last executing test programs: 3.95126844s ago: executing program 3 (id=2024): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a3000000000090002007379"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async, rerun: 32) socket(0x10, 0x3, 0x4) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) listen(r1, 0x2) (async) syz_80211_inject_frame(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="5809040050505050505008021100000008021100000178005a0e3269ef10d898"], 0x80) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="00012cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010012034e05080001000800000008000100080000000c0001800800010005000000080002800400"], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x8044) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (async) sendmmsg$inet(r8, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000006c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e49b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb368fa89f78a1b167d80b9e42486e2965156a4a2383c8682df617947d6b3b50f", 0xc5}], 0x1}}], 0x1, 0x0) (async) sendto$inet(r8, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, 0x0, 0x8000) (async, rerun: 64) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x7, &(0x7f00000000c0)="0300ff04", 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="0c00990008000000300000001400040073797a6b616c6c657242000000000000080005000400"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 3.831196391s ago: executing program 1 (id=2025): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000900)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="38000000010001", 0x7) getsockname$packet(r0, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000680)={0x24, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040080) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r12 = openat$nci(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000000800)=0x0) bind$nfc_llcp(r11, &(0x7f0000000840)={0x27, r13, 0xffffffffffffffff, 0x1, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000002c0), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000085}, 0x20000080) socket$inet(0x10, 0x4, 0xffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={{0x14, 0x10, 0x4}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="27030200dc0f14000e000f000713c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003", 0x2b}], 0x1}, 0x4005) sendmsg$nl_generic(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a80)={'gretap0\x00'}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000f0300100c1341516"], 0x1c}}, 0x4008010) 3.558310703s ago: executing program 1 (id=2026): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000780)={@remote, 0x0}, &(0x7f00000007c0)=0x14) bind$packet(r1, &(0x7f0000000800)={0x11, 0x18, r2, 0x1, 0xfd}, 0x14) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x2, 0x2, 0x0, 0x70bd28, 0x3}, 0x10}}, 0x4004040) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1}}], 0x1, 0x81) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r7, &(0x7f00000006c0)=[{{&(0x7f0000000700)={0xa, 0x4e23, 0x1, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000290000003b0000002f000000000000001800000000000000290000003b"], 0x30}}], 0x1, 0xff00) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYBLOB="12e00c681337", @ANYRES32=r5], 0x1000f) close(0x3) sendmsg$nl_generic(r4, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x140, 0x41, 0x4, 0x70bd2b, 0x25dfdbff, {0xf}, [@generic="634791805ac79fe59a8711b68b0eea7dda0f3e82aaf507464e9a8a38f58e8a7bc53f188a70f635241931ddc30eade5ff6f79c195e83f57ece5fec537cf4e422d8ae7", @generic="6218faa30c3dca6da46e004eee17fbe766796046429b70fbd4e7bb386ca605d1b03e3f0e75d9963a42babebf77f2c728a7968bb458219586fa53f847d8d4dd0ac3cdc3ed166136bbbf58d73b9086f1fa6362a3c5d82384f4c8a4a053261e6a23cc5e345a243a93989df77daaf4d222abb0595d6079c4a178adae8b285065ee12502f6ec034f5444dd93cbe4aeee0843c6b34b37f12ba97adbc1fa80a9f2a8e3038a0aa5f45d3299a6063408fbd0d6065002a15869d6751e19a6d95a62a968378d74de111453c2e13bbd0b5cb3c93f771d5f447bdc101d75852ff37576f7031b08e0baefa8c2c77d92bbf"]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000540)={0x2, 0x10000}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000005c0)=@assoc_value={r8, 0x3c}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) getpeername(r5, &(0x7f0000000600)=@nfc_llcp, &(0x7f0000000680)=0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46000000000000000686", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.822913841s ago: executing program 4 (id=2033): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x6e, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000004c0)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f0000000540), 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)="f7", 0x6d47}], 0x1}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x30, 0x7, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x4}]}, 0x30}}, 0x4000010) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3800000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000120004001800128008000100677470"], 0x38}, 0x1, 0xba01}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x11}]}]}, @NFT_MSG_DELSET={0x208, 0xb, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_DESC={0x1e8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0xfffffffffffffe97, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_DESC_CONCAT={0x180, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2e3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1040}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a9c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xa490}]}, @NFT_MSG_DELOBJ={0xf8, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x7a, 0x8, "e7cc93bb8b5bf8a301f8d26b1963fdc8b39457efcc04ecca6f340c56ae24ceaff287f21e4a728646497f59316c46f1f667c95c303bc67ddc900dfc005efc8f6f636a139d2d999ea2d30272ef0a9cc96489302f75afdfe55d53123aac0e4ede34f6046fa75435300fe36913a40d883cdd5b6f463250b2"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x1a, 0x8, "e7086d9b56bfdb43c341b2b592dc5917e1c8d309d5bb"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x78, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x41c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.693380943s ago: executing program 4 (id=2036): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4010) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x84}}, 0x4e818) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r5, 0x215eb000) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4a20, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac14fca9"], 0x20}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x6fb) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000440)={0xa, 0x14e24, 0x1000, @rand_addr, 0xb}, 0x1c) connect$inet6(r9, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) 2.507247203s ago: executing program 1 (id=2038): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010800000000db43c93d2b63d3dd", @ANYRES32=0x0, @ANYBLOB="fdff00000000000008001b0000000000"], 0x28}}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001700)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2f0000003820000004", @ANYRES32], 0x20) connect$inet(r2, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r4 = accept4(r2, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r4, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000001740)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8001, 0x800, 0x7f, 0x4, 0x1, "f791850f12726821a6a16279d2f27b99e8ea7a1332a2f3e81c3c42c4f9c3fc37361d003f2f6e6351b811115fb4b9b85dcd684408ed5848cf8c7ce3063d80b884c7dd4402933937f07973e94689900f4039c0062b6f46246906f4252398f59fc3ce35c36f61d5d0b1f2befa53be7d494345282c3315cbc1952be10effac3ee015"}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r4) 2.342492356s ago: executing program 3 (id=2039): r0 = socket(0x11, 0x3, 0xd) accept4$unix(r0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20041100) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000002030103000000000000002a0500000008000100010000050900020000000001020000000800044000000002"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a030460000000000000000a0000010900010073797a31000000002800048024000180090001006d6574610000000014000280080001400000000a08000240000000110900020073797a3200000000050007406200000014000000110000000a00000a0000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = socket(0x2, 0x80805, 0x0) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f0000000480)) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x17, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000380)) r6 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000240)="94", 0x1) unshare(0x20400) tee(r7, r9, 0x8f5, 0x0) sendto$inet(r6, &(0x7f0000000200)="112233", 0x3, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) 1.844676153s ago: executing program 3 (id=2043): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000009c0)={0x0, 0x7}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x1}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)="c93a3bc850926145f8f076e0795a9b45816d0db5224464ce", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=':', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="e0000000000000001201000062000000acff15e8824d321a37cd9d654d7b9ac213476ace4c74b8e074c43a2e382392b6a0779d18f24c4499891062fc09ec1defa0698b09383effbd953f3843b1b4cacd1da255fc90320a54b49ba59047660fefa278ce2c8aa09f5ae7e1d4bfe2ee1fb623047640fabfdf0df0203a6055370cee5a79a73d4220a3b5a5acffab7c258c4391aa9012acb55ad3935b51251f2d4814edfc987c18907b83f8b53ac4c71330239edeb6d578af85239115cd2b9f1911465ee9d6622f4ae028eec58738b005a7a7f561bf687add893a05e9bc300ce3fd0010000000000000000100"], 0x778}}], 0x2, 0x404c844) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000a00)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000a40)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000b40)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000000)="f35c55b6db45", 0x6}, {0x0}], 0x2}}], 0x2, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000c00)={0x0, 0x1, 0x1, [0x6]}, 0xa) 1.724002904s ago: executing program 3 (id=2044): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000640)=0x1, 0x4) bind$rds(r2, &(0x7f0000000680)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000006c0)={&(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000780)=""/111, 0x6f}], 0x1, &(0x7f0000000800)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000840)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f0000000880)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000440)={&(0x7f00000003c0)=""/88, 0x58}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x17, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x77}}}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r4 = socket(0xa, 0x3, 0x85) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r5, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10001, 0x6f}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "fcece9d28a"}, @NL80211_KEY_SEQ={0x6, 0x4, "75b2"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x40, r7}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000380)) sendmmsg(r0, &(0x7f0000000180), 0x0, 0x80) 1.723483834s ago: executing program 2 (id=2045): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x1, 0x7fb, 0x3, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r5, 0x84, 0x83, &(0x7f0000000100)={r6}, 0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89fb, &(0x7f00000001c0)={'bond_slave_0\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newtaction={0x14, 0x30, 0x0, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000440)={0x1d, r10, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000480)=0x1, 0x4) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4080) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28004040}, 0x4000084) sendmmsg(r9, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000580)={0x1d, r10, 0x2, {0x1, 0xf0, 0x4}, 0xfd}, 0x18) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.507629653s ago: executing program 4 (id=2046): socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000400)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40600, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) (async) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30c) 1.478241022s ago: executing program 0 (id=2047): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 1.303456028s ago: executing program 0 (id=2048): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000240)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004945}, 0x40080c0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB="3c1204"], 0x98) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x11, &(0x7f0000000300)={@remote, @empty, @void, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000480)=@ethtool_rxfh_indir={0x17, 0x300}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) syz_emit_ethernet(0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="66e2baceef06ff00000000000000"], 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1012, &(0x7f0000001700)=ANY=[@ANYBLOB="aaaaaaaaaabbbbbbbbbbbbbb81000800600224c43711e5ddd90f78bbfd999c5e1427f2a3e1a77d7c11cf5b84d33c6413df88f2fd6c7f7764f68dfc67667a582fb8165608d0cce3cf4c7a008ca9f1acd940ec7c6bc0a3982e0e62bac12ea18ef3243f71ac7425b59e41f0a84c12253ff8b180645c6643f5f2003f1ff7b3d1b53df512e6a90abc9fd1c41d9b334c85804314aa30480112cae3e66c35412c3a32ccaa5586b4b6c9f836e1d740955cf62fab1dc336de87db112c64f6d7154382eecf0f724b4528cbb8788d78966b3ab278742dc0ebf82496cde94060620fa63ec3392169935aebcf34c0e0e7bdf878f3e22f8120b01932247287bd5bc6bf9e2643c95cf448863c06cf7331d015f5498a76da77f0a3919255ef03f69acd98b2ef12c66a834b5809799ca2cbaac0917bf4334c5d1568f7675b44b46f816200f9d436bc5acdfadcee4e40c931edba3d29af46c7118bb0c666a46b237bf669123c2281ff47138ab7ead02a7fcb1e8f82ec9ed048a7b0768061f1afa51cca656e68234adebd39f91897f79f9d813ef294288a028588986fd70b12169c043fe0b75743d64d7a5c6f3981fa171ee7f09bb14a9c52f59abcd0eaf4b0f42e00638669e1dca46d298ba97cf2d657daca0b965960a830d85d21c220843e945cb75cd71aeef03b166d5c33fc4ccabd56eb66dddf1729f0e3502c6fd2bdb7268891d8b2370fea8f9e2b54de1c4fd5abcba71c0fcb252557284ca13c07efc9a23cec233787f87a4d4f801d4308613d5ac76423f8afaa61b14fad4ab624263c8b64edc77541c4e94aee2921d3396db93d6a0efe1b188b0cefdbda58b9be11a8ff019b278945298cf3012c3b7e36ef04a546591d1bebe99517852f6cd7c2c8cfad048e43d98c1c89fce4709a545827df6ec174774e39abcc372966af3766970e5b962a7da6590e80babb9cdea13fa4efe2631605cb89a9041c173af7c72fdd19282681a2b2c953d88f76340b684410aa4e361fa9af988e20d555ed8ee70fc0e7c85719ea034a2a16e526ea44cbcddc240f597a539023a06e3450c09da5350e16ada3c220a80a1949f69a38d7e1259cb6ed085fd16d0f2d3f95ac62623265f7610210c17e32534d14f4669a98e665d3a8422fb4828f713a70ee7b106c16679e2e279a28c7329fed6e9ad3b840a5a2f45bfc6c4baac0ee35a618cb0ed93a065de040fbc5d5beba3ecfd54bd022dff5c4e01b31d1b01dd2cfa0676bf1d0cc108cde079be026b6cedafc5c81097ac4e03b657278ae4fd554804fd659fad891bbb36c93de43d778480ee18992f6618b25b4d8d78d83e5bacf095548cb464ca407e40f125d5a801707ac2b03642ac5aeb2ff0898f44510259f6724213726ab8cca36bf4f6b01851818bcd9ff928fe6a77f075f8449950c7e2bd42d9c6ebe5a1cd6dff3c114995a0be86677bcafac2fd7262f263595945dd2f2a66c3f905709c1d5d590e5ee6ce53b4eecd1acbf380bde253c4f3bcc1c57d793fb7eec52885cb96ba36805fa8c8b9d7d6275865bd8446962315b85120106a649c8de51ebff271363591be38d44fee2cfd8c4454420edf58adb09abe718d4a0e3df95f722ed0c2acfbf661c08550838154c1df0e88834d82d4ee6a66cbed8d5602f8c4b09ccc09feb1cc7ca5f4024909a3ecb3dff7bce12ff75f1d6a1dc5eef0354febc63eab01f9ccdb3d973b50c2ae45bfc567506c583940c89556b7b756b019dc3b132d002887782ad0c27381f9c4128640992d17a04b4a9a580c4e34fbec3e5f3036541c64c3e8e62f5afc73b668dac8fe8384d6099c0c6c156d81965e4b4ec838ef7a7745eb440574db637462725cb35e2749cc04ed27f24c704981c7ec96fc127994e1f1a9e0c04a655b61fa202a9e1a4d797532a968fb3c27f4d1caf3eec97c646f97e797779dfff4832a910c093be7989c2e14daf194724425eb10e0f0f6d71a7a65253edebde196c664a28eef7d4fc92bbd371fd770295d18be47a72853b9900559f9c775c7681ce33f077c3cec95f044a716293461933150a0012c64156964cd8b5d46fdfb5ec9b779a182ed22a4a8d86caa6e37ce9e5aa23d2defa84c3674746d3d60f7213243591314445fdfa45baad95e2c4ddf426bb760d731d91febe036a6336b7203d84c39c5b98cda56e86fac7cdec011766f07994820b6fe2f55a2f85f1677ed0d81fb058316d90dfefe7b9bd55265ebcd94b92c75ce58f49ec6d0920288a8591cf8fc889b0343aa36e54b680f59e22fe914e3c61354b772f454f6331b32a098951c75bda580516b5a9477275d1a4a99eae7494a6049cb62cd24fd09384b62340fe3690289a00fae1bb2da9b285778f3c27ab36c43edd236ce42685ef743e15667cfc225d2861dde80c977144be01ced3e28882d5da3a3fa120b45f2c5ed4bcae29a67714ecd0eb8b869bb639cd40af788b9d0470177ef8c3ca4d3799b099664999f23ab35be72b1775abf07c1f0125f61980e30e679273d24903117a4c80ff8ba75366e007a7b2e8cffe39d17d63aba9f6df60228b5eedcb62d270aae669bab5f0d9a585be66666c386b61f40886730726449a26c3320b549121b8bb46cda80bc90184b1639d0ef3527e3f8424dc342a129473184874192ea6d4967dcd342c84f4411578c7c3f806187e9cc3cb74f1cae029e1c0be0cf19a44a0eee7d485e500eb65abdacd2a67ec0f47eb90e15636470703ceaca76470bc08557bc9cd238494e27c62556740870511bbbed9190acec828fc493f0c674e75ae5291efbe367aadd22abb2ce59bcdfe1baa7740790dee03d26c052923fbe059fc2e42098dba2c8e92f8044f990675cdc05c080b0bae1068df6b7d1e2ece6c66b075008f19965e9b77e7b4d4852a613c314d4e83dcdfc618bebd5d67f3cee8097f1bd6efa5ec4361959256fb3bb9311716ef583b51c9e6a49a9afc7764b8eb2ad480b135ca18f8872c5cd6cc6a092f05994bce4e9e0aaa9d3184789125812f0db256e9a2bbdbfd71aed630ceb0151988b4a09b6369ce4b92746dd5978337a5ed6147038e2b4944c9ea9181122d4fece082fd5e440d3342bf4c7e2c07c05c7354591967141b66e806d7cf8c7fe0e107de11bed57067ef2216e21edd97a1de70cc5575ed710322941f9083d6a244231df7bc21c8629467d4292167d0bfc89cc89f4eeb3dfcf79c4ded3963949f2a1ddc9b86a6e0c8811cf75339c8bd422dbd7259f4454b7d4a20148d6402c8a6800cb679fd22babf91e7694023f9bd8e0ec4cc81f19179ac58988ef0bf36d14938de596fa43655a32f5565ceff9a036e79347dfb644d8809d4b7137f96d54e585e8fd060d5c5fdd036ef0e12070f6a3d5fdedb7909abc61bcf9e9551f198648039d76afe0bec2766066785f4500ff9bc2d9de17b5a254b81cc23833b6b1af394feeaa3de58c33b0c149f516b0e85b8444439a37d023ab9a411b63e0bc0d12f90a5cf50c6d3989e8bf14f91fb9a4ae7d5f3fa10aeb2a73ba3a594741657f896a55a99e4894af139b9e5f5ed7449724495af35bd6197aa089de77a68c08ecc419ee93088d8e6397c1f522de455f0080f3b039adae5f10170aeeb06b0d9d09b1e2483b4c28415b21e658718e93d89ae41d40dce8165cb8e1179f50c943c6ade26a22adbc3e72b69d1f3ba479c615cc560f4451837569de740e25e5ce3f7c603e99c74ef013d586d5893b8e520f3ea13f47c26cbf581d6d6551667958b86f9bbe3ef68c11b0dc6572ea2fb96b7540e4fff574e22e0e91ae1dbcd5349c91a87a60b35765fb5f76ab3609c4bb2c71ed66891574ce914785f0af806240d277dc7e452224e743e3dc9d18958aebb53709038625511d4dc031dbd3b5967eec140d2ca1998eb0c82c44e4e0aa572f027e9842d901adc008745d04e8064022abed806ca8572e49b163f5ff6ee16d02a39b53ebad402fa5d85e2f14e4e97853b33bc247d87f01d0b79eba4c772d89e0e1d93f8ae32c002f48117f9032322881c3879c1605086f82ac53d8694f0a6e0ca35b6a33b9eef3ef27b11d36965c98f0834d6c4f0658a1222b4bdfd7eafc1ff55af1cc083461659e749f683a4eaa2b4cd7284f5b3b97488dd44f3a39096e7fed1d5ae80b64af2b434420c9f4004873b8986768be0993836a89285206f850b23b817c8b48a158569f45a1945f3bc34545f325ef324c0f0e71d4ae93d5cdb2ff6331f2e8d3221b1012aed47e88fec58f6440d4409f5b89c2c7bd2e8ef452441c1ece2114fcb874635cc88ddea9ad0d7c9f62b930378c18e0480dee0080c5a95045395cc5dbe0fc9ab8719187a189affcc0e36f9866e4b79d14b24597b90d93fe71737ce070c537aea2db92b92e06a176c1324748b8f538d5ae77dcc0932bc0817769082ec05f5ffbbb58b5de78f31d820498ac383e5d98820c7ca624b4f88b8f6735d25ded32c6925ec07a5bf6d2d9bc8af2f7fb8dfa7c9cb1c6b5fa8a10971bb9d0afc333687c64309421082b5098bf3930e408da65974cd781c6e767133beced8eae23cebd5de506dfe2f6c6052e46707b0decb9e2789746b32b3869d87751a74521d71e7a0e7bcdd9e20c0937342c481b919ea712289721c37b49f1732e7efad981b93094c07be0d65eccacb12788a8a076ab85b01fda6eac4f2904b371c89901401fc95cf0e7818f83eea01137fa32bd15db1afe15e3ee9c5e2ea037049bb207fc632e9c35c4eae4e4217b6ea412da957099920a43e876df2087a9d85dc0794fca9a21ba92f8de22d4d1a8a97bf33d64e974d7178d99bd2f5eb54d6a501035afec97e57e8d4e6a6a9bcb099e70ef32a3082a265c349749ed8ab6c3145cba9e542282eeba0aabd4c336562cbc4928ef417cb5d83bd80f10947c9a4725bea562849b17c2b959767488aefd7db3ac2c602aeaed3a176e701052bfcae1c22513a1724716111b48170be61b55870403b428cf948d02b5c29c400d041b1567a72139a3039d03563d6beb529d7f4a39f6d71752324fc2c4183af5193865c50d73630a252bbf4cde06af101040ae54c7f8c7bbcef0826bc85b72bc302369bc53009b3c3595e8fd261e2882c31ad72d75c678dc86589bbea85f0d821973e873bf8ab2d10bba6d52067da0b0f4adda34a744ed23327002163a9adb06cc2365a751f9b13c8a3ac555c3b2361b4eb6f04eed6721039538537c9d1b91f0aff244c89d9cf252bf9378ef5e0ae772eca6a8bd749b2dece5aceb78178fa923a183c981fd4db081f7703d1528378357d662f58d64b7c34e1eccd9755b3b55e31aad53f5f93313623288c82ff0a9cd408aaea69dbb7ea016997dc5009db809ddc1d095761e2fcd94d892c7f58f29f33061152f6bbe26d0521dbbddf2aaa304fda249f4828626d455b585f10d10b92f0ae8000e6af343e3de1801e5a1c5755d623b48ba86cc19900ced960f0c7a34294c9e3c2c90e08f58b6cdc44cfb15cd4fec0e1d0c5a4be4b1426e4f99208f244fe3e0e62099ab38335347a7301d61e0dc5d002da28da66fedfe7352396f17222c5a8abad376df5c3c6e425545b37ba790d2697d573743791938fff866ffb2620686e4d16db36cb06787c3492573334681c6a36440811b45046db77fce961b106dcbf8832c62fde07b157b6c474492c1e4b2a68bb05fed74ed632aa6a257f2a995b08ed5a6f266d875b66a5caf246497f3aacb4171caea661cf4492c5c7f0b498ccd14180d51bf470f1f019e6af3cd8e3a87acfb6c552a638964fd357e875c21179d9cafb7a82ea2870f30a2b0186b90c971caa2e1c09016e566152e2300f9dc71338d90cfce8a80426a63ed409accfdcc55af919ba71f4ebff4100acd452d3e1f817332309b3bf0e3f776648d98f7c5f86846edc9860930e61739ff5e2a8e6cbf1d054030c20"], &(0x7f00000016c0)={0x0, 0x3, [0x7d2, 0x821, 0x195, 0x3ec]}) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x20, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000c00}, 0xa0) unshare(0xa020480) accept(r9, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 1.215604058s ago: executing program 2 (id=2049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x37a, 0xf, 0x8, 0x0, 0x2, 0x2e}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0xea4e, 0x5, 0x6, 0xffffffffffffffff, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000e0769d3f0024e90497ed18000000180700000700000000000000010000040000000004000700"/55], &(0x7f0000000240)=""/136, 0x37, 0x88, 0x1}, 0x20) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000005c0)={0x2, &(0x7f0000000600)=[{0x30, 0x21, 0x40, 0xfffff000}, {0x6, 0x6, 0x7, 0x400000e8}]}) 1.10614813s ago: executing program 1 (id=2050): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000000), 0xc, &(0x7f00000017c0)={&(0x7f0000000040)={0x175c, 0x0, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [{{0x254, 0x1, {{0x2, 0x5}, 0x5, 0xf2, 0x40, 0x3ff, 0x26, 'syz0\x00', "9f8adecdd0e483fffcd6d33c3b7e8626f7ada9b9eff8bdbe7c9a439be45595a8", "3dc625bffa7f1fc4633fbcd3161835cef975bb2ae8524bef8b59a7772e7020bb", [{0x7, 0xedfe, {0x1, 0x1}}, {0xee, 0x8, {0x3, 0x7}}, {0x7ff, 0xb, {0x0, 0x2637}}, {0x5, 0xfff, {0x1, 0x3}}, {0xfffb, 0x2, {0x3, 0x3}}, {0x1, 0x9, {0x3, 0x7}}, {0xc, 0x200, {0x1, 0x8}}, {0x6, 0xb2, {0x0, 0x4}}, {0xd2a, 0x8, {0x0, 0x8000}}, {0xf6ea, 0x8, {0x0, 0x1ff}}, {0x8, 0x81, {0x3, 0x3}}, {0x80, 0xff, {0x1, 0x9}}, {0x69a3, 0x2, {0x1, 0x5}}, {0x8, 0x4, {0x1, 0x9}}, {0x0, 0x400, {0x3, 0x5fb8}}, {0x0, 0x5, {0x2, 0xffffffc0}}, {0x81, 0x7, {0x2, 0x1c1f}}, {0x1000, 0x5, {0x9b9d2668c4778161, 0x5}}, {0x8, 0x3ff, {0x2, 0x80000000}}, {0x0, 0x8, {0x3, 0x6}}, {0x3, 0x0, {0x0, 0x80000000}}, {0x6, 0x7, {0x0, 0x5}}, {0x44, 0x2, {0x0, 0x9c2}}, {0x1, 0x400, {0x0, 0x9}}, {0x3, 0x1ff, {0x1, 0x8}}, {0x800, 0xfffd, {0x0, 0x2d}}, {0x0, 0x10, {0x3, 0x2}}, {0x2ae0, 0x6, {0x2, 0x6}}, {0x1ff, 0x0, {0x2, 0x181b8086}}, {0xb5, 0x1, {0x2}}, {0x0, 0x7ca3}, {0xc, 0xf0, {0x2, 0x4}}, {0x9, 0x3f80, {0x1, 0x5}}, {0x4, 0x7, {0x2, 0x2}}, {0x100, 0xfffa, {0x3, 0x2}}, {0x2, 0x4, {0x3, 0xc000}}, {0x5, 0x9, {0x1, 0x9}}, {0x94, 0x9, {0x3, 0x6}}, {0xa00, 0x6, {0x1, 0x80}}, {0x6, 0x2, {0x3, 0x10001}}]}}}, {{0x254, 0x1, {{0x3, 0x81}, 0xa5, 0xf7, 0x83, 0x8000, 0x11, 'syz1\x00', "c776341968066ce04d3e9ca8185af7aec33a50dc77d10b6ee265eec3a2a8536f", "e816502a42fae07821f2c31ec6c74d54b06c83f790316212a237e05cc3b9ae5e", [{0x7ff, 0x2, {0x0, 0x2}}, {0x74fe, 0x1, {0x1, 0x8}}, {0x0, 0xd, {0x2, 0x3}}, {0x3, 0x2, {0x1, 0x10}}, {0x7, 0x10, {0x1, 0x2}}, {0x1, 0x1c, {0x3, 0xf}}, {0x6, 0xfbff, {0x0, 0x7ff}}, {0x5c8, 0x1, {0x3, 0x40}}, {0x7, 0x7, {0x2, 0x6}}, {0x2b3, 0x3, {0x2, 0x30211b7b}}, {0x0, 0xe, {0x2}}, {0x4, 0x542e, {0x0, 0x5}}, {0x4, 0x24, {0x3}}, {0x0, 0x101, {0x1, 0x10000}}, {0x9, 0xfffc, {0x2}}, {0x0, 0x0, {0x2, 0x7}}, {0xff7f, 0x1, {0x2}}, {0x40, 0x3}, {0x5, 0x80, {0x2, 0x9}}, {0x2, 0x5, {0x1, 0x9}}, {0x8, 0x8, {0x1, 0x8}}, {0xb, 0x0, {0x2, 0x5}}, {0x6, 0x8, {0x3, 0x8001}}, {0x1ff, 0x1, {0x1, 0x3}}, {0x2, 0x1, {0x3, 0x3}}, {0x1, 0xb4, {0x1, 0x4}}, {0x1a, 0x3ff, {0x0, 0x9}}, {0x0, 0x0, {0x0, 0x3}}, {0x800, 0xd4, {0x3}}, {0x4b, 0xfff, {0x3, 0x8d16}}, {0x2, 0x8, {0x2, 0x297}}, {0x9, 0x7, {0x0, 0x7}}, {0x2, 0xb, {0x3, 0x7}}, {0x4, 0x8a8, {0x0, 0x3b}}, {0x9, 0x7a, {0x3, 0x8}}, {0x100, 0x2, {0x2, 0x3}}, {0xfffd, 0x856, {0x1, 0x2}}, {0x8000, 0x80c, {0x0, 0x4}}, {0x5, 0x1ff, {0x1, 0x44a}}, {0xfff9, 0xd, {0x0, 0x6af}}]}}}, {{0x254, 0x1, {{0x1, 0xd}, 0xd1, 0xf7, 0x5, 0x6, 0x5, 'syz1\x00', "f943f6bdb5efcb0c62c84a368044c491ce574959498affc9b08d4fb368734e56", "83865869684ac5220ff16eb1b1cab2785aaa0910d48db7bc241dca00f9613919", [{0x40, 0x800, {0x0, 0x100}}, {0x5, 0x4, {0x0, 0x8}}, {0x1, 0x4, {0x1, 0x7e}}, {0x5, 0x6e, {0x4, 0x26}}, {0x3, 0xa22, {0x1, 0x3}}, {0xd94e, 0x1, {0x3, 0x1}}, {0xa, 0xa6c, {0x3, 0x4}}, {0x6, 0x1, {0x3, 0x6}}, {0x0, 0x1, {0x2, 0x7}}, {0x7, 0x3, {0x0, 0x4}}, {0x9, 0xb, {0x3, 0x40}}, {0x3ff, 0x1, {0x1}}, {0x0, 0x2, {0x2, 0xa}}, {0x1fd7, 0xf32, {0x3, 0x2}}, {0x5, 0x8, {0x2, 0x3}}, {0xfff, 0xff31, {0x1, 0x8}}, {0xd7e0, 0x727b, {0x1, 0x3ff}}, {0x1, 0x3ff, {0x2, 0x7}}, {0xfff8, 0x5, {0x1, 0x3}}, {0x5, 0xeb, {0x0, 0x100}}, {0xb, 0x5, {0x3, 0x9}}, {0x2, 0x957, {0xf537631e55be6239, 0x5}}, {0xa, 0x2, {0x3, 0x200}}, {0x7, 0x4, {0x1, 0xffff}}, {0x0, 0xfffb, {0x1, 0x401}}, {0x4, 0xab, {0x3, 0xffffffff}}, {0x7f, 0xf7, {0x0, 0x1}}, {0xff, 0x7, {0x3, 0x8}}, {0x2, 0x0, {0x2, 0x4}}, {0x5ce, 0xf44, {0x2, 0x2}}, {0x3, 0x7, {0x0, 0x7}}, {0xf578, 0x5, {0x3}}, {0x40, 0x7, {0x1, 0x7ff}}, {0x40, 0xa, {0x1, 0x9}}, {0xe, 0xbf2}, {0x3a, 0x9, {0x0, 0x40}}, {0x2, 0x4, {0x1, 0xfff}}, {0x8, 0x2, {0x6, 0x9}}, {0x9dec, 0xefc9, {0x2, 0xffffffff}}, {0x4b5, 0xfa8b, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x2, 0x34, 0xa, 0x0, 0x1c, 'syz1\x00', "91f22263c979b01519b2f834086a505f6fa286a09bfffc4bc4378c8626d5298f", "544c7f3576f79142af508538488a623505d743dca6c83ad7a3079709ac3099c0", [{0x1b7, 0x3, {0x0, 0x9}}, {0x693, 0xd76}, {0x4, 0xd, {0x1, 0x8}}, {0x6000, 0x7d, {0x0, 0x7ff}}, {0x7}, {0x3, 0x75, {0x2, 0x8}}, {0x800, 0x9, {0x1, 0x4}}, {0x9, 0x1, {0x3, 0x7ff}}, {0x5, 0x400, {0x2, 0x5}}, {0x3, 0x2, {0x2, 0x4}}, {0x1, 0x81, {0x2, 0xcc}}, {0x0, 0x6dc0, {0x3, 0x7}}, {0x6, 0x23}, {0x81, 0x1, {0x2, 0xb}}, {0x7, 0x4, {0x2, 0x4}}, {0xc8, 0x1, {0x2, 0x3}}, {0x6, 0xfffd, {0x2, 0x9}}, {0x10, 0x9, {0x0, 0x7fffffff}}, {0xc, 0xc, {0x2, 0xffffffff}}, {0x400, 0xc515, {0x1, 0x9}}, {0x7, 0x6, {0x1, 0x400}}, {0x6, 0x4, {0x0, 0xfff}}, {0x7, 0x5c8, {0x3, 0x800}}, {0x1, 0x3, {0x1, 0x6}}, {0x2, 0x1f, {0x1, 0x5}}, {0x9, 0xfffd, {0x1, 0x3c6f}}, {0x8, 0x2, {0x0, 0x100}}, {0x9, 0x0, {0x1, 0x9}}, {0x101, 0x6000, {0x1}}, {0x4, 0x3, {0x2, 0x8}}, {0x9, 0x5, {0x3, 0xfffffffd}}, {0x4, 0xfff9, {0x1, 0x8}}, {0xffff, 0x4, {0x1, 0x1b5}}, {0x8000, 0x7d3, {0x2, 0xb}}, {0x2, 0x3, {0x0, 0x73}}, {0x3fdd, 0x1, {0x0, 0xd064589}}, {0x2, 0x2c, {0x1, 0x3}}, {0x4, 0x101, {0x2, 0x4}}, {0x4b14, 0x7fff, {0x0, 0xffff}}, {0x6, 0xc9, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0xd2, 0xe, 0x0, 0x7, 0x1d, 'syz0\x00', "de6d25c2a44281bdd92a2ab8a6fa27c72ed546693d4c0e018e442aa1cd4b9141", "6b03126a552c5cf7131ad2f3d6527c002f0d018c3630121f9a03be7fedc845bd", [{0x5, 0x597, {0x2, 0x2}}, {0x2, 0x6, {0x2}}, {0x9, 0x1, {0x0, 0x9}}, {0x4, 0x215d, {0x2}}, {0x8001, 0x5, {0x0, 0x3}}, {0x7fff, 0x0, {0x3, 0x1}}, {0x7, 0x6, {0x3, 0xffffffff}}, {0x3, 0x6, {0x1, 0x6}}, {0x690, 0x9, {0x1, 0xfffffffd}}, {0x7, 0xa69f, {0x2, 0xc5f}}, {0x5, 0x9, {0x3, 0x7}}, {0x6, 0x0, {0x1, 0x800}}, {0x4, 0x9, {0x2, 0x8}}, {0x8, 0x3, {0x3, 0xe}}, {0x6, 0x4, {0x3, 0x8}}, {0x8001, 0x3, {0x1, 0x1ff}}, {0xd3a, 0x6, {0x0, 0x7fff}}, {0x1ff, 0x9551, {0x3, 0xd}}, {0x6, 0x5, {0x2, 0xa1a}}, {0xa2, 0x3, {0x3, 0x3ff}}, {0x1000, 0x1, {0x3}}, {0x2, 0xb1, {0x1, 0x4}}, {0x100, 0xfff, {0x0, 0x9}}, {0x9, 0x7, {0x3, 0x10001}}, {0xc, 0x7, {0x0, 0x4}}, {0x3, 0x400, {0x0, 0x800}}, {0x200, 0x0, {0x2, 0xe}}, {0x44ae, 0xc, {0x0, 0x7fff}}, {0x7, 0xfff2, {0x1, 0x7fff}}, {0x4, 0xffff, {0x1, 0xc}}, {0x7, 0x1ff, {0x0, 0x9}}, {0x101, 0x0, {0x2, 0x6}}, {0x2bc8, 0xf, {0x3, 0x81}}, {0x607, 0xe2e3, {0x3, 0x9}}, {0x6, 0x5, {0x3, 0xe}}, {0xd, 0x7, {0x2, 0x3}}, {0x6, 0xfffe, {0x0, 0x7}}, {0x2, 0x5, {0x1, 0x9}}, {0x0, 0x3ff, {0x3, 0x5}}, {0xffff, 0xf800, {0x2, 0x7f}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x3, 0x3, 0x2, 0xfff9, 0x10, 'syz0\x00', "b194ed089c50660320d0678d7a15d9d3cdb9077ef4b490daa8e1478944642fa4", "dbb3b65d5ad77ec60a0a5827891131a540cdcb19c352ae0df70cb5592c2cf614", [{0xf001, 0x8000, {0x2, 0x2d1}}, {0x3, 0xfa1}, {0xd4a, 0x7d4, {0x1}}, {0x2, 0xcbfd, {0x0, 0x3}}, {0x4, 0x40, {0x1, 0x80}}, {0x7, 0x8, {0x2, 0x1ff}}, {0x5, 0x101, {0x1, 0x2}}, {0x3, 0x1, {0x1, 0x2}}, {0x8, 0x3, {0x2, 0xe}}, {0x2, 0x5ca0, {0x2, 0x7}}, {0x9, 0x9, {0x0, 0x16}}, {0x401, 0x7f, {0x3, 0x5}}, {0x5, 0x8, {0x2, 0x80}}, {0x6, 0x4, {0x0, 0x5}}, {0x0, 0x322f, {0x1, 0x3e07}}, {0x7fff, 0x4, {0x3, 0x7}}, {0x4, 0x5, {0x7, 0x8}}, {0x9, 0x5, {0x3, 0x2}}, {0x6, 0xf1, {0x2, 0x7738}}, {0x80, 0x1, {0x1, 0x3}}, {0x9, 0x2, {0x1, 0x5}}, {0x8, 0x7, {0x1, 0x7}}, {0xffff, 0x3, {0x1, 0x9de0}}, {0x10, 0x0, {0x1, 0x81}}, {0x9, 0xff, {0x1, 0x4}}, {0x5, 0x5, {0x1, 0x401}}, {0x9, 0x1, {0x2, 0x7fff}}, {0x800, 0xff00, {0x0, 0x6}}, {0x101, 0x6bd, {0x1, 0x9}}, {0xfeff, 0x10, {0x1, 0x10001}}, {0x9, 0x2, {0x3}}, {0x4, 0x3, {0x2, 0x8}}, {0x8, 0x3, {0x5af47eee2c6d9ccb, 0x5}}, {0xc3a7, 0x3ff, {0x1, 0xfffffffa}}, {0x80, 0x3, {0x3, 0x2}}, {0x4, 0x0, {0x3, 0x4}}, {0x2, 0x8, {0x2, 0xfff}}, {0x2d50, 0x9, {0x34bf86044e64c88c}}, {0x80, 0x6, {0x2, 0x8}}, {0x6fb, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x6a1f1699c9de1019, 0x9}, 0x81, 0xc, 0x5, 0x3, 0x3, 'syz0\x00', "477d935cf88214a22fdd36ca4c90bc7a11b5ddcd9c53ee4c15b377581d0f7805", "4353202d034b9f5bc53362413f7213673c090924553e664e99afbc58312a472d", [{0x2, 0xa9, {0x1, 0xfff}}, {0x3, 0x3, {0x3, 0x3}}, {0x52a9, 0x5, {0x1, 0xd}}, {0x0, 0xffa5, {0x3, 0x9}}, {0x4723, 0x7, {0x3, 0x9}}, {0xb9b, 0xffff, {0x0, 0x400}}, {0x3, 0x8, {0x0, 0xcd7}}, {0x1, 0xa7, {0x3, 0xe215}}, {0xb, 0x4, {0x3, 0xe1}}, {0x400, 0x5, {0x3, 0x7ff}}, {0xe0, 0x27, {0x3, 0x6}}, {0xff, 0xf, {0x1, 0x6}}, {0x5, 0x100, {0x1, 0x8}}, {0x0, 0x40, {0x1}}, {0x3, 0x4, {0x3, 0x8}}, {0x7, 0x0, {0x0, 0x9}}, {0x1ffc, 0x4, {0x2, 0x8}}, {0x1, 0xda8, {0x3, 0x1000}}, {0x2, 0x5, {0x2, 0x1}}, {0x5, 0x1, {0x2, 0x81}}, {0x9, 0xee, {0x1, 0xfffffff9}}, {0x3, 0x11, {0x0, 0x7}}, {0x10, 0x5, {0x2, 0x9}}, {0x9, 0x5, {0x1, 0x4}}, {0x8, 0x2, {0x3, 0xffffffff}}, {0x3ff, 0x5}, {0x1, 0x41c, {0x0, 0x2}}, {0x8, 0x0, {0x1, 0xc70}}, {0x9, 0x8, {0x3, 0x5}}, {0x2, 0xfff8, {0x2, 0x1}}, {0x3, 0x4, {0x1}}, {0x4, 0x2, {0x1, 0xffff}}, {0x9, 0x9ee6, {0x0, 0xb}}, {0xc00, 0x8, {0x0, 0x8}}, {0x0, 0x6, {0x3, 0x58d6}}, {0x5, 0x7, {0x3, 0x55cb}}, {0x1, 0x7, {0x3, 0x8}}, {0x9, 0x0, {0x2, 0x3}}, {0x6, 0xa, {0x3, 0x80000000}}, {0x9, 0xfff, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x8000}, 0x7, 0x80, 0x43d, 0x3ff, 0x12, 'syz0\x00', "6c3ee138a1487bbb7b9315019519265704efa0806dc27487a40309b55ebafccc", "85dbdee80662ca5cfd3fd290257adf898b78526c67b44dd11e6cb647eefe6c78", [{0x5, 0xfe01, {0x0, 0x9c}}, {0x1, 0xdad, {0x2, 0x7}}, {0x3, 0x7272, {0x3, 0x3}}, {0xb92d, 0x1f7, {0x1, 0x664}}, {0x9, 0x3, {0x3, 0x4}}, {0xfffd, 0x5, {0x1, 0x7}}, {0x9, 0x81, {0x1, 0xc}}, {0x3, 0x2, {0x0, 0xd6f8}}, {0x2, 0x4, {0x0, 0x9}}, {0x4, 0xffff, {0x2}}, {0x5d, 0x100, {0x1}}, {0x7}, {0xf7, 0x7f, {0x1, 0xc2}}, {0x2000, 0x2, {0x0, 0xfffffeff}}, {0x9, 0xfffc, {0x2, 0x9}}, {0x401, 0x45f, {0x2, 0x6}}, {0x0, 0x4, {0x3, 0x22f94260}}, {0x5, 0x0, {0x2, 0x9}}, {0x1ff, 0x10, {0x0, 0x977}}, {0x2, 0x4, {0x0, 0x200}}, {0x7, 0x3, {0x3, 0x8000}}, {0x5, 0xea5, {0x3, 0x6}}, {0x0, 0x1000, {0x1, 0xa}}, {0x331, 0xa, {0x0, 0x32}}, {0x3, 0x9, {0x1, 0x3}}, {0x2, 0x1, {0x2, 0xc32}}, {0x9, 0x7, {0x3, 0x8}}, {0x728e, 0x8000, {0x0, 0x7ff}}, {0x793, 0x2, {0x1, 0x6a902056}}, {0x6, 0xb0, {0x2, 0xfffffffd}}, {0x6, 0x4175, {0x0, 0xfff}}, {0x6, 0x6, {0x3, 0x8}}, {0x4ec, 0x10, {0x0, 0x3}}, {0x1357, 0xb72, {0x3, 0x1}}, {0x6, 0xd4, {0x3, 0xb2}}, {0x2, 0x3, {0x3, 0x1}}, {0x5, 0x1, {0x3, 0x6a4}}, {0x2, 0x1, {0x2, 0x800}}, {0x0, 0x5, {0x0, 0x6d1bb715}}, {0xffff, 0x8, {0x2, 0x7fff}}]}}}, {{0x254, 0x1, {{0x1, 0x10000}, 0x2, 0x6, 0x4, 0x1, 0x3, 'syz0\x00', "6e0589b6f8b3ab6baae241ddcdc7ad53d0299b05808ecd3931f2b486f863e463", "5ab83653620066f6957c715908c7c88c96dd8242864763b9b898ecdced5ac236", [{0x3, 0x5, {0x0, 0x5}}, {0x2, 0x7, {0x1, 0x9}}, {0x0, 0x7, {0x2, 0xfffff4ef}}, {0x8}, {0x0, 0xffff, {0x1}}, {0x1ff, 0x26, {0x2, 0x1}}, {0x6, 0x7, {0x2}}, {0x1000, 0x5, {0x3, 0x3}}, {0x8001, 0x1ff, {0x3}}, {0x3, 0xfff7, {0x2, 0x2}}, {0x2, 0xce5, {0x2, 0xffd2}}, {0x5, 0x560, {0x2, 0x3}}, {0x10, 0x4, {0x0, 0x3}}, {0x7f, 0xecc2, {0x0, 0x7a5}}, {0x8, 0x3, {0x3, 0x3}}, {0x5, 0x1, {0x1, 0x3ff}}, {0x8, 0xae, {0x1, 0xd388}}, {0x1c, 0x72f2, {0x0, 0x9}}, {0x4, 0x1ff, {0x1, 0x4}}, {0x2, 0x100, {0x2, 0x9}}, {0x3, 0x1a1, {0x1, 0x401}}, {0x80, 0x1, {0xf1e7ecdf44759d03, 0x3ff}}, {0x2, 0x4000, {0x3, 0x1000}}, {0x7, 0x3, {0x2, 0x3}}, {0x10, 0xc, {0x2, 0x3ea}}, {0x401, 0x9, {0x3, 0x9}}, {0x2, 0x2, {0x1, 0x9}}, {0xe, 0x8001, {0x2, 0xd8}}, {0xfa69, 0x0, {0x3, 0xffff}}, {0x7, 0x6, {0x2, 0xa}}, {0x3, 0x8, {0x0, 0x4}}, {0x80, 0x0, {0x3, 0x2}}, {0x3ff, 0x3, {0x2, 0x8}}, {0x9, 0x11, {0x2, 0xfffffffd}}, {0x6c90, 0x0, {0x3, 0x1cfa}}, {0xf, 0x7, {0x0, 0x4}}, {0x4, 0x7, {0x0, 0x7}}, {0x7, 0x4, {0x0, 0xa}}, {0x3, 0x1, {0x0, 0xa}}, {0x6335, 0x3, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x48, 0xe, 0xb5, 0x5a1, 0x16, 'syz0\x00', "c87200dda6af9a363629febf2c8fc26cd7d339d7c917b9ae5a63f994a23dce95", "a9445d34cf4d6179b48ddb91e882cbea80554569c579c340f7b857dbfa6e7294", [{0x2, 0x10, {0x3, 0x10000}}, {0x2, 0x2, {0x0, 0x3}}, {0x6, 0xeb5, {0x1, 0x2}}, {0x7, 0x8, {0x2, 0x2}}, {0xffff, 0x7, {0x3}}, {0x6, 0x5, {0x3, 0x7}}, {0x7, 0xcedf, {0x3, 0xff}}, {0x96, 0x6, {0x3, 0x3}}, {0x162d, 0x0, {0x0, 0xa}}, {0x6, 0xfe9b, {0x2, 0x1}}, {0x2e17, 0x7, {0x3, 0x2}}, {0x7, 0x653, {0x0, 0x2}}, {0x5, 0x2, {0x3, 0x494}}, {0xfffd, 0x9, {0x3, 0x1}}, {0x1ff, 0x8, {0x3, 0xe}}, {0xa476, 0x8, {0x0, 0x7}}, {0x5, 0xfd, {0x1, 0xfdeb}}, {0x8001, 0x8a7a, {0x1, 0x9}}, {0x3, 0x4e6f, {0x1, 0x3}}, {0x2, 0x100, {0x1, 0x5}}, {0x1, 0x1, {0x0, 0x6}}, {0x1, 0xe, {0x1, 0x1}}, {0xfc, 0xd225, {0x3, 0x8}}, {0x6, 0x7, {0x2, 0x5}}, {0x1, 0x1, {0x3, 0x1}}, {0x3ff, 0xc, {0x1, 0x5}}, {0x1, 0x98}, {0x1000, 0x2, {0x2, 0x2}}, {0xfff, 0xfff9, {0x3, 0x7}}, {0x100, 0x4, {0xfb749e0a3d0ab91c, 0x5}}, {0x5, 0x5, {0x1, 0x3}}, {0x5, 0x50, {0x0, 0x24000}}, {0x7, 0x8001, {0x2, 0xfa2}}, {0x7fff, 0x100, {0x0, 0x4}}, {0x8001, 0x6, {0x3, 0x2}}, {0x48, 0x39e1, {0x1, 0xfffffffb}}, {0xc30b, 0xaa07, {0x1, 0x4}}, {0x4, 0x200, {0x2, 0x958}}, {0x8001, 0x8, {0x1, 0xb}}, {0x1, 0x7eec, {0x3, 0xffff}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x4810}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0xc0, r1, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_IE={0x44, 0x2a, [@supported_rates, @mesh_chsw={0x76, 0x6, {0x5, 0x3, 0x40, 0x6}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @dsss={0x3, 0x1, 0x24}, @channel_switch={0x25, 0x3, {0x1, 0xa9, 0x4}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x1}, 0x21, 0xdc, @device_a, 0x1, 0x0, 0xf}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0xc, 0x3, 0x4, 0x0, {0x2072, 0x4, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x48, 0x2}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8004}, 0x55) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, 0x1406, 0x0, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24080041}, 0x20000001) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x4c, r1, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c80)={0xe0, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xc3, 0x5b, "4d8c67fd5e3fbff0655864e216147ba1ffed602a60a7e53458289f470b43207942a552ce0709496b77ee9e4b3d8917f971acb70a8eb8c1bbeba29379319924ff3826614b71e4744b5048c7b56d6bdb63f9d7f56d657acffd67352c8a7c1da6e6e947d96db7060feac7e5898249f8a9916b22862035885f6e2030c8e0399f7969623d11ee106c058fb3badab4bc5f2feaec52cd0b3c60cd1227ba1c356ed97c2bb2c50a06f0b4c3fec800e35504f4571bf1338b8eb2519f670f3b6238c6f584"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000810) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000020c0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002080)={&(0x7f0000001e40)={0x240, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0xdd, 0x3, "0e8b47f2b4d6e3dfe501c47e629d3ccbf7d27c35764791755f81fe60ae430ce00b0a83c1416d20da507efeb0026b963dbd130d0babcf88f7e3fd88de98405672066631cd12becf230e14dea5ff3f4afc2dc106feaf22ead0d4e68021e531b75e96d617d9bc0e6b6264a7484d7de0a7d55f04c6009af5e56b1378a9838db1ef3b056ab490795e7b0f619998638a810edebf3f1e74d327b3b1302d15af17826f52052786d98a94910face1e7ccceaa8ad78761532769f2fec5c971470457e707cec226af4a484da492f5ee0e581e787a3569563af35e1bb26a74"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "6ace7030bd6ac41fdaf1e85eaf1213cd2db95bbe26"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "b909f816406a923cd6fc1758165a50042707ce7990cc4edd27c484f3f5e4ae9ff1dfe8"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20040010}, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x54, 0x0, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xdfa}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xbb26}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x400000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c100}, 0x4080) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002240), r4) r5 = openat$cgroup_ro(r3, &(0x7f0000002280)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002340)={r5, 0x58, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000002380)) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000023c0)=0x20000, 0x4) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000002440), r0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000002580)={r6, &(0x7f0000002480)='m\x12{[*)+\x00', 0x400, &(0x7f00000024c0)={@align=0x5, {0x85, 0x5e9, 0x0, 0xa}}, 0x3, &(0x7f0000002500), &(0x7f0000002540)=0x2}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000002680)={&(0x7f0000002400), 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x74, r8, 0x210, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x33}}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @remote}}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000026c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) preadv(r10, &(0x7f0000002940)=[{&(0x7f0000002700)=""/130, 0x82}, {&(0x7f00000027c0)=""/201, 0xc9}, {&(0x7f00000028c0)=""/109, 0x6d}], 0x3, 0x0, 0x3) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000002980), 0x422040, 0x0) write$tun(r11, &(0x7f00000029c0)={@void, @val={0x0, 0x4, 0xef, 0x8a2, 0xfffe, 0x9}, @arp=@generic={0x131, 0x60, 0x6, 0xb, 0x2, @multicast, "938a9d77a43f8ed68c7907", @multicast, "e26689b5ff3aaebea54fe02796"}}, 0x36) r12 = socket$inet(0x2, 0x2, 0x7) r13 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r13, &(0x7f0000002a00)=""/48, 0x30, 0x0, &(0x7f0000002a40)={0x11, 0x11, r7, 0x1, 0x3, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r12, 0x89fb, &(0x7f0000002ac0)={'sit0\x00', &(0x7f0000002a80)={@ipv4={'\x00', '\xff\xff', @multicast2}, @broadcast, 0x17, 0xf}}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000002c00)={0x0, 0x81}, &(0x7f0000002c40)=0x8) 911.443376ms ago: executing program 0 (id=2051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000380)=0x474c, 0x4) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f00000003c0)=0x80, 0x4) connect$inet(r4, &(0x7f0000000400)={0x2, 0x2, @local}, 0x10) sendmmsg(r4, &(0x7f0000000440), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000480)=0x5, 0x4) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/17, 0x11}, 0x5}], 0x1, 0x45833af92e4b39fd, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x0, 0x4, 0x2, 0xf, 0x6, 0x3, 0x9, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x3, 0xf870, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0x3, 0x83, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x7fff, 0x45, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000) close(0x3) syz_emit_ethernet(0x7e, &(0x7f0000000100)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x44, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @mcast1, @local, [@hopopts={0x11}], "fafb17c136d02033560cd10b"}}}}}}}, 0x0) 908.325789ms ago: executing program 4 (id=2052): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xd8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 801.731592ms ago: executing program 3 (id=2053): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1b, 0x10010, 0xffffffffffffffff, 0x5adad000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f00000007c0)=[{&(0x7f0000000340)="b7", 0x1}], 0x1, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060300000000000000000007000002050005000a0000000900020073797a3100000000050001000700000010000300686173683a69702c6d61630014000780080006400000afa208001340000070b80500040001000000547f6ebca5c565396eb329eeb1f4eba8a6c8ceb3d22a5fc09b025be3da"], 0x5c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) socket(0x2, 0x80805, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) sendmmsg$inet_sctp(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000221bd7000fddbdf2564000000080c0100750000008bcacabe30a1bbf7c336c2bfc5112d76a8a87ee02692bc6b7710a2b6d661b73d6190431d0dc28bae2ef1ad31c3f1815dc7e0d081b57365f35777881ecfcffd64ab015b245266b9873a270e86a597cc60c303e8424cdca037400f59816bab"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000600)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000600)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x80000) epoll_create1(0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000640)={0x30000000}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r8, &(0x7f0000000ec0)={&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x0, 0x3, 0x1, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000800)="b9d8b6fb56e59b98c12b7cca86cd9d3526a75492e0217e216c573a011dd76b7e74d95c3377dd2012c7a886f02b97969bd9e621b9dd147f17b660f9ee5caa421d1443962a16efc28f87eddc9629b62ee4cefcda47a5158562561063b92cb0bf81bf296f5e0efc888bd2a62c98133e86f0c0fde7c90211ed8e374cb0000cf55efab1725545bf797b18c32b3993c906b8472ed32bb789db77b85f18bb5700eac69e7f43139875d0167ad16183ba54232ead391474edfb84fb2086ef60a1beac", 0xbe}, {&(0x7f00000008c0)="b64e6160d7", 0x5}, {&(0x7f0000000900)="9e0c04a6c9c1b9c37ea8953585a8fb9a92db099937adcc49ae79ff4ede7d25d74ebcc3056a32c22197bf8e988d567bb488f0b81aef0cf36a9b287b4da5a768685753e4a4e3d5d7b65ff82a12e28ccc7d0614a6533100d3066e3c47e6daba2b1b1fe85f67e9f510bed1530f4497be347c3a0b8db7e06cc9406ac7cfd4aa1f5e9231ea7f621bf206640c227e06914eed82755c217d21528326382ea8", 0x9b}, {&(0x7f00000009c0)="b6624cd73800bffdbce00137e836c12cc320ee31f762d26f28acb7c01d8cc2d7ffbcaef4587fed1bf0b61ce90083708a1ece9a8df0d12a97fc653b96b665b7cc24ea220a3cb4c7cb961f34b6788ccc489f99a131801fff25", 0x58}, {&(0x7f0000000a40)="7a2d7536ab0aa72b872d0182af0d0e5192ee99a1e659ff074973db4304e12b0506ace6c6a2f0280d37578059a6f248857903d8a285f85bc85b0c7139d54ccae0abf15a012248bc46a45685d724fe30debd9cc1078d966323cad7b63eb4b805d712f75f2f86ce102b267046f1f880594e106d7db3fd7eeeee464a518b20dea333d3e95131b23d8ef17f01fd1a", 0x8c}], 0x5, &(0x7f0000000b80)=[{0x60, 0x104, 0x6, "d6ab3cd9abdf1b077863a1291018ff3fe3ef1a56782a7aca0eca98c7c50e9d4df5106c3e71953c34aec657d3f36ba7df5d8ef96e490fce709e320bda8e5fb59c5002c10b30344c4600f04600110b"}, {0x98, 0x107, 0x8, "3bccea1a23354edc36ec74498ac08f93c57414581a45c53945bfa6efe587b8557d3f63c5e356572b9423607c607f6497526815b9a984399b127a948b33b556bc8f875d7f0108e364374146f726365b1eeed4ef1d575ade83af30a0e60f603fcda7765622a9381de76203aaa32ab57f401e74c08529346f2771a077f87837ad6d487d08"}, {0xe8, 0x1, 0xfff, "4d5e4bfbd8d4ccaab24cb4844d417562c26b77a7ad67c57fa99af10a0d7accc30b94e137dbcdf96c5ef2ba8113900bd845195bf06ea6162ca69315f0ee5ce766c1b1e984c3e2e5f6fdb5de067cfd43e94c7846848b502d7634963efbc2aeb3d69d454952696cbf4935ff6cf5c86f3c56ca4d913e33838768cdadd8f983359e27e99de124a17d6f0d86ddf6ea31298bf777c986a0d8780877bc9c172ece9c9c48d6e13f176281914bb0aa813e51327d69651bc3f2338843122a6c3d1190f16f4b0d224754826a24132019ff0ddc175aecd4aabb"}, {0x40, 0x10a, 0x8, "b79bda6d43dd2160cad4c04be9e4b2b7b27c486ed9bf5a1985307ee303b4a559237d3d59540e1ff8532d98"}, {0xe8, 0x10a, 0xa, "f4349d28b724858ad0172121541c6d9af06aad69d62f7116093e598a5fcc9c6ecd3ef1c34315316f3a18681dd0a449e1bf7fd23d9dec850d7047aaf7d33f64e703b2d12b414e40fee4203017d39daaf8c11a41ad7831b14e2c5d3ffb122db7aef482e60d20e03b45a0a88a44cf2eeebb4e4b82c74cbcc82e72adb06936b436a8eaaf1abc029749345cc766bfa63e215a93431fe7d54b958578dd6a0de708ed19a5c2372e9cb26c8d6f857fc4695561c3033f3373c9d16c4d778931f387d90d6178b7b800490d8d48979ca6edb148bf1336"}], 0x308}, 0x48080) recvmmsg(r6, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0xfc000000}], 0x1, 0x40010123, 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0x12) connect$bt_sco(r3, &(0x7f0000000440), 0x8) pipe(&(0x7f0000000480)) 784.316699ms ago: executing program 4 (id=2054): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x29, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0x2107, 0x0, &(0x7f00000003c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000580)={r10, 0x4}, &(0x7f00000005c0)=0xc) splice(r6, 0x0, r5, 0x0, 0x1c, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fe41000000bf86000000000000070a0000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ff000000008500000007000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 711.286853ms ago: executing program 1 (id=2055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a94929bd7000fbdbdf2504000000140001800800050001000000060001000000ddff"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8080) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000240)=0x8) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000280)={0x200000000000001, 0x2}, 0x38) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e0a, 0xb, @mcast2, 0x9}, 0x1c) r4 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f00000003c0)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x6, 0x2, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x65, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3f}}}}}) recvmmsg(r5, &(0x7f00000007c0)=[{{&(0x7f0000000800)=@x25={0x9, @remote}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000940)=""/21, 0x15}, {&(0x7f0000000980)=""/226, 0xe2}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/44, 0x32}, {&(0x7f0000001ac0)=""/72, 0x48}, {&(0x7f0000001b40)=""/76, 0x4c}, {&(0x7f0000001bc0)=""/204, 0xcc}, {&(0x7f0000001cc0)=""/1, 0x1}, {&(0x7f0000001d00)=""/156, 0x9c}, {&(0x7f0000001dc0)=""/228, 0xe4}], 0xa, &(0x7f0000001ec0)=""/67, 0x43}, 0xa2a}], 0x4000154, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000480)="5c0000001700010012aaaaaaaaaa0106000c0002000400000000006400", 0x1d) sendmmsg$inet6(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440), 0x171}}], 0x400000000000172, 0x4000000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8408001e}, 0x10) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) write$cgroup_pressure(r7, &(0x7f0000000040)={'full'}, 0xfffffdef) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81", @ANYRES32], 0x30}}, 0x0) 709.231261ms ago: executing program 2 (id=2056): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000010029bd700b0000800000000000", @ANYRES32=r0, @ANYBLOB="8db20200201a070018001680140001801000060006000000090000000200000008001b00000000001400030076"], 0x54}, 0x1, 0x0, 0x0, 0x8041}, 0x8040004) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000180)='\x00', 0x400, &(0x7f00000001c0)={@_ha_fsid={[0xffffffa4, 0xcb4]}, {0x9, 0xffff, 0x1ff, 0x7}}, 0x4, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)}) (async) r2 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@newsa={0x130, 0x10, 0x2, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010102, @in=@rand_addr=0x64010101, 0x4e20, 0x2d5f, 0x4e23, 0x9, 0xa, 0x40, 0xa0, 0xff, 0x0, r2}, {@in6=@mcast1, 0x4d5, 0x6c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0xffffffffffffffff, 0x2, 0x7fffffff, 0x8be1, 0x5, 0x100000000, 0xffff, 0x10}, {0x0, 0x240d, 0x9, 0x6}, {0xdad, 0x5, 0xa}, 0x70bd2a, 0x3506, 0x2, 0x0, 0x60, 0x79}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd2c, 0x70bd25, 0x70bd2c, 0x70bd2a, 0x3, [0x2]}}, @etimer_thresh={0x8, 0xc, 0x2}, @mark={0xc, 0x15, {0x35075a, 0x5}}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4c010}, 0x24040804) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000000000061190000000000040000000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) 593.813563ms ago: executing program 0 (id=2057): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000010000000003b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000c000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055090100000000009500000000000000bf91000000000000b7020000000000018500000085000000deb8b1b49a50c3e59500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xa, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 502.222894ms ago: executing program 0 (id=2058): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7714}, 0x10}, 0x4f) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0xc, &(0x7f0000001040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9e}}]}, &(0x7f00000010c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x2c, 0x3, 0x0) close(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000000)=0x497, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001240)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfb, {0x7a, 0x0, 0x0, r5, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x400}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000014c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001500)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_ext={0x1a, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="1800b9294e45d070a5bd00fcfffbd9c16563020000009500"], &(0x7f0000001640)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x13, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f75}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0xb, 0xb, 0x5, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000011c0)='GPL\x00', 0x1ff, 0xf, &(0x7f0000001200)=""/15, 0x41000, 0x76, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001680)={0x4, 0x9, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000016c0)=[{0x4, 0x3, 0xc, 0x6}], 0x10, 0x80000001}, 0x94) 448.040046ms ago: executing program 2 (id=2059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8000}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 373.784865ms ago: executing program 1 (id=2060): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@delchain={0x70, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x3c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xf, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5800}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xe4}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x100c0000}, 0x4804) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000200001002dbd7000fcdbda250a0080000900000100800000000000f72b00000000000000000008001806001d4e200000000000000000"], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r6, &(0x7f0000000140)="00008848d100582a", 0x8) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000003c0)=0x10) 331.915196ms ago: executing program 0 (id=2061): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x3d) socket$can_raw(0x1d, 0x3, 0x1) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x0, 0x96}, 0x28) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080002000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, &(0x7f0000000500)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000900)={0x30, 0x68, 0x1, 0x70bd26, 0x25dfdc02, "", [@generic="5a991f6ab77c9895d40503459b358cd5c1ebc1c273076ed4d83116abc3db9b54bf18e8eb312946cecbd8d6fc288bf2fc8c28875916d74c9fd02c464fb3c74ed085021e2d5d4abecf60a3e428", @typed={0x9, 0xa3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x30}], 0x1, 0x0, 0x0, 0x20004880}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) write(r0, &(0x7f00000008c0)="41000200010001", 0x7) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname(r8, 0x0, &(0x7f0000000040)) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r9) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x2, 0x0, {0x0, 0x0, 0x0, r10, 0x400, 0xd7d4a2fa19e7dbb4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x44}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 272.170211ms ago: executing program 2 (id=2062): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC], 0x38}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x4c}, 0x4000) 213.171217ms ago: executing program 3 (id=2063): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000980)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000009c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) ppoll(&(0x7f00000003c0)=[{r2, 0x2}], 0x1, &(0x7f00000005c0)={r3, r4+10000000}, &(0x7f00000006c0)={[0x7]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="000000000000000007d63b05f108", 0xe}], 0x1}, 0xfc) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x20800, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x42082, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000bc0)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x102, 0x0) close(r7) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000c40)=ANY=[@ANYRES16=r7, @ANYRES16=r7]) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000c80)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000cc0)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, 0x0, 0x0, 0x200540c0, &(0x7f0000000d00)={0x11, 0x8, r9, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 148.040567ms ago: executing program 4 (id=2064): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb, 0x1}}, {0x6, 0x2, [0x4782]}}]}]}, 0x58}}, 0x4000010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000be000000000000000095"], &(0x7f00000006c0)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x7) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x1, 0x48, "d1337211b09398a14f43029fad9117de926012f8f392895aeff3535eeff0450ba0460f306de3827cf6e26896f5c6850cdc1362c4dcece4ff43d1eb3fdaff420d3592192f73e2b5db"}, &(0x7f0000000140)=0x50) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000180)={r4, 0x100}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb, 0x1}}, {0x6, 0x2, [0x4782]}}]}]}, 0x58}}, 0x4000010) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000be000000000000000095"], &(0x7f00000006c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) pipe(&(0x7f0000000040)) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x7) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x1, 0x48, "d1337211b09398a14f43029fad9117de926012f8f392895aeff3535eeff0450ba0460f306de3827cf6e26896f5c6850cdc1362c4dcece4ff43d1eb3fdaff420d3592192f73e2b5db"}, &(0x7f0000000140)=0x50) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000180)={r4, 0x100}, 0x8) (async) 0s ago: executing program 2 (id=2065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x2, 0x0, @local, 0x7f}, {0xa, 0x0, 0x2, @empty}, 0xfffc, {[0x0, 0x0, 0x0, 0x1000, 0x0, 0x3]}}, 0x5c) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x4b, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e26}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fdc4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="a0200000", @ANYRES16=r5, @ANYBLOB="040027bd7000fcdbdf250100000008000400080000005400028005000d00000000000800050006000000060002004e23000006000f0008000000080008007236000008000400b0000000080003000400000005000d0001000000080003000300000006000e004e2100000800040007000000080004001d460000180001800c000700020000000600000006000100080000000800050001000000"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x20008010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="c274386d178550cb864bd57221bc", 0x0, 0x1200100, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x2, 0x0, @local, 0x7f}, {0xa, 0x0, 0x2, @empty}, 0xfffc, {[0x0, 0x0, 0x0, 0x1000, 0x0, 0x3]}}, 0x5c) (async) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) (async) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x4b, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e26}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fdc4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="a0200000", @ANYRES16=r5, @ANYBLOB="040027bd7000fcdbdf250100000008000400080000005400028005000d00000000000800050006000000060002004e23000006000f0008000000080008007236000008000400b0000000080003000400000005000d0001000000080003000300000006000e004e2100000800040007000000080004001d460000180001800c000700020000000600000006000100080000000800050001000000"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x20008010) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="c274386d178550cb864bd57221bc", 0x0, 0x1200100, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) (async) kernel console output (not intermixed with test programs): ': attribute type 21 has an invalid length. [ 291.469788][ T8604] netlink: 128 bytes leftover after parsing attributes in process `syz.0.634'. [ 291.469994][ T8604] netlink: 3 bytes leftover after parsing attributes in process `syz.0.634'. [ 291.637058][ T8610] tc_dump_action: action bad kind [ 292.033547][ T8633] IPVS: length: 15 != 8 [ 292.449260][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.645'. [ 292.449281][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.645'. [ 292.976826][ T8655] smbdirect: ib_dev[ÿ] removed [ 293.319253][ T8661] bond4: entered promiscuous mode [ 293.319273][ T8661] bond4: entered allmulticast mode [ 293.659981][ T8676] netlink: 19 bytes leftover after parsing attributes in process `syz.2.658'. [ 293.680379][ T8676] netlink: 19 bytes leftover after parsing attributes in process `syz.2.658'. [ 293.830225][ T8688] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 293.995100][ T8677] syzkaller0: entered promiscuous mode [ 293.995125][ T8677] syzkaller0: entered allmulticast mode [ 294.306242][ T8717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.662'. [ 294.417803][ T8719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 296.721657][ T8717] veth1_to_team: entered promiscuous mode [ 296.722301][ T8717] gretap0: entered promiscuous mode [ 296.723065][ T8717] hsr1: entered promiscuous mode [ 296.812132][ T8730] veth1_to_team: left promiscuous mode [ 296.873671][ T8730] bridge2: left promiscuous mode [ 296.917199][ T8730] bond2: left promiscuous mode [ 296.917222][ T8730] erspan1: left promiscuous mode [ 297.136495][ T1051] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.224083][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 297.224116][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 297.284906][ T6925] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.284950][ T6925] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.284980][ T6925] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.285007][ T6925] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.376601][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.480803][ T8764] syzkaller0: entered promiscuous mode [ 297.480825][ T8764] syzkaller0: entered allmulticast mode [ 297.503109][ T8764] 0: reclassify loop, rule prio 0, protocol 800 [ 297.742682][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'. [ 297.771052][ T8775] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 298.015239][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 298.065191][ T8782] tipc: Started in network mode [ 298.065221][ T8782] tipc: Node identity ac14140f, cluster identity 4711 [ 298.067860][ T8782] tipc: Enabled bearer , priority 10 [ 298.140625][ T8784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.684'. [ 298.290934][ T8790] netlink: zone id is out of range [ 298.290982][ T8790] netlink: zone id is out of range [ 298.291104][ T8790] netlink: zone id is out of range [ 298.291143][ T8790] netlink: zone id is out of range [ 298.291150][ T8790] netlink: zone id is out of range [ 298.291157][ T8790] netlink: zone id is out of range [ 298.291164][ T8790] netlink: zone id is out of range [ 298.291171][ T8790] netlink: zone id is out of range [ 298.291178][ T8790] netlink: zone id is out of range [ 298.392291][ T8793] rxe_eth0 speed is unknown, defaulting to 1000 [ 298.564707][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.689'. [ 298.707834][ T50] IPVS: starting estimator thread 0... [ 298.730537][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 298.743764][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.692'. [ 298.766329][ T8814] netlink: 'syz.3.692': attribute type 8 has an invalid length. [ 298.767923][ T8814] sch_fq: defrate 0 ignored. [ 298.796331][ T8819] IPVS: using max 40 ests per chain, 96000 per kthread [ 298.925379][ T8828] tipc: Enabled bearer , priority 0 [ 298.928026][ T8828] syzkaller0: entered promiscuous mode [ 298.928047][ T8828] syzkaller0: entered allmulticast mode [ 298.935621][ T8828] tipc: Resetting bearer [ 298.942581][ T8827] tipc: Resetting bearer [ 298.974104][ T8827] tipc: Disabling bearer [ 299.185518][ T25] tipc: Node number set to 2886997007 [ 299.588435][ T8861] netlink: 27 bytes leftover after parsing attributes in process `syz.3.707'. [ 299.750942][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 299.750974][ T8875] netlink: 'syz.1.710': attribute type 11 has an invalid length. [ 299.788868][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 299.788901][ T8875] netlink: 'syz.1.710': attribute type 11 has an invalid length. [ 299.915625][ T1051] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.915742][ T1051] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.915775][ T1051] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.915804][ T1051] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.765322][ T8913] syzkaller1: entered promiscuous mode [ 300.765344][ T8913] syzkaller1: entered allmulticast mode [ 300.880544][ T8922] netlink: 'syz.1.721': attribute type 11 has an invalid length. [ 300.993714][ T8921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.041938][ T8929] netlink: 'syz.3.725': attribute type 1 has an invalid length. [ 301.054722][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 301.075250][ T8929] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.118316][ T8929] bond8: (slave veth5): Enslaving as an active interface with a down link [ 301.125686][ T8929] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 301.127898][ T8929] bond8: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 301.198557][ T8935] xt_hashlimit: size too large, truncated to 1048576 [ 301.271705][ T8938] xt_hashlimit: size too large, truncated to 1048576 [ 301.438116][ T8947] syzkaller0: entered promiscuous mode [ 301.438140][ T8947] syzkaller0: entered allmulticast mode [ 301.512541][ T8947] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 301.577996][ T8947] bond3: entered promiscuous mode [ 301.578443][ T8947] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.920150][ T8974] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 302.030591][ T8977] netlink: 'syz.2.738': attribute type 30 has an invalid length. [ 302.338837][ T8991] __nla_validate_parse: 3 callbacks suppressed [ 302.338859][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'. [ 302.527326][ T8997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.742'. [ 302.591812][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 302.671194][ T9006] netlink: 84 bytes leftover after parsing attributes in process `syz.1.745'. [ 302.687370][ T9003] veth1: entered allmulticast mode [ 302.687656][ T9003] veth1: entered promiscuous mode [ 302.842661][ T9012] ip6t_hbh: unknown flags AD [ 303.193411][ T8998] veth1: left promiscuous mode [ 303.193602][ T8998] veth1: left allmulticast mode [ 303.267142][ T52] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 303.277749][ T9025] netlink: 'syz.0.751': attribute type 10 has an invalid length. [ 303.282986][ T9029] netlink: 'syz.0.751': attribute type 10 has an invalid length. [ 303.295206][ T9030] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 303.432912][ T9041] tipc: Failed to remove unknown binding: 66,0,0/0:3683204420/3683204422 [ 303.432941][ T9041] tipc: Failed to remove unknown binding: 66,0,0/0:3683204420/3683204421 [ 303.443908][ T9043] tipc: Failed to remove unknown binding: 66,0,0/0:3683204420/3683204422 [ 303.443935][ T9043] tipc: Failed to remove unknown binding: 66,0,0/0:3683204420/3683204421 [ 303.451403][ T9025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.457107][ T9025] team0: Port device netdevsim1 added [ 303.502559][ T9029] team0: Port device netdevsim1 removed [ 303.512064][ T9029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.514439][ T9029] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 303.547753][ T9030] 8021q: adding VLAN 0 to HW filter on device bond6 [ 303.563299][ T9036] gretap1: entered promiscuous mode [ 303.568111][ T9036] bond6: (slave gretap1): making interface the new active one [ 303.573438][ T9036] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 303.605027][ T9046] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.607313][ T9046] bond6: (slave bond7): Enslaving as an active interface with a down link [ 303.669542][ T9051] bond6 (unregistering): (slave gretap1): Releasing active interface [ 303.706419][ T9051] bond6 (unregistering): (slave bond7): Releasing active interface [ 303.742899][ T9051] bond6 (unregistering): Released all slaves [ 303.810889][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 304.068572][ T9028] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 304.106617][ T9075] netlink: 'syz.1.760': attribute type 1 has an invalid length. [ 304.157670][ T9075] netlink: 48 bytes leftover after parsing attributes in process `syz.1.760'. [ 304.181743][ T9075] bond2: (slave veth0_to_bond): making interface the new active one [ 304.184305][ T9075] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 304.209653][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'. [ 304.209686][ T9075] bond2: entered promiscuous mode [ 304.209702][ T9075] veth0_to_bond: entered promiscuous mode [ 304.242198][ T9075] block nbd0: not configured, cannot reconfigure [ 304.379007][ T9096] netlink: 36 bytes leftover after parsing attributes in process `syz.1.765'. [ 304.589880][ T9100] veth2: entered allmulticast mode [ 304.671672][ T9099] bond3: (slave team0): Device is not bonding slave [ 304.671691][ T9099] bond3: option active_slave: invalid value (team0) [ 304.673671][ T9099] bond3 (unregistering): Released all slaves [ 305.268038][ T9130] netlink: 48 bytes leftover after parsing attributes in process `syz.2.773'. [ 305.269327][ T9130] netlink: 'syz.2.773': attribute type 16 has an invalid length. [ 305.269344][ T9130] netlink: 'syz.2.773': attribute type 17 has an invalid length. [ 305.269366][ T9130] C: left promiscuous mode [ 305.269380][ T9130] C: left allmulticast mode [ 305.270627][ T9130] tunl0: left promiscuous mode [ 305.270644][ T9130] tunl0: left allmulticast mode [ 305.271673][ T9130] gre0: left promiscuous mode [ 305.271689][ T9130] gre0: left allmulticast mode [ 305.272393][ T9130] gretap0: left promiscuous mode [ 305.272405][ T9130] gretap0: left allmulticast mode [ 305.273197][ T9130] erspan0: left promiscuous mode [ 305.273212][ T9130] erspan0: left allmulticast mode [ 305.274131][ T9130] ip_vti0: left promiscuous mode [ 305.274145][ T9130] ip_vti0: left allmulticast mode [ 305.295179][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 305.349613][ T9130] ip6_vti0: left promiscuous mode [ 305.349634][ T9130] ip6_vti0: left allmulticast mode [ 305.350467][ T9130] sit0: left promiscuous mode [ 305.350483][ T9130] sit0: left allmulticast mode [ 305.351227][ T9130] ip6tnl0: left promiscuous mode [ 305.351243][ T9130] ip6tnl0: left allmulticast mode [ 305.372403][ T9137] xt_ipcomp: unknown flags 1D [ 305.393140][ T9138] net_ratelimit: 81 callbacks suppressed [ 305.393162][ T9138] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 305.402508][ T9138] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 305.402899][ T9138] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 305.405847][ T9137] xt_TPROXY: Can be used only with -p tcp or -p udp [ 305.434445][ T9130] ip6gre0: left promiscuous mode [ 305.434466][ T9130] ip6gre0: left allmulticast mode [ 305.448923][ T9130] syz_tun: left promiscuous mode [ 305.448944][ T9130] syz_tun: left allmulticast mode [ 305.474007][ T9130] ip6gretap0: left promiscuous mode [ 305.474030][ T9130] ip6gretap0: left allmulticast mode [ 305.490841][ T9138] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 305.491867][ T9130] bridge0: left promiscuous mode [ 305.491920][ T9130] bridge0: left allmulticast mode [ 305.502544][ T9130] bond0: left promiscuous mode [ 305.502577][ T9130] bond0: left allmulticast mode [ 305.532826][ T9130] team0: left promiscuous mode [ 305.532852][ T9130] team0: left allmulticast mode [ 305.533854][ T9130] dummy0: left promiscuous mode [ 305.533873][ T9130] dummy0: left allmulticast mode [ 305.540407][ T9130] nlmon0: left promiscuous mode [ 305.540425][ T9130] nlmon0: left allmulticast mode [ 305.546807][ T9142] netlink: 'syz.1.776': attribute type 1 has an invalid length. [ 305.547214][ T9130] batadv0: left promiscuous mode [ 305.547229][ T9130] batadv0: left allmulticast mode [ 305.550956][ T9130] vxcan0: left promiscuous mode [ 305.550972][ T9130] vxcan0: left allmulticast mode [ 305.551507][ T9130] vxcan1: left promiscuous mode [ 305.551520][ T9130] vxcan1: left allmulticast mode [ 305.557338][ T9130] veth0: left promiscuous mode [ 305.557356][ T9130] veth0: left allmulticast mode [ 305.559437][ T9130] veth1: left promiscuous mode [ 305.559454][ T9130] veth1: left allmulticast mode [ 305.560227][ T9130] wg0: left promiscuous mode [ 305.560240][ T9130] wg0: left allmulticast mode [ 305.562780][ T9130] wg2: left promiscuous mode [ 305.562797][ T9130] wg2: left allmulticast mode [ 305.565985][ T9130] veth0_to_bridge: left promiscuous mode [ 305.566004][ T9130] veth0_to_bridge: left allmulticast mode [ 305.569339][ T9130] bridge_slave_0: left promiscuous mode [ 305.569355][ T9130] bridge_slave_0: left allmulticast mode [ 305.570081][ T9130] veth1_to_bridge: left promiscuous mode [ 305.570095][ T9130] veth1_to_bridge: left allmulticast mode [ 305.573610][ T9130] bridge_slave_1: left promiscuous mode [ 305.573630][ T9130] bridge_slave_1: left allmulticast mode [ 305.577663][ T9130] veth0_to_bond: left promiscuous mode [ 305.577694][ T9130] veth0_to_bond: left allmulticast mode [ 305.583509][ T9130] bond_slave_0: left promiscuous mode [ 305.583537][ T9130] bond_slave_0: left allmulticast mode [ 305.585953][ T9130] veth1_to_bond: left promiscuous mode [ 305.585970][ T9130] veth1_to_bond: left allmulticast mode [ 305.588821][ T9130] bond_slave_1: left promiscuous mode [ 305.588840][ T9130] bond_slave_1: left allmulticast mode [ 305.591102][ T9130] veth0_to_team: left promiscuous mode [ 305.591118][ T9130] veth0_to_team: left allmulticast mode [ 305.591907][ T9130] team_slave_0: left promiscuous mode [ 305.591921][ T9130] team_slave_0: left allmulticast mode [ 305.593792][ T9130] veth1_to_team: left promiscuous mode [ 305.593808][ T9130] veth1_to_team: left allmulticast mode [ 305.604435][ T9130] veth0_to_batadv: left promiscuous mode [ 305.604456][ T9130] veth0_to_batadv: left allmulticast mode [ 305.605279][ T9130] batadv_slave_0: left promiscuous mode [ 305.608605][ T9130] batadv_slave_0: left allmulticast mode [ 305.611596][ T9130] veth1_to_batadv: left promiscuous mode [ 305.611615][ T9130] veth1_to_batadv: left allmulticast mode [ 305.616706][ T9130] batadv_slave_1: left promiscuous mode [ 305.616728][ T9130] batadv_slave_1: left allmulticast mode [ 305.619785][ T9130] xfrm0: left promiscuous mode [ 305.619804][ T9130] xfrm0: left allmulticast mode [ 305.625038][ T9130] veth0_to_hsr: left promiscuous mode [ 305.625059][ T9130] veth0_to_hsr: left allmulticast mode [ 305.630883][ T9130] veth1_to_hsr: left promiscuous mode [ 305.632103][ T9130] veth1_to_hsr: left allmulticast mode [ 305.636256][ T9130] hsr0: left promiscuous mode [ 305.636277][ T9130] hsr0: left allmulticast mode [ 305.636287][ T9130] hsr_slave_0: left allmulticast mode [ 305.636299][ T9130] hsr_slave_1: left allmulticast mode [ 305.643493][ T9130] veth1_virt_wifi: left promiscuous mode [ 305.643514][ T9130] veth1_virt_wifi: left allmulticast mode [ 305.644309][ T9130] veth0_virt_wifi: left promiscuous mode [ 305.644324][ T9130] veth0_virt_wifi: left allmulticast mode [ 305.647898][ T9130] virt_wifi0: left promiscuous mode [ 305.647919][ T9130] virt_wifi0: left allmulticast mode [ 305.662526][ T9130] vlan0: left promiscuous mode [ 305.662717][ T9130] vlan0: left allmulticast mode [ 305.666056][ T9130] ÿÿÿÿÿÿ: left promiscuous mode [ 305.667888][ T9130] ÿÿÿÿÿÿ: left allmulticast mode [ 305.668660][ T9130] macvlan0: left promiscuous mode [ 305.670076][ T9130] macvlan0: left allmulticast mode [ 305.672110][ T9130] macvlan1: left promiscuous mode [ 305.672264][ T9130] macvlan1: left allmulticast mode [ 305.672275][ T9130] veth1_vlan: left allmulticast mode [ 305.677178][ T9130] ipvlan0: left promiscuous mode [ 305.677199][ T9130] ipvlan0: left allmulticast mode [ 305.678598][ T9130] ipvlan1: left promiscuous mode [ 305.678620][ T9130] ipvlan1: left allmulticast mode [ 305.678631][ T9130] veth0_vlan: left allmulticast mode [ 305.693032][ T9130] macvtap0: left promiscuous mode [ 305.693199][ T9130] macvtap0: left allmulticast mode [ 305.693211][ T9130] veth0_macvtap: left allmulticast mode [ 305.694045][ T9130] macsec0: left promiscuous mode [ 305.694260][ T9130] macsec0: left allmulticast mode [ 305.694271][ T9130] veth1_macvtap: left allmulticast mode [ 305.714987][ T9130] geneve1: left promiscuous mode [ 305.715008][ T9130] geneve1: left allmulticast mode [ 305.721801][ T9130] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 305.721826][ T9130] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 305.723403][ T9130] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 305.723437][ T9130] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 305.730743][ T9130] syztnl1: left promiscuous mode [ 305.734417][ T9130] syztnl1: left allmulticast mode [ 305.736043][ T9130] netdevsim netdevsim2 eth0: left promiscuous mode [ 305.736064][ T9130] netdevsim netdevsim2 eth0: left allmulticast mode [ 305.741551][ T9130] netdevsim netdevsim2 eth1: left promiscuous mode [ 305.741575][ T9130] netdevsim netdevsim2 eth1: left allmulticast mode [ 305.748191][ T9130] netdevsim netdevsim2 eth2: left promiscuous mode [ 305.748215][ T9130] netdevsim netdevsim2 eth2: left allmulticast mode [ 305.752618][ T9130] netdevsim netdevsim2 eth3: left promiscuous mode [ 305.752648][ T9130] netdevsim netdevsim2 eth3: left allmulticast mode [ 305.757316][ T9130] ip6tnl1: left promiscuous mode [ 305.757335][ T9130] ip6tnl1: left allmulticast mode [ 305.760413][ T9130] pim6reg: left promiscuous mode [ 305.762765][ T9130] vxlan0: left promiscuous mode [ 305.762781][ T9130] vxlan0: left allmulticast mode [ 305.765212][ T9130] bond1: left promiscuous mode [ 305.765229][ T9130] bond1: left allmulticast mode [ 305.768843][ T9130] veth2: left promiscuous mode [ 305.768862][ T9130] veth2: left allmulticast mode [ 305.770901][ T9130] veth3: left promiscuous mode [ 305.770918][ T9130] veth3: left allmulticast mode [ 305.773899][ T9130] team_slave_1.2: left promiscuous mode [ 305.773918][ T9130] team_slave_1: left promiscuous mode [ 305.774080][ T9130] team_slave_1.2: left allmulticast mode [ 305.774091][ T9130] team_slave_1: left allmulticast mode [ 305.783581][ T9130] veth4: left promiscuous mode [ 305.783600][ T9130] veth4: left allmulticast mode [ 305.785220][ T6139] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 305.787031][ T9130] veth5: left promiscuous mode [ 305.787048][ T9130] veth5: left allmulticast mode [ 305.791411][ T9130] ip6tnl2: left promiscuous mode [ 305.791428][ T9130] ip6tnl2: left allmulticast mode [ 305.822589][ T9130] syztnl0: left promiscuous mode [ 305.822611][ T9130] syztnl0: left allmulticast mode [ 305.840712][ T9130] geneve0: left promiscuous mode [ 305.840732][ T9130] geneve0: left allmulticast mode [ 305.860803][ T9130] mac80211_hwsim hwsim12 wlan2: left promiscuous mode [ 305.860828][ T9130] mac80211_hwsim hwsim12 wlan2: left allmulticast mode [ 305.861548][ T9130] mac80211_hwsim hwsim13 wlan3: left promiscuous mode [ 305.861567][ T9130] mac80211_hwsim hwsim13 wlan3: left allmulticast mode [ 305.865110][ T9130] mac80211_hwsim hwsim14 wlan4: left promiscuous mode [ 305.865207][ T9130] mac80211_hwsim hwsim14 wlan4: left allmulticast mode [ 305.865928][ T9130] bond3: left promiscuous mode [ 305.866087][ T9130] bond3: left allmulticast mode [ 305.874863][ T9130] veth6: left promiscuous mode [ 305.874883][ T9130] veth6: left allmulticast mode [ 305.877924][ T9130] veth7: left promiscuous mode [ 305.877943][ T9130] veth7: left allmulticast mode [ 305.883054][ T9130] bond4: left promiscuous mode [ 305.883081][ T9130] bond4: left allmulticast mode [ 305.883463][ T9130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.897275][ T9130] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.916549][ T9130] gretap1: left promiscuous mode [ 305.919827][ T9130] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.208867][ T9138] bond9: entered promiscuous mode [ 306.227657][ T9138] 8021q: adding VLAN 0 to HW filter on device bond9 [ 306.394768][ T9142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.452123][ T9146] 8021q: adding VLAN 0 to HW filter on device bond9 [ 306.452493][ T9146] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 306.452511][ T9146] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 306.481896][ T9146] bond9: (slave ip6gre2): making interface the new active one [ 306.481923][ T9146] ip6gre2: entered promiscuous mode [ 306.537178][ T9146] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 306.568059][ T9149] xfrm1: entered allmulticast mode [ 306.635697][ T9151] bond3: (slave gretap1): making interface the new active one [ 306.637851][ T9151] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 306.819255][ T6138] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.004372][ T1042] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 307.008312][ T1042] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 307.027193][ T25] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 307.251297][ T6925] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.251508][ T6925] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.346950][ T9177] netlink: 220 bytes leftover after parsing attributes in process `syz.3.781'. [ 307.358328][ T25] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 307.416023][ T25] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 308.255850][ T25] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 308.356567][ T9203] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 308.505034][ T9212] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 308.527738][ T9203] 8021q: adding VLAN 0 to HW filter on device bond10 [ 308.660936][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 308.663476][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 308.663556][ T9214] bond2: left allmulticast mode [ 308.663715][ T9214] bond2: left promiscuous mode [ 308.664111][ T9214] bridge0: port 1(bond2) entered disabled state [ 308.894755][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 309.021185][ T9229] C: Caught tx_queue_len zero misconfig [ 309.067075][ T9228] syzkaller0: left promiscuous mode [ 309.067094][ T9228] syzkaller0: left allmulticast mode [ 309.719895][ T9239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.795'. [ 309.906082][ T9243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.795'. [ 311.778623][ T9240] sch_tbf: burst 88 is lower than device veth6 mtu (1514) ! [ 311.869093][ T9250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.797'. [ 312.205607][ T9267] bond4: ARP target 9.0.0.0 is already present [ 312.205631][ T9267] bond4: option arp_ip_target: invalid value (9) [ 312.209002][ T9267] bond4 (unregistering): Released all slaves [ 312.253552][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.804'. [ 312.268952][ T9275] bond_slave_0: entered promiscuous mode [ 312.268981][ T9275] bond_slave_0: entered allmulticast mode [ 312.318321][ T9275] bond0: (slave bond_slave_0): Releasing backup interface [ 312.333112][ T9275] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 312.403929][ T9276] pim6reg: entered allmulticast mode [ 312.638177][ T9296] xt_IDLETIMER: timeout value is zero [ 312.819636][ T9305] ip_tables: iptables: counters copy to user failed while replacing table [ 312.845129][ T9306] ip_tables: iptables: counters copy to user failed while replacing table [ 312.954321][ T9315] can: request_module (can-proto-0) failed. [ 313.242914][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.822'. [ 313.276354][ T9328] syzkaller0: entered promiscuous mode [ 313.276443][ T9328] syzkaller0: entered allmulticast mode [ 313.312881][ T9336] vlan2: entered promiscuous mode [ 313.312905][ T9336] syz_tun: entered promiscuous mode [ 313.358533][ T9333] TCP: TCP_TX_DELAY enabled [ 313.425922][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 313.444192][ T9338] netlink: 88 bytes leftover after parsing attributes in process `syz.0.823'. [ 313.448887][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 316.149307][ T9343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.824'. [ 316.262022][ T9351] netlink: 324 bytes leftover after parsing attributes in process `syz.4.828'. [ 316.262741][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 316.262758][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.828'. [ 316.262893][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 316.262905][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.828'. [ 316.554797][ T9377] netlink: 'syz.4.832': attribute type 1 has an invalid length. [ 316.588873][ T9375] pim6reg1: entered promiscuous mode [ 316.588895][ T9375] pim6reg1: entered allmulticast mode [ 317.013466][ T9405] Cannot find add_set index 2 as target [ 317.226189][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.226245][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.318704][ T9413] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.319435][ T9413] bridge0: port 3(bond4) entered blocking state [ 317.319631][ T9413] bridge0: port 3(bond4) entered disabled state [ 317.319767][ T9413] bond4: entered allmulticast mode [ 317.326494][ T9413] bond4: entered promiscuous mode [ 317.330238][ T9413] bridge0: port 3(bond4) entered blocking state [ 317.330351][ T9413] bridge0: port 3(bond4) entered forwarding state [ 317.429092][ T9421] ip_tables: iptables: counters copy to user failed while replacing table [ 317.432107][ T9421] C: renamed from lo [ 317.497502][ T9421] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 318.184696][ T9445] x_tables: duplicate underflow at hook 2 [ 318.334039][ T9450] ip_tables: iptables: counters copy to user failed while replacing table [ 318.517814][ T9458] __nla_validate_parse: 2 callbacks suppressed [ 318.517835][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'. [ 318.583557][ T1407] bridge0: port 3(bond4) entered disabled state [ 318.636894][ T9458] vlan3: entered promiscuous mode [ 318.636915][ T9458] ip6gretap0: entered promiscuous mode [ 318.969121][ T31] audit: type=1800 audit(1792127948.407:2): pid=9472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.856" name="blkio.bfq.time_recursive" dev="tmpfs" ino=923 res=0 errno=0 [ 319.081868][ T9477] netlink: 'syz.0.860': attribute type 1 has an invalid length. [ 319.099564][ T9478] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 319.101372][ T9478] netlink: 'syz.2.858': attribute type 4 has an invalid length. [ 319.482130][ T9481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.776943][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 319.776967][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 319.903179][ T9496] ip_tables: iptables: counters copy to user failed while replacing table [ 319.933756][ T9496] ip_tables: iptables: counters copy to user failed while replacing table [ 319.991266][ T9507] netlink: 152 bytes leftover after parsing attributes in process `syz.4.867'. [ 320.078875][ T9509] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 320.391966][ T9509] bond11 (unregistering): Released all slaves [ 320.415400][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 320.761256][ T9541] tun0: tun_chr_ioctl cmd 1074025675 [ 320.761279][ T9541] tun0: persist enabled [ 320.761462][ T9541] tun0: tun_chr_ioctl cmd 1074025675 [ 320.761474][ T9541] tun0: persist enabled [ 320.849125][ T9541] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 320.952909][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.877'. [ 320.952944][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.877'. [ 320.986431][ T9548] geneve3: entered promiscuous mode [ 321.562508][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 321.853478][ T9598] netlink: 92 bytes leftover after parsing attributes in process `syz.2.890'. [ 321.853529][ T9598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.890'. [ 321.880550][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 321.890820][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'. [ 321.942076][ T9605] netlink: 'syz.4.888': attribute type 11 has an invalid length. [ 321.948508][ T9600] ovs-dp0: entered promiscuous mode [ 322.556634][ T9631] netlink: 104 bytes leftover after parsing attributes in process `syz.2.895'. [ 322.753580][ T9649] netlink: 'syz.4.898': attribute type 1 has an invalid length. [ 322.989351][ T9664] bridge0: left promiscuous mode [ 322.989377][ T9664] bridge0: left allmulticast mode [ 323.207508][ T9670] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 323.536305][ T9679] tipc: Enabled bearer , priority 0 [ 323.562819][ T9678] tipc: Disabling bearer [ 323.580240][ T9681] __nla_validate_parse: 1 callbacks suppressed [ 323.580262][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 323.754094][ T9687] ip_tables: iptables: counters copy to user failed while replacing table [ 323.902725][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 323.923127][ T9699] ovs-dp0: entered promiscuous mode [ 323.939653][ T9699] netlink: 'syz.2.911': attribute type 11 has an invalid length. [ 323.943252][ T9701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.912'. [ 324.205354][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 324.483728][ T9738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.922'. [ 324.500900][ T9736] netlink: 804 bytes leftover after parsing attributes in process `syz.0.921'. [ 324.542791][ T9739] bond4: Removing last arp target with arp_interval on [ 324.780750][ T9755] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 324.781943][ T9755] netlink: 'syz.4.927': attribute type 4 has an invalid length. [ 324.841776][ T9760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.929'. [ 324.903200][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'. [ 324.903224][ T9760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.929'. [ 324.908557][ T9760] ip_tables: iptables: counters copy to user failed while replacing table [ 325.050463][ T9768] netlink: 76 bytes leftover after parsing attributes in process `syz.2.930'. [ 325.534711][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 325.904160][ T9787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.563215][ T9815] dvmrp1: entered allmulticast mode [ 326.679400][ T52] Bluetooth: hci4: unexpected event for opcode 0x0005 [ 326.821616][ T9843] netlink: 'syz.0.951': attribute type 362 has an invalid length. [ 326.943365][ T9840] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 326.943388][ T9840] netlink: 'syz.2.949': attribute type 2 has an invalid length. [ 326.954353][ T9846] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 327.163447][ T9865] netlink: zone id is out of range [ 327.473353][ T9890] Bluetooth: MGMT ver 1.23 [ 327.681681][ T9873] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 327.723894][ T9873] bond6 (unregistering): Released all slaves [ 327.890208][ T9891] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 327.932803][ T9891] bond6 (unregistering): Released all slaves [ 328.400737][ T9912] netlink: 'syz.1.965': attribute type 8 has an invalid length. [ 328.534652][ T9915] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 328.574977][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 328.638572][ T9923] xt_hashlimit: size too large, truncated to 1048576 [ 328.718808][ T9927] syzkaller0: left promiscuous mode [ 328.718831][ T9927] syzkaller0: left allmulticast mode [ 328.947637][ T9944] __nla_validate_parse: 12 callbacks suppressed [ 328.947659][ T9944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.973'. [ 328.968162][ T9944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.973'. [ 329.036471][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.974'. [ 329.165321][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.974'. [ 329.225834][ T9961] netlink: 'syz.3.976': attribute type 3 has an invalid length. [ 329.226050][ T9961] netlink: 'syz.3.976': attribute type 3 has an invalid length. [ 329.226236][ T9961] netlink: 'syz.3.976': attribute type 3 has an invalid length. [ 329.226399][ T9961] netlink: 'syz.3.976': attribute type 3 has an invalid length. [ 329.226561][ T9961] netlink: 'syz.3.976': attribute type 3 has an invalid length. [ 329.226736][ T9961] netlink: 'syz.3.976': attribute type 3 has an invalid length. [ 329.226905][ T9961] netlink: 'syz.3.976': attribute type 3 has an invalid length. [ 329.227084][ T9961] netlink: 'syz.3.976': attribute type 3 has an invalid length. [ 329.233690][ T1407] IPVS: starting estimator thread 0... [ 329.347897][ T9964] IPVS: using max 32 ests per chain, 76800 per kthread [ 329.535863][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 329.535972][ T52] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 329.618564][ T9978] netlink: 68 bytes leftover after parsing attributes in process `syz.4.980'. [ 329.655274][ T9981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.981'. [ 329.881701][ T9985] gretap1: entered allmulticast mode [ 329.912716][ T9990] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.913459][ T9990] bridge0: port 4(bond5) entered blocking state [ 329.913708][ T9990] bridge0: port 4(bond5) entered disabled state [ 329.913846][ T9990] bond5: entered allmulticast mode [ 329.943929][ T9990] bond5: entered promiscuous mode [ 329.948382][ T9990] bridge0: port 4(bond5) entered blocking state [ 329.948673][ T9990] bridge0: port 4(bond5) entered forwarding state [ 329.993420][ T9993] 8021q: adding VLAN 0 to HW filter on device bond12 [ 330.069375][ T1407] bridge0: port 4(bond5) entered disabled state [ 330.403086][T10017] sctp: [Deprecated]: syz.4.993 (pid 10017) Use of int in max_burst socket option. [ 330.403086][T10017] Use struct sctp_assoc_value instead [ 331.063185][T10043] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1000'. [ 331.340902][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'. [ 331.340932][T10049] bond0: option resend_igmp: invalid value (1696606517) [ 331.340959][T10049] bond0: option resend_igmp: allowed values 0 - 255 [ 331.911222][T10079] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1009'. [ 331.928561][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 332.052571][T10090] ip_tables: iptables: counters copy to user failed while replacing table [ 332.109768][T10088] @0Ù: renamed from bond_slave_1 (while UP) [ 332.587986][T10123] ipt_REJECT: TCP_RESET invalid for non-tcp [ 332.660719][T10129] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 332.663546][T10123] syzkaller0: tun_chr_ioctl cmd 3223385353 [ 332.809850][T10132] batman_adv: batadv0: Adding interface: ipvlan2 [ 332.809869][T10132] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.809892][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.809906][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.809915][T10132] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 333.140980][T10139] xt_TPROXY: Can be used only with -p tcp or -p udp [ 333.772700][ T43] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 333.805057][T10164] ±ÿ: renamed from lo (while UP) [ 333.855005][ C1] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 334.068878][T10171] validate_nla: 61 callbacks suppressed [ 334.068900][T10171] netlink: 'syz.1.1035': attribute type 10 has an invalid length. [ 336.415584][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 336.688234][T10155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.283287][T10316] __nla_validate_parse: 4 callbacks suppressed [ 337.283306][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 337.372916][T10311] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.441115][T10311] 8021q: adding VLAN 0 to HW filter on device bond11 [ 337.601655][ T6925] bond8: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 337.601933][ T6925] bond8: (slave veth5): making interface the new active one [ 337.633308][ T6925] bond8: active interface up! [ 337.751230][ T52] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 338.057639][T10344] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1049'. [ 338.057683][T10344] netlink: 'syz.3.1049': attribute type 1 has an invalid length. [ 338.175723][T10349] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 338.335519][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 338.612490][T10372] netlink: 'syz.0.1056': attribute type 4 has an invalid length. [ 339.355325][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 339.477516][ T6120] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 339.583613][T10415] sctp: [Deprecated]: syz.0.1069 (pid 10415) Use of int in maxseg socket option. [ 339.583613][T10415] Use struct sctp_assoc_value instead [ 339.759541][T10420] gretap2: entered allmulticast mode [ 340.156503][T10407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.237286][ T1388] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 340.495026][ T6120] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 340.495962][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 340.561741][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 340.888702][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'. [ 341.052458][T10467] bond1: (slave dummy0): Releasing active interface [ 341.052489][T10467] dummy0: left promiscuous mode [ 341.052661][T10467] dummy0: left allmulticast mode [ 341.052817][T10467] bond1: (slave veth3): making interface the new active one [ 341.060133][T10478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1083'. [ 341.060179][T10478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1083'. [ 341.093696][T10474] netlink: 'syz.3.1079': attribute type 10 has an invalid length. [ 341.093717][T10474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1079'. [ 341.119656][T10467] bridge2: port 1(dummy0) entered blocking state [ 341.121509][T10467] bridge2: port 1(dummy0) entered disabled state [ 341.121762][T10467] dummy0: entered allmulticast mode [ 341.123644][T10467] dummy0: entered promiscuous mode [ 341.151664][T10474] bridge2: port 1(dummy0) entered blocking state [ 341.151825][T10474] bridge2: port 1(dummy0) entered forwarding state [ 341.172453][T10474] dummy0: left allmulticast mode [ 341.174414][T10474] bridge2: port 1(dummy0) entered disabled state [ 341.302014][ T1430] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 341.302250][ T1430] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 341.468623][T10490] netlink: 'syz.0.1087': attribute type 4 has an invalid length. [ 341.468645][T10490] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1087'. [ 341.523031][T10490] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 341.679483][T10492] vlan3: entered promiscuous mode [ 341.679504][T10492] bridge0: entered promiscuous mode [ 342.234120][T10531] openvswitch: netlink: Flow key attr not present in new flow. [ 342.336085][ T5729] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 342.355883][T10540] __nla_validate_parse: 4 callbacks suppressed [ 342.355905][T10540] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1101'. [ 342.403047][T10541] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 342.456313][T10541] 8021q: adding VLAN 0 to HW filter on device bond13 [ 342.529946][T10548] sctp: [Deprecated]: syz.0.1103 (pid 10548) Use of int in max_burst socket option. [ 342.529946][T10548] Use struct sctp_assoc_value instead [ 342.714832][T10549] netlink: 'syz.2.1102': attribute type 1 has an invalid length. [ 343.380123][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 343.418120][T10571] vlan2: entered allmulticast mode [ 343.420706][T10571] batman_adv: batadv0: Adding interface: vlan2 [ 343.420722][T10571] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.420745][T10571] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 343.489501][T10581] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1111'. [ 343.489656][T10581] nbd: must specify a device to reconfigure [ 343.619116][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.619712][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.641216][T10575] bridge0: entered promiscuous mode [ 343.811362][T10461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.829138][T10575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.833884][T10575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.094384][T10594] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1113'. [ 344.121921][ T52] Bluetooth: hci1: ISO packet too small [ 344.205328][T10575] syzkaller0: entered promiscuous mode [ 344.239068][T10575] vsockmon0: entered promiscuous mode [ 344.241863][T10575] bond7: entered promiscuous mode [ 344.243567][T10575] bond8: entered promiscuous mode [ 344.243585][T10575] veth5: entered promiscuous mode [ 344.271232][T10575] veth4: entered promiscuous mode [ 344.294737][T10575] mac80211_hwsim hwsim15 wlan2: entered promiscuous mode [ 344.303862][T10575] bond10: entered promiscuous mode [ 344.326325][T10575] bond11: entered promiscuous mode [ 344.328891][T10575] bond12: entered promiscuous mode [ 344.329563][T10575] syztnl2: entered promiscuous mode [ 344.332313][T10575] sit1: entered promiscuous mode [ 344.332990][T10575] ip6gretap2: entered promiscuous mode [ 344.367949][T10575] bridge2: entered promiscuous mode [ 344.375429][T10575] bridge3: entered promiscuous mode [ 344.375583][T10575] dummy2: entered promiscuous mode [ 344.396040][T10575] bond13: entered promiscuous mode [ 344.397403][T10575] syzkaller1: entered promiscuous mode [ 344.397566][T10575] vlan2: entered promiscuous mode [ 344.399608][T10573] syzkaller1: left promiscuous mode [ 344.643325][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 344.646739][T10603] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1115'. [ 344.656470][ T1042] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.656513][ T1042] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.664841][ T1042] netdevsim netdevsim3 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.665675][ T1042] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.932696][T10614] syzkaller1: entered promiscuous mode [ 344.932720][T10614] syzkaller1: entered allmulticast mode [ 345.178242][T10635] ip_tables: iptables: counters copy to user failed while replacing table [ 345.308275][T10643] rxe_eth0 speed is unknown, defaulting to 1000 [ 345.467723][T10650] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 345.671935][T10643] wg0 speed is unknown, defaulting to 1000 [ 345.776714][T10663] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1134'. [ 345.776744][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 345.776758][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 345.848760][T10666] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1134'. [ 345.969516][T10664] syzkaller0: entered promiscuous mode [ 345.969540][T10664] syzkaller0: entered allmulticast mode [ 346.610903][T10689] macvlan3: entered promiscuous mode [ 346.610926][T10689] macvlan3: entered allmulticast mode [ 346.924094][T10700] netlink: 'syz.2.1142': attribute type 14 has an invalid length. [ 347.139738][T10706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.139766][T10706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.178379][T10706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.178402][T10706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.599640][T10718] tipc: New replicast peer: 172.20.20.187 [ 347.599910][T10718] tipc: Enabled bearer , priority 10 [ 347.643496][T10716] tipc: Enabled bearer , priority 0 [ 347.670476][T10726] __nla_validate_parse: 6 callbacks suppressed [ 347.670497][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 347.729432][T10714] tipc: Resetting bearer [ 347.729721][T10717] syzkaller0: entered promiscuous mode [ 347.729738][T10717] syzkaller0: entered allmulticast mode [ 347.733600][T10710] tipc: Resetting bearer [ 347.790776][T10710] tipc: Disabling bearer [ 348.068456][T10756] xt_CT: No such helper "netbios-ns" [ 348.088557][T10756] syzkaller1: entered promiscuous mode [ 348.088578][T10756] syzkaller1: entered allmulticast mode [ 348.274333][T10770] geneve1: Caught tx_queue_len zero misconfig [ 348.274359][T10770] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1153'. [ 348.478329][T10780] x_tables: duplicate underflow at hook 1 [ 349.240547][T10787] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1160'. [ 349.333669][T10793] netlink: 'syz.3.1161': attribute type 1 has an invalid length. [ 349.337191][T10793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1161'. [ 349.457584][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 350.874124][T10740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.022770][T10798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.089240][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 351.121415][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 351.121438][T10808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1166'. [ 351.183062][T10808] sctp: [Deprecated]: syz.3.1166 (pid 10808) Use of int in max_burst socket option deprecated. [ 351.183062][T10808] Use struct sctp_assoc_value instead [ 351.395069][T10817] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1168'. [ 351.647339][T10832] netlink: 'syz.1.1173': attribute type 1 has an invalid length. [ 351.942977][T10835] veth5: entered allmulticast mode [ 351.969520][T10835] bond6: (slave veth5): Enslaving as an active interface with a down link [ 351.990964][T10832] bond2: (slave veth0_to_bond): Releasing active interface [ 351.990993][T10832] veth0_to_bond: left promiscuous mode [ 352.019494][T10832] bond6: (slave veth0_to_bond): making interface the new active one [ 352.037799][T10832] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 352.216206][T10832] block nbd0: not configured, cannot reconfigure [ 352.307174][T10847] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1178'. [ 352.870440][T10866] syzkaller0: entered promiscuous mode [ 352.870463][T10866] syzkaller0: entered allmulticast mode [ 353.016849][T10872] openvswitch: netlink: IP tunnel dst address not specified [ 353.163421][T10874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.537538][T10888] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20000 [ 353.551367][T10888] netlink: 'syz.2.1191': attribute type 3 has an invalid length. [ 354.001437][T10913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1197'. [ 354.059531][T10913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1197'. [ 354.548086][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1202'. [ 354.548149][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'. [ 354.548163][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'. [ 354.548221][T10931] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1202'. [ 354.548234][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1202'. [ 354.983774][T10948] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 355.026434][T10950] lo speed is unknown, defaulting to 1000 [ 355.026497][T10950] lo speed is unknown, defaulting to 1000 [ 355.027198][T10950] lo speed is unknown, defaulting to 1000 [ 355.028247][T10950] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 355.028274][T10950] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 355.028307][T10950] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 355.105962][T10950] lo speed is unknown, defaulting to 1000 [ 355.107808][T10950] lo speed is unknown, defaulting to 1000 [ 355.109721][T10950] lo speed is unknown, defaulting to 1000 [ 355.111550][T10950] lo speed is unknown, defaulting to 1000 [ 355.113354][T10950] lo speed is unknown, defaulting to 1000 [ 355.511358][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 355.706106][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'. [ 355.770966][T10967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.936015][T10974] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1211'. [ 356.000345][T10974] netlink: zone id is out of range [ 356.000363][T10974] netlink: zone id is out of range [ 356.000371][T10974] netlink: zone id is out of range [ 356.000378][T10974] netlink: zone id is out of range [ 356.000385][T10974] netlink: zone id is out of range [ 356.000392][T10974] netlink: zone id is out of range [ 356.000398][T10974] netlink: zone id is out of range [ 356.286912][T10985] netlink: 'syz.0.1214': attribute type 7 has an invalid length. [ 356.286935][T10985] netlink: 'syz.0.1214': attribute type 8 has an invalid length. [ 356.292450][T10989] syzkaller0: entered promiscuous mode [ 356.292471][T10989] syzkaller0: entered allmulticast mode [ 356.771781][T11001] wg0: Caught tx_queue_len zero misconfig [ 356.824399][T11004] xt_nfacct: accounting object `syz' does not exist [ 356.955825][T11013] net_ratelimit: 1167 callbacks suppressed [ 356.955846][T11013] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 357.141465][T11016] bridge0: entered allmulticast mode [ 358.100858][T11038] rxe_eth0 speed is unknown, defaulting to 1000 [ 358.192765][T11057] pimreg: entered allmulticast mode [ 359.962214][T11067] __nla_validate_parse: 5 callbacks suppressed [ 359.962236][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'. [ 360.117626][T11069] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1233'. [ 360.142664][T11050] pimreg: left allmulticast mode [ 360.267439][T11038] wg0 speed is unknown, defaulting to 1000 [ 360.534638][T11081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.542960][T11081] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.590461][T11081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.712411][T11081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.721657][T11081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.750679][T11095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.751112][T11081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.751131][T11081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.851906][T11081] 8021q: adding VLAN 0 to HW filter on device €Â [ 360.852573][T11081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.856682][T11081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.863417][T11081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.909097][T11081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.921723][T11081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.925652][T11081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.939998][T11081] 8021q: adding VLAN 0 to HW filter on device bond4 [ 360.945108][T11081] 8021q: adding VLAN 0 to HW filter on device bond5 [ 360.955900][T11081] 8021q: adding VLAN 0 to HW filter on device bond6 [ 360.958773][T11081] 8021q: adding VLAN 0 to HW filter on device bond7 [ 360.962719][T11081] 8021q: adding VLAN 0 to HW filter on device bond8 [ 360.981688][T11081] 8021q: adding VLAN 0 to HW filter on device bond9 [ 360.985203][T11081] 8021q: adding VLAN 0 to HW filter on device bond10 [ 360.986100][T11081] 8021q: adding VLAN 0 to HW filter on device bond11 [ 360.990868][T11081] 8021q: adding VLAN 0 to HW filter on device bond12 [ 361.103108][T11081] 8021q: adding VLAN 0 to HW filter on device bond13 [ 361.104380][T11081] batman_adv: batadv0: Interface activated: vlan2 [ 361.157682][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.157746][ T12] bridge0: port 1(bridge_slave_0) entered listening state [ 361.164246][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.164345][ T12] bridge0: port 2(bridge_slave_1) entered listening state [ 361.288834][T11038] lo speed is unknown, defaulting to 1000 [ 361.367085][T10945] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.367114][T10945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.367203][T10945] netdevsim netdevsim3 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.367231][T10945] netdevsim netdevsim3 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.504627][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.504662][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.536343][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.536375][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.562603][ T6130] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 361.725030][ T1051] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 361.946141][ T6130] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 361.983342][T11113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1245'. [ 361.983388][T11113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1245'. [ 362.096438][T11120] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.252614][T11115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1243'. [ 362.309242][T11124] netlink: 'syz.3.1247': attribute type 10 has an invalid length. [ 362.332733][T11124] dummy0: left promiscuous mode [ 362.377643][T11124] dummy0: entered promiscuous mode [ 362.377842][T11124] dummy0: entered allmulticast mode [ 362.387456][T11124] team0: Port device dummy0 added [ 362.641187][T11120] rxe_eth0 speed is unknown, defaulting to 1000 [ 362.736460][ T1042] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 362.737425][ T1042] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 363.401839][T11162] openvswitch: netlink: Flow actions attr not present in new flow. [ 363.428049][T11120] wg0 speed is unknown, defaulting to 1000 [ 363.512477][T11170] syzkaller1: entered promiscuous mode [ 363.512524][T11170] syzkaller1: entered allmulticast mode [ 363.579317][T11171] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1256'. [ 363.617108][ T6130] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 363.792196][T11178] batman_adv: batadv0: Adding interface: syzkaller0 [ 363.792215][T11178] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.792243][T11178] batman_adv: batadv0: Interface activated: syzkaller0 [ 364.257022][T11120] lo speed is unknown, defaulting to 1000 [ 364.371118][T11177] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 364.489772][T11177] batman_adv: batadv0: Removing interface: syzkaller0 [ 364.740786][T11198] syzkaller0: entered promiscuous mode [ 364.740808][T11198] syzkaller0: entered allmulticast mode [ 366.146982][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 366.153121][T11224] sctp: [Deprecated]: syz.3.1270 (pid 11224) Use of int in maxseg socket option. [ 366.153121][T11224] Use struct sctp_assoc_value instead [ 366.181720][T11254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1276'. [ 366.181798][T11254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1276'. [ 366.206957][T11257] netlink: 'syz.2.1278': attribute type 4 has an invalid length. [ 366.213016][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 366.337685][T11264] tipc: Enabling of bearer rejected, failed to enable media [ 366.411288][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 366.414862][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 366.479506][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1283'. [ 366.537515][T11268] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1282'. [ 366.562157][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 366.725252][T11282] bond14: entered allmulticast mode [ 366.760262][T11282] 8021q: adding VLAN 0 to HW filter on device bond15 [ 366.761525][T11282] bond15: entered allmulticast mode [ 366.761835][T11282] bond14: (slave bond15): Enslaving as an active interface with an up link [ 366.837086][T11282] bond14 (unregistering): (slave bond15): Releasing backup interface [ 366.859565][T11282] bond15: left allmulticast mode [ 366.880374][T11282] bond14 (unregistering): Released all slaves [ 367.040944][T11306] syzkaller0: MTU not usable for tipc bearer [ 367.040984][T11306] tipc: Enabling of bearer rejected, failed to enable media [ 367.054246][T11308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1290'. [ 367.224344][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 367.260227][T11319] C: entered promiscuous mode [ 367.260413][T11319] tunl0: entered promiscuous mode [ 367.260578][T11319] gre0: entered promiscuous mode [ 367.260827][T11319] erspan0: entered promiscuous mode [ 367.260937][T11319] ip_vti0: entered promiscuous mode [ 367.261082][T11319] ip6_vti0: entered promiscuous mode [ 367.261189][T11319] sit0: entered promiscuous mode [ 367.261338][T11319] ip6tnl0: entered promiscuous mode [ 367.261452][T11319] ip6gre0: entered promiscuous mode [ 367.261588][T11319] syz_tun: entered promiscuous mode [ 367.273053][T11319] ip6gretap0: entered promiscuous mode [ 367.273197][T11319] vcan0: entered promiscuous mode [ 367.273345][T11319] bond0: entered promiscuous mode [ 367.273358][T11319] bond_slave_0: entered promiscuous mode [ 367.273601][T11319] bond_slave_1: entered promiscuous mode [ 367.273866][T11319] team0: entered promiscuous mode [ 367.273878][T11319] team_slave_0: entered promiscuous mode [ 367.274028][T11319] team_slave_1: entered promiscuous mode [ 367.274333][T11319] dummy0: entered promiscuous mode [ 367.274428][T11319] nlmon0: entered promiscuous mode [ 367.282622][T11319] veth0: entered promiscuous mode [ 367.282778][T11319] veth1: entered promiscuous mode [ 367.282917][T11319] wg0: entered promiscuous mode [ 367.283056][T11319] wg1: entered promiscuous mode [ 367.283218][T11319] wg2: entered promiscuous mode [ 367.283352][T11319] veth0_to_bridge: entered promiscuous mode [ 367.283507][T11319] bridge_slave_0: entered promiscuous mode [ 367.283638][T11319] veth1_to_bridge: entered promiscuous mode [ 367.283795][T11319] bridge_slave_1: entered promiscuous mode [ 367.283925][T11319] veth0_to_bond: entered promiscuous mode [ 367.294108][T11319] veth1_to_bond: entered promiscuous mode [ 367.294386][T11319] veth0_to_team: entered promiscuous mode [ 367.295528][T11319] veth0_to_batadv: entered promiscuous mode [ 367.295690][T11319] batadv_slave_0: entered promiscuous mode [ 367.300998][T11319] veth1_to_batadv: entered promiscuous mode [ 367.301148][T11319] batadv_slave_1: entered promiscuous mode [ 367.301281][T11319] xfrm0: entered promiscuous mode [ 367.301432][T11319] veth0_to_hsr: entered promiscuous mode [ 367.301713][T11319] veth1_to_hsr: entered promiscuous mode [ 367.301964][T11319] hsr0: entered promiscuous mode [ 367.302094][T11319] veth1_virt_wifi: entered promiscuous mode [ 367.302226][T11319] veth0_virt_wifi: entered promiscuous mode [ 367.302363][T11319] virt_wifi0: entered promiscuous mode [ 367.312145][T11319] vlan0: entered promiscuous mode [ 367.312465][T11319] vlan1: entered promiscuous mode [ 367.312770][T11319] macvlan0: entered promiscuous mode [ 367.312903][T11319] macvlan1: entered promiscuous mode [ 367.313040][T11319] ipvlan0: entered promiscuous mode [ 367.313171][T11319] ipvlan1: entered promiscuous mode [ 367.323583][T11319] macvtap0: entered promiscuous mode [ 367.323729][T11319] macsec0: entered promiscuous mode [ 367.323859][T11319] geneve0: entered promiscuous mode [ 367.323995][T11319] geneve1: entered promiscuous mode [ 367.324168][T11319] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 367.324285][T11319] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 367.324402][T11319] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 367.328985][T11319] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 367.356361][T11325] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 367.606860][T11319] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 367.607631][T11319] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 367.607796][T11319] sit1: entered promiscuous mode [ 367.607914][T11319] gretap1: entered promiscuous mode [ 367.608023][T11319] bond1: entered promiscuous mode [ 367.608138][T11319] gre1: entered promiscuous mode [ 367.608248][T11319] veth2: entered promiscuous mode [ 367.608386][T11319] veth3: entered promiscuous mode [ 367.609012][T11319] bond2: entered promiscuous mode [ 367.609714][T11319] bond_slave_1.1: entered promiscuous mode [ 367.610100][T11319] gtp0: entered promiscuous mode [ 367.612245][T11319] bond3: entered promiscuous mode [ 367.612986][T11319] vx0: entered promiscuous mode [ 367.613236][T11319] ip6tnl1: entered promiscuous mode [ 367.613345][T11319] bond4: entered promiscuous mode [ 367.613453][T11319] erspan1: entered promiscuous mode [ 367.613566][T11319] gretap2: entered promiscuous mode [ 367.636835][T11319] vxcan0: entered promiscuous mode [ 367.637017][T11319] vxcan1: entered promiscuous mode [ 367.710963][T11328] pimreg: entered allmulticast mode [ 367.832509][T11331] xt_hashlimit: size too large, truncated to 1048576 [ 368.140136][T11353] netlink: 'syz.2.1300': attribute type 4 has an invalid length. [ 368.630991][T11372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.641048][T11372] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 369.056809][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 369.139741][T11391] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 369.337934][T11391] bond7 (unregistering): Released all slaves [ 370.619849][T11475] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 370.687165][T11473] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 370.859876][T11481] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 371.026383][T11497] netlink: 'syz.4.1325': attribute type 1 has an invalid length. [ 371.277212][T11475] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 371.277826][T11489] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 371.906589][T11539] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 371.963227][T11539] bond10: entered promiscuous mode [ 371.963732][T11539] 8021q: adding VLAN 0 to HW filter on device bond10 [ 371.977336][T11542] __nla_validate_parse: 13 callbacks suppressed [ 371.977358][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 372.179746][T11551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1334'. [ 372.179834][T11551] geneve0: left promiscuous mode [ 372.354901][T11555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1335'. [ 372.605880][T11572] batadv0: entered promiscuous mode [ 372.609811][T11572] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 372.929845][T11590] netlink: 'syz.1.1339': attribute type 1 has an invalid length. [ 373.534757][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 374.203244][T11647] netlink: 'syz.2.1347': attribute type 1 has an invalid length. [ 374.203266][T11647] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1347'. [ 374.228663][T11647] batadv_slave_0: entered promiscuous mode [ 374.229539][T11642] batadv_slave_0: left promiscuous mode [ 374.736075][T11675] netlink: 'syz.4.1357': attribute type 1 has an invalid length. [ 374.784176][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1357'. [ 374.815692][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 374.850833][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1357'. [ 374.852973][T11674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 374.902933][T11680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1358'. [ 374.910122][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 374.923874][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 375.365647][T11711] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 375.372759][T11710] netlink: 'syz.3.1362': attribute type 1 has an invalid length. [ 375.429573][T11715] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1362'. [ 375.506301][T11710] 8021q: adding VLAN 0 to HW filter on device bond14 [ 375.885783][T11735] openvswitch: netlink: EtherType 0 is less than min 600 [ 375.970599][T11735] rxe_eth0 speed is unknown, defaulting to 1000 [ 376.028184][T11747] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.091688][T11748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 376.092072][T11748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 376.106641][T11748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 376.112749][T11748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 376.113103][T11748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 376.113414][T11748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 376.113709][T11748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 376.113985][T11748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 376.121320][T11748] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 376.607220][T11763] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.739942][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 376.740579][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 376.855439][T11773] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 376.873754][T11765] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 376.916984][T11765] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 376.926626][T11735] wg0 speed is unknown, defaulting to 1000 [ 376.989330][T11782] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 377.047845][T11782] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 377.080031][T11779] bond5: (slave bridge9): Enslaving as an active interface with an up link [ 377.346882][T11796] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 377.419253][T11804] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 377.442682][T11735] lo speed is unknown, defaulting to 1000 [ 377.619743][T11809] __nla_validate_parse: 4 callbacks suppressed [ 377.619764][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 377.854247][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 378.006996][T11824] ip6gretap1: entered allmulticast mode [ 378.027848][T11824] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 378.031294][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'. [ 378.134247][T11827] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1390'. [ 378.241119][T11831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'. [ 378.241259][T11831] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1391'. [ 378.662680][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.662739][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.253760][T11864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1398'. [ 379.267774][T11871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1403'. [ 379.267802][T11871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1403'. [ 379.267818][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1403'. [ 379.290313][ T6130] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 379.494884][ T6130] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 380.437610][T11875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.673646][T11925] netlink: 'syz.2.1413': attribute type 21 has an invalid length. [ 380.673736][T11925] netlink: 'syz.2.1413': attribute type 5 has an invalid length. [ 380.793589][T11929] ipvlan2: entered allmulticast mode [ 380.793643][T11929] syz_tun: entered allmulticast mode [ 381.077290][T11947] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 381.209518][T11947] 8021q: adding VLAN 0 to HW filter on device bond6 [ 381.622886][T11971] netlink: 'syz.1.1421': attribute type 1 has an invalid length. [ 381.683786][T11971] 8021q: adding VLAN 0 to HW filter on device bond7 [ 381.874197][T11983] netlink: 'syz.4.1425': attribute type 4 has an invalid length. [ 381.874370][T11983] netlink: 'syz.4.1425': attribute type 4 has an invalid length. [ 382.101587][T11995] 8021q: adding VLAN 0 to HW filter on device bond7 [ 382.727217][T12027] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.727251][T12027] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.193581][T12046] __nla_validate_parse: 15 callbacks suppressed [ 383.193603][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 383.193654][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 383.842062][T12073] ip6gretap3: entered allmulticast mode [ 383.863280][T12073] batman_adv: batadv0: Adding interface: ip6gretap3 [ 383.863300][T12073] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.867678][T12073] batman_adv: batadv0: Interface activated: ip6gretap3 [ 384.061703][ T5285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.388099][T12099] net_ratelimit: 59 callbacks suppressed [ 384.388121][T12099] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 384.571200][T12106] syzkaller0: left promiscuous mode [ 384.663179][T12110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1452'. [ 384.663202][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'. [ 384.691789][T12091] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 384.760383][T12119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1452'. [ 384.760415][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'. [ 384.815306][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 385.194899][ T5634] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 385.610586][T12167] syzkaller0: entered promiscuous mode [ 385.610609][T12167] syzkaller0: entered allmulticast mode [ 385.613685][T12167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1462'. [ 386.147245][T12192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1466'. [ 386.349893][T12182] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.350322][T12182] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.872354][T12182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.899474][T12182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.498016][T12182] batman_adv: batadv0: Interface deactivated: vlan2 [ 387.519785][T12182] vx0: entered promiscuous mode [ 387.522503][T12182] bond15: entered promiscuous mode [ 387.522648][T12182] macvlan3: entered promiscuous mode [ 387.536563][T12182] bond14: entered promiscuous mode [ 387.537371][T12182] bond16: entered promiscuous mode [ 387.537528][T12182] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 387.542234][T12182] ip6gretap3: entered promiscuous mode [ 387.570286][ T12] netdevsim netdevsim3 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.570320][ T12] netdevsim netdevsim3 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.676190][ T140] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.676224][ T140] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.677706][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.677732][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.952578][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1470'. [ 388.507028][T12260] bond17: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 388.508913][T12260] bond17 (unregistering): Released all slaves [ 388.531922][T12160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.671726][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.671748][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.866727][T12281] netlink: 'syz.0.1478': attribute type 10 has an invalid length. [ 388.866751][T12281] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1478'. [ 388.866888][T12281] dummy0: entered promiscuous mode [ 388.867721][T12281] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 388.943471][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 389.508175][T12306] netlink: 'syz.4.1486': attribute type 11 has an invalid length. [ 389.508977][T12304] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1485'. [ 389.508999][T12304] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1485'. [ 389.509013][T12304] netlink: 'syz.3.1485': attribute type 5 has an invalid length. [ 389.509023][T12304] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1485'. [ 389.584193][T12313] netlink: 'syz.4.1486': attribute type 11 has an invalid length. [ 389.792902][T12321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1488'. [ 389.806233][T12324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1488'. [ 390.017357][T12331] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1491'. [ 390.049675][T12331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.071319][T12331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.077189][T12331] bond0 (unregistering): Released all slaves [ 390.151085][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 390.482188][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 390.506822][T12349] vcan1: entered promiscuous mode [ 390.506844][T12349] vcan1: entered allmulticast mode [ 390.732022][T12345] ip6gre1: entered promiscuous mode [ 390.732044][T12345] ip6gre1: entered allmulticast mode [ 390.903127][T12358] ip6tnl0: Caught tx_queue_len zero misconfig [ 391.531234][ T1430] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.531446][ T1430] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.556693][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.730013][T12406] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 391.764863][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.415172][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.287771][ T5742] wg0 speed is unknown, defaulting to 1000 [ 393.630795][T12489] netlink: 'syz.4.1523': attribute type 32 has an invalid length. [ 393.652200][T12489] syzkaller0: left promiscuous mode [ 393.652223][T12489] syzkaller0: left allmulticast mode [ 393.726108][T12493] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 394.416087][T12518] __nla_validate_parse: 72 callbacks suppressed [ 394.416108][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 394.416121][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 394.416144][T12518] netlink: 'syz.2.1528': attribute type 12 has an invalid length. [ 394.416155][T12518] netlink: 'syz.2.1528': attribute type 14 has an invalid length. [ 395.614975][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 396.693892][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 396.693913][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 396.693930][T12518] netlink: 'syz.2.1528': attribute type 12 has an invalid length. [ 396.693940][T12518] netlink: 'syz.2.1528': attribute type 14 has an invalid length. [ 396.778480][T12535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1530'. [ 396.927804][T12535] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1530'. [ 396.945351][T12540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1529'. [ 396.945699][T12540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'. [ 397.004780][T12550] ip_tables: iptables: counters copy to user failed while replacing table [ 397.275727][ T1487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.275749][ T1487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.598364][T12577] netlink: 'syz.1.1538': attribute type 11 has an invalid length. [ 398.374246][T12601] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 398.392216][T12601] bond8 (unregistering): Released all slaves [ 398.394910][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 398.483202][T12610] gretap2: entered promiscuous mode [ 399.262233][T12665] rxe_eth0 speed is unknown, defaulting to 1000 [ 399.815376][T12694] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1559'. [ 399.837177][ T5634] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 399.875692][T12694] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 399.889110][T12665] wg0 speed is unknown, defaulting to 1000 [ 400.049488][T12702] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 400.240881][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 400.572597][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'. [ 400.594108][T12665] lo speed is unknown, defaulting to 1000 [ 400.732284][T12725] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 400.758432][T12725] bond11 (unregistering): Released all slaves [ 401.125054][T12735] batman_adv: batadv0: Adding interface: gretap2 [ 401.125604][T12735] batman_adv: batadv0: Interface activated: gretap2 [ 401.156999][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1570'. [ 401.192486][T12738] team0: entered allmulticast mode [ 401.192509][T12738] team_slave_0: entered allmulticast mode [ 401.192524][T12738] team_slave_1: entered allmulticast mode [ 401.193466][T12738] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.193904][T12738] team0: Cannot enslave team device to itself [ 401.375653][T12744] netlink: 'syz.1.1571': attribute type 4 has an invalid length. [ 401.567371][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 402.886271][T12762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.097298][T12775] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 403.097324][T12775] netlink: 'syz.4.1580': attribute type 2 has an invalid length. [ 403.277757][T12788] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1577'. [ 403.321756][T12788] gretap0: entered promiscuous mode [ 403.363669][T12790] ipvlan2: entered allmulticast mode [ 403.371696][T12790] batman_adv: batadv0: Adding interface: ipvlan2 [ 403.371713][T12790] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.371741][T12790] batman_adv: batadv0: Interface activated: ipvlan2 [ 403.581016][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1585'. [ 403.591253][T12803] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1586'. [ 404.090578][T12824] geneve4: entered promiscuous mode [ 404.185512][T12829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1595'. [ 404.256825][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.365441][T12831] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 404.568529][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'. [ 404.687071][T12849] netlink: 'syz.3.1599': attribute type 2 has an invalid length. [ 404.692667][T12849] openvswitch: netlink: IP tunnel dst address not specified [ 405.363255][T12879] IPVS: set_ctl: invalid protocol: 136 10.1.1.1:20004 [ 405.421193][T12878] dummy0: left promiscuous mode [ 405.451791][T12878] bond_slave_0: left promiscuous mode [ 405.497615][T12878] bond3: left promiscuous mode [ 405.520397][T12878] batman_adv: batadv0: Interface activated: ipvlan2 [ 405.547203][T12878] 8021q: adding VLAN 0 to HW filter on device bond5 [ 405.553194][T12878] gretap2: left promiscuous mode [ 405.568263][T12878] geneve4: left promiscuous mode [ 405.992316][T12895] netlink: 'syz.4.1613': attribute type 2 has an invalid length. [ 405.992337][T12895] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1613'. [ 406.094297][T12901] netlink: 'syz.4.1615': attribute type 21 has an invalid length. [ 406.096693][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 406.111015][T12899] ipvlan2: entered allmulticast mode [ 406.111042][T12899] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 406.241472][T12901] netlink: 'syz.4.1615': attribute type 6 has an invalid length. [ 406.241507][T12901] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1615'. [ 406.387163][T12910] bridge0: port 5(netdevsim0) entered blocking state [ 406.387253][T12910] bridge0: port 5(netdevsim0) entered disabled state [ 406.393171][T12910] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 406.596048][T12917] rxe_eth0 speed is unknown, defaulting to 1000 [ 406.714663][T12922] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.844210][T12922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1621'. [ 407.164091][T12933] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1624'. [ 407.230028][T12932] netlink: 'syz.0.1625': attribute type 1 has an invalid length. [ 407.230052][T12932] netlink: 'syz.0.1625': attribute type 2 has an invalid length. [ 407.397914][T12944] netlink: 'syz.3.1627': attribute type 10 has an invalid length. [ 407.397937][T12944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1627'. [ 407.631254][T12918] rxe_eth0 speed is unknown, defaulting to 1000 [ 407.636459][T12917] wg0 speed is unknown, defaulting to 1000 [ 407.759735][T12953] netlink: 'syz.3.1630': attribute type 2 has an invalid length. [ 407.759772][T12953] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1630'. [ 407.871288][T12953] netlink: 'syz.3.1630': attribute type 10 has an invalid length. [ 407.872233][T12953] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 407.963919][T12959] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1631'. [ 408.143422][T12963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1633'. [ 408.143449][T12963] openvswitch: netlink: Invalid VLAN frame [ 408.196721][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1633'. [ 408.378261][T12917] lo speed is unknown, defaulting to 1000 [ 408.428423][T12949] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 408.444314][T12918] wg0 speed is unknown, defaulting to 1000 [ 408.770422][T12971] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 408.790044][T12971] bond8 (unregistering): Released all slaves [ 408.980122][T12918] lo speed is unknown, defaulting to 1000 [ 409.350547][T12980] netlink: 'syz.0.1638': attribute type 2 has an invalid length. [ 409.413522][T12983] netlink: 'syz.3.1639': attribute type 11 has an invalid length. [ 409.575940][T12988] Cannot find add_set index 632 as target [ 410.035348][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.035390][ T12] netdevsim netdevsim3 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.035419][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.307707][T12999] neighbour: arp_cache: neighbor table overflow! [ 410.695934][T13007] 8021q: adding VLAN 0 to HW filter on device bond8 [ 411.016332][T13022] TC_ACT_REPEAT abuse ? [ 411.714629][T13051] __nla_validate_parse: 11 callbacks suppressed [ 411.714650][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 411.943287][T13057] ip_vti0: left promiscuous mode [ 411.943311][T13057] ip_vti0: left allmulticast mode [ 411.955836][T13058] ip_tables: iptables: counters copy to user failed while replacing table [ 412.226089][T13063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1656'. [ 413.887803][T13106] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1665'. [ 413.979164][T13107] validate_nla: 2 callbacks suppressed [ 413.979186][T13107] netlink: 'syz.4.1664': attribute type 1 has an invalid length. [ 414.395776][T13117] netlink: 'syz.3.1667': attribute type 4 has an invalid length. [ 414.397074][T13117] netlink: 'syz.3.1667': attribute type 4 has an invalid length. [ 414.464084][T13117] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 414.677769][T13126] netlink: 'syz.1.1669': attribute type 11 has an invalid length. [ 415.096568][T13121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.417768][T13149] tipc: Started in network mode [ 415.417800][T13149] tipc: Node identity 7f000001, cluster identity 4711 [ 415.418036][T13149] tipc: New replicast peer: 127.0.0.1 [ 415.418597][T13149] tipc: Enabled bearer , priority 10 [ 416.376502][T13189] ip_tables: iptables: counters copy to user failed while replacing table [ 416.448920][T13192] x_tables: duplicate entry at hook 1 [ 416.534707][ T5719] tipc: Node number set to 2130706433 [ 416.709786][T13192] netlink: 'syz.0.1683': attribute type 1 has an invalid length. [ 417.114011][T13207] netlink: 'syz.2.1688': attribute type 4 has an invalid length. [ 417.158796][T13207] ip6tnl5: entered allmulticast mode [ 417.160705][ T140] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 417.162137][ T140] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 417.162808][T13207] netlink: 'syz.2.1688': attribute type 4 has an invalid length. [ 417.197203][ T6128] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 417.234824][ T6130] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 417.855203][ T6128] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 417.916206][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1696'. [ 418.663931][T13221] bond_slave_0: left allmulticast mode [ 418.783395][T13221] veth1_to_team: left allmulticast mode [ 418.844447][T13221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.894443][T13221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.380586][T13221] bridge2: left allmulticast mode [ 419.455716][T13221] sit1: left allmulticast mode [ 419.498803][T13221] bond2: left allmulticast mode [ 419.502851][T13221] erspan1: left allmulticast mode [ 419.531174][T13221] xfrm1: left allmulticast mode [ 419.566718][T13221] gretap1: left allmulticast mode [ 419.570440][T13221] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 419.588452][T13221] bridge0: left allmulticast mode [ 419.787796][ T1042] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.787832][ T1042] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.792368][ T140] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.792405][ T140] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.792444][ T140] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.792466][ T140] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.792499][ T140] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.792521][ T140] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.270983][T13284] sctp: [Deprecated]: syz.1.1702 (pid 13284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.270983][T13284] Use struct sctp_sack_info instead [ 420.372404][T13289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1705'. [ 420.436981][T13291] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1707'. [ 420.449179][T13291] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1707'. [ 420.568772][T13296] syzkaller0: entered promiscuous mode [ 420.568796][T13296] syzkaller0: entered allmulticast mode [ 420.654386][T13294] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1706'. [ 420.654421][T13294] netlink: 'syz.1.1706': attribute type 9 has an invalid length. [ 420.654428][T13294] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1706'. [ 420.654434][T13294] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1706'. [ 420.706008][T13303] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 420.706060][T13303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.814773][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 420.894774][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 421.556908][T13347] netlink: 378 bytes leftover after parsing attributes in process `syz.4.1721'. [ 421.645207][T13350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1722'. [ 421.715147][T13357] netlink: 'syz.2.1722': attribute type 1 has an invalid length. [ 421.797177][T13365] ip_tables: iptables: counters copy to user failed while replacing table [ 421.831928][T13357] 8021q: adding VLAN 0 to HW filter on device bond11 [ 422.058802][T13363] bond11: (slave veth13): Enslaving as an active interface with a down link [ 422.137080][T13350] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 422.162592][T13350] bond11: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 422.489530][T13369] udevd[13369]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 422.521159][T13369] udevd[13369]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 422.661749][T13385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1730'. [ 422.919342][T13406] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 423.031018][T13411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1734'. [ 423.038844][T13407] netlink: 'syz.0.1734': attribute type 1 has an invalid length. [ 423.381161][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1739'. [ 423.537720][T13437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1743'. [ 423.762816][T13449] bridge0: entered promiscuous mode [ 423.942650][T13471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1752'. [ 424.021508][ T31] audit: type=1107 audit(1792128053.457:3): pid=13476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 424.158110][T13483] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1752'. [ 424.162757][T13487] TC_ACT_REPEAT abuse ? [ 424.374167][T13493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1757'. [ 424.374192][T13493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1757'. [ 424.473243][T13505] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 424.473472][T13504] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 424.577562][T13508] netlink: 'syz.1.1759': attribute type 1 has an invalid length. [ 424.616438][T13508] 8021q: adding VLAN 0 to HW filter on device bond8 [ 427.370980][T13493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.742702][T13540] netlink: 'syz.0.1765': attribute type 32 has an invalid length. [ 427.742724][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 427.937990][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 428.350698][T13540] bond9: option coupled_control: invalid value (10) [ 428.360826][T13540] bond9 (unregistering): Released all slaves [ 428.437522][T13550] netlink: 'syz.2.1769': attribute type 1 has an invalid length. [ 428.437546][T13550] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1769'. [ 428.630664][ T6130] bridge0: entered promiscuous mode [ 428.799454][T13569] ipvlan2: entered allmulticast mode [ 428.799477][T13569] macvlan1: entered allmulticast mode [ 428.799489][T13569] veth1_vlan: entered allmulticast mode [ 428.951889][T13577] ipvlan3: entered allmulticast mode [ 428.996536][T13583] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1779'. [ 429.505554][T13610] syzkaller0: entered promiscuous mode [ 429.505577][T13610] syzkaller0: entered allmulticast mode [ 429.510603][T13610] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.1784'. [ 429.863750][T13637] openvswitch: netlink: Multiple metadata blocks provided [ 429.988273][T13638] ipt_REJECT: TCP_RESET invalid for non-tcp [ 430.732819][T13651] syzkaller0: entered promiscuous mode [ 430.732835][T13651] syzkaller0: entered allmulticast mode [ 432.321937][T13600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.535479][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 432.599438][T13656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.670932][T13666] syzkaller1: entered promiscuous mode [ 432.670954][T13666] syzkaller1: entered allmulticast mode [ 432.836422][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'. [ 432.932782][T13683] veth1_to_team: entered promiscuous mode [ 432.934212][T13683] veth1_to_team: left promiscuous mode [ 433.004280][T13685] bridge10: entered allmulticast mode [ 433.109925][T13692] bond12: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 433.148254][T13692] bond12 (unregistering): Released all slaves [ 433.414747][T13717] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1813'. [ 433.585376][T13727] xt_cgroup: no path or classid specified [ 433.741003][T13738] FAULT_INJECTION: forcing a failure. [ 433.741003][T13738] name failslab, interval 1, probability 0, space 0, times 0 [ 433.741058][T13738] CPU: 0 UID: 0 PID: 13738 Comm: syz.2.1820 Not tainted syzkaller #0 PREEMPT(full) [ 433.741078][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 433.741096][T13738] Call Trace: [ 433.741103][T13738] [ 433.741115][T13738] dump_stack_lvl+0xe8/0x150 [ 433.741145][T13738] should_fail_ex+0x410/0x560 [ 433.741175][T13738] should_failslab+0xa8/0x100 [ 433.741200][T13738] ? skb_clone+0x212/0x3a0 [ 433.741222][T13738] kmem_cache_alloc_noprof+0xa1/0x600 [ 433.741243][T13738] ? skb_clone+0x212/0x3a0 [ 433.741270][T13738] skb_clone+0x212/0x3a0 [ 433.741296][T13738] __netlink_deliver_tap+0x355/0x6e0 [ 433.741331][T13738] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.741357][T13738] netlink_deliver_tap+0x19c/0x1b0 [ 433.741383][T13738] netlink_sendskb+0x68/0x140 [ 433.741407][T13738] netlink_rcv_skb+0x2a4/0x4a0 [ 433.741429][T13738] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 433.741449][T13738] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.741484][T13738] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.741505][T13738] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.741530][T13738] xfrm_netlink_rcv+0x79/0x90 [ 433.741549][T13738] netlink_unicast+0x7bd/0x940 [ 433.741582][T13738] netlink_sendmsg+0x813/0xb40 [ 433.741616][T13738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.741649][T13738] ? apparmor_socket_sendmsg+0x98/0x360 [ 433.741676][T13738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.741699][T13738] sock_sendmsg_nosec+0x14e/0x190 [ 433.741734][T13738] ____sys_sendmsg+0x54e/0x850 [ 433.741760][T13738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.741789][T13738] ? import_iovec+0x73/0xa0 [ 433.741819][T13738] ___sys_sendmsg+0x2a5/0x360 [ 433.741838][T13738] ? __lock_acquire+0x747/0x2de0 [ 433.741862][T13738] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.741919][T13738] ? __fget_files+0x2a/0x420 [ 433.741945][T13738] ? __fget_files+0x3a2/0x420 [ 433.741982][T13738] __x64_sys_sendmsg+0x1b1/0x290 [ 433.742005][T13738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.742047][T13738] do_syscall_64+0x166/0x520 [ 433.742071][T13738] ? trace_irq_disable+0x3b/0x140 [ 433.742090][T13738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.742109][T13738] ? clear_bhb_loop+0x70/0xc0 [ 433.742132][T13738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.742151][T13738] RIP: 0033:0x7f7f99d9e559 [ 433.742168][T13738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.742184][T13738] RSP: 002b:00007f7f9ac5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.742205][T13738] RAX: ffffffffffffffda RBX: 00007f7f9a025fa0 RCX: 00007f7f99d9e559 [ 433.742218][T13738] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 433.742229][T13738] RBP: 00007f7f9ac5b090 R08: 0000000000000000 R09: 0000000000000000 [ 433.742241][T13738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.742252][T13738] R13: 00007f7f9a026038 R14: 00007f7f9a025fa0 R15: 00007ffc74896968 [ 433.742284][T13738] [ 433.811498][T13736] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.1818'. [ 433.811730][T13736] 0ªX¹¦Dö»: renamed from gretap0 [ 433.827254][T13742] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1819'. [ 433.889635][T13736] 0ªX¹¦Dö»: left promiscuous mode [ 434.450670][T13767] C: entered allmulticast mode [ 434.473896][T13767] ip_tables: iptables: counters copy to user failed while replacing table [ 434.677631][T13763] C: left allmulticast mode [ 434.975945][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 435.023159][T13802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1836'. [ 435.254052][T13812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1839'. [ 435.320896][T13812] 8021q: adding VLAN 0 to HW filter on device bond6 [ 435.376101][T13814] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 435.386686][ T1430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.387368][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.387402][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.397330][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.397539][T13812] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1839'. [ 435.432028][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 435.763163][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 435.971432][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 435.997725][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1845'. [ 436.164750][T13855] netlink: 'syz.2.1847': attribute type 2 has an invalid length. [ 436.283801][T13847] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1848'. [ 436.907375][T13892] netlink: 'syz.1.1856': attribute type 1 has an invalid length. [ 436.927992][T13895] netlink: 'syz.0.1860': attribute type 1 has an invalid length. [ 436.948221][T13892] bond9: entered promiscuous mode [ 436.948793][T13892] 8021q: adding VLAN 0 to HW filter on device bond9 [ 437.011638][T13889] syzkaller0: entered promiscuous mode [ 437.011665][T13889] syzkaller0: entered allmulticast mode [ 437.054183][T13895] 8021q: adding VLAN 0 to HW filter on device bond9 [ 437.134474][T13903] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 437.155471][T13903] bond9: (slave batadv1): making interface the new active one [ 437.156808][T13903] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 437.210784][T13895] bond9 (unregistering): (slave batadv1): Releasing active interface [ 437.226326][T13895] bond9 (unregistering): Released all slaves [ 437.293881][T13902] 8021q: adding VLAN 0 to HW filter on device bond9 [ 437.294233][T13902] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 437.294253][T13902] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 437.346791][T13902] bond9: (slave wireguard0): making interface the new active one [ 437.346818][T13902] wireguard0: entered promiscuous mode [ 437.350491][T13902] bond9: (slave wireguard0): Enslaving as an active interface with an up link [ 437.462833][T13910] netlink: 'syz.4.1864': attribute type 1 has an invalid length. [ 437.463425][T13911] netlink: 'syz.4.1864': attribute type 1 has an invalid length. [ 440.115017][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.115073][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.791127][T13948] __nla_validate_parse: 10 callbacks suppressed [ 440.791146][T13948] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1873'. [ 440.978084][T13956] bridge0: port 6(syz_tun) entered blocking state [ 440.978924][T13956] bridge0: port 6(syz_tun) entered disabled state [ 440.979102][T13956] syz_tun: entered allmulticast mode [ 441.003658][T13956] syz_tun: entered promiscuous mode [ 441.012571][T13956] bridge0: port 6(syz_tun) entered blocking state [ 441.012713][T13956] bridge0: port 6(syz_tun) entered forwarding state [ 441.047643][T13959] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.093542][T13964] raw_sendmsg: syz.2.1880 forgot to set AF_INET. Fix it! [ 441.244884][T13969] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 441.245087][T13969] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 441.246074][T13969] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 441.246203][T13969] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 441.246313][T13969] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 441.246422][T13969] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 441.246532][T13969] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 441.246636][T13969] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 441.246741][T13969] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 441.246845][T13969] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 441.353009][T13969] netlink: NAT attribute has 8 unknown bytes [ 441.353041][T13969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.359685][T13968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1881'. [ 441.474951][T13975] erspan0: left promiscuous mode [ 441.504928][T13980] x_tables: duplicate underflow at hook 2 [ 442.325836][T14028] syzkaller1: entered promiscuous mode [ 442.325858][T14028] syzkaller1: entered allmulticast mode [ 442.654712][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 442.812694][T14053] xt_NFQUEUE: number of total queues is 0 [ 442.971866][T14056] netlink: 1040 bytes leftover after parsing attributes in process `syz.3.1901'. [ 443.245956][T14078] netlink: 'syz.0.1907': attribute type 276 has an invalid length. [ 443.431783][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'. [ 443.735934][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1911'. [ 443.890664][T14088] bond12: entered allmulticast mode [ 444.483109][T14099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1914'. [ 444.502520][T14099] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 444.503136][T14099] x_tables: duplicate underflow at hook 1 [ 444.644209][T14110] bond13: Removing last arp target with arp_interval on [ 444.760181][T14116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1920'. [ 444.778844][ T6130] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.811540][T14114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1919'. [ 444.824771][ T6130] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.992379][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 445.132045][T14137] ip_tables: iptables: counters copy to user failed while replacing table [ 445.147847][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1925'. [ 445.149664][T14137] netlink: 'syz.1.1925': attribute type 3 has an invalid length. [ 445.350864][T14155] x_tables: duplicate underflow at hook 3 [ 445.389187][T14155] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 445.534131][T14166] tipc: Started in network mode [ 445.534176][T14166] tipc: Node identity 428adb1e0a01, cluster identity 4711 [ 445.534287][T14166] tipc: Enabled bearer , priority 0 [ 445.538695][T14170] syzkaller0: entered promiscuous mode [ 445.538717][T14170] syzkaller0: entered allmulticast mode [ 445.546248][T14170] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 445.612517][T14166] tipc: Resetting bearer [ 445.626160][T14166] hsr0: entered allmulticast mode [ 445.626183][T14166] hsr_slave_0: entered allmulticast mode [ 445.626198][T14166] hsr_slave_1: entered allmulticast mode [ 445.630421][T14166] hsr_slave_0: left promiscuous mode [ 445.633678][T14166] hsr_slave_1: left promiscuous mode [ 445.674208][T14166] hsr0 (unregistering): left allmulticast mode [ 445.706312][ T6130] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 445.739889][T14179] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 445.764037][T14165] tipc: Resetting bearer [ 445.792302][T14165] tipc: Disabling bearer [ 445.806745][T14174] __nla_validate_parse: 3 callbacks suppressed [ 445.806766][T14174] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1935'. [ 445.807099][T14174] netlink: 'syz.2.1935': attribute type 10 has an invalid length. [ 446.239220][T14198] batadv_slave_1: entered promiscuous mode [ 446.276249][T14196] batadv_slave_1: left promiscuous mode [ 446.371563][T14207] netlink: 'syz.2.1945': attribute type 2 has an invalid length. [ 446.625029][T14213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1946'. [ 446.627901][T14213] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1946'. [ 446.724995][T14228] ip_tables: iptables: counters copy to user failed while replacing table [ 446.853964][T14230] syzkaller0: entered promiscuous mode [ 446.853986][T14230] syzkaller0: entered allmulticast mode [ 447.133809][T14235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1951'. [ 447.237274][T14247] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 447.265292][T14247] syzkaller1: entered promiscuous mode [ 447.265315][T14247] syzkaller1: entered allmulticast mode [ 447.687510][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1957'. [ 448.474359][T14306] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1967'. [ 448.851018][T14308] bond0: (slave c@0Ù): Releasing backup interface [ 448.873878][T14308] team0: Port device team_slave_0 removed [ 448.884676][T14308] team0: Port device team_slave_1 removed [ 448.886423][T14308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.893863][T14308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.905431][T14308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 448.973407][T14315] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 449.035390][T14323] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.069265][T14323] bridge_slave_0: left allmulticast mode [ 449.069292][T14323] bridge_slave_0: left promiscuous mode [ 449.069512][T14323] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.179286][T14318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1968'. [ 449.190093][T14315] bridge6: entered promiscuous mode [ 449.190151][T14315] bridge6: entered allmulticast mode [ 449.417358][T14344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1976'. [ 449.423250][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 449.869121][T14383] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 449.873180][T14383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.891968][T14383] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 449.892749][T14384] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 450.058958][T14385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1985'. [ 450.262810][T14388] ip6gretap0: entered allmulticast mode [ 450.284864][T14388] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 450.284895][T14388] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 450.338866][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 450.403014][ T1051] smbdirect: ib_dev[syz0] removed [ 450.475956][T14401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 450.543716][T14390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.550213][T14390] bond_slave_0: left allmulticast mode [ 450.666784][T14390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.686859][T14390] bond_slave_1: left allmulticast mode [ 450.728615][T14390] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 450.733120][T14390] ip6gretap0: left allmulticast mode [ 450.764939][T14390] bond0 (unregistering): Released all slaves [ 451.075771][T14422] __nla_validate_parse: 1 callbacks suppressed [ 451.075792][T14422] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1995'. [ 451.713104][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'. [ 451.728538][T14458] ip6tnl2: entered allmulticast mode [ 451.752366][T14458] ip6erspan0: entered allmulticast mode [ 451.767520][T14462] x_tables: duplicate entry at hook 2 [ 451.896927][T14469] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2008'. [ 451.904173][T14469] IPVS: set_ctl: invalid protocol: 24 100.1.1.1:21 [ 451.913096][T14469] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2008'. [ 451.937761][ T5634] Bluetooth: hci1: unexpected event for opcode 0x203d [ 452.015933][T14472] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2009'. [ 452.016674][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2009'. [ 452.257819][T14476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.468530][T14476] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 452.561615][T14497] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2015'. [ 452.643716][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2018'. [ 452.643811][T14502] bridge_slave_1: Caught tx_queue_len zero misconfig [ 452.734339][T14495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2017'. [ 452.744035][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.744304][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.766260][ T6130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.767750][T14508] ip_tables: iptables: counters copy to user failed while replacing table [ 452.810615][T14514] netlink: 'syz.2.2022': attribute type 1 has an invalid length. [ 452.866300][T14517] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2021'. [ 452.943542][T14514] 8021q: adding VLAN 0 to HW filter on device bond14 [ 453.017044][T14515] 8021q: adding VLAN 0 to HW filter on device bond14 [ 453.017397][T14515] bond14: (slave gre2): The slave device specified does not support setting the MAC address [ 453.019233][T14515] bond14: (slave gre2): Error -95 calling set_mac_address [ 453.125341][T14524] netlink: 'syz.3.2024': attribute type 11 has an invalid length. [ 453.188611][T14530] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 453.610187][T14543] sctp: [Deprecated]: syz.1.2026 (pid 14543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.610187][T14543] Use struct sctp_sack_info instead [ 453.788936][T14514] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 453.795969][T14526] bond14 (unregistering): Released all slaves [ 453.944416][T14554] syzkaller0: entered promiscuous mode [ 453.944439][T14554] syzkaller0: entered allmulticast mode [ 454.041951][T14563] netlink: 'syz.0.2032': attribute type 21 has an invalid length. [ 454.083880][T14567] netlink: 'syz.0.2032': attribute type 21 has an invalid length. [ 454.356143][T14586] syzkaller0: entered promiscuous mode [ 454.356165][T14586] syzkaller0: entered allmulticast mode [ 454.406175][T14586] tipc: Enabled bearer , priority 0 [ 454.427980][T14586] tipc: Resetting bearer [ 454.459774][T14585] tipc: Resetting bearer [ 454.472752][T14533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.573050][T14585] tipc: Disabling bearer [ 454.701121][T14582] RDS: rds_bind could not find a transport for ::ffff:172.20.20.10, load rds_tcp or rds_rdma? [ 454.750312][T14589] lo: entered promiscuous mode [ 454.750337][T14589] lo: entered allmulticast mode [ 454.750963][T14589] bond0: entered promiscuous mode [ 454.750983][T14589] bond0: entered allmulticast mode [ 454.751281][T14589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.761321][T14589] dummy0: entered promiscuous mode [ 454.761343][T14589] dummy0: entered allmulticast mode [ 454.761927][T14589] eql: entered promiscuous mode [ 454.761942][T14589] eql: entered allmulticast mode [ 454.762140][T14589] ifb0: entered promiscuous mode [ 454.762152][T14589] ifb0: entered allmulticast mode [ 454.762474][T14589] ifb1: entered promiscuous mode [ 454.762486][T14589] ifb1: entered allmulticast mode [ 454.769007][T14597] netlink: 'syz.3.2039': attribute type 10 has an invalid length. [ 454.777617][T14589] virtio_net virtio1 eth0: entered promiscuous mode [ 454.777641][T14589] virtio_net virtio1 eth0: entered allmulticast mode [ 454.787722][T14589] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 454.787749][T14589] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 454.788680][T14589] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 454.788703][T14589] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 454.796706][T14589] hwsim0: entered promiscuous mode [ 454.796725][T14589] hwsim0: entered allmulticast mode [ 454.797272][T14589] ieee802154 phy0 wpan0: entered promiscuous mode [ 454.797289][T14589] ieee802154 phy0 wpan0: entered allmulticast mode [ 454.797503][T14589] ieee802154 phy1 wpan1: entered promiscuous mode [ 454.797517][T14589] ieee802154 phy1 wpan1: entered allmulticast mode [ 454.803088][T14589] teql0: entered promiscuous mode [ 454.803108][T14589] teql0: entered allmulticast mode [ 454.803122][T14589] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 454.815015][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.864762][ C0] neighbour: arp_cache: neighbor table overflow! [ 454.887224][T14597] team0 (unregistering): Port device team_slave_0 removed [ 454.898201][T14597] team0 (unregistering): Port device team_slave_1 removed [ 454.898578][T14597] dummy0: left promiscuous mode [ 454.898750][T14597] dummy0: left allmulticast mode [ 454.911733][T14597] team0 (unregistering): Port device dummy0 removed [ 455.538612][ T6130] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 455.558609][ T6130] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 455.616631][ T6120] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.617232][ T6120] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 455.635939][ T6120] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 455.694741][ C0] neighbour: arp_cache: neighbor table overflow! [ 455.899892][T14644] netlink: 'syz.0.2048': attribute type 13 has an invalid length. [ 456.090209][ T6130] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 456.198022][ T6130] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.226248][ T6130] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 456.311083][T14676] v: renamed from gre0 (while UP) [ 456.319785][T14676] v: entered allmulticast mode [ 456.329862][T14676] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 456.512600][T14689] __nla_validate_parse: 7 callbacks suppressed [ 456.512619][T14689] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2054'. [ 456.536621][T14687] netlink: 47 bytes leftover after parsing attributes in process `syz.2.2059'. [ 456.677958][T14692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.695223][T14692] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.696312][T14694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2061'. [ 456.698988][T14694] Bluetooth: MGMT ver 1.23 [ 456.727095][T14692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.790763][T14692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.790790][T14692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.792016][T14692] veth1_vlan: left promiscuous mode [ 456.793086][T14692] veth0_vlan: left promiscuous mode [ 456.836888][T14703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2060'. [ 456.847867][T14692] veth0_vlan: entered promiscuous mode [ 456.850175][T14692] veth1_vlan: entered promiscuous mode [ 456.876655][T14692] veth1_macvtap: left promiscuous mode [ 456.877735][T14692] veth0_macvtap: left promiscuous mode [ 456.878743][T14692] veth0_macvtap: entered promiscuous mode [ 456.879784][T14692] veth1_macvtap: entered promiscuous mode [ 456.923053][T14692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.932222][T14692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.943934][T14692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.968071][T14692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.007221][T14692] erspan0: entered promiscuous mode [ 457.009710][T14692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.027740][T14719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2060'. [ 457.041036][T14692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 457.057264][T14692] batman_adv: batadv0: Interface activated: ipvlan2 [ 457.060288][T14692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.079996][T14692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.103388][T14692] 8021q: adding VLAN 0 to HW filter on device bond6 [ 457.104345][T14692] 8021q: adding VLAN 0 to HW filter on device bond7 [ 457.127130][ T1042] [ 457.129529][ T1042] ============================================ [ 457.135377][T14692] 8021q: adding VLAN 0 to HW filter on device bond8 [ 457.138735][T14692] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 457.149014][ T1042] WARNING: possible recursive locking detected [ 457.155187][ T1042] syzkaller #0 Not tainted [ 457.159610][ T1042] -------------------------------------------- [ 457.165767][ T1042] kworker/u8:7/1042 is trying to acquire lock: [ 457.171927][ T1042] ffff888028a9ed58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 457.181791][ T1042] [ 457.181791][ T1042] but task is already holding lock: [ 457.189163][ T1042] ffff88806605b958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 457.199020][ T1042] [ 457.199020][ T1042] other info that might help us debug this: [ 457.199737][ T140] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 457.199872][ T140] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 457.221979][ T1042] Possible unsafe locking scenario: [ 457.221979][ T1042] [ 457.229436][ T1042] CPU0 [ 457.232734][ T1042] ---- [ 457.236020][ T1042] lock(&qdisc_xmit_lock_key#4); [ 457.241064][ T1042] lock(&qdisc_xmit_lock_key#4); [ 457.246108][ T1042] [ 457.246108][ T1042] *** DEADLOCK *** [ 457.246108][ T1042] [ 457.254260][ T1042] May be due to missing lock nesting notation [ 457.254260][ T1042] [ 457.262589][ T1042] locks held by kworker/u8:7/1042: 11, last CPU#0: [ 457.269097][ T1042] #0: ffff88802a639140 ((wq_completion)bond2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 457.280182][ T1042] #1: ffffc90005047c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 457.293086][ T1042] #2: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 457.302684][ T1042] #3: ffffffff8fd5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 457.312633][ T1042] #4: ffff88805550c228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114e/0x3920 [ 457.325368][ T1042] #5: ffff88806605b958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 457.335668][ T1042] #6: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 457.344577][ T1042] #7: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 457.354346][ T1042] #8: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 457.363174][ T1042] #9: ffffffff8fd5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 457.373138][ T1042] #10: ffff88802d149228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114e/0x3920 [ 457.385885][ T1042] [ 457.385885][ T1042] stack backtrace: [ 457.391790][ T1042] CPU: 0 UID: 0 PID: 1042 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 457.401263][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 457.411421][ T1042] Workqueue: bond2 bond_alb_monitor [ 457.416648][ T1042] Call Trace: [ 457.419943][ T1042] [ 457.422887][ T1042] dump_stack_lvl+0xe8/0x150 [ 457.427538][ T1042] print_deadlock_bug+0x27a/0x290 [ 457.432581][ T1042] __lock_acquire+0x25db/0x2de0 [ 457.437453][ T1042] ? __pfx___netif_skb_features+0x10/0x10 [ 457.443196][ T1042] ? ret_from_fork_asm+0x1a/0x30 [ 457.448139][ T1042] ? __lock_acquire+0x747/0x2de0 [ 457.453249][ T1042] lock_acquire+0x115/0x350 [ 457.457759][ T1042] ? sch_direct_xmit+0x15f/0x4c0 [ 457.462811][ T1042] _raw_spin_lock+0x2e/0x40 [ 457.467327][ T1042] ? sch_direct_xmit+0x15f/0x4c0 [ 457.472289][ T1042] sch_direct_xmit+0x15f/0x4c0 [ 457.477054][ T1042] ? __pfx_sch_direct_xmit+0x10/0x10 [ 457.482388][ T1042] ? arp_solicit+0xb20/0xe40 [ 457.487000][ T1042] __dev_queue_xmit+0x179a/0x3920 [ 457.492025][ T1042] ? __dev_queue_xmit+0x29b/0x3920 [ 457.497133][ T1042] ? lockdep_hardirqs_on+0x7b/0x110 [ 457.502333][ T1042] ? __lock_acquire+0x747/0x2de0 [ 457.507271][ T1042] ? arpt_do_table+0x25b/0x1f90 [ 457.512120][ T1042] ? __pfx___dev_queue_xmit+0x10/0x10 [ 457.517503][ T1042] ? __pfx_arpt_do_table+0x10/0x10 [ 457.522618][ T1042] ? NF_HOOK+0xa2/0x3c0 [ 457.526792][ T1042] NF_HOOK+0x33a/0x3c0 [ 457.530881][ T1042] ? __pfx_arp_xmit_finish+0x10/0x10 [ 457.536195][ T1042] ? NF_HOOK+0xa2/0x3c0 [ 457.540349][ T1042] ? __pfx_NF_HOOK+0x10/0x10 [ 457.544936][ T1042] ? lock_acquire+0x115/0x350 [ 457.549611][ T1042] ? __pfx_arp_xmit_finish+0x10/0x10 [ 457.554894][ T1042] ? inet_addr_type_dev_table+0x25/0x190 [ 457.560533][ T1042] arp_xmit+0x16c/0x270 [ 457.564699][ T1042] ? arp_xmit+0x23/0x270 [ 457.568960][ T1042] arp_solicit+0xbdc/0xe40 [ 457.573381][ T1042] ? __pfx_arp_solicit+0x10/0x10 [ 457.578318][ T1042] ? __neigh_event_send+0xea4/0x1510 [ 457.583602][ T1042] ? __pfx_arp_solicit+0x10/0x10 [ 457.588562][ T1042] __neigh_event_send+0xf0c/0x1510 [ 457.593684][ T1042] neigh_resolve_output+0x1a1/0x720 [ 457.598892][ T1042] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 457.603940][ T1042] ? ip_finish_output2+0x3de/0x10b0 [ 457.609136][ T1042] ip_finish_output2+0xc4b/0x10b0 [ 457.614158][ T1042] ? ip_skb_dst_mtu+0x811/0xa50 [ 457.619033][ T1042] ? ip_finish_output2+0x3de/0x10b0 [ 457.624235][ T1042] ? ip_finish_output+0x40b/0x530 [ 457.629280][ T1042] ip_output+0x29f/0x450 [ 457.633708][ T1042] ? ip_output+0x5a/0x450 [ 457.638037][ T1042] iptunnel_xmit+0x626/0xd10 [ 457.642631][ T1042] ip_tunnel_xmit+0x195b/0x2040 [ 457.647510][ T1042] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 457.652727][ T1042] ? __gre_xmit+0x106/0x1a0 [ 457.657224][ T1042] erspan_xmit+0xb6a/0x1620 [ 457.661748][ T1042] ? dev_queue_xmit_nit+0x2d/0xac0 [ 457.666946][ T1042] ? __pfx_erspan_xmit+0x10/0x10 [ 457.671888][ T1042] ? dev_queue_xmit_nit+0x95c/0xac0 [ 457.677104][ T1042] ? dev_queue_xmit_nit+0x2d/0xac0 [ 457.682214][ T1042] dev_hard_start_xmit+0x2cd/0x830 [ 457.687325][ T1042] sch_direct_xmit+0x257/0x4c0 [ 457.692098][ T1042] ? __pfx_sch_direct_xmit+0x10/0x10 [ 457.697380][ T1042] ? __switch_to_asm+0x50/0x70 [ 457.702161][ T1042] __dev_queue_xmit+0x179a/0x3920 [ 457.707220][ T1042] ? __dev_queue_xmit+0x29b/0x3920 [ 457.712347][ T1042] ? __pfx___dev_queue_xmit+0x10/0x10 [ 457.717720][ T1042] ? __alloc_skb+0x27a/0x7a0 [ 457.722319][ T1042] ? rcu_is_watching+0x16/0xb0 [ 457.727096][ T1042] ? __alloc_skb+0x27a/0x7a0 [ 457.731684][ T1042] ? trace_kmem_cache_alloc+0x29/0xe0 [ 457.737048][ T1042] ? __alloc_skb+0x27a/0x7a0 [ 457.741631][ T1042] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 457.747692][ T1042] ? __alloc_skb+0x4d0/0x7a0 [ 457.752317][ T1042] ? alb_send_lp_vid+0x14e/0x550 [ 457.757252][ T1042] alb_send_lp_vid+0x348/0x550 [ 457.762121][ T1042] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 457.767434][ T1042] alb_send_learning_packets+0x12c/0x300 [ 457.773082][ T1042] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 457.779252][ T1042] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 457.785666][ T1042] bond_alb_monitor+0x3da/0x1840 [ 457.790609][ T1042] ? bond_alb_monitor+0xf0/0x1840 [ 457.795648][ T1042] ? lock_acquire+0x115/0x350 [ 457.800319][ T1042] ? __pfx_bond_alb_monitor+0x10/0x10 [ 457.805756][ T1042] ? rcu_is_watching+0x16/0xb0 [ 457.810540][ T1042] ? process_scheduled_works+0x97a/0x1630 [ 457.816256][ T1042] process_scheduled_works+0xc3d/0x1630 [ 457.821822][ T1042] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.827811][ T1042] ? assign_work+0x3cf/0x5d0 [ 457.832401][ T1042] worker_thread+0xa47/0xfb0 [ 457.836988][ T1042] kthread+0x38b/0x480 [ 457.841049][ T1042] ? __pfx_worker_thread+0x10/0x10 [ 457.846155][ T1042] ? __pfx_kthread+0x10/0x10 [ 457.850853][ T1042] ret_from_fork+0x514/0xb70 [ 457.855441][ T1042] ? __pfx_ret_from_fork+0x10/0x10 [ 457.860560][ T1042] ? __switch_to+0xc89/0x1420 [ 457.865284][ T1042] ? __pfx_kthread+0x10/0x10 [ 457.869894][ T1042] ret_from_fork_asm+0x1a/0x30 [ 457.874655][ T1042] [ 457.915038][ T43] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.915069][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.915101][ T43] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.915121][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.915203][T14712] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2060'. [ 457.915219][T14712] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2060'. [ 458.015664][T10946] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.015697][T10946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.015723][T10946] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.015741][T10946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.734672][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 458.734957][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 460.894973][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 460.894987][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 464.174960][ T5719] page_pool_release_retry() stalled pool shutdown: id 77, 1 inflight 60 sec