359678][T19488] netlink: 'syz.1.3292': attribute type 21 has an invalid length. [ 471.359745][T19488] netlink: 'syz.1.3292': attribute type 6 has an invalid length. [ 471.633521][T19503] bond2: option fail_over_mac: invalid value (16) [ 471.637174][T19503] bond2 (unregistering): Released all slaves [ 471.750474][T19506] netlink: 'syz.2.3298': attribute type 2 has an invalid length. [ 472.361932][T19543] ip6t_srh: unknown srh invflags 4000 [ 472.530297][T19562] batadv_slave_1: entered promiscuous mode [ 472.646515][T19570] netlink: 'syz.1.3316': attribute type 4 has an invalid length. [ 472.782973][T19556] batadv_slave_1: left promiscuous mode [ 472.953187][T19580] batman_adv: batadv0: Adding interface: syzkaller0 [ 472.953210][T19580] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.953244][T19580] batman_adv: batadv0: Interface activated: syzkaller0 [ 473.102107][T19576] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 473.188019][T19576] batman_adv: batadv0: Removing interface: syzkaller0 [ 473.188460][T19592] net_ratelimit: 27 callbacks suppressed [ 473.188479][T19592] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 473.188573][T19592] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 473.318241][T19596] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 473.532276][T19605] ipvlan0: entered promiscuous mode [ 473.532302][T19605] ipvlan0: entered allmulticast mode [ 473.532317][T19605] veth0_vlan: entered allmulticast mode [ 473.643157][T19615] veth0: entered promiscuous mode [ 473.688384][T19614] veth0: left promiscuous mode [ 473.792105][T19613] __nla_validate_parse: 11 callbacks suppressed [ 473.792129][T19613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3325'. [ 473.792159][T19613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3325'. [ 474.131426][T19638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3333'. [ 474.182277][T19637] dvmrp0: entered allmulticast mode [ 474.418141][T19649] netlink: 'syz.0.3337': attribute type 3 has an invalid length. [ 474.418164][T19649] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3337'. [ 474.421176][T19649] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 474.421733][T19649] netlink: 'syz.0.3337': attribute type 29 has an invalid length. [ 474.643691][T18395] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.643743][T18395] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.643791][T18395] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.643827][T18395] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.705297][T19659] Cannot find add_set index 34 as target [ 474.746967][T19660] Cannot find add_set index 34 as target [ 475.041480][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3348'. [ 475.132246][T19692] bond0: entered promiscuous mode [ 475.132269][T19692] bond_slave_0: entered promiscuous mode [ 475.132493][T19692] bond_slave_1: entered promiscuous mode [ 475.134663][T19692] batadv0: entered promiscuous mode [ 475.135522][T19692] debugfs: 'hsr1' already exists in 'hsr' [ 475.135544][T19692] Cannot create hsr debugfs directory [ 475.136293][T19692] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 475.325510][T19708] xt_cgroup: no path or classid specified [ 475.631828][T19719] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3356'. [ 475.802274][T19728] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 475.803006][T19728] team0: Device ipvlan2 is already an upper device of the team interface [ 475.919471][T19732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3364'. [ 475.919516][T19732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3364'. [ 476.181608][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3368'. [ 476.243456][T19741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3367'. [ 476.349131][T19748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.777427][T19760] syzkaller0: entered promiscuous mode [ 476.777453][T19760] syzkaller0: entered allmulticast mode [ 477.080396][T19776] ip_tables: iptables: counters copy to user failed while replacing table [ 477.153745][T19777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.153767][T19777] IPv6: NLM_F_CREATE should be set when creating new route [ 477.206219][T19779] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 477.206240][T19779] sctp: [Deprecated]: syz.0.3377 (pid 19779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.206240][T19779] Use struct sctp_sack_info instead [ 477.206356][T19780] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 477.206511][T19780] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 477.206684][T19780] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 477.206833][T19780] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 477.271188][T19780] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 477.271406][T19780] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 477.271573][T19780] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 477.271751][T19780] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 477.271931][T19780] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 477.272087][T19780] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 477.964286][T19815] Bluetooth: ISO socket layer initialized [ 478.673614][T19852] IPVS: length: 20 != 8 [ 478.850701][T19865] __nla_validate_parse: 75 callbacks suppressed [ 478.850723][T19865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3403'. [ 478.855935][T19864] tunl0: entered promiscuous mode [ 478.878859][T19864] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3403'. [ 479.124732][T19884] ip_tables: iptables: counters copy to user failed while replacing table [ 479.644866][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3417'. [ 479.670842][T19912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3417'. [ 480.280678][T19943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3425'. [ 480.283967][T19950] ip_tables: iptables: counters copy to user failed while replacing table [ 480.579703][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3429'. [ 480.753921][T19969] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3430'. [ 481.380499][T19993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3436'. [ 481.380637][T19994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3436'. [ 481.555583][T20009] xt_TPROXY: Can be used only with -p tcp or -p udp [ 482.049121][T20024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3442'. [ 482.563427][T20051] validate_nla: 62 callbacks suppressed [ 482.563450][T20051] netlink: 'syz.4.3449': attribute type 12 has an invalid length. [ 482.790977][T20069] netlink: 'syz.3.3454': attribute type 3 has an invalid length. [ 482.833051][T20073] netlink: 'syz.3.3454': attribute type 3 has an invalid length. [ 482.868536][T20063] netlink: 'syz.0.3451': attribute type 1 has an invalid length. [ 483.598636][T20112] openvswitch: netlink: Flow key attr not present in new flow. [ 483.619999][T20110] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 484.638312][T20164] netlink: 'syz.1.3472': attribute type 1 has an invalid length. [ 484.693745][T20165] __nla_validate_parse: 5 callbacks suppressed [ 484.693766][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3472'. [ 484.843062][T20164] bond3: option mode: invalid value (7) [ 484.844747][T20164] bond3 (unregistering): Released all slaves [ 487.250947][T20145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.413600][T20185] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3476'. [ 487.429366][T20185] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3476'. [ 487.726854][T20169] syzkaller0: entered promiscuous mode [ 487.726880][T20169] syzkaller0: entered allmulticast mode [ 487.742661][T20175] IPv6: sit1: Disabled Multicast RS [ 487.833853][T20196] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3479'. [ 487.854910][T20196] smc: removing ib device rxe0 [ 487.916118][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3479'. [ 487.989992][T20196] smbdirect: ib_dev[rxe0] removed [ 488.116014][T20206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.187107][T20204] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.3480'. [ 488.464705][T20219] syz_tun: entered allmulticast mode [ 488.490831][T20218] syz_tun: left allmulticast mode [ 488.637067][T20228] nftables ruleset with unbound chain [ 489.009468][T20241] siw: device registration error -23 [ 489.136789][T20243] netlink: 'syz.3.3490': attribute type 1 has an invalid length. [ 489.204470][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3490'. [ 489.245026][T20255] netlink: 'syz.2.3495': attribute type 83 has an invalid length. [ 489.390528][T20243] bond1: entered promiscuous mode [ 489.391123][T20243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.703378][T20266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.245322][T20295] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3506'. [ 490.300432][T20300] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3506'. [ 490.602584][T20308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3508'. [ 491.152932][T20326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.205060][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 491.254991][T20326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3516'. [ 491.839061][ T61] bridge_slave_1: left allmulticast mode [ 491.839115][ T61] bridge_slave_1: left promiscuous mode [ 491.841082][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.901897][ T61] bridge_slave_0: left allmulticast mode [ 491.901938][ T61] bridge_slave_0: left promiscuous mode [ 491.902432][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.032195][ T61] pim6reg: left allmulticast mode [ 492.050509][ T61] pimreg3: left allmulticast mode [ 492.118745][ T61] tipc: Resetting bearer [ 492.133838][ T61] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 492.529823][T20357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3519'. [ 493.159504][ T61] batman_adv: batadv0: Removing interface: gretap3 [ 493.252815][ T61] bond6 (unregistering): (slave geneve5): Releasing active interface [ 493.333590][ T61] tipc: Disabling bearer [ 493.334438][ T61] batman_adv: batadv0: Removing interface: syzkaller0 [ 493.409861][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.410861][ T61] bond_slave_0: left allmulticast mode [ 493.414859][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.415503][ T61] bond_slave_1: left allmulticast mode [ 493.416504][ T61] bond0 (unregistering): Released all slaves [ 493.466462][ T61] bond1 (unregistering): Released all slaves [ 493.490029][ T61] bond2 (unregistering): Released all slaves [ 493.506774][ T61] bond3 (unregistering): Released all slaves [ 493.536482][ T61] bond4 (unregistering): Released all slaves [ 493.554039][ T61] bond5 (unregistering): Released all slaves [ 493.579711][ T61] bond6 (unregistering): Released all slaves [ 493.596406][ T61] bond7 (unregistering): Released all slaves [ 493.613943][ T61] bond8 (unregistering): Released all slaves [ 493.635860][ T61] bond9 (unregistering): Released all slaves [ 493.665394][ T61] bond10 (unregistering): (slave veth11): Releasing active interface [ 493.678428][ T61] bond10 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 493.681901][ T61] bond10 (unregistering): Released all slaves [ 493.864972][ T61] ovs-dp0: left promiscuous mode [ 494.000551][ T61] tipc: Disabling bearer [ 494.023644][ T61] tipc: Left network mode [ 494.070779][T20373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3522'. [ 494.242769][T20337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.563506][T20378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3523'. [ 494.729441][T20382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.775260][T20382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.031290][T20403] x_tables: duplicate underflow at hook 2 [ 495.055947][T20395] ip_tables: iptables: counters copy to user failed while replacing table [ 495.098838][T20395] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3530'. [ 495.253962][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3534'. [ 495.693937][T20431] tipc: Enabled bearer , priority 10 [ 495.942752][ T61] batman_adv: batadv0: Removing interface: macvtap1 [ 496.244065][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3547'. [ 496.244140][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3547'. [ 496.446926][T20467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3550'. [ 496.522767][T20467] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3550'. [ 496.540912][T20469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3552'. [ 496.637951][T20471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3551'. [ 496.704918][T20476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3553'. [ 496.866135][ T61] hsr_slave_0: left promiscuous mode [ 496.867069][ T61] hsr_slave_1: left promiscuous mode [ 496.889999][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.890026][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.896179][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.896205][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.906747][T20482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3554'. [ 496.906865][T20482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3554'. [ 496.966689][ T61] veth1_macvtap: left promiscuous mode [ 496.966762][ T61] veth0_macvtap: left promiscuous mode [ 496.967066][ T61] veth1_vlan: left promiscuous mode [ 496.967115][ T61] veth0_vlan: left promiscuous mode [ 497.853270][ T61] team0 (unregistering): Port device team_slave_1 removed [ 497.881768][ T61] team0 (unregistering): Port device team_slave_0 removed [ 498.213254][ T7683] tipc: Node number set to 3758096385 [ 498.227025][T20488] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 498.360142][ T6832] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 498.673714][T20541] syzkaller0: entered promiscuous mode [ 498.673739][T20541] syzkaller0: entered allmulticast mode [ 499.377670][T20561] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.477633][T20561] tipc: Resetting bearer [ 500.051976][T20561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.106683][T20561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.837992][T18399] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.838051][T18399] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.838274][T18399] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.838305][T18399] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.838347][T18399] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.838374][T18399] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.838413][T18399] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.838441][T18399] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.945282][T20579] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 501.142032][T20600] xt_l2tp: v2 doesn't support IP mode [ 501.194030][ T61] IPVS: stop unused estimator thread 0... [ 501.470363][T20621] netlink: 'syz.0.3583': attribute type 1 has an invalid length. [ 501.608555][T20621] bond2: entered promiscuous mode [ 501.609002][T20621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.052505][T20630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.053872][T20644] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 502.082769][T20630] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.120079][T20630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.166356][T20651] __nla_validate_parse: 7 callbacks suppressed [ 502.166384][T20651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3592'. [ 502.166403][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 502.166432][T20651] netlink: 'syz.4.3592': attribute type 12 has an invalid length. [ 502.166449][T20651] netlink: 'syz.4.3592': attribute type 11 has an invalid length. [ 502.307888][T20630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.341478][T20630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.368835][T20630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 502.368867][T20630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.419270][T20630] veth1_vlan: left promiscuous mode [ 502.423131][T20630] veth0_vlan: left promiscuous mode [ 502.426292][T20630] veth0_vlan: entered promiscuous mode [ 502.462450][T20630] veth1_vlan: entered promiscuous mode [ 502.489417][T20630] veth1_macvtap: left promiscuous mode [ 502.491095][T20630] veth0_macvtap: left promiscuous mode [ 502.492635][T20630] veth0_macvtap: entered promiscuous mode [ 502.495686][T20630] veth1_macvtap: entered promiscuous mode [ 502.528037][T20630] 8021q: adding VLAN 0 to HW filter on device  [ 502.530363][T20630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 502.531957][T20630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 502.533743][T20630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.580002][T20630] bond1: left promiscuous mode [ 502.580344][T20630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.611946][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.612048][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.615675][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.615807][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.822136][ T6832] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.822176][ T6832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.848606][ T6832] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.848655][ T6832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.948657][ T61] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.948698][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.957527][ T61] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 502.957564][ T61] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 503.004274][T20669] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3598'. [ 504.993156][T20642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.010895][T20668] smc: net device lo erased user defined pnetid SYZ0 [ 505.011235][T20668] smc: smcd device lo erased user defined pnetid SYZ0 [ 505.408213][T20698] netlink: 'syz.4.3607': attribute type 1 has an invalid length. [ 505.495913][T20703] xt_HMARK: proto mask must be zero with L3 mode [ 505.594033][T20698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.075754][T20724] bond2: entered promiscuous mode [ 506.075820][T20724] bond2: entered allmulticast mode [ 506.076183][T20724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.363202][T20735] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3620'. [ 506.543238][T20727] bond1: left promiscuous mode [ 506.543265][T20727] veth0_to_bond: left promiscuous mode [ 506.587799][T20727] bond2: left promiscuous mode [ 507.577147][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3626'. [ 507.766548][T20784] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 508.150579][T20805] ipvlan0: entered promiscuous mode [ 508.150611][T20805] ipvlan0: entered allmulticast mode [ 508.150629][T20805] veth0_vlan: entered allmulticast mode [ 508.266807][T20817] netlink: 'syz.4.3639': attribute type 11 has an invalid length. [ 508.395168][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3642'. [ 508.395194][T20826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3642'. [ 508.644411][T20839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'. [ 508.644441][T20839] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3646'. [ 508.646799][T20840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'. [ 508.646820][T20840] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3646'. [ 508.686496][T20835] openvswitch: netlink: Message has 8 unknown bytes. [ 508.686533][T20835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.185557][T20858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3649'. [ 509.289864][T20858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3649'. [ 509.338569][T20862] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 509.481860][T20873] netlink: 'syz.0.3651': attribute type 1 has an invalid length. [ 509.595203][T20862] veth3: entered allmulticast mode [ 509.670379][T20873] bond1: (slave veth0_to_bond): Releasing active interface [ 509.670410][T20873] veth0_to_bond: left allmulticast mode [ 509.716779][T20884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3654'. [ 509.762798][T20883] ip_tables: iptables: counters copy to user failed while replacing table [ 510.631717][T20926] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 510.634943][T20926] netlink: 'syz.4.3667': attribute type 11 has an invalid length. [ 510.724857][T20922] bond3: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 510.764785][T20922] bond3 (unregistering): Released all slaves [ 511.456765][T20930] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.457536][T20930] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.334122][T20930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.415645][T20930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.388074][ T6832] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.388132][ T6832] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.388172][ T6832] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.388211][ T6832] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.389804][T20951] tap0: tun_chr_ioctl cmd 1074025672 [ 513.389826][T20951] tap0: ignored: set checksum disabled [ 513.688390][T20988] macvlan0: entered promiscuous mode [ 513.708128][T20988] openvswitch: netlink: Duplicate or invalid key (type 0). [ 513.756035][T20994] openvswitch: netlink: Duplicate or invalid key (type 0). [ 513.880434][T21006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.956123][T21011] __nla_validate_parse: 4 callbacks suppressed [ 513.956143][T21011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3677'. [ 514.024548][T21015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3680'. [ 514.250162][ T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 514.486899][T21044] FAULT_INJECTION: forcing a failure. [ 514.486899][T21044] name failslab, interval 1, probability 0, space 0, times 1 [ 514.486937][T21044] CPU: 0 UID: 0 PID: 21044 Comm: syz.2.3686 Not tainted syzkaller #0 PREEMPT(full) [ 514.486955][T21044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.486971][T21044] Call Trace: [ 514.486980][T21044] [ 514.486987][T21044] dump_stack_lvl+0xe8/0x150 [ 514.487016][T21044] should_fail_ex+0x410/0x560 [ 514.487048][T21044] should_failslab+0xa8/0x100 [ 514.487071][T21044] ? skb_clone+0x212/0x3a0 [ 514.487090][T21044] kmem_cache_alloc_noprof+0xa1/0x600 [ 514.487110][T21044] ? skb_clone+0x212/0x3a0 [ 514.487133][T21044] skb_clone+0x212/0x3a0 [ 514.487154][T21044] __netlink_deliver_tap+0x413/0x860 [ 514.487216][T21044] ? netlink_deliver_tap+0x2e/0x1b0 [ 514.487246][T21044] netlink_deliver_tap+0x19c/0x1b0 [ 514.487275][T21044] netlink_unicast+0x8c1/0xa80 [ 514.487330][T21044] netlink_sendmsg+0x813/0xb40 [ 514.487370][T21044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.487409][T21044] ? apparmor_socket_sendmsg+0x98/0x360 [ 514.487443][T21044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.487471][T21044] sock_sendmsg_nosec+0x13a/0x180 [ 514.487505][T21044] ____sys_sendmsg+0x54e/0x850 [ 514.487536][T21044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.487572][T21044] ? import_iovec+0x73/0xa0 [ 514.487611][T21044] ___sys_sendmsg+0x2a5/0x360 [ 514.487633][T21044] ? __lock_acquire+0x747/0x2de0 [ 514.487664][T21044] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.487731][T21044] ? __fget_files+0x2a/0x420 [ 514.487751][T21044] ? __fget_files+0x3a2/0x420 [ 514.487784][T21044] __x64_sys_sendmsg+0x1b1/0x290 [ 514.487812][T21044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.487863][T21044] do_syscall_64+0x166/0x520 [ 514.487888][T21044] ? trace_irq_disable+0x3b/0x140 [ 514.487913][T21044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.487936][T21044] ? clear_bhb_loop+0x70/0xc0 [ 514.487964][T21044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.487985][T21044] RIP: 0033:0x7f3837b9e559 [ 514.488005][T21044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.488024][T21044] RSP: 002b:00007f3838a32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.488055][T21044] RAX: ffffffffffffffda RBX: 00007f3837e26090 RCX: 00007f3837b9e559 [ 514.488072][T21044] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 514.488086][T21044] RBP: 00007f3838a32090 R08: 0000000000000000 R09: 0000000000000000 [ 514.488101][T21044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.488123][T21044] R13: 00007f3837e26128 R14: 00007f3837e26090 R15: 00007ffdd08eaa58 [ 514.488160][T21044] [ 514.909544][T21047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3688'. [ 515.321187][T21061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 515.324168][T21061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 515.324562][T21061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 515.324901][T21061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 515.325241][T21061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 515.326795][T21061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 515.333518][T21061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 517.126640][T21019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.160120][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 517.370273][T21083] tipc: Started in network mode [ 517.370307][T21083] tipc: Node identity 32111bf2d8e3, cluster identity 4711 [ 517.370469][T21083] tipc: Enabled bearer , priority 0 [ 517.505102][T21084] syzkaller0: MTU too low for tipc bearer [ 517.505126][T21084] tipc: Disabling bearer [ 517.691847][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3698'. [ 517.771296][T21104] syz_tun: entered allmulticast mode [ 517.817702][T21099] syz_tun: left allmulticast mode [ 518.012073][T21113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3702'. [ 518.014927][T21112] netlink: 'syz.1.3703': attribute type 1 has an invalid length. [ 518.153362][T21119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3704'. [ 518.245079][T21122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3704'. [ 518.280903][T21107] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.281365][T21107] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.281458][T21107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.367027][T21126] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3705'. [ 518.456723][T21132] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20003 [ 518.556422][T21132] pimreg: entered allmulticast mode [ 518.786170][T21153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3713'. [ 518.861174][T21161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3714'. [ 519.115890][T21172] net_ratelimit: 59 callbacks suppressed [ 519.115914][T21172] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 519.162349][T21176] syz_tun: entered allmulticast mode [ 519.171103][T21176] pimreg: left allmulticast mode [ 519.174802][T21176] syz_tun: left allmulticast mode [ 519.418863][T21189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3722'. [ 519.419124][T21189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3722'. [ 519.577008][T21197] xt_IDLETIMER: label is empty or not nul-terminated [ 519.619440][T21201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.703673][T21205] tunl0: left promiscuous mode [ 519.846874][T21205] ipvlan0: left promiscuous mode [ 519.915241][T21205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.924518][T21205] bond2: left promiscuous mode [ 519.945542][T21205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.979579][T21207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3729'. [ 519.995780][ T6832] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.996412][ T6832] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.996512][ T6832] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.996621][ T6832] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.554146][T21247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3735'. [ 520.554664][T21246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3735'. [ 520.854974][T21259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3738'. [ 521.044420][T21271] tipc: Started in network mode [ 521.044455][T21271] tipc: Node identity ac1414aa, cluster identity 4711 [ 521.044702][T21271] tipc: New replicast peer: 172.20.20.187 [ 521.045919][T21271] tipc: Enabled bearer , priority 10 [ 521.405033][T21291] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3747'. [ 521.405067][T21291] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3747'. [ 521.417504][T21291] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 521.444630][T21293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3748'. [ 522.013488][T21316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.100609][T21316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.135322][T21325] netlink: 'syz.4.3757': attribute type 1 has an invalid length. [ 522.191208][T21311] erspan0: entered promiscuous mode [ 522.195131][T21311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3755'. [ 522.310780][T20969] tipc: Node number set to 2886997162 [ 522.416563][T21335] ªªªªª»: renamed from dummy0 (while UP) [ 523.235975][T21388] netlink: 'syz.0.3771': attribute type 1 has an invalid length. [ 523.350582][T21388] bond3: entered promiscuous mode [ 523.352832][T21388] 8021q: adding VLAN 0 to HW filter on device bond3 [ 523.454136][T21391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 523.454550][T21391] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 523.454572][T21391] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 523.515388][T21391] bond3: (slave ip6gre1): making interface the new active one [ 523.515415][T21391] ip6gre1: entered promiscuous mode [ 523.562609][T21391] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 524.306678][T21445] FAULT_INJECTION: forcing a failure. [ 524.306678][T21445] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 524.306714][T21445] CPU: 1 UID: 0 PID: 21445 Comm: syz.1.3782 Not tainted syzkaller #0 PREEMPT(full) [ 524.306739][T21445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.306754][T21445] Call Trace: [ 524.306763][T21445] [ 524.306773][T21445] dump_stack_lvl+0xe8/0x150 [ 524.306812][T21445] should_fail_ex+0x410/0x560 [ 524.306851][T21445] _copy_to_user+0x31/0xb0 [ 524.306875][T21445] simple_read_from_buffer+0xe1/0x170 [ 524.306919][T21445] proc_fail_nth_read+0x1bb/0x230 [ 524.306956][T21445] ? common_file_perm+0x20e/0x2b0 [ 524.306993][T21445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.307025][T21445] ? rw_verify_area+0x24a/0x4c0 [ 524.307058][T21445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.307085][T21445] vfs_read+0x213/0xa80 [ 524.307115][T21445] ? __pfx___mutex_lock+0x10/0x10 [ 524.307144][T21445] ? __pfx_vfs_read+0x10/0x10 [ 524.307173][T21445] ? __fget_files+0x2a/0x420 [ 524.307199][T21445] ? __fget_files+0x3a2/0x420 [ 524.307219][T21445] ? __fget_files+0x2a/0x420 [ 524.307250][T21445] ksys_read+0x150/0x270 [ 524.307277][T21445] ? __pfx_ksys_read+0x10/0x10 [ 524.307315][T21445] do_syscall_64+0x166/0x520 [ 524.307342][T21445] ? trace_irq_disable+0x3b/0x140 [ 524.307367][T21445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.307396][T21445] ? clear_bhb_loop+0x70/0xc0 [ 524.307425][T21445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.307448][T21445] RIP: 0033:0x7f995395ed8e [ 524.307468][T21445] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 524.307487][T21445] RSP: 002b:00007f995485ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 524.307512][T21445] RAX: ffffffffffffffda RBX: 00007f99548606c0 RCX: 00007f995395ed8e [ 524.307530][T21445] RDX: 000000000000000f RSI: 00007f99548600a0 RDI: 0000000000000004 [ 524.307544][T21445] RBP: 00007f9954860090 R08: 0000000000000000 R09: 0000000000000000 [ 524.307558][T21445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.307570][T21445] R13: 00007f9953c26038 R14: 00007f9953c25fa0 R15: 00007ffe98e09eb8 [ 524.307608][T21445] [ 524.718614][T21449] syzkaller1: entered allmulticast mode [ 525.063838][T21475] netlink: 'syz.1.3792': attribute type 39 has an invalid length. [ 525.323437][T21487] __nla_validate_parse: 36 callbacks suppressed [ 525.323461][T21487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3795'. [ 525.402284][ T4933] Bluetooth: hci3: Malformed Event: 0x02 [ 525.418906][T21490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3797'. [ 526.325595][T21510] Cannot find set identified by id 4 to match [ 526.480905][T21519] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3805'. [ 526.558797][T21521] xt_CT: No such helper "netbios-ns" [ 526.665677][T21521] bond5: entered allmulticast mode [ 526.666154][T21521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 526.673680][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 526.756058][T21526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3809'. [ 526.907328][T21546] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3813'. [ 526.908168][T21546] ipt_ECN: cannot use operation on non-tcp rule [ 527.085225][T21553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3816'. [ 527.212469][T21560] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 527.212590][T21560] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 527.212628][T21560] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 527.264248][T21564] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 527.363819][T21555] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 527.363848][T21555] bond4: option packets_per_slave: allowed values 0 - 65535 [ 527.376442][T21555] bond4 (unregistering): Released all slaves [ 527.474453][T21573] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 527.565430][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3823'. [ 527.656402][T21580] netlink: 'syz.3.3825': attribute type 9 has an invalid length. [ 527.701781][T21577] xt_limit: Overflow, try lower: 536871034/127 [ 527.702254][T21577] netlink: 'syz.1.3824': attribute type 4 has an invalid length. [ 527.831705][T21588] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 527.898126][T21591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3829'. [ 528.225947][T21613] netlink: 'syz.2.3833': attribute type 5 has an invalid length. [ 528.421888][T21624] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3838'. [ 549.957470][T21687] Bluetooth: hci5: command 0x0406 tx timeout [ 555.088030][ T4933] Bluetooth: hci2: command 0x0406 tx timeout [ 558.140416][ T1153] dummy0: left allmulticast mode [ 558.140489][ T1153] dummy0: left promiscuous mode [ 558.143296][ T1153] bridge0: port 1(dummy0) entered disabled state [ 558.172556][ T1153] pim6reg: left allmulticast mode [ 558.326779][ T1153] bond8 (unregistering): (slave ip6gretap2): Releasing backup interface [ 558.326812][ T1153] bond8 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 7a:b9:21:20:14:6a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 558.500959][ T1153] bond4 (unregistering): (slave gretap3): Releasing backup interface [ 558.555532][ T1153] bond9 (unregistering): (slave geneve3): Releasing active interface [ 558.664112][ T1153] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.684037][ T1153] .` (unregistering): Released all slaves [ 558.694746][ T59] smbdirect: ib_dev[syz1] removed [ 558.721146][ T1153] bond1 (unregistering): Released all slaves [ 558.754089][ T1153] bond2 (unregistering): Released all slaves [ 558.780780][ T1153] bond3 (unregistering): Released all slaves [ 558.801212][ T1153] bond4 (unregistering): (slave bond5): Releasing backup interface [ 558.803469][ T1153] bond4 (unregistering): Released all slaves [ 558.826275][ T1153] bond5 (unregistering): Released all slaves [ 558.842066][ T1153] bond6 (unregistering): Released all slaves [ 558.866000][ T1153] bond7 (unregistering): Released all slaves [ 558.881593][ T1153] bond8 (unregistering): (slave veth5): Releasing backup interface [ 558.883078][ T1153] bond8 (unregistering): Released all slaves [ 558.906390][ T1153] bond9 (unregistering): Released all slaves [ 558.928208][ T1153] bond10 (unregistering): Released all slaves [ 558.944663][ T1153] bond11 (unregistering): Released all slaves [ 558.964122][ T1153] bond12 (unregistering): Released all slaves [ 558.984658][T18123] infiniband syz1: ib_query_port failed (-19) [ 559.202328][ T1153] tipc: Disabling bearer [ 559.204466][ T1153] tipc: Left network mode [ 559.492173][ T1153] batman_adv: batadv0: Removing interface: macvtap2 [ 559.783943][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.783964][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.784707][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.784730][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.829330][ T1153] hsr0: left allmulticast mode [ 559.829700][ T1153] veth1_vlan: left promiscuous mode [ 559.829912][ T1153] veth0_macvtap: left promiscuous mode [ 559.830008][ T1153] veth0_vlan: left promiscuous mode [ 560.507056][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 560.525019][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 561.084151][ T1153] IPVS: stop unused estimator thread 0... [ 561.777417][T21748] __nla_validate_parse: 39 callbacks suppressed [ 561.777440][T21748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3854'. [ 561.829274][T21750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3852'. [ 562.055254][T21759] bridge0: port 3(veth1_to_bridge) entered blocking state [ 562.055378][T21759] bridge0: port 3(veth1_to_bridge) entered disabled state [ 562.055557][T21759] veth1_to_bridge: entered allmulticast mode [ 562.085772][T21759] veth1_to_bridge: entered promiscuous mode [ 562.085955][T21759] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 562.108277][T21759] bridge0: port 3(veth1_to_bridge) entered blocking state [ 562.108403][T21759] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 562.365448][T21775] ip_tables: iptables: counters copy to user failed while replacing table [ 562.405715][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3863'. [ 562.422698][T21779] xt_hashlimit: size too large, truncated to 1048576 [ 562.497809][T21786] ip_tables: iptables: counters copy to user failed while replacing table [ 562.542986][T21786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3864'. [ 562.620823][T21786] bridge0: port 3(veth1_to_bridge) entered disabled state [ 562.621042][T21786] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.621565][T21786] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.928196][T21804] netlink: 'syz.0.3869': attribute type 8 has an invalid length. [ 563.110319][T21812] netlink: 'syz.0.3869': attribute type 8 has an invalid length. [ 563.698116][T21843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3875'. [ 563.811166][T21846] bond1: (slave bond_slave_0): Device is not our slave [ 563.811191][T21846] bond1: option active_slave: invalid value (bond_slave_0) [ 563.815318][T21846] bond1 (unregistering): Released all slaves [ 563.936756][T21864] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3879'. [ 564.011502][T21870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3879'. [ 564.635655][T21891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3883'. [ 564.685253][T21895] netlink: 'syz.1.3884': attribute type 9 has an invalid length. [ 564.685280][T21895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3884'. [ 564.696165][T21891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3883'. [ 564.717396][T21891] 8021q: VLANs not supported on ip6_vti0 [ 565.260484][T21929] netlink: 'syz.4.3893': attribute type 11 has an invalid length. [ 565.320392][ T4933] Bluetooth: hci1: command 0x0406 tx timeout [ 565.407334][T21935] netlink: 'syz.4.3897': attribute type 15 has an invalid length. [ 565.525504][T21935] syzkaller0: entered promiscuous mode [ 565.525532][T21935] syzkaller0: entered allmulticast mode [ 565.573267][T21935] tipc: Started in network mode [ 565.573302][T21935] tipc: Node identity fe2e1453f51, cluster identity 4711 [ 565.573580][T21935] tipc: Enabled bearer , priority 0 [ 565.610999][T21933] tipc: Resetting bearer [ 565.703619][T21933] tipc: Disabling bearer [ 565.835074][T21957] netlink: 'syz.0.3901': attribute type 9 has an invalid length. [ 566.081620][T21967] bond2: Removing last arp target with arp_interval on [ 566.345478][T21989] syzkaller0: entered promiscuous mode [ 566.345502][T21989] syzkaller0: entered allmulticast mode [ 567.044950][T22018] __nla_validate_parse: 9 callbacks suppressed [ 567.044971][T22018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3917'. [ 567.108840][T22021] x_tables: duplicate underflow at hook 2 [ 567.194758][T22025] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 567.249680][T22025] openvswitch: netlink: Flow actions attr not present in new flow. [ 567.280107][T22025] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 567.280160][T22025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.461994][T22041] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3922'. [ 567.464116][T22042] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3922'. [ 567.633083][T22049] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3923'. [ 567.669833][T22049] bond0: entered allmulticast mode [ 567.669859][T22049] bond_slave_0: entered allmulticast mode [ 567.669879][T22049] bond_slave_1: entered allmulticast mode [ 567.733812][T22053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3926'. [ 567.752093][T22054] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3923'. [ 568.053057][T22076] Cannot find add_set index 0 as target [ 568.180319][T22083] netlink: 'syz.4.3931': attribute type 2 has an invalid length. [ 568.504653][T22101] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3933'. [ 568.721059][T22110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3935'. [ 568.721103][T22110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3935'. [ 568.768122][T22110] geneve2: entered promiscuous mode [ 568.768148][T22110] geneve2: entered allmulticast mode [ 568.772057][T22110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3935'. [ 568.833030][T22115] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 568.852110][T22118] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 569.123858][T22131] ipip0: entered allmulticast mode [ 569.574714][T22156] bond6: entered promiscuous mode [ 569.628912][T22160] macvlan2: entered promiscuous mode [ 569.628939][T22160] macvlan2: entered allmulticast mode [ 569.633755][T22160] bond6: (slave macvlan2): Opening slave failed [ 569.813060][T22168] sctp: [Deprecated]: syz.3.3950 (pid 22168) Use of int in maxseg socket option. [ 569.813060][T22168] Use struct sctp_assoc_value instead [ 570.146773][T22181] batman_adv: batadv0: Adding interface: syzkaller0 [ 570.146795][T22181] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.146826][T22181] batman_adv: batadv0: Interface activated: syzkaller0 [ 570.275232][T22190] IPVS: ip_vs_edit_dest(): server weight less than zero [ 570.602799][ T61] IPVS: starting estimator thread 0... [ 570.687694][T22197] IPVS: using max 33 ests per chain, 79200 per kthread [ 570.875910][T22180] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 570.942066][T22180] batman_adv: batadv0: Removing interface: syzkaller0 [ 571.931227][T22273] sctp: [Deprecated]: syz.4.3971 (pid 22273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.931227][T22273] Use struct sctp_sack_info instead [ 571.936668][T22273] sctp: [Deprecated]: syz.4.3971 (pid 22273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.936668][T22273] Use struct sctp_sack_info instead [ 572.079345][T22278] __nla_validate_parse: 11 callbacks suppressed [ 572.079367][T22278] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3972'. [ 572.181859][T22264] tipc: Started in network mode [ 572.181897][T22264] tipc: Node identity de2e85fb64c9, cluster identity 4711 [ 572.182064][T22264] tipc: Enabled bearer , priority 0 [ 572.261937][T22264] syzkaller0: entered promiscuous mode [ 572.261966][T22264] syzkaller0: entered allmulticast mode [ 572.262533][T22264] tipc: Resetting bearer [ 572.333825][T22261] tipc: Resetting bearer [ 572.382950][T22299] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 572.383984][T22299] netlink: 'syz.2.3977': attribute type 1 has an invalid length. [ 572.459183][T22297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.506544][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3976'. [ 572.570519][T22314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3978'. [ 572.674607][T22316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3978'. [ 575.629830][T22261] tipc: Disabling bearer [ 575.647099][T22299] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 575.649892][T22300] dvmrp0: left allmulticast mode [ 575.715380][T18123] tipc: Node number set to 3135735291 [ 575.926796][T22357] netlink: 'syz.3.3980': attribute type 5 has an invalid length. [ 576.439220][T22387] gtp0: entered promiscuous mode [ 576.439245][T22387] gtp0: entered allmulticast mode [ 576.602711][T22408] netlink: 'syz.1.3991': attribute type 3 has an invalid length. [ 576.602736][T22408] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3991'. [ 576.865030][T22418] netlink: NAT attribute has 8 unknown bytes [ 576.865067][T22418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.896469][T22418] netlink: NAT attribute has 1 unknown bytes [ 576.896516][T22418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.905577][T22418] netlink: NAT attribute has 1 unknown bytes [ 576.905683][T22418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.061616][T22428] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3998'. [ 577.063294][T22428] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 577.710478][T22465] netlink: 'syz.2.4006': attribute type 32 has an invalid length. [ 577.803908][T22465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4006'. [ 577.868061][T22465] veth4: entered promiscuous mode [ 577.868085][T22465] veth4: entered allmulticast mode [ 578.017049][ T5277] veth1_vlan: left promiscuous mode [ 579.031654][T20969] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 579.160459][T20970] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 579.177221][T22520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4020'. [ 579.177455][T22520] unsupported nlmsg_type 40 [ 579.230451][T22520] Bluetooth: hci0: unsupported parameter 5135 [ 579.230478][T22520] Bluetooth: hci0: unsupported parameter 8192 [ 579.230494][T22520] Bluetooth: hci0: unsupported parameter 5135 [ 579.230508][T22520] Bluetooth: hci0: unsupported parameter 8192 [ 579.457621][T22526] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4021'. [ 579.606709][T22538] openvswitch: netlink: IPv4 frag type 96 is out of range max 2 [ 579.619532][T22539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4023'. [ 580.046387][T22561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4029'. [ 580.252312][T22567] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4030'. [ 580.273951][T22567] ip_tables: iptables: counters copy to user failed while replacing table [ 580.513731][T22573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4031'. [ 580.541406][T22573] Bluetooth: hci0: unsupported parameter 5161 [ 580.541432][T22573] Bluetooth: hci0: unsupported parameter 8192 [ 580.541448][T22573] Bluetooth: hci0: unsupported parameter 5161 [ 580.541463][T22573] Bluetooth: hci0: unsupported parameter 8192 [ 580.745451][T22583] netlink: 'syz.1.4033': attribute type 29 has an invalid length. [ 580.770622][ T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.798967][T18416] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.799697][T18416] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.799886][T18416] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.339516][T22608] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 581.339559][T22608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.458964][T22612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 581.553374][T22616] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 581.575259][T22616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4040'. [ 581.652555][T22621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.094918][T22643] netlink: 'syz.4.4047': attribute type 2 has an invalid length. [ 582.153326][T22647] netlink: 'syz.2.4049': attribute type 1 has an invalid length. [ 582.192054][T22647] bond1: entered promiscuous mode [ 582.192528][T22647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.229428][T22647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.229903][T22647] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 582.229927][T22647] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 582.255766][T22647] bond1: (slave wireguard0): making interface the new active one [ 582.255793][T22647] wireguard0: entered promiscuous mode [ 582.257870][T22647] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 582.645833][T22668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 582.688477][T22669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 582.688556][T22663] netlink: 'syz.3.4055': attribute type 9 has an invalid length. [ 582.764255][T22681] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4060'. [ 583.013724][T22690] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 583.014249][T22690] netlink: 'syz.4.4061': attribute type 1 has an invalid length. [ 583.045546][T22697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4066'. [ 583.046232][T22698] netlink: NAT attribute has 8 unknown bytes [ 583.046265][T22698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.228331][T22705] netlink: 'syz.2.4068': attribute type 7 has an invalid length. [ 583.231171][T22705] netlink: 'syz.2.4068': attribute type 8 has an invalid length. [ 583.263941][T22707] xt_IDLETIMER: timeout value is zero [ 583.278675][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4068'. [ 583.708868][T22716] xt_TCPMSS: Only works on TCP SYN packets [ 583.786266][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4072'. [ 583.786341][T22719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4072'. [ 583.809465][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4072'. [ 583.809488][T22719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4072'. [ 584.091881][T22735] ¾x9ÿ: renamed from bridge_slave_0 [ 584.166111][T22738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4076'. [ 584.274172][T22742] netlink: 'syz.4.4078': attribute type 8 has an invalid length. [ 584.366958][T22745] netlink: 444 bytes leftover after parsing attributes in process `syz.1.4079'. [ 584.376793][T22746] netlink: 444 bytes leftover after parsing attributes in process `syz.1.4079'. [ 584.747972][T22759] net_ratelimit: 1 callbacks suppressed [ 584.747994][T22759] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 584.807425][T22767] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 585.046961][T18417] IPVS: starting estimator thread 0... [ 585.127966][T22775] IPVS: using max 24 ests per chain, 57600 per kthread [ 585.303156][T22779] netlink: 'syz.4.4085': attribute type 11 has an invalid length. [ 585.416062][T22783] FAULT_INJECTION: forcing a failure. [ 585.416062][T22783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.416100][T22783] CPU: 1 UID: 0 PID: 22783 Comm: syz.1.4087 Not tainted syzkaller #0 PREEMPT(full) [ 585.416125][T22783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.416140][T22783] Call Trace: [ 585.416149][T22783] [ 585.416158][T22783] dump_stack_lvl+0xe8/0x150 [ 585.416197][T22783] should_fail_ex+0x410/0x560 [ 585.416236][T22783] _copy_from_iter+0x1d3/0x1660 [ 585.416268][T22783] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 585.416314][T22783] ? __pfx__copy_from_iter+0x10/0x10 [ 585.416350][T22783] ? dev_get_by_index+0x22/0x2d0 [ 585.416385][T22783] ? dev_get_by_index+0x22/0x2d0 [ 585.416421][T22783] packet_sendmsg+0x306c/0x51a0 [ 585.416469][T22783] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 585.416505][T22783] ? __lock_acquire+0x747/0x2de0 [ 585.416548][T22783] ? lock_acquire+0x115/0x350 [ 585.416576][T22783] ? __lock_acquire+0x747/0x2de0 [ 585.416613][T22783] ? __pfx_packet_sendmsg+0x10/0x10 [ 585.416645][T22783] ? aa_sk_perm+0x713/0x900 [ 585.416676][T22783] ? __lock_acquire+0x747/0x2de0 [ 585.416707][T22783] ? downgrade_write+0x3f0/0x430 [ 585.416740][T22783] ? __pfx_aa_sk_perm+0x10/0x10 [ 585.416775][T22783] ? aa_sock_msg_perm+0x144/0x210 [ 585.416815][T22783] ? apparmor_socket_sendmsg+0x98/0x360 [ 585.416855][T22783] ? __pfx_packet_sendmsg+0x10/0x10 [ 585.416888][T22783] sock_sendmsg_nosec+0x13a/0x180 [ 585.416922][T22783] ____sys_sendmsg+0x54e/0x850 [ 585.416953][T22783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.416989][T22783] ? import_iovec+0x73/0xa0 [ 585.417027][T22783] ___sys_sendmsg+0x2a5/0x360 [ 585.417050][T22783] ? __lock_acquire+0x747/0x2de0 [ 585.417079][T22783] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.417144][T22783] ? __fget_files+0x2a/0x420 [ 585.417164][T22783] ? __fget_files+0x3a2/0x420 [ 585.417195][T22783] __x64_sys_sendmsg+0x1b1/0x290 [ 585.417223][T22783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.417273][T22783] do_syscall_64+0x166/0x520 [ 585.417300][T22783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.417323][T22783] ? clear_bhb_loop+0x70/0xc0 [ 585.417351][T22783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.417375][T22783] RIP: 0033:0x7f995399e559 [ 585.417396][T22783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.417415][T22783] RSP: 002b:00007f9954860028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.417439][T22783] RAX: ffffffffffffffda RBX: 00007f9953c25fa0 RCX: 00007f995399e559 [ 585.417455][T22783] RDX: 0000000000000000 RSI: 0000200000001400 RDI: 0000000000000009 [ 585.417469][T22783] RBP: 00007f9954860090 R08: 0000000000000000 R09: 0000000000000000 [ 585.417483][T22783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.417497][T22783] R13: 00007f9953c26038 R14: 00007f9953c25fa0 R15: 00007ffe98e09eb8 [ 585.417533][T22783] [ 585.900745][T22791] netlink: 'syz.0.4088': attribute type 33 has an invalid length. [ 585.961376][T22788] netlink: 'syz.0.4088': attribute type 6 has an invalid length. [ 586.122226][T22804] netlink: 'syz.2.4094': attribute type 24 has an invalid length. [ 586.598722][T22836] FAULT_INJECTION: forcing a failure. [ 586.598722][T22836] name failslab, interval 1, probability 0, space 0, times 0 [ 586.598790][T22836] CPU: 1 UID: 0 PID: 22836 Comm: syz.4.4102 Not tainted syzkaller #0 PREEMPT(full) [ 586.598825][T22836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 586.598838][T22836] Call Trace: [ 586.598847][T22836] [ 586.598857][T22836] dump_stack_lvl+0xe8/0x150 [ 586.598894][T22836] should_fail_ex+0x410/0x560 [ 586.598929][T22836] ? __alloc_skb+0x1db/0x7a0 [ 586.598962][T22836] should_failslab+0xa8/0x100 [ 586.598995][T22836] ? __alloc_skb+0x1db/0x7a0 [ 586.599026][T22836] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 586.599051][T22836] ? __alloc_skb+0x18d/0x7a0 [ 586.599085][T22836] ? __alloc_skb+0x1db/0x7a0 [ 586.599126][T22836] __alloc_skb+0x1db/0x7a0 [ 586.599164][T22836] alloc_skb_with_frags+0xc6/0x760 [ 586.599200][T22836] sock_alloc_send_pskb+0x878/0x990 [ 586.599235][T22836] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 586.599279][T22836] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 586.599311][T22836] ? dev_get_by_index+0x22/0x2d0 [ 586.599339][T22836] ? dev_get_by_index+0x22/0x2d0 [ 586.599391][T22836] packet_sendmsg+0x338b/0x51a0 [ 586.599438][T22836] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 586.599474][T22836] ? __lock_acquire+0x747/0x2de0 [ 586.599517][T22836] ? lock_acquire+0x115/0x350 [ 586.599546][T22836] ? __lock_acquire+0x747/0x2de0 [ 586.599582][T22836] ? __pfx_packet_sendmsg+0x10/0x10 [ 586.599616][T22836] ? aa_sk_perm+0x713/0x900 [ 586.599646][T22836] ? __lock_acquire+0x747/0x2de0 [ 586.599677][T22836] ? downgrade_write+0x3f6/0x430 [ 586.599710][T22836] ? __pfx_aa_sk_perm+0x10/0x10 [ 586.599749][T22836] ? aa_sock_msg_perm+0x144/0x210 [ 586.599791][T22836] ? apparmor_socket_sendmsg+0x98/0x360 [ 586.599833][T22836] ? __pfx_packet_sendmsg+0x10/0x10 [ 586.599867][T22836] sock_sendmsg_nosec+0x13a/0x180 [ 586.599902][T22836] ____sys_sendmsg+0x54e/0x850 [ 586.599934][T22836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.599970][T22836] ? import_iovec+0x73/0xa0 [ 586.600011][T22836] ___sys_sendmsg+0x2a5/0x360 [ 586.600035][T22836] ? __lock_acquire+0x747/0x2de0 [ 586.600065][T22836] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.600131][T22836] ? __fget_files+0x2a/0x420 [ 586.600152][T22836] ? __fget_files+0x3a2/0x420 [ 586.600186][T22836] __x64_sys_sendmsg+0x1b1/0x290 [ 586.600216][T22836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 586.600266][T22836] do_syscall_64+0x166/0x520 [ 586.600294][T22836] ? trace_irq_disable+0x3b/0x140 [ 586.600320][T22836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.600343][T22836] ? clear_bhb_loop+0x70/0xc0 [ 586.600372][T22836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.600395][T22836] RIP: 0033:0x7fe41d19e559 [ 586.600416][T22836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.600435][T22836] RSP: 002b:00007fe41e0ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.600459][T22836] RAX: ffffffffffffffda RBX: 00007fe41d425fa0 RCX: 00007fe41d19e559 [ 586.600477][T22836] RDX: 0000000000000000 RSI: 0000200000001400 RDI: 0000000000000009 [ 586.600491][T22836] RBP: 00007fe41e0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 586.600505][T22836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.600519][T22836] R13: 00007fe41d426038 R14: 00007fe41d425fa0 R15: 00007ffd25321fa8 [ 586.600557][T22836] [ 587.211703][T21687] Bluetooth: hci3: link tx timeout [ 587.211726][T21687] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 587.261064][T21687] Bluetooth: hci3: link tx timeout [ 587.261084][T21687] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 587.506270][T22860] sctp: [Deprecated]: syz.0.4110 (pid 22860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.506270][T22860] Use struct sctp_sack_info instead [ 587.542198][T22862] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4109'. [ 587.871215][T22876] netlink: 'syz.4.4113': attribute type 83 has an invalid length. [ 588.293207][T22883] syzkaller1: entered promiscuous mode [ 588.293234][T22883] syzkaller1: entered allmulticast mode [ 588.409423][T22892] tc action pedit offset -2147483648 out of bounds [ 588.523089][T22898] syzkaller0: left promiscuous mode [ 588.523113][T22898] syzkaller0: left allmulticast mode [ 588.552051][T22898] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4119'. [ 588.552079][T22898] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4119'. [ 588.552096][T22898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4119'. [ 588.620280][T22906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4119'. [ 588.620308][T22906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4119'. [ 588.620324][T22906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4119'. [ 589.560130][T21687] Bluetooth: hci3: command 0x0406 tx timeout [ 597.748093][ C0] sched: DL replenish lagged too much [ 605.912580][T22900] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 619.085478][T22920] netlink: 'syz.1.4123': attribute type 23 has an invalid length. [ 629.801952][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 750.835878][ T32] INFO: task syz.3.4124:22922 blocked for more than 156 seconds. [ 750.835910][ T32] Not tainted syzkaller #0 [ 750.835922][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 750.835933][ T32] task:syz.3.4124 state:D stack:27808 pid:22922 tgid:22921 ppid:18163 task_flags:0x400140 flags:0x00080002 [ 750.836005][ T32] Call Trace: [ 750.836013][ T32] [ 750.836031][ T32] __schedule+0x17db/0x58f0 [ 750.836096][ T32] ? __pfx___schedule+0x10/0x10 [ 750.836133][ T32] ? schedule+0x90/0x2b0 [ 750.836162][ T32] schedule+0x164/0x2b0 [ 750.836190][ T32] schedule_preempt_disabled+0x13/0x30 [ 750.836215][ T32] __mutex_lock+0x7c1/0x1550 [ 750.836249][ T32] ? __mutex_lock+0x5d4/0x1550 [ 750.836282][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 750.852133][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 750.852173][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 750.852218][ T32] ? __lock_acquire+0x747/0x2de0 [ 750.852243][ T32] ? radix_tree_lookup+0x240/0x290 [ 750.852271][ T32] genl_rcv_msg+0x10b/0x7a0 [ 750.869317][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 750.888534][ T32] netlink_rcv_skb+0x226/0x4a0 [ 750.888586][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 750.888630][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 750.888685][ T32] ? down_read+0x2be/0x330 [ 750.888725][ T32] genl_rcv+0x28/0x40 [ 750.888762][ T32] netlink_unicast+0x8ef/0xa80 [ 750.888815][ T32] netlink_sendmsg+0x813/0xb40 [ 750.888863][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.888908][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 750.888949][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.888981][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 750.889021][ T32] __sys_sendto+0x408/0x5a0 [ 750.889055][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 750.889136][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 750.889171][ T32] __x64_sys_sendto+0xde/0x100 [ 750.889201][ T32] do_syscall_64+0x166/0x520 [ 750.889232][ T32] ? trace_irq_disable+0x3b/0x140