last executing test programs: 21.673452863s ago: executing program 3 (id=13643): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x0, 0x7}, &(0x7f00000003c0)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x6d, 0xf, &(0x7f0000000100)="e8893cba0923c6bc36bf9fb9a61513b06f09bacd40f95976bd318f216db3d6b697ef2cf64f379358daf52f263bcf713dccc4b90308a32fd92ddf46278212292d18d38263ffb055488390a77db21f04b557673a1062d4d40afecc16b725eaf326c37fe6ef3c968fa76be56fa013", &(0x7f0000000180)=""/15, 0xffff, 0x0, 0xbc, 0xf2, &(0x7f0000000400)="ebd0461d4d7b35ec5575c02de3e05fe123ff660d4acd4414d6507c7dd7f8b596088873dde47c79072ba612bd5f848d27699181de8b8a68ed4b518ecc8e84a05e2c20691213f231f340a0953425259a1ed84ed6a7ff8a3eed1435cc5777de0d29e9c418f0d1250fc6c8731d41ee3f31f084474285abf559b0ab880353889a7f7e979496c5775841c40a24ea927d6e0987058f5322cafd090aba424346dfa214cc1e79a4959a9626dadba7aafdaab8e0a884dac3c020ddd8774eac4609", &(0x7f00000004c0)="d1c433af9f644853221208578f877d6d629dbdc4fb9f6c4d3570ddc0b2f3e7823e245c5609edce8b9f4615eb2a5d2c53084d12b4b2f2a52079ffc33633890fe468381aedf6144f2d02e99dfdd855e7db58aa55adcf32da06a791ba6a352f925f567bf766d7fa77fb49a908cc14b9b99ad0c8e60894b0f5e6408c301c0103eed12a091553ab8a0a357f1d67d776b7658ce6ef3dc37eff8d6a9ff6987298579412f4c399fb541cd6e71b90d745e5e7494b6c1832b62a7039f502260d5c81336a6ccf31c0741d98f646b07aa81661fad418072a741747e506cb53ae54333c14cad03b13aec5439a92450a5cc2eb8228ffde74df", 0x5, 0x0, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000400"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x0, 0x7}, &(0x7f00000003c0)=0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x6d, 0xf, &(0x7f0000000100)="e8893cba0923c6bc36bf9fb9a61513b06f09bacd40f95976bd318f216db3d6b697ef2cf64f379358daf52f263bcf713dccc4b90308a32fd92ddf46278212292d18d38263ffb055488390a77db21f04b557673a1062d4d40afecc16b725eaf326c37fe6ef3c968fa76be56fa013", &(0x7f0000000180)=""/15, 0xffff, 0x0, 0xbc, 0xf2, &(0x7f0000000400)="ebd0461d4d7b35ec5575c02de3e05fe123ff660d4acd4414d6507c7dd7f8b596088873dde47c79072ba612bd5f848d27699181de8b8a68ed4b518ecc8e84a05e2c20691213f231f340a0953425259a1ed84ed6a7ff8a3eed1435cc5777de0d29e9c418f0d1250fc6c8731d41ee3f31f084474285abf559b0ab880353889a7f7e979496c5775841c40a24ea927d6e0987058f5322cafd090aba424346dfa214cc1e79a4959a9626dadba7aafdaab8e0a884dac3c020ddd8774eac4609", &(0x7f00000004c0)="d1c433af9f644853221208578f877d6d629dbdc4fb9f6c4d3570ddc0b2f3e7823e245c5609edce8b9f4615eb2a5d2c53084d12b4b2f2a52079ffc33633890fe468381aedf6144f2d02e99dfdd855e7db58aa55adcf32da06a791ba6a352f925f567bf766d7fa77fb49a908cc14b9b99ad0c8e60894b0f5e6408c301c0103eed12a091553ab8a0a357f1d67d776b7658ce6ef3dc37eff8d6a9ff6987298579412f4c399fb541cd6e71b90d745e5e7494b6c1832b62a7039f502260d5c81336a6ccf31c0741d98f646b07aa81661fad418072a741747e506cb53ae54333c14cad03b13aec5439a92450a5cc2eb8228ffde74df", 0x5, 0x0, 0x7}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000400"], 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) (async) 21.655604646s ago: executing program 3 (id=13644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e4"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x80}, 0x1, 0x7}, 0x0) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r1, &(0x7f0000002880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f0000001680)={0x11a4, 0x3a, 0x20, 0x70bd2a, 0x25dfdbfd, {0x16}, [@generic="12b4fb2544622b2469a9f11d705aa9689bf8facd8036c5f62806970bd734690c250196fe87b45d8e98577b4db790a54c5a3c278a5c149feb4a3771c09e8a36c919f72dd846a06db8213b2fecaa90799ec4defe76d236139f1ea41ba2175213685a4c0e990c24950c3cca851c6e67599b5f7361469569e0bfa37acef4b56f330f9a191ecbf8af76c90fd63721", @nested={0x10e6, 0xe1, 0x0, 0x1, [@generic="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", @generic="3a334574c25debc6badaa0b6c7feb14920d288fdec350551af89e8b67f7ee1caf58ebb19c4eeebefe4f4739506597a2eb982f8a8ab027640ebc7f9248f7e6f93f3a4b1bf705c3e0ee3c28980df74fee0c16d29b8b4", @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@empty}, @generic="53c77fec9e7bb68302e2009ae203f980884f81c07fdf2cb9978f3fa85ba6dd1c02149de9168640f6a277b552b5c6414de161be9a6096d59547641b9b640ce40a25ff2b7241f1551d048a87c9035b94a8cb6bc611326ff9ca1726af2c5e1fdc26d6e6", @nested={0x4, 0x10e}, @generic="b9990bfc0dfad9d371ad7e810ecb7ee9af7720cf3a8b89f0e552069889b94b"]}, @typed={0x1a, 0x39, 0x0, 0x0, @binary="2cc2ee413aa4cfb5f1108f53c3dffc5673136f6ac63d"}]}, 0x11a4}, 0x1, 0x0, 0x0, 0x4004801}, 0x4048094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0x0, 0xfff2}}}, 0x24}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x2c}, 0x20) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 19.233989854s ago: executing program 2 (id=13645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000020bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000006a030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)=r1}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f00000005c0)=""/184, 0xb8, 0x0, &(0x7f0000000680)=""/247, 0xf7}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x80000000, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x13, 0x20, &(0x7f0000000380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0x3}, @jmp={0x5, 0x0, 0x6, 0x2, 0x1, 0x100, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x2e}], &(0x7f0000000480)='syzkaller\x00', 0xed, 0xc0, &(0x7f00000004c0)=""/192, 0x41000, 0x68, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x6, 0x4, 0x49d}, 0x10, r4, 0xffffffffffffffff, 0x6, &(0x7f0000000880)=[0xffffffffffffffff, r5, r6, r7], &(0x7f00000008c0)=[{0x0, 0x2, 0x7, 0x7}, {0x4, 0x5, 0xa, 0x9}, {0x3, 0x1, 0xe, 0x4}, {0x2, 0x1, 0x1, 0x7}, {0x1, 0x2, 0x0, 0x5}, {0x3, 0x1, 0x6, 0x3}], 0x10, 0xfffffffc}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x4e, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x8, 0xc, "e0f2dc26"}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}]}, @NFTA_CHAIN_USERDATA={0xae, 0xc, "d14fda0073b58060e35b58534642de4d3c583aeacafda0ae421a1aada62bcb1de8e9c2e25d8ef1cf7d5d24d0cf1b9ddc383b5cb972d2a4af2e664b7d673343ce930b9730c8ab91fc4143e4e74698378dd4ae39b5f13ddd3d74804775fbea5f1c8d1211815fd04979e35aabac3439da3c35819a9a425c1e43af4b263e4dea512211bb953274f0a059d80b39214f1251f124c951aa08f75a7075064824efb1a536b600eec148fd36f11e6e"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x14c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40084) 19.158599068s ago: executing program 3 (id=13649): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%-5lx \x00'}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x0, 0x3a, 0xf20}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000dc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000900)={{r0, &(0x7f0000000600)='\x00', 0x20180, &(0x7f0000000640)={@_ha_fsid={[0xccd2, 0x1ff]}, {0x7, 0x7c15, 0x8, 0x2}}, 0x6, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x9}, 0x2, &(0x7f00000008c0)=[{0x0, 0x7, &(0x7f0000000700)='+)+{\x00', &(0x7f0000000740)="40ac5e04d537a9cdc8daa72d4594884ad07c6f4a509b01c06c77f9c88fd1c540914253791d23033b3d9d7bad577e6419b9d044a4eb4720925755766ab2054bf974b51074397b150a8ff036aa1ea71a7136b31b9e83e87721d4a6e5ddf0bebe9c6dd6a345", 0x64, 0x12}, {0x2, 0xff, &(0x7f00000007c0)='%-5lx \x00', &(0x7f0000000800)="b74014c55c77bd986cea111c3fc290071f2518c749d66a7bc44ece22e1d7208922577d3aab4500ead1ace91ed7fc2350d96e4866094f96869eb6dbdc005f2f84444a4dc3daa957b96df136239a7616c63a542e6db697355c529883427a82119201ceb96f8c4fcec36fad5a0402aa5de4f838b595cd814460b5fc38beace8707b1ce3f660e902c0864836f8c7d08eb9cc", 0x90, 0x12}]}) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r6, 0x4) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x5, &(0x7f0000000a00)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000a40)='GPL\x00', 0x4, 0x2f, &(0x7f0000000a80)=""/47, 0x40f00, 0x73, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x3, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000b40)=[r0, r0], &(0x7f0000000b80)=[{0x4, 0x4, 0xa}, {0x4, 0x4, 0xf, 0x7}, {0x5, 0x2, 0x7, 0x6}, {0x4, 0x3, 0xc, 0x8}, {0x2, 0x4, 0x5, 0x8}, {0x2, 0x4, 0xf, 0x7}, {0x6, 0x1, 0x6, 0x1}], 0x10, 0xff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x1d, &(0x7f00000003c0)=@raw=[@ldst={0x5, 0x3, 0x6, 0x3, 0x4, 0x8, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x17}, @alu={0x4, 0x1, 0x2, 0x9, 0x7, 0xfffffffffffffffc, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x55f, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000004c0)='GPL\x00', 0x8, 0x81, &(0x7f0000000500)=""/129, 0x40f00, 0x10, '\x00', r3, @fallback=0x33, r4, 0x8, &(0x7f0000000980)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x5, 0x9, 0x10}, 0x10, r6, r7, 0x4, 0x0, &(0x7f0000000cc0)=[{0x2, 0x2, 0xa, 0xb}, {0x2, 0x4, 0x4, 0x3}, {0x4, 0x5, 0x7}, {0x2, 0x5, 0xc, 0x8}], 0x10, 0x7fffffff}, 0x94) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x2e6, 0x8001, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x24, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @generic={0x2, 0x0, 0x7, 0xfff9, 0xbb94}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 19.042076736s ago: executing program 3 (id=13650): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) (async) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) recvmsg$can_bcm(r2, &(0x7f00000033c0)={&(0x7f00000001c0)=@ieee802154, 0x80, &(0x7f00000032c0)=[{&(0x7f0000000240)=""/248, 0xf8}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/90, 0x5a}, {&(0x7f0000001480)=""/145, 0x91}, {&(0x7f0000001540)=""/26, 0x1a}, {&(0x7f0000001580)=""/48, 0x30}, {&(0x7f00000015c0)=""/99, 0x63}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/20, 0x14}], 0x9, &(0x7f0000003380)=""/16, 0x10}, 0x2022) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef98b", @ANYRES8], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 18.987172891s ago: executing program 2 (id=13651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000300)=@raw=[@exit, @exit], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x90) (async, rerun: 32) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xd5e52a39dc1e9bf4}, 0x8090) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r3, 0x0) close(0x3) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) syz_emit_ethernet(0x5a, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x1b, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x10, "6f03057a91f875ccf5bd5d0a5b31"}]}]}}}}}}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='1\x004\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001a0000001c000d80040000801400008000000500feffffff4fff070000000000"], 0x30}}, 0x4000890) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4583c2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27ddd3f8ba80fd173700203c0009", 0xe}], 0x1}, 0x4005) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r6, &(0x7f0000000400)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tipc={{0x1b, 0x4, 0x2, 0x0, 0x99, 0x64, 0x0, 0x6, 0x6, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x7, 0x91, [@multicast2]}, @ssrr={0x89, 0x7, 0x64, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x88, 0xf, "6db9e208fac8c21b8e9d30dfa6"}, @ssrr={0x89, 0xb, 0x1f, [@empty, @multicast2]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xbd, [@rand_addr=0x64010101, @multicast2, @multicast1, @private=0xa010102, @loopback, @remote]}, @timestamp_addr={0x44, 0xc, 0xe9, 0x1, 0x7, [{@local, 0x5}]}, @ra={0x94, 0x4}]}}, @payload_mcast={{{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x9, 0x0, 0x3, 0x3, 0x5, 0x1, 0x463, 0xe4a, 0x1, 0x4e20, 0x4e22}, 0x3, 0x3}, 0x4}, 0x4}}, [0x0]}}}}, 0xa7) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) bind$phonet(r8, &(0x7f0000000040)={0x23, 0x14}, 0x10) (async, rerun: 64) bind$phonet(r8, &(0x7f0000000000)={0x23, 0x4}, 0x10) (async) close(0x3) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="3c75fd4dc586f2ae9206277f0443ec773ee63a8c6df14fe0183749000000000000", 0x21) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=@newtaction={0x48, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x34, 0x1, [@m_vlan={0x30, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 18.845393806s ago: executing program 2 (id=13653): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "171e53ab064422f1", "12429e906a4ee290dabe7d51d4e9fdffc1bee51f43ac35c616b84e2b8bb14436", "11f8e74a", "fced9cf7d62fc365"}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x2070bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d068b7000000002400128000000000626f6e640000120003000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 18.694308713s ago: executing program 2 (id=13655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200008044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d04002ce39b905ce4e424100000070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 18.569888415s ago: executing program 2 (id=13658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xff03, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x80, 0x0, r4, 0x250e, '\x00', r5, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000040)={0x1d, r7}, 0x10) 18.398018515s ago: executing program 1 (id=13660): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg$inet(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000003180)="e1533f693f81e8029ffadcd744371799cfbeb1da68845f24642f29073ce979f49282d4e477c6def692fe67f37932063c4d2a41ce5101908888dfde86bd5c9e0d30e5f1b4f3d3a5ae7722ed877e5d1ff1cd68a8e2479a305891c7206fc5b1e0f528a8a5e68dcdbed11f0d662d0bb4ec3e6f6d49ff3813f0eaae5c3cf7a7bde36f0d27841819eef403bb1c93cbfadf35645ef0a540794e0bb07867d1b8908b0539816e14bb39b8c2de38b1df88db454cfc6d5e727357697bf5b4145ccdb59b2dc8c0b37a36c13117949251c1bd687f8bbeee1a6cf833d36a1a2a3f2247555a99e5f2f4d7e31f542b3e8c5290dafbb4efd08687d4f25d43b9b3d5fba7b13771093727c06c306d7789fe60d5daa4bf64313211891e689a76c6e8b6c9d45d05c22418770dff2a8fa9bf2105eec48938ebdff90eae1df1114515aed0178fe785d9ddc81e96b189e6942fb1baa809ddb80a1fe0830ed31648c7c239c35ee6a439aa6d0a65d4aeb66ee25f084bb3904f0922e6f224416c599b888adf02b19c93714c231d1c266ccc1a6728475c92959d928b87abd8ad735dee93be4384a4ed2fa3cbd59ee31972ff43879860468c6a7c508f851670e64eaa149544100a8f96cc54b30f4ff830210aad3966f3feff8f6bb3c33cc3ef930b8450d3baeed7b180cd0fadb668c68a12169d951f53807761430969f6c9acceb8b27d2522eb937245a87aa374b795fbf836b9d5567b165cc9e34411b7d66752afd496fcf970c92e06c2655127bcd51aa443b5b556d6c35ec433573d95769a3fc5e4e37db7de9bcfa381b2b9415de5072aba6c5c20a644d68b62ac4b73415aaa2ee222b2e280db3eecaaf8a2dd0134c378139731ca6133a0352adc50443dc916af173bcd06c43774bbcd3983177875f926e420797f1cde6aa516c5788871475ef5bdceaaefb1263b1853fa3098b890c961673093413565712c6c8cc3bda3078cfbb99a73df292866fc302d3084adbe15ccdc78d266641d71bda18041f17ebd41305a1e9d23154f3af6362896334aeb74ac247244d7760a6b7c7bac441215596ccb8c64a84698ba5230f2cf0fa37738c189f16b40045b9c73fb21eec79fe115086f4fa034cb0a8f73297e7f71da788ae2887106ad918cc28beb6e42f01015d64213d7161fcf8115e5a5198df023886b7122e5380ebb43302caa9e36a18ac8e5b9f988fd2510f6a1eb88c2d3b6829a02c6db9b5aabb04255b5e2ab0e2ad5ee8a522b13895e19802b07fe3bed0069bb4ac8413fc0faee0bb2fbfef4b8187c252793ea372935274f336e512aefa340a707f9e7db51fe5baa593018d15d19101bc764e0aa2ef2cd05944b166516face2278b5426a9cfa7c2bddb9b605521423a9ef2b6f676402b26915ba052feda45e0ea5290e4ac147e580a8e4d888c1b0420cf75ed19bb730875c1af89a204781e3f52ecb6b0e14fd098c2425ce80815425145d876c9e87b0500eeb33404fd4fd16981237131c890728c90a1edfdc42bb35ca0b9566d845c09b683e4358fa1cf958d6a0e958b06d357350f97729af8384bad0562324a00a5afa4fb676d42441aa581fc3def0b35d53a026536acfccd48b8ceaedb29b7198541c7a705c7747fd36e7ab092e96e1c8e034dcdff03b5579827703fb10ac24bc78d989db557db0adfa76622c514e57944adc6b26bed0fe7663e59b5235db098e347e36e846da11733b1b45df3f7777dbf95400a6ca76f2b65a37973927cd7e37a3beb39f9886ef896a8c99a2150f8fe0e31e90d4bbd0caa77615a66c9ae6ddf5b1f80bbbc038d2b95a68d2d559c6022ff966ecce476427e30424ea812a850682f32731f32155fbb10501e42a2a63e470ee146e7fa8d4c190c67cd3da429131baad1c7703015507737506203fb8bad91d1c37a5d3babe043f2e0eb2426b75bd59b3cd2da2296af8be27fcf391e01590e10eb696c3b197c2ebe18c6e27322e90e8285e309a7de94f3daf0316cc7523a11e29e1df055ccab9380d4bbeed1c06ac0197624ac28409c9469c0be2751ef5e43377bc09b685f4b35238c25b1c26d94b7ca4407e57ae81a3b4f9fee8612dd136b53e76d4ebcbf1e93b4929a6980a5201d6f47a8008a40563f21f1682607a668d7926af71ae9e8d3f07058fb42d8d4d38c5083351ff26e6c06ee71e1d9f547638db515c523bd49195ecca763036b503f5f5fcfffa38e4ac7b22b1269da0c4952200fe1f04eaa926a810d5aff10f9991c8e62357292984d8c265efd421fce88c53799f2dc45cdc8917b8b581fd7f1154720aa579529d6eda068622233d7dae7a89ba6240f25270aaeb4ce43b5a7afd7e9c40321da1ca03016cc001799ea53a4fb79710f2684f79592b0a737a0fac334e6862b9911f235d57e7b291e3eca745cd73e174e75bc2eb348c4d016c61069abf003f2dc7727f8aaa365eab57863a0cda379f1dcb93e9277a562f41e3eb9afd9e698ad2b8e7306312ef1f23f433d42eec1ae20bd1597043fa7ee66a2212920c9f220652b08ac72c4f3a397e68bc057be4e282a1745910d0245c23538270537b5d046d5a87449816e505d0080f556fae2ddeee4afda5c4aed663d6594860c46d42ccc5bfb2be9d7199af129c6f51071e2972ac05b42ce5fa4f7f397b9641bce3c6810572aae98594af4371218857564613836c709248990195bd0aab0ca56803b4fc7de2943413a86c5cf14ec86684dee1ef8b54a19c4a9ec492333cd553e0376c0965b387f669a481cda11193b9c7670d6c859a5f65d9e2619615c14326571d022627afa28a842ce3f3b449f4fd421b2aa00ff6c48a24174c9517ea1a7fb9689cc360fd4d6510d276b8063258b060bd9ebd926bb1be43fb1d4bfc6be1e24fdbdaedb2445594dd790c411bf24d983088f1d39ac25b6610bbdfa272fcda84e3dfc66186c31fcc079274d955213be49d24b11343e32e730f8aff214ffaaea860c2af03d368ca054aca12c982ecdca8da2afbbbf37430615d2bb0a1b5a2509cdf5456ef7bdf56b352cbbabd6757993695331ca2d261c5e6be17299c0de751be0c5a3b09806b6bca2d467cb76f3148ad69fd25b5fb9ce77fde3a507c31a03fd70016a6c812e37eca2122612a81085ed13c6d8be6a89278e4d2f3bb3983220e13ca1bd91711ffecfdd3b4e8e8b839fec1d4d1a7bd8968a1f5fa2f1830d7f0a36ffbc1b86ad32c978e8d26840d979088c0ba082033d352669cdf6afe812b804104e4af260177248ad41b9ae2cfdce05788271d4ebc629aa0187f12065a4287545332ef8931016235dbf0baf13d4dca831491be16667e515708f481e9a31a390dd5e23c8e3ce5fcca5fd722791e44442d83d64cdd910ea5c13b484449f934a5ff6fb5794d010ea3fff78dac65ea1f1d5f5617c336d990ef3867837728de10eac7ecb1f33789fd5aa65efda41dfaa41d3dc16c3a392a547d11307904a95211b8910c1aacc9ea74ad5b84f077ea6219a0f246f6298853cdc60f63c470a29aa518491bb502ee9058537cfe7881362d5a0b7a6559de9f4588a34785fe6972f294c5df66c489ce249f1e9cb59d678b097e9f56274dddb043be74c9e22d52b8b7496ce368f7271185e75b48cf4160389f92bf3a096bf11bab9bd68964b67d31f8902007aea62a44756b052425446305baa33785966f5c909827c5ec5af33d4f0927684a3c7d2d817663cbb768db6a39f0d672ea6d9380f920a796ba0e5af46e768925267d5eb13a8fd664399fb5558664ec813d2ff7a74ce8c46a0a0fb26c4fd8e7f9a24335dd24bd9db0bc40faf8507e004bcf651163067a6d2cceb6e8fcc56cf552c59d831c3e0c931e825bfa8ccd2b3fed616b371568bd5fa40eb9afa119a0056a3cd19b4d180332247a622f7f2e09f23f4ede4ed2a5c1f11d3a3b15a21e4415abca87bf95e820b1f46e74cb7b21e223dc724963ea3ec9c1869e7af0ede4bca9bd77563df4a6c3263c3fea048f7c3ac0a83e20d5820dba18603f1bc3fc99bbc2a1d2042545092daa88d35c199e65ea318fe1dc804de8cedd0dfa1e545c93dcaa47a6815728c663c5be547a80784ae799af2805449d6155c9ca6896d3d9ec65701777ce1db9827045326bd5a93cc44a57e0ae4e9bac6d9d29767cb9b1bbafc8ec40d5701e80d84d4afa46fac9a4aa9da36a0e33014c44a30ff4b8b0c2e49b6bb70d21b1a19f9fec77378ba6d8621a09b023d59bea60ad4cb2555acba0448602d03e5c17e5851776605e9b9b66158b38be64c15495d226a9f36b8cfed9575d3ef4b92bffd1865ba21c977b37df339dc261526c36c1f8bf3c9dc224e87874ce329ab5e98df52dd5b3771d0b8ff2da50fd5d9b046d80c647738936a0035ba62a225209c3f423c413660d955fb79dfa2af4c73c062ce3c58a92d1f20dd2c58b91f9af10f5a6654e7288ec7ac39786df65117b016ff45e086b85d88ea182cc383094547d18202d552248b01299a9f70b787f24ab21e2c039641e47ce972252da35556a5f8f5479df22d9a24d9bc11cb676530071d645cdaf19001336543a3819aed105eea68b6183c3a76ec65d931bfcd471dda27bb4329bc047833146e69a46d9a42fd6a0334d25f083b1ecf50f2126a872840e6e54be316ddce06a6d4e08b5ee723260a7f631ba8fc459afac87f62ad55e8ac31e3c63d800c8ceeb4d6434a49f921426f0f053ff05535b201e1f7446a00e20fb2121a35dea345785d6bb300b7a55689a6d9fba99ca7a980498cf8389b01c61a0e711c6c886048448d0755abb3e3f9f91c3c6c2cbe53b873f66d94ee66db5d622595890a418330e8bf4b3856a9c0fcff357ade904cb92c21779a5114972f03c939deea33a0f3ba9f02e5da690c73a20f7af4628ca660fa61b2bb0c0b8c466e44c3b10a161adffe79c6cef1daf93219aa6f22d6d9412dfbf67b0d4b2830047812df3ea28c2d88c71d75c306c086145895470986db40c057aee06ef235f913185dd243be0bbc219f92ea5a6cad0ef94b25a7f8dd5977fb7d6266536f3b25292dd4194a943765d9eb812606e6b92958d6bac74c0dc03c477005a9126c74fae50b5eac2da51004cb7a8b5ecbf63fa49714d7d1206a6bbd44b92f3213dd1bc4438b929ee0271e142bde625027227e0c8a4d58da0b998216ba39b007fafa8f77d9f920cc885be820783feab27df4e1d19086ac0af4f8665578f511a1ae78ed568f9abd360d773317855c8621bd54c3b6bc5f9ff87c0b2b6a11dd008a8cb57d0858e762624930bb25d3801b3eef13c52b27477daf2a15e13e99a79ab34f3cf83c10f220a9b5136d919eb6e60ea7d0de31755c5994e20404b0b899f0b80533ce58786f0aa3731d2d2d353d4111059ca58b4fc9014329d1b0295646795efc15d4124ef06899f4c3cef9792ee2b609e50a184578083ccf52c061dcc6415a67c6a3f03732fe660a65b9c4b48a946402c6da0f3de26561d0fff4184fea49dc40de60c6dcd7fbbd1d1381397b4b600422af2c02f7699612020bc01a59c6d92acf89cfc3e5367f4c9039198ea3a8ee965b354478992c582fd1b85c4d563a31ccb9c26ee2b3a048be153ad7099af1528d54af2092bd19418731b703dac115960329e5efc57cd65e1114d8939bb2665a07d0287950f251f3aece65ef1eee478688d3dd8a9078996d13382457747f8256e5fba5e6b9390027ab78455016cdb02e705fbc680d354e86387f15b5086b479cd6826e4031fa77ea0f15ffb39e2796fffc2d1128fbe9948cb24d3ffc8027c01d3840d71f163bf96f8b70de04fce56fa9fff132250e90585736ef5", 0x1000}, {&(0x7f0000000440)="8fa3c1461384cc858dc7a07fce5b67a2c536af36638bfed278bb4b92fecac25a7e2c49448fded5a11f27ff49a768b7cb6edb1c3736dc44520cb72d0a63961a9f5eaecd00178a328aaaffdcb4a6065610ea94200f2c0202983f7c875d4e1cd17c7d1890db2e976f5f79b71692870e81bc2ca33765a7073641e5fa821be5fdb3fb92365bd2597f27a12d5a059aa96ff5dc5626e5", 0x93}, {&(0x7f0000004240)="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", 0xbb5}], 0x3}}], 0x1, 0x40) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xcf, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000b40)={'gre0\x00', 0x0, 0x1, 0x10, 0x6, 0x0, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x6, 0x1}]}}}}}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000500)={r3, 0x20, 0x30, 0x1, 0x4}, &(0x7f00000005c0)=0x18) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r3, 0x9}, 0x8) getsockname$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) 18.350046986s ago: executing program 1 (id=13662): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200000086dd"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x2004c085) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x5, 0x26, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000008c0)=ANY=[@ANYBLOB="161c000000000000c204000000040502100002871020b1884fb5e911d8c04fa7b1baf828035b57b5cd51211aa252b850c69e89e2d499888e86a5fb24da1f1005e6043f40ba3533860f45d31b916ffae49dfcb29425f4ea2170fd6058accde3cd040f83bb78e86be89b778d40d0715b71fabf2276bfe8246b640a10381c1a4ad8ca4b69c784345ca048eaf9aa4794a8d41fb66a70d9599c0738000000000c0106000400000000000000feffffffffffffffffff0000000000000500000000000000f5000000000000000600000000000000c20400000005c910fc020000000000000000000000000d0000000000000000"], 0xf0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x428, 0x208, 0x428, 0x208, 0x428, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000010000000}}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "224e2e437ad64156311652778a5a6edf6093a293019cb8b408778095e430"}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@hl={{0x28}, {0x1, 0x6}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1, 0x2}, {0x0, 0x2, 0x2}, {0x0, 0x0, 0x6}, 0x7, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0x4b, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000850) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYRES16=r6], 0x1508}, 0x1, 0x0, 0x0, 0x44000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x228000, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r1) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r9}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="00000080d4", @ANYRES16=r7, @ANYBLOB="000104000000fcdbdf25060000000c000380050008000b000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) writev(r6, &(0x7f0000000040), 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000f00)=@newqdisc={0x2fc, 0x24, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xd}, {0xd, 0xa}, {0x3, 0x10}}, [@qdisc_kind_options=@q_red={{0x8}, {0x160, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x8001}, @TCA_RED_FLAGS={0xc, 0x4, {0x8}}, @TCA_RED_PARMS={0x14, 0x1, {0x6, 0x8, 0x401, 0x8, 0x13, 0x16, 0x8}}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x47, 0xc8fd, 0x18, 0x14, 0xf, 0x2}}, @TCA_RED_PARMS={0x14, 0x1, {0x20000, 0x7, 0x2, 0xf, 0x17, 0x1d, 0x1}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x10001}]}}, @TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x80, 0xa1, 0x8000, 0x2, 0x2fa, 0x9, 0x6}}, {0x10, 0x2, [0x8, 0x0, 0x40, 0x0, 0x0, 0x4ce]}}, {{0x1c, 0x1, {0x14, 0x1, 0x1a16, 0x0, 0x0, 0x8, 0x6, 0x2}}, {0x8, 0x2, [0x5, 0x7]}}, {{0x1c, 0x1, {0x1, 0x10, 0x4, 0x0, 0x1, 0xad54, 0x4, 0x9}}, {0x16, 0x2, [0x8, 0x6, 0xa, 0x7, 0x6, 0x5, 0xe, 0x8, 0x0]}}, {{0x1c, 0x1, {0x1, 0x0, 0x6, 0xb0, 0x0, 0xfffffff5, 0x57e2028b}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x80, 0xa, 0x81, 0x2, 0x8, 0xef4f, 0x2}}, {0x8, 0x2, [0x1, 0x3]}}, {{0x1c, 0x1, {0x4, 0x0, 0xf, 0x3ff, 0x0, 0x80000000, 0x6, 0x2}}, {0x8, 0x2, [0x6, 0x401]}}, {{0x1c, 0x1, {0x9, 0x5, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x7}}, {0x12, 0x2, [0x9, 0x5, 0x7, 0x101, 0x5, 0x6, 0x4]}}, {{0x1c, 0x1, {0x8, 0x2, 0xff13, 0x6, 0x0, 0x4, 0xc, 0x4}}, {0xc, 0x2, [0x1000, 0x1000, 0xa5, 0x3]}}, {{0x1c, 0x1, {0x5, 0x81, 0x8, 0xcf12, 0x1, 0x5, 0x7}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x31}, 0x4000) 18.141900357s ago: executing program 1 (id=13663): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r1, r2, 0x1, 0x6) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0x400c804) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) pipe(&(0x7f0000000080)) (async) tee(r1, r2, 0x1, 0x6) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0x400c804) (async) 18.093241413s ago: executing program 3 (id=13664): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r4, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000c1}, 0x800c1) 18.092551888s ago: executing program 0 (id=13665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x24000144}, 0x2001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600010000000000000000000308000000000000080001"], 0x20}}, 0x0) close(r1) 18.029513499s ago: executing program 1 (id=13667): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000001c260000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x20}}, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x5e21, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 18.004937081s ago: executing program 4 (id=13668): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xfffffff9}]}, 0x44}}, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x21, r4, 0x1, 0x70bd22, 0x25dfdbfc, {{0x2}, {@void, @val={0x0, 0x99, {0x401, 0x13}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}], @NL80211_ATTR_DURATION={0x0, 0x57, 0x726}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x40080) 17.954848438s ago: executing program 0 (id=13669): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x20, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0xff}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf0, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xed02}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbdfc}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb3a}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40810}, 0x4040894) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) 17.845331919s ago: executing program 0 (id=13670): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x80) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000120001002bed6400fedbdf00000000e21aa62507000000", @ANYRES32=r3, @ANYBLOB="0018000021000100"], 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xffffd000) connect$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x24) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x200, 0x70bd27, 0x25dfdbfe, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0) 17.843085516s ago: executing program 1 (id=13671): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0xfffffffd, 0x0, 0x6}, 0x10) write(r0, &(0x7f00000000c0)="240000002a005f0214fffffffffffff80700000005000000f0ff0000050008000d00007e", 0x24) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000e80)=0x57bb, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="021503060500000025bd7000fedbdf25010000004e2000000200ac0647c7f2f51b1000000004d200"], 0x28}}, 0x20000080) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002000600020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x7) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000f36746e6c30000000000000000000"], 0x34}}, 0x4000) 17.80157612s ago: executing program 3 (id=13672): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) (async) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800500030010000000040010800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x7f, 0x2002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x7f, 0x2002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000400)="2ed8eb6aea5f401a1cbb53ed67b8e22b7057e3d84e0fb378f4073c612b4fa2362e493488c58bd79cd373076914", 0x2d}], 0x1, &(0x7f0000000740)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xfe, 0x0, 0x9, [0x800, 0x6, 0xfffffff0, 0x6, 0x4, 0x5]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@noop, @generic={0x44, 0x5, "aad2a5"}, @noop, @cipso={0x86, 0x3c, 0x1, [{0x7, 0xc, "7f8e7c517cd3079e58ce"}, {0x0, 0xf, "d9ad353a4e82df206db9731fd9"}, {0x5, 0xf, "f91644d96e02874894049a9f54"}, {0x5, 0xc, "06a0567ee24affef7e75"}]}, @generic={0x86, 0xd, "f2e90b7fe0e4572685d9ae"}, @timestamp_addr={0x44, 0x34, 0x70, 0x1, 0x9, [{@multicast2, 0x10}, {@local, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@empty, 0x5}, {@private=0xa010102, 0xffffffff}, {@local, 0x9}]}, @ssrr={0x89, 0x13, 0x89, [@loopback, @remote, @remote, @remote]}, @lsrr={0x83, 0x17, 0x7a, [@dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x58, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x34, 0xca, 0x3, 0x5, [{@broadcast, 0x40}, {@remote, 0x5}, {@multicast2, 0x9}, {@broadcast, 0x2}, {@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xdbf}]}, @rr={0x7, 0xf, 0x3c, [@multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xb}]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x74}}, @ip_retopts={{0x10}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0xd9, [@local, @dev={0xac, 0x14, 0x14, 0x18}, @local, @broadcast, @remote]}]}}}], 0x200}, 0x80000) socket(0x10, 0x80002, 0x0) (async) r8 = socket(0x10, 0x80002, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001020010000000000000000000080000a20000000000a01010000000000000000050000000900010073797a30000000003c000000030a0103010073797a30000000000900030073797a320000000008000b400000000208000a4000000004140000001100010000000000000000000000000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001020010000000000000000000080000a20000000000a01010000000000000000050000000900010073797a30000000003c000000030a0103010073797a30000000000900030073797a320000000008000b400000000208000a4000000004140000001100010000000000000000000000000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtaction={0x110, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0xfc, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfd, 0x0, 0x8, 0x0, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x3}}}}, @m_skbmod={0xa0, 0x1c, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7f, 0x8, 0x2, 0x5, 0x5}, 0xb}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x35, 0x6, "fd2a632e1b7af99f6092d9aec1daaaea00698f2faf356d5c3dde81e891549115759a1594f3d5181eb894326337724305c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x110}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtaction={0x110, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0xfc, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfd, 0x0, 0x8, 0x0, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x3}}}}, @m_skbmod={0xa0, 0x1c, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7f, 0x8, 0x2, 0x5, 0x5}, 0xb}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x35, 0x6, "fd2a632e1b7af99f6092d9aec1daaaea00698f2faf356d5c3dde81e891549115759a1594f3d5181eb894326337724305c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x110}}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000180001002cbd7000ffdbdf25022020060004ff0b0000000008000200640101010c00168008000200ffffffff08000500ac1414aa5a769df23d4c52f3e765a31aa8c4c38ec18743ef535d645eca403576f1b52ae4a186712adb2dff897dfe7fabbf94a5e4a189b8044e755bce64ffa84b54bd869729fcb06e6940a4525a033b81c958f8c5f8bcff2b71bb4e4202aa2c81fec32350142bd186f268905d5599250ae6f0131e1efa5e75d98e39f5ad8c1f"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x8) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xffffdffc}, 0x8) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1d) 17.779838779s ago: executing program 0 (id=13673): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x114, 0xe) (async) openat$cgroup_ro(r1, &(0x7f0000000140)='io.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x4801}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x4}, 0x10) (async) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r6) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x1, 0x1, 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000440), &(0x7f0000000400)=0x4) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r8) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'team0\x00', @broadcast}) (async) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)="92", 0x1}, {&(0x7f0000000480)="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", 0x106}], 0x2) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) (async) write$cgroup_pid(r10, &(0x7f0000000000), 0xffffff98) (async) splice(r2, 0x0, r10, 0x0, 0x80, 0x4) 17.729493695s ago: executing program 4 (id=13674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000c}, 0x40004) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000c}, 0x40004) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) 17.656298554s ago: executing program 1 (id=13675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x148}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040894}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 17.605973466s ago: executing program 2 (id=13676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000001840)=""/4095, 0xfff}, {&(0x7f0000000000)=""/206, 0xce}, {&(0x7f0000002940)=""/246, 0xf6}], 0x7, &(0x7f0000002ac0)=""/5, 0x5}, 0x5fb5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xf3cf}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, 0x0}, 0x7f}], 0x400009f, 0x100, 0x0) 17.181721528s ago: executing program 4 (id=13677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x5}]}, @nested={0x4, 0x2}]}, 0x34}}, 0xc000) socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r2, &(0x7f0000000180)="e11db185edccd61d659f67a14a6f98e09f72afbb96ebbe445b597778bc8e1b45952be4931804f9f2e9b43ad390ace2e1f6553fb58dd882f26bfdcc533380d975b3091899765cdc1340511dcee188b4c227bb2f80d93f541b53bed74d7d80730e4e00b58e32bfbfb5ae24f53d6330de77da52a29854d8e61406cdef531ebdc206d85924493a563a8079d219721ff8fc3dae7a7bfbc33c8dd2aa11e9730fa6b0878ffef6bc55e46352eb6ff27ceab722c5dfcfb7e951fec6b300b3b144d6c7efc6d813a30fdc9d478b8afebc0d35d2fe4dad4cd02736e3daf6759dd5ccd1b10040fb6eb6c95927ac896e7917f0a5d1ce3bf0c2a9fdcf", 0xf5, 0x8080, &(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x2) (async) listen(r3, 0x2) r4 = socket(0x2b, 0x80801, 0x1) listen(r4, 0x7) (async) listen(r4, 0x7) accept4$vsock_stream(r4, 0x0, 0x0, 0x80000) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000000)) (async) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000000)) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) 17.179835156s ago: executing program 4 (id=13678): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x7, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 16.950750463s ago: executing program 4 (id=13679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0xffe0}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) 16.876280567s ago: executing program 4 (id=13680): socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x40106183, &(0x7f0000000040)={{r0, 0x0, 0x3010c0, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008090}, 0x400c040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x3}, {0xa, 0xe}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xfffffffffffffeff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0xfffffffffffffffe, 0x12) 16.183148156s ago: executing program 0 (id=13681): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xea78, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x2000000000000024, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x9, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="908000001d0008002dbd7000fddbdf251c000000", @ANYRES32=0x0, @ANYBLOB="8000000008000400070000001400010000000000000000000000ffffe00000021400030005000000030000000700000004000000060005000200000008000b000400000008000a00050000000a000100aaaaaaaaaaaa00000a000200b079c277c02e00001400010020010000000000000000000000000002"], 0x90}}, 0x4004044) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYRES64=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r5, 0x0, 0x2d, 0x9, @val=@netfilter={0x0, 0x0, 0x2c10, 0x1}}, 0x20) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00ddffffffffffffff000008000000", @ANYRES16=r5, @ANYRES8=r6], 0x50}, 0x4040041) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x260, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1c8, 0x206, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0x1ba, 0x410}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x8d, 0x7fff, 0x1, 'snmp_trap\x00', 'syz1\x00', {0xfff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e25, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000005400)={0x0, @in6={{0xa, 0x4e23, 0x46, @mcast1, 0x40}}}, 0x84) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x24}}, 0x0) socket$unix(0x1, 0x5, 0x0) 16.053906798s ago: executing program 0 (id=13682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000005f0001"], 0x14}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000000, 0xfa, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000a40)="890000f0ffda99b4b47380c988cafb8834234944c63125f8928b9a222be12bd9ef7eff3eb9a4ba641f3e30", 0x2b}, {&(0x7f00000001c0)="ff8603000000000000000053885850a0d78ee06f32d76ddf83", 0x19}], 0x2) 1.810157176s ago: executing program 32 (id=13675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x148}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040894}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1.723857304s ago: executing program 33 (id=13676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000001840)=""/4095, 0xfff}, {&(0x7f0000000000)=""/206, 0xce}, {&(0x7f0000002940)=""/246, 0xf6}], 0x7, &(0x7f0000002ac0)=""/5, 0x5}, 0x5fb5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xf3cf}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, 0x0}, 0x7f}], 0x400009f, 0x100, 0x0) 1.528490725s ago: executing program 34 (id=13672): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) (async) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800500030010000000040010800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x7f, 0x2002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x7f, 0x2002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000400)="2ed8eb6aea5f401a1cbb53ed67b8e22b7057e3d84e0fb378f4073c612b4fa2362e493488c58bd79cd373076914", 0x2d}], 0x1, &(0x7f0000000740)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xfe, 0x0, 0x9, [0x800, 0x6, 0xfffffff0, 0x6, 0x4, 0x5]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@noop, @generic={0x44, 0x5, "aad2a5"}, @noop, @cipso={0x86, 0x3c, 0x1, [{0x7, 0xc, "7f8e7c517cd3079e58ce"}, {0x0, 0xf, "d9ad353a4e82df206db9731fd9"}, {0x5, 0xf, "f91644d96e02874894049a9f54"}, {0x5, 0xc, "06a0567ee24affef7e75"}]}, @generic={0x86, 0xd, "f2e90b7fe0e4572685d9ae"}, @timestamp_addr={0x44, 0x34, 0x70, 0x1, 0x9, [{@multicast2, 0x10}, {@local, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@empty, 0x5}, {@private=0xa010102, 0xffffffff}, {@local, 0x9}]}, @ssrr={0x89, 0x13, 0x89, [@loopback, @remote, @remote, @remote]}, @lsrr={0x83, 0x17, 0x7a, [@dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x58, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x34, 0xca, 0x3, 0x5, [{@broadcast, 0x40}, {@remote, 0x5}, {@multicast2, 0x9}, {@broadcast, 0x2}, {@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xdbf}]}, @rr={0x7, 0xf, 0x3c, [@multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xb}]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x74}}, @ip_retopts={{0x10}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0xd9, [@local, @dev={0xac, 0x14, 0x14, 0x18}, @local, @broadcast, @remote]}]}}}], 0x200}, 0x80000) socket(0x10, 0x80002, 0x0) (async) r8 = socket(0x10, 0x80002, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001020010000000000000000000080000a20000000000a01010000000000000000050000000900010073797a30000000003c000000030a0103010073797a30000000000900030073797a320000000008000b400000000208000a4000000004140000001100010000000000000000000000000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001020010000000000000000000080000a20000000000a01010000000000000000050000000900010073797a30000000003c000000030a0103010073797a30000000000900030073797a320000000008000b400000000208000a4000000004140000001100010000000000000000000000000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtaction={0x110, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0xfc, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfd, 0x0, 0x8, 0x0, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x3}}}}, @m_skbmod={0xa0, 0x1c, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7f, 0x8, 0x2, 0x5, 0x5}, 0xb}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x35, 0x6, "fd2a632e1b7af99f6092d9aec1daaaea00698f2faf356d5c3dde81e891549115759a1594f3d5181eb894326337724305c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x110}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtaction={0x110, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0xfc, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfd, 0x0, 0x8, 0x0, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x3}}}}, @m_skbmod={0xa0, 0x1c, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7f, 0x8, 0x2, 0x5, 0x5}, 0xb}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x35, 0x6, "fd2a632e1b7af99f6092d9aec1daaaea00698f2faf356d5c3dde81e891549115759a1594f3d5181eb894326337724305c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x110}}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000180001002cbd7000ffdbdf25022020060004ff0b0000000008000200640101010c00168008000200ffffffff08000500ac1414aa5a769df23d4c52f3e765a31aa8c4c38ec18743ef535d645eca403576f1b52ae4a186712adb2dff897dfe7fabbf94a5e4a189b8044e755bce64ffa84b54bd869729fcb06e6940a4525a033b81c958f8c5f8bcff2b71bb4e4202aa2c81fec32350142bd186f268905d5599250ae6f0131e1efa5e75d98e39f5ad8c1f"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x8) r11 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xffffdffc}, 0x8) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1d) 1.304588615s ago: executing program 35 (id=13680): socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x40106183, &(0x7f0000000040)={{r0, 0x0, 0x3010c0, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008090}, 0x400c040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x3}, {0xa, 0xe}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xfffffffffffffeff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0xfffffffffffffffe, 0x12) 0s ago: executing program 36 (id=13682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000005f0001"], 0x14}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000000, 0xfa, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000a40)="890000f0ffda99b4b47380c988cafb8834234944c63125f8928b9a222be12bd9ef7eff3eb9a4ba641f3e30", 0x2b}, {&(0x7f00000001c0)="ff8603000000000000000053885850a0d78ee06f32d76ddf83", 0x19}], 0x2) kernel console output (not intermixed with test programs): 4] netlink: 'syz.1.12164': attribute type 1 has an invalid length. [ 1247.684509][T19271] netlink: 'syz.2.12162': attribute type 1 has an invalid length. [ 1247.824490][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1247.831778][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1247.839325][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1247.846972][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1247.854748][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1248.086120][T19300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1248.093447][T19300] IPv6: NLM_F_CREATE should be set when creating new route [ 1248.195202][T19300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.202688][T19300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.285867][T19300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.311228][T19300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.463871][T19318] netlink: 'syz.2.12174': attribute type 4 has an invalid length. [ 1248.488465][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12174'. [ 1248.653040][T19309] syzkaller0: entered promiscuous mode [ 1248.672272][T19309] syzkaller0: entered allmulticast mode [ 1248.691512][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.725468][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.748656][T19284] C speed is unknown, defaulting to 1000 [ 1248.754904][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.789674][T19284] xfrm0 speed is unknown, defaulting to 1000 [ 1248.795862][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.825032][T19335] netlink: 'syz.0.12175': attribute type 1 has an invalid length. [ 1248.942090][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12177'. [ 1249.098264][T19347] bond0: entered promiscuous mode [ 1249.116494][T19347] bond_slave_0: entered promiscuous mode [ 1249.132734][T19347] bond_slave_1: entered promiscuous mode [ 1249.153844][T19347] bond13: entered promiscuous mode [ 1249.159449][T19350] netlink: 'syz.1.12179': attribute type 64 has an invalid length. [ 1249.185955][T19347] batadv0: entered promiscuous mode [ 1249.217164][T19347] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1249.247005][T19347] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1249.273635][T19347] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 1249.283234][T19347] bond0: left promiscuous mode [ 1249.288987][T19347] bond_slave_0: left promiscuous mode [ 1249.294874][T19347] bond_slave_1: left promiscuous mode [ 1249.302343][T19347] bond13: left promiscuous mode [ 1249.309781][T19347] batadv0: left promiscuous mode [ 1249.361210][T19284] lo speed is unknown, defaulting to 1000 [ 1249.491441][T19367] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.12184'. [ 1249.687211][T19284] xfrm0 speed is unknown, defaulting to 1000 [ 1249.890720][T11292] Bluetooth: hci4: command tx timeout [ 1249.995875][T19284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.003182][T19284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.010493][T19284] bridge_slave_0: entered allmulticast mode [ 1250.017224][T19284] bridge_slave_0: entered promiscuous mode [ 1250.024696][T19284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.031897][T19284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.039172][T19284] bridge_slave_1: entered allmulticast mode [ 1250.045839][T19284] bridge_slave_1: entered promiscuous mode [ 1250.066829][T19284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.077990][T19284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.101570][T19284] team0: Port device team_slave_0 added [ 1250.109101][T19284] team0: Port device team_slave_1 added [ 1250.127948][T19284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.134897][T19284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.160816][T19284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.172475][T19284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.179459][T19284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.206392][T19284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.237990][T19284] hsr_slave_0: entered promiscuous mode [ 1250.244195][T19284] hsr_slave_1: entered promiscuous mode [ 1250.251071][T19284] debugfs: 'hsr0' already exists in 'hsr' [ 1250.256802][T19284] Cannot create hsr debugfs directory [ 1251.968009][T11292] Bluetooth: hci4: command tx timeout [ 1252.622371][T19385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1252.662490][T19284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1252.711735][T19284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1252.730073][T19284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1252.764266][T19284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1252.775527][T19413] __nla_validate_parse: 3 callbacks suppressed [ 1252.775543][T19413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12193'. [ 1252.792611][T19413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12193'. [ 1252.806541][T19413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12193'. [ 1252.816300][T19284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1252.833769][T19284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1252.852317][T19284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1252.893161][T19284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1253.076346][T19437] netlink: 81 bytes leftover after parsing attributes in process `syz.4.12199'. [ 1253.086840][T19436] netlink: 'syz.2.12200': attribute type 1 has an invalid length. [ 1253.116988][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12201'. [ 1253.149038][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12201'. [ 1253.173644][T19284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.236623][T19284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.275285][T24865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.282543][T24865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.346015][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.353311][ T5296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.447632][T19284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1253.471787][T19284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1253.658131][T19477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12210'. [ 1253.709598][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12210'. [ 1253.761158][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12213'. [ 1253.897014][T19495] syzkaller1: entered promiscuous mode [ 1253.941907][T19495] syzkaller1: entered allmulticast mode [ 1253.996379][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12216'. [ 1254.047536][T11292] Bluetooth: hci4: command tx timeout [ 1254.143485][T19510] netlink: 'syz.2.12219': attribute type 1 has an invalid length. [ 1254.164191][T19511] netlink: 'syz.2.12219': attribute type 1 has an invalid length. [ 1254.412824][T19529] mac80211_hwsim hwsim155 syzkaller0: entered promiscuous mode [ 1254.431908][T19529] mac80211_hwsim hwsim155 syzkaller0: entered allmulticast mode [ 1254.572449][T19536] netlink: 'syz.2.12227': attribute type 1 has an invalid length. [ 1254.584641][T19284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.689416][T19536] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1254.735163][T19536] netlink: 'syz.2.12227': attribute type 10 has an invalid length. [ 1254.743946][T19536] dummy0: entered promiscuous mode [ 1254.853337][T19284] veth0_vlan: entered promiscuous mode [ 1254.864394][T19284] veth1_vlan: entered promiscuous mode [ 1254.920637][T19284] veth0_macvtap: entered promiscuous mode [ 1254.939743][T19284] veth1_macvtap: entered promiscuous mode [ 1254.963368][T19284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.975885][T19284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.994321][ T5296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.016218][ T5296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.034796][T19557] netlink: 'syz.1.12234': attribute type 2 has an invalid length. [ 1255.042724][ T5296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.072324][T19566] netlink: 'syz.2.12236': attribute type 11 has an invalid length. [ 1255.094793][ T9428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.193583][T19564] x_tables: duplicate entry at hook 3 [ 1255.222619][T19574] vcan0: entered promiscuous mode [ 1255.238747][ T9428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.246598][ T9428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.319270][ T5296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.347308][ T5296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.620744][T19609] netlink: 'syz.4.12248': attribute type 5 has an invalid length. [ 1255.653473][T19611] netlink: 'syz.3.12250': attribute type 2 has an invalid length. [ 1255.683839][T19616] Bluetooth: MGMT ver 1.23 [ 1255.955304][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1255.963310][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1255.974349][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1255.982229][T19635] lo: entered allmulticast mode [ 1255.988508][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1255.996236][T19635] tunl0: entered allmulticast mode [ 1256.001750][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1256.009272][T19635] gre0: entered allmulticast mode [ 1256.021093][T19635] gretap0: entered allmulticast mode [ 1256.033482][T19635] erspan0: entered allmulticast mode [ 1256.045154][T19635] ip_vti0: entered allmulticast mode [ 1256.092585][T19635] ip6_vti0: entered allmulticast mode [ 1256.115470][T19635] sit0: entered allmulticast mode [ 1256.121093][T19635] ip6tnl0: entered allmulticast mode [ 1256.126990][T19635] ip6gre0: entered allmulticast mode [ 1256.132771][T19635] syz_tun: entered allmulticast mode [ 1256.148665][T11292] Bluetooth: hci4: command tx timeout [ 1256.552231][T19633] C speed is unknown, defaulting to 1000 [ 1256.564114][T19633] xfrm0 speed is unknown, defaulting to 1000 [ 1256.755700][T19676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.814689][T19676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.141717][T19633] lo speed is unknown, defaulting to 1000 [ 1257.443298][T19633] xfrm0 speed is unknown, defaulting to 1000 [ 1257.849121][T19633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.857055][T19633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.866209][T19633] bridge_slave_0: entered allmulticast mode [ 1257.874890][T19633] bridge_slave_0: entered promiscuous mode [ 1257.886016][T19633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.895060][T19633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.903430][T19633] bridge_slave_1: entered allmulticast mode [ 1257.913652][T19633] bridge_slave_1: entered promiscuous mode [ 1257.961530][T19633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.975682][T19633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.036135][T19633] team0: Port device team_slave_0 added [ 1258.047107][T19633] team0: Port device team_slave_1 added [ 1258.093655][T19633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.105942][T19633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.138620][T11292] Bluetooth: hci1: command tx timeout [ 1258.164524][T19633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.183261][T19755] __nla_validate_parse: 20 callbacks suppressed [ 1258.183281][T19755] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.12292'. [ 1258.237105][T19633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.250905][T19759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12296'. [ 1258.259973][T19633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.260007][T19633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.314402][T19633] hsr_slave_0: entered promiscuous mode [ 1258.320816][T19633] hsr_slave_1: entered promiscuous mode [ 1258.326999][T19633] debugfs: 'hsr0' already exists in 'hsr' [ 1258.332756][T19633] Cannot create hsr debugfs directory [ 1258.440673][T19633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.526541][T19739] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1258.580834][T19633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.681783][T19778] xt_bpf: check failed: parse error [ 1258.694087][T19633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.795884][T19633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.816774][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12304'. [ 1258.831079][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12304'. [ 1258.841440][T19785] netlink: 'syz.0.12304': attribute type 12 has an invalid length. [ 1258.866413][T19785] netlink: 'syz.0.12304': attribute type 11 has an invalid length. [ 1258.994930][T19633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1259.014797][T19801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12307'. [ 1259.015479][T19633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1259.033977][T19633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1259.055989][T19633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1259.084887][T19633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1259.095421][T19804] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12308'. [ 1259.095969][T19633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1259.117696][T19633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1259.131898][T19633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1259.151071][T19805] syzkaller0: entered promiscuous mode [ 1259.161211][T19805] syzkaller0: entered allmulticast mode [ 1259.256801][T19821] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12313'. [ 1259.272895][T19821] openvswitch: netlink: Flow actions attr not present in new flow. [ 1259.338083][T19633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.361698][T19633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.386605][ T9428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.393737][ T9428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.423233][T19830] netlink: 'syz.0.12315': attribute type 4 has an invalid length. [ 1259.438341][T19830] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12315'. [ 1259.439114][T24865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.454561][T24865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.468974][T19830] .`: renamed from bond0 [ 1259.691629][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12318'. [ 1259.748781][T19841] IPVS: set_ctl: invalid protocol: 103 172.30.1.4:20003 [ 1259.808545][T11292] Bluetooth: hci0: command 0x0405 tx timeout [ 1259.934073][T19862] netlink: 'syz.3.12317': attribute type 13 has an invalid length. [ 1259.962240][T19862] netlink: 'syz.3.12317': attribute type 58 has an invalid length. [ 1259.986196][T19862] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12317'. [ 1260.057619][T19633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.096052][T19633] veth0_vlan: entered promiscuous mode [ 1260.115647][T19633] veth1_vlan: entered promiscuous mode [ 1260.143510][T19633] veth0_macvtap: entered promiscuous mode [ 1260.156114][T19633] veth1_macvtap: entered promiscuous mode [ 1260.172402][T19633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.187051][T19633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.201551][T24865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.212106][T24865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.222679][T11292] Bluetooth: hci1: command tx timeout [ 1260.229013][T24865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.239557][T24865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.287631][T11292] Bluetooth: hci1: command tx timeout [ 1262.668854][T19841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1262.773912][T24868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.812156][T24868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.840818][T19890] netlink: 'syz.3.12329': attribute type 1 has an invalid length. [ 1262.908655][T24868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.931291][T24868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.113617][T19901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.293697][T19917] __nla_validate_parse: 2 callbacks suppressed [ 1263.293732][T19917] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12336'. [ 1263.329264][T19925] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12338'. [ 1263.353789][T19925] 0·: renamed from hsr0 (while UP) [ 1263.369753][T19925] 0·: entered allmulticast mode [ 1263.378766][T19925] hsr_slave_0: entered allmulticast mode [ 1263.385296][T19925] hsr_slave_1: entered allmulticast mode [ 1263.394303][T19930] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12338'. [ 1263.412775][T19929] netlink: 'syz.4.12340': attribute type 3 has an invalid length. [ 1263.422974][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12340'. [ 1263.431867][T19925] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1263.989524][T19953] xt_l2tp: v2 doesn't support IP mode [ 1264.012666][T19955] rdma_rxe: rxe_newlink: failed to add hsr0 [ 1264.369065][T11292] Bluetooth: hci1: command tx timeout [ 1266.375418][T19929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1266.686668][T19990] netlink: 'syz.4.12357': attribute type 13 has an invalid length. [ 1266.697065][T19990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12357'. [ 1266.714541][ T5930] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.724319][T19990] netlink: 'syz.4.12357': attribute type 13 has an invalid length. [ 1266.732899][ T5930] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.745066][T19990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12357'. [ 1266.755566][ T5930] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.764756][ T5930] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.845247][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12360'. [ 1267.033701][T20016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12366'. [ 1267.064904][T20018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12367'. [ 1267.078552][T20018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12367'. [ 1267.305437][T20040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1267.366635][T20044] tipc: Started in network mode [ 1267.372786][T20044] tipc: Node identity 080211000001, cluster identity 4711 [ 1267.381254][T20044] tipc: Enabled bearer , priority 0 [ 1267.389360][T20044] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1268.065212][T20080] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1268.504907][T20109] netlink: 'syz.4.12392': attribute type 12 has an invalid length. [ 1268.532831][T27822] tipc: Node number set to 134418688 [ 1268.707747][T20134] __nla_validate_parse: 5 callbacks suppressed [ 1268.707766][T20134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12401'. [ 1268.988924][T20163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12408'. [ 1269.017222][ T5296] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.031543][ T5296] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.054346][ T5296] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.119493][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12411'. [ 1269.135083][ T5296] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.208904][T20169] tipc: Resetting bearer [ 1269.309044][T20186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12410'. [ 1269.513315][T24868] bridge_slave_1: left allmulticast mode [ 1269.523791][T24868] bridge_slave_1: left promiscuous mode [ 1269.533266][T24868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.572555][T24868] bridge_slave_0: left allmulticast mode [ 1269.607806][T24868] bridge_slave_0: left promiscuous mode [ 1269.634931][T24868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.684441][T24868] pimreg: left allmulticast mode [ 1269.712773][T24868] pimreg3: left allmulticast mode [ 1269.810011][T20214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12418'. [ 1269.840402][T20207] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12419'. [ 1269.859404][T20216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12418'. [ 1269.893529][T24868] xfrm0 (unregistering): left promiscuous mode [ 1269.902839][T24868] team0: Port device xfrm0 removed [ 1270.027455][T24868] bond7 (unregistering): (slave geneve4): Releasing active interface [ 1270.470584][T24868] bond9 (unregistering): (slave bridge3): Releasing active interface [ 1270.945323][T24868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.961290][T24868] bond0 (unregistering): (slave bond11): Releasing backup interface [ 1270.972031][T24868] bond0 (unregistering): Released all slaves [ 1270.982151][T24868] bond1 (unregistering): Released all slaves [ 1270.994914][T24868] bond2 (unregistering): Released all slaves [ 1271.006802][T24868] bond3 (unregistering): Released all slaves [ 1271.018948][T24868] bond4 (unregistering): Released all slaves [ 1271.034400][T24868] bond5 (unregistering): (slave lo): Releasing backup interface [ 1271.044437][T24868] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1271.059125][T24868] bond5 (unregistering): Released all slaves [ 1271.071159][T24868] bond6 (unregistering): Released all slaves [ 1271.083101][T24868] bond7 (unregistering): Released all slaves [ 1271.095999][T24868] bond8 (unregistering): Released all slaves [ 1271.106281][T24868] bond9 (unregistering): Released all slaves [ 1271.118419][T24868] bond10 (unregistering): Released all slaves [ 1271.130268][T24868] bond11 (unregistering): Released all slaves [ 1271.140541][T24868] bond12 (unregistering): Released all slaves [ 1271.151366][T24868] bond13 (unregistering): Released all slaves [ 1271.161355][T24868] bond14 (unregistering): Released all slaves [ 1271.176562][T24868] bond15 (unregistering): Released all slaves [ 1271.312137][T24868] tipc: Left network mode [ 1271.378909][T24868] IPVS: stopping master sync thread 3273 ... [ 1271.461367][T20244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12426'. [ 1271.579968][T20255] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 1271.624514][T20258] vlan1: entered allmulticast mode [ 1271.659956][T20258] veth0_vlan: entered allmulticast mode [ 1271.688063][T20258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12429'. [ 1271.970892][T20281] bridge0: port 3(vlan2) entered blocking state [ 1271.983964][T20281] bridge0: port 3(vlan2) entered disabled state [ 1271.996066][T20281] vlan2: entered allmulticast mode [ 1272.004144][T20281] vlan2: entered promiscuous mode [ 1272.054331][T20293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12436'. [ 1272.139357][T20286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.156095][T20286] bridge_slave_1: left allmulticast mode [ 1272.168945][T20286] bridge_slave_1: left promiscuous mode [ 1272.180923][T20286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.215954][T20286] bond0: (slave bond_slave_0): Releasing backup interface [ 1272.239541][T20286] bond0: (slave bond_slave_1): Releasing backup interface [ 1272.263041][T20286] team0: Port device team_slave_0 removed [ 1272.273189][T20286] team0: Port device team_slave_1 removed [ 1272.280007][T20286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.287561][T20286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.295984][T20286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1272.303575][T20286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.312650][T20286] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1272.419475][T20309] vlan2: entered allmulticast mode [ 1272.677900][T20331] netlink: 'syz.0.12438': attribute type 16 has an invalid length. [ 1272.728584][T20331] netlink: 'syz.0.12438': attribute type 17 has an invalid length. [ 1272.759179][T20331] netlink: 'syz.0.12438': attribute type 27 has an invalid length. [ 1272.959755][T20316] C speed is unknown, defaulting to 1000 [ 1273.023521][T20347] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1273.145362][T20316] xfrm0 speed is unknown, defaulting to 1000 [ 1273.313029][T24868] veth1_macvtap: left promiscuous mode [ 1273.337585][T24868] veth1_vlan: left promiscuous mode [ 1273.349575][T24868] veth0_vlan: left promiscuous mode [ 1273.666588][T27820] syz0: Port: 1 Link DOWN [ 1273.909315][T20316] lo speed is unknown, defaulting to 1000 [ 1273.952090][T20382] netlink: 'syz.3.12453': attribute type 4 has an invalid length. [ 1274.006390][T20388] bond5: option lp_interval: invalid value (0) [ 1274.012597][T20388] bond5: option lp_interval: allowed values 1 - 2147483647 [ 1274.022634][T20391] syz.4.12457: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1274.037431][T20391] CPU: 1 UID: 0 PID: 20391 Comm: syz.4.12457 Not tainted syzkaller #0 PREEMPT(full) [ 1274.037455][T20391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1274.037468][T20391] Call Trace: [ 1274.037476][T20391] [ 1274.037484][T20391] dump_stack_lvl+0xe8/0x150 [ 1274.037511][T20391] warn_alloc+0x249/0x340 [ 1274.037538][T20391] ? __pfx_stack_trace_save+0x10/0x10 [ 1274.037567][T20391] ? __pfx_warn_alloc+0x10/0x10 [ 1274.037595][T20391] ? __kasan_kmalloc+0x93/0xb0 [ 1274.037620][T20391] ? __kmalloc_cache_noprof+0x318/0x660 [ 1274.037645][T20391] ? xskq_create+0x56/0x170 [ 1274.037668][T20391] ? xsk_init_queue+0x8a/0xe0 [ 1274.037688][T20391] ? xsk_setsockopt+0x52a/0x960 [ 1274.037707][T20391] ? do_sock_setsockopt+0x17c/0x1b0 [ 1274.037733][T20391] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1274.037759][T20391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.037782][T20391] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1274.037822][T20391] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1274.037851][T20391] ? __kasan_kmalloc+0x93/0xb0 [ 1274.037923][T20391] vmalloc_user_noprof+0xad/0xe0 [ 1274.037969][T20391] ? xskq_create+0xbf/0x170 [ 1274.037995][T20391] xskq_create+0xbf/0x170 [ 1274.038022][T20391] xsk_init_queue+0x8a/0xe0 [ 1274.038048][T20391] xsk_setsockopt+0x52a/0x960 [ 1274.038074][T20391] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1274.038098][T20391] ? __pfx_aa_sk_perm+0x10/0x10 [ 1274.038129][T20391] ? lock_release+0x4b/0x3c0 [ 1274.038161][T20391] ? aa_sock_opt_perm+0xff/0x1a0 [ 1274.038184][T20391] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1274.038211][T20391] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1274.038235][T20391] do_sock_setsockopt+0x17c/0x1b0 [ 1274.038267][T20391] __x64_sys_setsockopt+0x13d/0x1b0 [ 1274.038297][T20391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.038319][T20391] do_syscall_64+0x174/0x580 [ 1274.038346][T20391] ? trace_irq_disable+0x3b/0x140 [ 1274.038375][T20391] ? clear_bhb_loop+0x40/0x90 [ 1274.038399][T20391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.038420][T20391] RIP: 0033:0x7f6a23f9ce59 [ 1274.038440][T20391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.038458][T20391] RSP: 002b:00007f6a24e94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1274.038482][T20391] RAX: ffffffffffffffda RBX: 00007f6a24215fa0 RCX: 00007f6a23f9ce59 [ 1274.038498][T20391] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1274.038512][T20391] RBP: 00007f6a24032e6f R08: 0000000000000004 R09: 0000000000000000 [ 1274.038526][T20391] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1274.038540][T20391] R13: 00007f6a24216038 R14: 00007f6a24215fa0 R15: 00007fff15527458 [ 1274.038567][T20391] [ 1274.038576][T20391] Mem-Info: [ 1274.101669][T20388] bond5 (unregistering): Released all slaves [ 1274.286546][T20397] __nla_validate_parse: 7 callbacks suppressed [ 1274.286587][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12458'. [ 1274.331390][T20399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12459'. [ 1274.339045][T20391] active_anon:6296 inactive_anon:0 isolated_anon:0 [ 1274.339045][T20391] active_file:3024 inactive_file:40675 isolated_file:0 [ 1274.339045][T20391] unevictable:768 dirty:85 writeback:0 [ 1274.339045][T20391] slab_reclaimable:14736 slab_unreclaimable:151602 [ 1274.339045][T20391] mapped:30577 shmem:1304 pagetables:1486 [ 1274.339045][T20391] sec_pagetables:0 bounce:0 [ 1274.339045][T20391] kernel_misc_reclaimable:0 [ 1274.339045][T20391] free:1248385 free_pcp:24132 free_cma:0 [ 1274.442609][T20391] Node 0 active_anon:25084kB inactive_anon:0kB active_file:12096kB inactive_file:162500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24100kB dirty:340kB writeback:0kB shmem:3680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18112kB pagetables:5808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1274.476976][T20391] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98208kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1274.516191][T20316] xfrm0 speed is unknown, defaulting to 1000 [ 1274.550808][ T12] smc: removing ib device syz0 [ 1274.576895][T20391] Node 0 DMA free:11236kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1274.609664][T20391] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1274.617092][T20391] Node 0 DMA32 free:1283428kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25084kB inactive_anon:0kB active_file:12096kB inactive_file:162500kB unevictable:1536kB writepending:340kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:42412kB local_pcp:21040kB free_cma:0kB [ 1274.662135][T20391] lowmem_reserve[]: 0 0 0 0 0 [ 1274.664307][ T12] smbdirect: ib_dev[syz0] removed [ 1274.686807][T20391] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1274.764186][T20391] lowmem_reserve[]: 0 0 0 0 0 [ 1274.769340][T20391] Node 1 Normal free:3698176kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:54752kB local_pcp:29376kB free_cma:0kB [ 1274.803269][T20391] lowmem_reserve[]: 0 0 0 0 0 [ 1274.808250][T20391] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11236kB [ 1274.825037][T20391] Node 0 DMA32: 10926*4kB (UME) 10796*8kB (UM) 5313*16kB (UME) 438*32kB (UME) 210*64kB (UM) 377*128kB (UM) 845*256kB (UME) 436*512kB (UME) 258*1024kB (UM) 141*2048kB (UME) 0*4096kB = 1283304kB [ 1274.845884][T20415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12463'. [ 1274.875846][T20391] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1274.888251][T20391] Node 1 Normal: 4*4kB (U) 7*8kB (UM) 14*16kB (UM) 12*32kB (UM) 11*64kB (UM) 10*128kB (UM) 8*256kB (UM) 6*512kB (UM) 6*1024kB (UM) 3*2048kB (U) 898*4096kB (UM) = 3698280kB [ 1274.906909][T20391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1274.917974][T20391] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1274.927577][T20391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1274.938186][T20391] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1274.947726][T20391] 44999 total pagecache pages [ 1274.952576][T20391] 0 pages in swap cache [ 1274.956765][T20391] Free swap = 124996kB [ 1274.963445][T20391] Total swap = 124996kB [ 1274.968088][T20391] 2097051 pages RAM [ 1274.971995][T20391] 0 pages HighMem/MovableOnly [ 1274.976881][T20391] 427124 pages reserved [ 1274.981559][T20391] 0 pages cma reserved [ 1275.062875][T20406] vlan1 (unregistering): left allmulticast mode [ 1275.069188][T20406] veth0_vlan (unregistering): left allmulticast mode [ 1275.249395][T20412] syzkaller0: entered promiscuous mode [ 1275.255215][T20412] syzkaller0: entered allmulticast mode [ 1275.354062][T20412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12462'. [ 1275.593507][T20441] netlink: 'syz.3.12467': attribute type 21 has an invalid length. [ 1275.613352][T20441] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12467'. [ 1275.853168][T20441] netlink: 'syz.3.12467': attribute type 5 has an invalid length. [ 1275.879541][T20441] netlink: 'syz.3.12467': attribute type 6 has an invalid length. [ 1275.917634][T20441] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12467'. [ 1275.998473][T20452] dvmrp0: entered allmulticast mode [ 1276.246192][T20459] tipc: Started in network mode [ 1276.270807][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12476'. [ 1276.305114][T20459] tipc: Node identity e0000001, cluster identity 4711 [ 1276.345603][T20459] tipc: Enabling of bearer rejected, failed to enable media [ 1276.371480][T20462] Cannot find add_set index 65532 as target [ 1276.411218][T20468] syzkaller0: entered promiscuous mode [ 1276.440370][T20468] syzkaller0: entered allmulticast mode [ 1276.605022][T20482] syzkaller0: entered promiscuous mode [ 1276.648958][T20482] syzkaller0: entered allmulticast mode [ 1277.106936][T24868] IPVS: stop unused estimator thread 0... [ 1277.365120][T20513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12489'. [ 1277.397829][T20513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12489'. [ 1277.423427][T20519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12490'. [ 1277.433835][T20523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1277.441132][T20523] IPv6: NLM_F_CREATE should be set when creating new route [ 1277.448391][T20523] IPv6: NLM_F_CREATE should be set when creating new route [ 1277.464771][T24868] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1277.492266][T24868] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1277.506778][T20523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1277.525436][T24868] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1277.544867][T24868] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1277.624061][T20527] netlink: 'syz.1.12493': attribute type 1 has an invalid length. [ 1277.661394][T20530] netlink: 'syz.1.12493': attribute type 1 has an invalid length. [ 1277.673153][T20529] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1277.696908][T20529] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1277.758404][T20529] gretap1: entered promiscuous mode [ 1277.778135][T20529] gretap1: entered allmulticast mode [ 1277.837785][T20547] syzkaller0: entered promiscuous mode [ 1277.848799][T20547] syzkaller0: entered allmulticast mode [ 1278.048864][T20560] netlink: 'syz.2.12504': attribute type 1 has an invalid length. [ 1278.059364][T20560] netlink: 'syz.2.12504': attribute type 1 has an invalid length. [ 1278.201218][T20570] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 1278.253644][T20562] syzkaller0: entered promiscuous mode [ 1278.262501][T20562] syzkaller0: entered allmulticast mode [ 1278.284414][T20562] veth0: entered promiscuous mode [ 1278.296595][T20574] netlink: 'syz.1.12508': attribute type 9 has an invalid length. [ 1278.307021][T20562] veth0 (unregistering): left promiscuous mode [ 1278.664095][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1278.674545][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.683843][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1278.696653][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.715113][T20593] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1278.728035][T20593] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.758428][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1278.783274][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.801625][T20604] xt_SECMARK: invalid mode: 9 [ 1278.865617][T20613] xt_hashlimit: size too large, truncated to 1048576 [ 1279.506742][T20664] x_tables: duplicate underflow at hook 2 [ 1279.640667][T20674] __nla_validate_parse: 7 callbacks suppressed [ 1279.640703][T20674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12536'. [ 1279.760972][T20678] netlink: 'syz.2.12539': attribute type 21 has an invalid length. [ 1279.787534][T20678] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12539'. [ 1279.815630][T20678] netlink: 'syz.2.12539': attribute type 4 has an invalid length. [ 1279.816246][T20679] netlink: 'syz.2.12539': attribute type 21 has an invalid length. [ 1279.848651][T20678] netlink: 'syz.2.12539': attribute type 5 has an invalid length. [ 1279.867231][T20678] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12539'. [ 1279.887331][T20679] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12539'. [ 1279.916426][T20679] netlink: 'syz.2.12539': attribute type 4 has an invalid length. [ 1279.924410][T20679] netlink: 'syz.2.12539': attribute type 5 has an invalid length. [ 1279.932238][T20679] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12539'. [ 1280.022207][T20703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12544'. [ 1280.106194][T20711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12544'. [ 1280.150661][T20711] nbd: device at index 64 is going down [ 1280.163587][T20720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12546'. [ 1280.212678][T20722] netlink: 71 bytes leftover after parsing attributes in process `syz.1.12547'. [ 1280.228711][T20725] tipc: Enabling of bearer rejected, already enabled [ 1280.353653][T20734] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1280.389811][T20725] tipc: Resetting bearer [ 1280.464644][T20170] udevd[20170]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1280.526011][T20170] udevd[20170]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1280.545618][T20737] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12551'. [ 1280.566956][T20743] netlink: 'syz.0.12552': attribute type 1 has an invalid length. [ 1280.607218][T20743] bond0: (slave geneve3): making interface the new active one [ 1280.617204][T20743] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 1280.626996][T24865] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1280.637031][T24865] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1280.648477][T24865] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1280.656822][T24865] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1280.673025][T20743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.722011][T20754] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20002 [ 1280.806149][T20759] syzkaller0: entered promiscuous mode [ 1280.812425][T20759] syzkaller0: entered allmulticast mode [ 1281.116075][T20779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1281.324307][T20789] bond1 (unregistering): Released all slaves [ 1281.373191][ T808] IPVS: starting estimator thread 0... [ 1281.470683][T20797] IPVS: using max 40 ests per chain, 96000 per kthread [ 1282.333717][T20878] IPv6: NLM_F_CREATE should be specified when creating new route [ 1282.769723][T20912] IPv6: NLM_F_CREATE should be specified when creating new route [ 1282.802873][T20912] bond2: option xmit_hash_policy: invalid value (64) [ 1282.811204][T20912] bond2 (unregistering): Released all slaves [ 1282.879121][T20915] tap0: tun_chr_ioctl cmd 1074025672 [ 1282.884904][T20915] tap0: ignored: set checksum disabled [ 1283.246311][T20944] validate_nla: 8 callbacks suppressed [ 1283.246330][T20944] netlink: 'syz.2.12610': attribute type 1 has an invalid length. [ 1283.522748][T20968] vlan2: entered allmulticast mode [ 1283.540970][T20968] bond0: entered allmulticast mode [ 1283.567166][T20968] bond_slave_0: entered allmulticast mode [ 1283.610167][T20968] bond_slave_1: entered allmulticast mode [ 1283.809864][T20989] syzkaller1: entered promiscuous mode [ 1283.820988][T20989] syzkaller1: entered allmulticast mode [ 1284.018055][T21018] netlink: 'syz.4.12631': attribute type 8 has an invalid length. [ 1284.127851][T21025] mac80211_hwsim hwsim155 syzkaller0: left promiscuous mode [ 1284.135217][T21025] mac80211_hwsim hwsim155 syzkaller0: left allmulticast mode [ 1284.154193][T21025] tipc: Resetting bearer [ 1284.162043][ T30] audit: type=1800 audit(1782157880.502:28): pid=21015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12632" name="memory.events" dev="tmpfs" ino=2844 res=0 errno=0 [ 1284.332164][T21041] netlink: 'syz.4.12638': attribute type 1 has an invalid length. [ 1284.366013][T21042] netlink: 'syz.4.12638': attribute type 1 has an invalid length. [ 1284.422477][ T5930] tipc: Subscription rejected, illegal request [ 1284.432213][T21042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1284.810174][T21081] netlink: 'syz.2.12651': attribute type 1 has an invalid length. [ 1284.862772][T21081] bond5: (slave bridge6): making interface the new active one [ 1284.871219][T21081] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 1284.883796][T21086] __nla_validate_parse: 18 callbacks suppressed [ 1284.883827][T21086] netlink: 180 bytes leftover after parsing attributes in process `syz.4.12652'. [ 1284.942687][T21089] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12653'. [ 1285.330509][T21119] macsec0: entered promiscuous mode [ 1285.336241][T21119] batadv0: entered promiscuous mode [ 1285.343361][T21119] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 1285.381422][T21122] syzkaller0: entered promiscuous mode [ 1285.387125][T21122] syzkaller0: entered allmulticast mode [ 1285.396479][T21122] 0: reclassify loop, rule prio 0, protocol 800 [ 1285.550342][T21133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12668'. [ 1285.561006][T21133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12668'. [ 1285.570331][T21134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12668'. [ 1285.646469][T21142] ip6t_rpfilter: unknown options [ 1286.176074][ T30] audit: type=1107 audit(1782157882.522:29): pid=21178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='7Ýopø>´±ÛÅÜOF2cWf.8»;)x0ó…µ÷­M7cžXn¾NjzÀ·ð™$Üt+÷¾W¦^²~±§§§g¿©XðF¥1/ƒÌp+Z—‰²ÄTëŒxFãMìQ}9Žyuºâ'ÏŸãLµlhC4' [ 1286.294874][T21190] vlan0: entered promiscuous mode [ 1286.320723][T21190] team0: Port device vlan0 added [ 1286.371095][T21194] tipc: Started in network mode [ 1286.388089][T21194] tipc: Node identity 9a87b4d26637, cluster identity 4711 [ 1286.409203][T21194] tipc: Enabled bearer , priority 0 [ 1286.434261][T21204] openvswitch: netlink: IP tunnel dst address not specified [ 1286.509471][T21194] syzkaller0: entered promiscuous mode [ 1286.515069][T21194] syzkaller0: entered allmulticast mode [ 1286.522046][T21194] tipc: Resetting bearer [ 1286.536599][T24865] tipc: Resetting bearer [ 1286.547126][T21212] netlink: 'syz.3.12696': attribute type 1 has an invalid length. [ 1286.558754][T21193] tipc: Resetting bearer [ 1286.646895][T21193] tipc: Disabling bearer [ 1286.683589][T21212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1286.719585][T21218] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1286.769614][T21229] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 1286.975384][T21243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.010645][T21248] netlink: 404 bytes leftover after parsing attributes in process `syz.4.12705'. [ 1287.023652][T21243] atomic_op ffff88807c350998 conn xmit_atomic 0000000000000000 [ 1287.045945][T21249] netlink: 'syz.0.12704': attribute type 1 has an invalid length. [ 1287.081660][T21249] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12704'. [ 1287.122265][T21253] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1287.135691][T21255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12706'. [ 1287.146566][T21255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12706'. [ 1287.156490][T21257] netlink: 'syz.0.12704': attribute type 1 has an invalid length. [ 1287.169406][T21257] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12704'. [ 1287.218363][T21263] netlink: 'syz.4.12709': attribute type 1 has an invalid length. [ 1287.380873][T21263] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1287.448664][T21270] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1287.480592][T21278] bond4 (unregistering): Released all slaves [ 1287.556777][T21280] tipc: Resetting bearer [ 1287.831426][T21307] veth0: entered promiscuous mode [ 1287.849067][T21304] veth0: left promiscuous mode [ 1287.972166][T21319] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1288.068205][T21334] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1288.436120][T21366] bond6: Removing last arp target with arp_interval on [ 1288.444150][T21361] syzkaller0: entered promiscuous mode [ 1288.463047][T21361] syzkaller0: entered allmulticast mode [ 1288.728854][T21392] veth0: entered promiscuous mode [ 1288.742423][T21392] veth0: left promiscuous mode [ 1288.903069][T21409] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1288.911599][T21407] netlink: 'syz.2.12748': attribute type 12 has an invalid length. [ 1288.911620][T21407] netlink: 'syz.2.12748': attribute type 29 has an invalid length. [ 1288.911641][T21407] netlink: 'syz.2.12748': attribute type 1 has an invalid length. [ 1289.035814][T21416] tc_dump_action: action bad kind [ 1289.204818][T21441] geneve2: entered promiscuous mode [ 1289.243158][T21444] sctp: [Deprecated]: syz.2.12760 (pid 21444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1289.243158][T21444] Use struct sctp_sack_info instead [ 1289.314986][T21451] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1289.336529][T21451] netlink: 'syz.4.12763': attribute type 1 has an invalid length. [ 1289.363756][T21451] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1289.404709][T21451] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1289.428370][T21451] bond3: (slave veth0_to_bond): Releasing active interface [ 1289.447206][T21451] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1289.534744][T21470] netlink: 'syz.2.12770': attribute type 1 has an invalid length. [ 1289.566782][T21470] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1289.593715][T21470] bond7: entered promiscuous mode [ 1289.599755][T21470] bond7: entered allmulticast mode [ 1289.729180][T21489] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1289.918934][T21503] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1289.928651][T21501] __nla_validate_parse: 19 callbacks suppressed [ 1289.928671][T21501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12777'. [ 1289.967028][T21501] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1290.191374][T21514] xt_hashlimit: size too large, truncated to 1048576 [ 1290.293946][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12784'. [ 1290.396665][T21522] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12785'. [ 1290.487975][T21527] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12786'. [ 1290.498448][T21528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12788'. [ 1290.599955][T21535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1290.610182][T21535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.621399][T21535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1290.629655][T21535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.810209][T21548] xt_CONNSECMARK: invalid mode: 0 [ 1290.844961][T21553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12796'. [ 1290.937056][T21561] dummy0: left promiscuous mode [ 1290.969013][T21561] bond2: left promiscuous mode [ 1290.982179][T21561] bond2: left allmulticast mode [ 1291.042118][T21561] vlan2: left allmulticast mode [ 1291.051297][T21561] bond0: left allmulticast mode [ 1291.056818][T21561] bond_slave_0: left allmulticast mode [ 1291.068351][T21561] bond_slave_1: left allmulticast mode [ 1291.084441][T21561] batadv0: left promiscuous mode [ 1291.100962][T21561] macsec0: left promiscuous mode [ 1291.122294][T21561] bond7: left promiscuous mode [ 1291.138436][T21561] bond7: left allmulticast mode [ 1291.146742][T24865] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.180684][T24865] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.212677][T24865] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.226772][T24865] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.243242][T21571] team0: Device xfrm0 is of different type [ 1291.344057][T21573] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12802'. [ 1291.362782][T21573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12802'. [ 1291.376321][T21576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12801'. [ 1291.396904][T21584] sctp: [Deprecated]: syz.4.12804 (pid 21584) Use of int in maxseg socket option. [ 1291.396904][T21584] Use struct sctp_assoc_value instead [ 1291.413273][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12802'. [ 1291.443509][T21579] sctp: [Deprecated]: syz.4.12804 (pid 21579) Use of int in maxseg socket option. [ 1291.443509][T21579] Use struct sctp_assoc_value instead [ 1291.526364][T21589] syzkaller0: entered promiscuous mode [ 1291.534559][T21589] syzkaller0: entered allmulticast mode [ 1291.544119][T21589] tipc: Enabled bearer , priority 0 [ 1291.558317][T21595] netlink: 'syz.4.12808': attribute type 1 has an invalid length. [ 1291.593723][T21595] bond5: entered promiscuous mode [ 1291.599411][T21595] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1291.612761][T21589] tipc: Resetting bearer [ 1291.671638][T21595] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1291.679893][T21599] netlink: 'syz.3.12809': attribute type 1 has an invalid length. [ 1291.688205][T21595] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 1291.698198][T21595] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1291.709226][T21595] bond5: (slave vti0): making interface the new active one [ 1291.716468][T21595] vti0: entered promiscuous mode [ 1291.722959][T21595] vti0: left promiscuous mode [ 1291.737910][T21603] bond0: entered allmulticast mode [ 1291.743315][T21603] bond_slave_0: entered allmulticast mode [ 1291.749333][T21603] bond_slave_1: entered allmulticast mode [ 1291.786944][T21588] tipc: Resetting bearer [ 1291.829411][T21588] tipc: Disabling bearer [ 1291.897026][T21616] tipc: Failed to remove unknown binding: 66,0,0/0:77003807/77003808 [ 1291.943127][T21616] tipc: Failed to remove unknown binding: 66,0,0/0:77003807/77003808 [ 1292.121667][T21630] x_tables: duplicate underflow at hook 2 [ 1292.148253][T21632] bridge1: entered promiscuous mode [ 1292.179518][T21632] bridge1: entered allmulticast mode [ 1292.223667][T21641] hsr0: entered promiscuous mode [ 1292.364704][T21645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.672997][T21681] netlink: 'syz.2.12834': attribute type 3 has an invalid length. [ 1293.194960][T21718] syzkaller0: entered promiscuous mode [ 1293.212231][T21718] syzkaller0: entered allmulticast mode [ 1293.273153][T21713] netlink: 'syz.0.12844': attribute type 1 has an invalid length. [ 1293.314928][T21727] IPv6: Can't replace route, no match found [ 1293.541110][T21747] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1293.551707][T21747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1293.572677][T21746] sctp: [Deprecated]: syz.1.12853 (pid 21746) Use of int in maxseg socket option. [ 1293.572677][T21746] Use struct sctp_assoc_value instead [ 1293.965268][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1293.973845][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1293.982841][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1293.996372][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1294.006097][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1294.163370][T21779] Unsupported ieee802154 address type: 0 [ 1294.414423][T21780] syzkaller1: entered promiscuous mode [ 1294.441466][T21780] syzkaller1: entered allmulticast mode [ 1294.692723][T21793] netlink: 'syz.1.12864': attribute type 2 has an invalid length. [ 1294.854873][T21770] C speed is unknown, defaulting to 1000 [ 1294.863240][T21770] xfrm0 speed is unknown, defaulting to 1000 [ 1294.930660][T21831] Cannot find add_set index 2 as target [ 1294.986764][T21770] lo speed is unknown, defaulting to 1000 [ 1295.144794][T21770] xfrm0 speed is unknown, defaulting to 1000 [ 1295.496978][T21770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.504188][T21770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.511415][T21770] bridge_slave_0: entered allmulticast mode [ 1295.518544][T21770] bridge_slave_0: entered promiscuous mode [ 1295.526508][T21770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.533670][T21770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.551899][T21770] bridge_slave_1: entered allmulticast mode [ 1295.558993][T21770] bridge_slave_1: entered promiscuous mode [ 1295.583859][T21770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.595856][T21770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.621956][T21770] team0: Port device team_slave_0 added [ 1295.629798][T21770] team0: Port device team_slave_1 added [ 1295.671000][T21770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.678355][T21770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.705130][T21770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.717138][T21770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.724107][T21770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.750806][T21770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.838805][T21770] hsr_slave_0: entered promiscuous mode [ 1295.846137][T21770] hsr_slave_1: entered promiscuous mode [ 1295.855165][T21770] debugfs: 'hsr0' already exists in 'hsr' [ 1295.862953][T21770] Cannot create hsr debugfs directory [ 1295.870320][T21868] syzkaller0: entered promiscuous mode [ 1295.876367][T21868] syzkaller0: entered allmulticast mode [ 1295.978710][T21880] __nla_validate_parse: 11 callbacks suppressed [ 1295.978730][T21880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12884'. [ 1296.020578][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12883'. [ 1296.049152][T11292] Bluetooth: hci5: command tx timeout [ 1296.122015][T21887] netlink: 'syz.1.12887': attribute type 11 has an invalid length. [ 1296.132789][T21885] netlink: 168084 bytes leftover after parsing attributes in process `syz.3.12886'. [ 1296.165751][T21887] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12887'. [ 1296.194729][T21887] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1296.213444][T21891] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.12889'. [ 1296.243784][T21891] netlink: 'syz.2.12889': attribute type 5 has an invalid length. [ 1296.282453][T21770] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.294844][T21770] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1296.374284][T21770] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.410690][T21770] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1296.432805][T21905] SET target dimension over the limit! [ 1296.432805][T21904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12892'. [ 1296.468660][T21904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12892'. [ 1296.496797][T21770] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.522456][T21770] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1296.598448][T21770] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.628501][T21770] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1296.821354][T21770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1296.832654][T21770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1296.857591][T21770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1296.878963][T21770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1296.888365][T21770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1296.910491][T21770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1296.929284][T21770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1296.944050][T21940] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12905'. [ 1296.962902][T21770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1297.167591][T11292] Bluetooth: hci2: command 0x0406 tx timeout [ 1297.191996][T21953] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1297.254749][T21770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.287312][T21770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.300812][T24868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.307982][T24868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.349057][T21971] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.12912'. [ 1297.360451][T24868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.360525][T24868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.532933][T21979] batadv2: entered allmulticast mode [ 1298.127816][ T5626] Bluetooth: hci5: command tx timeout [ 1298.145935][T22037] vcan0: tx address claim with dlc 0 [ 1298.190995][T21770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.295282][T21770] veth0_vlan: entered promiscuous mode [ 1298.322320][T21770] veth1_vlan: entered promiscuous mode [ 1298.374062][T22044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12931'. [ 1298.400278][T21770] veth0_macvtap: entered promiscuous mode [ 1298.433193][T21770] veth1_macvtap: entered promiscuous mode [ 1298.493616][T21770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.541937][T21770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.589549][T24868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.601490][T24868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.626061][T24868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.642912][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.696892][T22069] openvswitch: netlink: Flow actions attr not present in new flow. [ 1298.725805][T22072] openvswitch: netlink: Flow actions attr not present in new flow. [ 1298.740420][T24868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.774776][T24868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.940367][T24868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.963628][T24868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.090814][T27828] IPVS: starting estimator thread 0... [ 1299.187658][T22099] IPVS: using max 39 ests per chain, 93600 per kthread [ 1299.206151][T22103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1299.614677][T22145] netlink: 'syz.2.12959': attribute type 1 has an invalid length. [ 1299.656197][T22148] vlan0: entered allmulticast mode [ 1299.671041][T22148] bond0: entered allmulticast mode [ 1300.042506][T22177] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1300.071114][T22177] bond1 (unregistering): Released all slaves [ 1300.213129][T11292] Bluetooth: hci5: command tx timeout [ 1300.303628][T22199] netlink: zone id is out of range [ 1300.321266][T22199] netlink: zone id is out of range [ 1300.343738][T22199] netlink: zone id is out of range [ 1300.359679][T22199] netlink: zone id is out of range [ 1300.365867][T22199] netlink: zone id is out of range [ 1300.374584][T22199] netlink: zone id is out of range [ 1300.380707][T22199] netlink: zone id is out of range [ 1300.386616][T22199] netlink: zone id is out of range [ 1300.429728][ T5932] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 1300.521425][T24868] smbdirect: ib_dev[syz2] removed [ 1300.561974][ T5932] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1300.582317][ T5932] bond9 (unregistering): (slave gretap2): Releasing active interface [ 1300.625674][ T5932] bond12 (unregistering): (slave geneve4): Releasing active interface [ 1300.744840][ T5932] bond0 (unregistering): (slave veth3): Releasing backup interface [ 1300.756503][ T5932] bond0 (unregistering): Released all slaves [ 1300.776529][ T5932] bond1 (unregistering): Released all slaves [ 1300.798658][ T5932] bond2 (unregistering): Released all slaves [ 1300.814538][ T5932] bond3 (unregistering): Released all slaves [ 1300.834339][ T5932] bond4 (unregistering): Released all slaves [ 1300.859887][ T5932] bond5 (unregistering): Released all slaves [ 1300.874178][ T5932] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1300.892639][ T5932] bond6 (unregistering): Released all slaves [ 1300.925857][ T5932] bond7 (unregistering): Released all slaves [ 1300.941815][ T5932] bond8 (unregistering): Released all slaves [ 1300.953433][ T5932] bond9 (unregistering): Released all slaves [ 1300.965619][ T5932] bond10 (unregistering): Released all slaves [ 1300.978794][ T5932] bond11 (unregistering): Released all slaves [ 1300.990594][ T5932] bond13 (unregistering): Released all slaves [ 1301.002416][ T5932] bond12 (unregistering): Released all slaves [ 1301.013824][ T5932] bond14 (unregistering): Released all slaves [ 1301.084868][T22218] H: renamed from dummy0 (while UP) [ 1301.230386][ T5932] tipc: Left network mode [ 1301.322402][T22241] netlink: 'syz.3.12985': attribute type 5 has an invalid length. [ 1301.369785][T22245] __nla_validate_parse: 11 callbacks suppressed [ 1301.369822][T22245] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12987'. [ 1301.442938][T22255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12989'. [ 1301.459883][T22255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12989'. [ 1301.484885][T22257] netlink: 'syz.4.12991': attribute type 1 has an invalid length. [ 1301.574430][T22262] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12992'. [ 1301.599549][T22257] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1301.646629][T22261] bond6: (slave geneve3): making interface the new active one [ 1301.655763][T22261] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1301.673662][ T5930] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1301.703762][ T5930] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1301.719935][ T5930] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1301.729325][T22268] mac80211_hwsim hwsim155 syzkaller0: entered promiscuous mode [ 1301.747698][T22268] mac80211_hwsim hwsim155 syzkaller0: entered allmulticast mode [ 1301.755888][T22268] tipc: Resetting bearer [ 1301.769413][ T5930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1301.788745][T22281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12997'. [ 1301.815996][T22281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12997'. [ 1301.940417][T22287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12999'. [ 1302.061333][T22293] netlink: 'syz.2.13002': attribute type 1 has an invalid length. [ 1302.253582][T22293] bond8: entered promiscuous mode [ 1302.283160][T22293] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1302.291880][T11292] Bluetooth: hci5: command 0x0419 tx timeout [ 1302.324478][T22296] bond8: (slave bridge7): making interface the new active one [ 1302.336556][T22296] bridge7: entered promiscuous mode [ 1302.351062][T22296] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 1302.359788][T22297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13003'. [ 1302.376594][ T5932] hsr_slave_0: left promiscuous mode [ 1302.382607][ T5932] hsr_slave_1: left promiscuous mode [ 1302.914641][T22330] syzkaller0: entered promiscuous mode [ 1302.921766][T22330] syzkaller0: entered allmulticast mode [ 1302.994010][T22335] tunl0: entered promiscuous mode [ 1303.001554][T22335] netlink: 'syz.2.13013': attribute type 3 has an invalid length. [ 1303.011737][T22335] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13013'. [ 1303.024877][T22338] netlink: 'syz.3.13015': attribute type 3 has an invalid length. [ 1303.102569][T22341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13014'. [ 1303.174798][ T5932] IPVS: stop unused estimator thread 0... [ 1303.194170][T22346] netlink: 'syz.0.13016': attribute type 1 has an invalid length. [ 1303.759233][T22381] netlink: 'syz.4.13023': attribute type 1 has an invalid length. [ 1303.785446][T22381] netlink: 'syz.4.13023': attribute type 1 has an invalid length. [ 1303.856910][T22381] macsec0: entered promiscuous mode [ 1304.367758][ T5626] Bluetooth: hci5: command 0x0419 tx timeout [ 1304.391445][T22400] syzkaller0: entered promiscuous mode [ 1304.397601][T22400] syzkaller0: entered allmulticast mode [ 1304.416887][T22404] netlink: 'syz.0.13030': attribute type 4 has an invalid length. [ 1304.505055][T22410] netlink: 'syz.0.13030': attribute type 4 has an invalid length. [ 1304.614995][T22424] net_ratelimit: 26 callbacks suppressed [ 1304.615016][T22424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1304.746346][T22435] siw: device registration error -23 [ 1304.964768][T22444] erspan0: entered promiscuous mode [ 1304.973424][T22444] gretap0: entered promiscuous mode [ 1304.980897][T22444] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1304.992032][T22444] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1305.016633][T22446] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1305.057735][T22446] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1305.068768][T22446] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1305.087034][T22446] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1305.108503][T22446] bond3 (unregistering): Released all slaves [ 1305.893997][T22513] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1306.165688][T22524] xt_hashlimit: size too large, truncated to 1048576 [ 1306.343851][T22538] validate_nla: 4 callbacks suppressed [ 1306.343885][T22538] netlink: 'syz.1.13064': attribute type 1 has an invalid length. [ 1306.398579][T22538] netlink: 'syz.1.13064': attribute type 4 has an invalid length. [ 1306.436291][T22538] __nla_validate_parse: 17 callbacks suppressed [ 1306.436326][T22538] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.13064'. [ 1306.509105][T22553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1306.526558][T22553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13067'. [ 1306.636525][T22558] netlink: 'syz.3.13069': attribute type 1 has an invalid length. [ 1306.649946][T22556] x_tables: duplicate underflow at hook 1 [ 1306.660834][T22558] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1306.685801][T22558] bond1: (slave veth0_to_bond): Releasing active interface [ 1306.712811][T22558] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1306.847216][T22570] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13071'. [ 1306.878189][T22579] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13076'. [ 1306.890642][T22579] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13076'. [ 1306.916586][T22569] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.13071'. [ 1307.039860][T22585] netlink: 'syz.2.13078': attribute type 7 has an invalid length. [ 1307.904804][T22600] netlink: 'syz.2.13082': attribute type 27 has an invalid length. [ 1307.938848][T22600] netlink: 'syz.2.13082': attribute type 4 has an invalid length. [ 1307.964927][T22600] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13082'. [ 1309.135089][T22662] netlink: 'syz.1.13101': attribute type 2 has an invalid length. [ 1309.146782][T22662] netlink: 'syz.1.13101': attribute type 1 has an invalid length. [ 1309.188102][T22666] SET target dimension over the limit! [ 1309.633874][T22686] syzkaller0: entered promiscuous mode [ 1309.640011][T22686] syzkaller0: entered allmulticast mode [ 1309.683182][T22690] netlink: 'syz.3.13111': attribute type 1 has an invalid length. [ 1309.699797][T22685] netlink: 'syz.1.13110': attribute type 39 has an invalid length. [ 1309.825360][T22701] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13113'. [ 1309.857104][T22701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13113'. [ 1310.147910][T22710] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1310.264392][T22719] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1310.287043][T22719] bond4 (unregistering): Released all slaves [ 1310.370988][T22732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13122'. [ 1310.447513][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1310.715696][ T5296] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1310.746177][ T5296] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1310.775987][ T5296] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1310.817443][ T5296] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1310.896190][T22747] syzkaller0: entered promiscuous mode [ 1310.924862][T22747] syzkaller0: entered allmulticast mode [ 1311.258251][T22763] openvswitch: netlink: Flow actions attr not present in new flow. [ 1311.280800][T22762] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20002 [ 1311.700568][T22791] validate_nla: 2 callbacks suppressed [ 1311.700603][T22791] netlink: 'syz.4.13140': attribute type 1 has an invalid length. [ 1311.743324][T22791] __nla_validate_parse: 8 callbacks suppressed [ 1311.743357][T22791] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13140'. [ 1311.782129][T22791] netlink: 658 bytes leftover after parsing attributes in process `syz.4.13140'. [ 1311.813116][T22791] netlink: 1 bytes leftover after parsing attributes in process `syz.4.13140'. [ 1312.124166][T22802] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 1312.209696][T22812] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1312.601252][T22838] geneve2: entered promiscuous mode [ 1312.608075][T22838] geneve2: entered allmulticast mode [ 1312.616267][T24868] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1312.627101][T24868] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1312.637169][T24868] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1312.646638][T24868] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1312.881099][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13158'. [ 1313.328037][T22858] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13163'. [ 1313.398546][T22866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13164'. [ 1313.479525][T22866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13164'. [ 1313.673586][T22875] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1313.789940][T22886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13170'. [ 1313.990171][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13177'. [ 1314.000203][T22906] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.13176'. [ 1314.038288][T22911] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1315.146034][T22922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1315.344352][T22961] C: renamed from lo (while UP) [ 1315.353778][T22961] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1315.660702][T22978] 0: reclassify loop, rule prio 0, protocol 700 [ 1315.722525][T22986] netlink: 'syz.4.13202': attribute type 1 has an invalid length. [ 1315.935492][T22987] macvtap1: entered allmulticast mode [ 1316.028369][T22993] bond7: (slave bridge3): making interface the new active one [ 1316.043179][T22993] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 1316.210545][T23000] tunl0: left promiscuous mode [ 1316.252144][T23000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1316.275452][T23000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1316.288924][T23000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1316.353185][T23000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.367667][T23000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.404644][T23000] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1316.415022][T23000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1316.438793][T23000] hsr0: left promiscuous mode [ 1316.446728][T23000] veth1_vlan: left promiscuous mode [ 1316.456913][T23000] veth0_vlan: entered promiscuous mode [ 1316.488310][T23000] veth1_vlan: entered promiscuous mode [ 1316.522973][T23000] veth0_macvtap: left promiscuous mode [ 1316.535013][T23000] veth0_macvtap: entered promiscuous mode [ 1316.563124][T23000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1316.576323][T23000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1316.589634][T23000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1316.603858][T23000] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1316.686619][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.694361][ T5930] bridge0: port 1(bridge_slave_0) entered listening state [ 1316.738623][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.746304][ T5930] bridge0: port 2(bridge_slave_1) entered listening state [ 1316.764521][T23020] __nla_validate_parse: 9 callbacks suppressed [ 1316.764552][T23020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13209'. [ 1316.796072][ T5296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.809029][ T5296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.817769][ T5296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.826496][ T5296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.858109][T23031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13212'. [ 1316.884584][T23031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13212'. [ 1316.931656][T23011] syzkaller0: entered promiscuous mode [ 1316.937194][T23011] syzkaller0: entered allmulticast mode [ 1317.058411][T23054] sctp: [Deprecated]: syz.1.13215 (pid 23054) Use of int in maxseg socket option. [ 1317.058411][T23054] Use struct sctp_assoc_value instead [ 1317.108202][T23048] mac80211_hwsim hwsim155 syzkaller0: left promiscuous mode [ 1317.129297][T23048] mac80211_hwsim hwsim155 syzkaller0: left allmulticast mode [ 1317.136915][T23048] tipc: Resetting bearer [ 1317.293168][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13220'. [ 1317.306108][T23065] netlink: 'syz.2.13220': attribute type 1 has an invalid length. [ 1317.451724][T23065] bond9: entered promiscuous mode [ 1317.458566][T23065] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1317.461416][T23074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13223'. [ 1317.480411][T23074] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13223'. [ 1317.635758][T23088] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1318.087131][T23106] netlink: 'syz.2.13236': attribute type 1 has an invalid length. [ 1318.109350][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13234'. [ 1318.118392][T23111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13234'. [ 1318.127442][T23111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13234'. [ 1318.179898][T23106] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1318.293598][T23106] bond10: (slave ip6gretap1): making interface the new active one [ 1318.302862][T23106] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1318.392339][T23121] syzkaller0: entered promiscuous mode [ 1318.407450][T23121] syzkaller0: entered allmulticast mode [ 1318.468036][T23127] mac80211_hwsim hwsim155 syzkaller0: entered promiscuous mode [ 1318.475730][T23127] mac80211_hwsim hwsim155 syzkaller0: entered allmulticast mode [ 1318.478486][T23130] netlink: zone id is out of range [ 1318.484398][T23127] tipc: Resetting bearer [ 1318.494392][T23130] netlink: zone id is out of range [ 1318.494404][T23130] netlink: zone id is out of range [ 1318.494412][T23130] netlink: zone id is out of range [ 1318.494419][T23130] netlink: zone id is out of range [ 1318.494427][T23130] netlink: zone id is out of range [ 1318.494434][T23130] netlink: zone id is out of range [ 1318.617154][T23140] netlink: 'syz.0.13248': attribute type 2 has an invalid length. [ 1318.627965][T23140] netlink: 'syz.0.13248': attribute type 8 has an invalid length. [ 1318.641947][T23140] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13248'. [ 1318.962306][ T7423] IPVS: starting estimator thread 0... [ 1319.051246][T23166] veth3: entered allmulticast mode [ 1319.057407][T23170] IPVS: using max 41 ests per chain, 98400 per kthread [ 1319.635821][T23209] gretap0: entered promiscuous mode [ 1319.657598][T23209] vlan2: entered promiscuous mode [ 1319.803749][T23229] netlink: 'syz.2.13275': attribute type 2 has an invalid length. [ 1319.811671][T23229] netlink: 'syz.2.13275': attribute type 11 has an invalid length. [ 1319.965033][T23237] netlink: 'syz.3.13277': attribute type 4 has an invalid length. [ 1320.121934][T23240] netlink: 'syz.0.13281': attribute type 1 has an invalid length. [ 1320.165094][T23240] netlink: 'syz.0.13281': attribute type 7 has an invalid length. [ 1320.203698][T23240] netlink: 'syz.0.13281': attribute type 8 has an invalid length. [ 1320.798936][T23257] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1321.124340][T23280] net_ratelimit: 2 callbacks suppressed [ 1321.124374][T23280] openvswitch: netlink: EtherType 50a is less than min 600 [ 1321.393463][T23291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1321.906270][T23306] tipc: Enabled bearer , priority 0 [ 1321.938745][T23306] syzkaller0: entered promiscuous mode [ 1321.971875][T23306] syzkaller0: entered allmulticast mode [ 1322.015623][T23311] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1322.058096][T23306] tipc: Resetting bearer [ 1322.085129][T23305] tipc: Resetting bearer [ 1322.129645][T23305] tipc: Disabling bearer [ 1322.262080][T23316] __nla_validate_parse: 16 callbacks suppressed [ 1322.262101][T23316] netlink: 25 bytes leftover after parsing attributes in process `syz.1.13300'. [ 1322.304371][T23328] ipvlan0: mtu less than device minimum [ 1322.328084][T23327] validate_nla: 2 callbacks suppressed [ 1322.328100][T23327] netlink: 'syz.0.13302': attribute type 11 has an invalid length. [ 1322.480511][T23341] netlink: 'syz.0.13305': attribute type 2 has an invalid length. [ 1322.516849][T23341] netlink: 'syz.0.13305': attribute type 1 has an invalid length. [ 1322.559206][T23347] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13305'. [ 1323.954958][T23392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13313'. [ 1324.211925][T23403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13318'. [ 1324.286970][T23405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13319'. [ 1324.354670][T23406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13319'. [ 1324.364661][T23406] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1325.886298][T23366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1326.112565][T23416] tipc: Started in network mode [ 1326.130892][T23416] tipc: Node identity fa3d40db868e, cluster identity 4711 [ 1326.140847][T23416] tipc: Enabled bearer , priority 0 [ 1326.148812][T23427] netlink: 'syz.2.13323': attribute type 10 has an invalid length. [ 1326.165484][T23416] macsec0: entered allmulticast mode [ 1326.175009][T23416] veth1_macvtap: entered allmulticast mode [ 1326.211393][T23427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.260469][T23437] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13326'. [ 1326.274175][T23427] team0: entered allmulticast mode [ 1326.282583][T23437] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13326'. [ 1326.297619][T23427] team_slave_0: entered allmulticast mode [ 1326.303400][T23427] team_slave_1: entered allmulticast mode [ 1326.309798][T23427] bond0: (slave team0): Enslaving as an active interface with an up link [ 1326.449742][T23447] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13331'. [ 1326.458835][T23447] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13331'. [ 1326.590590][T23456] sctp: [Deprecated]: syz.0.13335 (pid 23456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.590590][T23456] Use struct sctp_sack_info instead [ 1326.636030][T23415] tipc: Disabling bearer [ 1326.652332][T23458] netlink: 'syz.2.13336': attribute type 1 has an invalid length. [ 1326.728672][T23472] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1326.760210][T23476] tipc: Enabling of bearer rejected, already enabled [ 1327.001419][T23488] syzkaller0: entered promiscuous mode [ 1327.008404][T23488] syzkaller0: entered allmulticast mode [ 1327.016201][T23491] netlink: 'syz.0.13345': attribute type 10 has an invalid length. [ 1327.026984][T23492] netlink: 'syz.0.13345': attribute type 10 has an invalid length. [ 1327.070510][T23491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1327.079730][T23491] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1327.109845][T23494] xt_hashlimit: size too large, truncated to 1048576 [ 1327.197091][T23497] netlink: 'syz.0.13347': attribute type 1 has an invalid length. [ 1327.275324][T23500] bridge_slave_0 (unregistering): left allmulticast mode [ 1327.303695][T23502] xt_hashlimit: overflow, try lower: 3/0 [ 1327.312007][T23500] bridge_slave_0 (unregistering): left promiscuous mode [ 1327.330753][T23500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.536728][T23515] openvswitch: netlink: Flow key attribute not present in set flow. [ 1327.546818][T23515] netlink: 'syz.1.13352': attribute type 21 has an invalid length. [ 1327.554722][T23515] __nla_validate_parse: 9 callbacks suppressed [ 1327.554732][T23515] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13352'. [ 1327.614816][T23515] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13352'. [ 1327.835694][T23527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13357'. [ 1327.881264][T23527] netlink: 'syz.4.13357': attribute type 3 has an invalid length. [ 1327.930449][T23536] netlink: get zone limit has 4 unknown bytes [ 1327.955481][T23527] vti0: entered allmulticast mode [ 1328.632332][T23560] team0 (unregistering): Port device team_slave_0 removed [ 1328.724289][T23560] team0 (unregistering): Port device team_slave_1 removed [ 1328.799481][T23574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13365'. [ 1328.808771][T23575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13365'. [ 1328.975496][T23578] C speed is unknown, defaulting to 1000 [ 1328.992919][T23578] xfrm0 speed is unknown, defaulting to 1000 [ 1329.029025][T23583] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1329.118649][T23588] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13369'. [ 1329.350967][T23606] netlink: 'syz.2.13374': attribute type 1 has an invalid length. [ 1329.552449][T23606] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1329.729250][T23578] lo speed is unknown, defaulting to 1000 [ 1329.798088][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13377'. [ 1329.921882][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13378'. [ 1329.930875][T23636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13378'. [ 1330.054946][T23636] netlink: 'syz.2.13378': attribute type 11 has an invalid length. [ 1330.396290][T23656] sctp: [Deprecated]: syz.1.13384 (pid 23656) Use of int in maxseg socket option. [ 1330.396290][T23656] Use struct sctp_assoc_value instead [ 1330.483021][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13386'. [ 1330.542874][T23665] syzkaller0: entered promiscuous mode [ 1330.548388][T23665] syzkaller0: entered allmulticast mode [ 1332.207956][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1332.215720][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1332.470295][T23714] netlink: 'syz.4.13400': attribute type 1 has an invalid length. [ 1332.595767][T23714] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1332.625824][T23719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1332.820529][T23716] bond8: (slave geneve4): making interface the new active one [ 1332.839286][T23716] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 1332.851640][T23724] __nla_validate_parse: 7 callbacks suppressed [ 1332.851658][T23724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13403'. [ 1332.873573][ T5936] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1332.882346][ T5936] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1332.917200][T23725] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1332.927949][ T5936] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1332.936678][ T5936] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1332.972397][T23728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1333.023679][T23731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13406'. [ 1333.039180][T23736] netlink: 'syz.0.13408': attribute type 8 has an invalid length. [ 1333.055414][T23736] sch_fq: defrate 0 ignored. [ 1333.140029][T23743] netlink: 'syz.4.13409': attribute type 1 has an invalid length. [ 1333.147993][T23743] netlink: 'syz.4.13409': attribute type 1 has an invalid length. [ 1333.222040][T23755] netlink: 112 bytes leftover after parsing attributes in process `syz.0.13411'. [ 1333.242046][T23755] netlink: 112 bytes leftover after parsing attributes in process `syz.0.13411'. [ 1333.262579][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13413'. [ 1333.313020][T23762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13415'. [ 1333.337394][T23757] macvlan0: entered promiscuous mode [ 1333.378064][T23762] ipvlan1: entered allmulticast mode [ 1333.426141][T23762] veth0_vlan: entered allmulticast mode [ 1333.437062][T23771] netlink: 'syz.1.13416': attribute type 13 has an invalid length. [ 1333.437195][T23767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13417'. [ 1333.468250][T23767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1333.483910][T23776] netlink: 'syz.0.13418': attribute type 1 has an invalid length. [ 1333.523493][T23771] erspan0: refused to change device tx_queue_len [ 1333.551419][T23771] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1333.603523][T23779] netlink: 'syz.3.13420': attribute type 3 has an invalid length. [ 1333.675899][T23783] Cannot find add_set index 2 as target [ 1333.725576][T23791] netlink: 'syz.1.13423': attribute type 1 has an invalid length. [ 1333.822969][T23791] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1333.859738][T23791] veth5: entered promiscuous mode [ 1333.882418][T23791] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 1333.896562][T23797] netlink: 84 bytes leftover after parsing attributes in process `syz.3.13426'. [ 1333.918708][T23791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13423'. [ 1334.022371][T23810] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13429'. [ 1334.466422][T23845] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1334.483207][T23845] bridge0: port 1(bond9) entered blocking state [ 1334.494501][T23845] bridge0: port 1(bond9) entered disabled state [ 1334.502892][T23845] bond9: entered allmulticast mode [ 1334.509472][T23845] bond9: entered promiscuous mode [ 1334.639931][T23858] syzkaller1: entered promiscuous mode [ 1334.656576][T23858] syzkaller1: entered allmulticast mode [ 1334.920502][T23874] netlink: 'syz.4.13448': attribute type 10 has an invalid length. [ 1335.478809][T23898] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1335.857144][T23925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1336.000332][T23929] veth1_to_bridge: entered allmulticast mode [ 1336.366104][T23947] nftables ruleset with unbound set [ 1336.595782][T23958] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 1336.648483][T23959] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1336.656709][T23959] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1336.667780][T23959] veth1_to_bridge: entered allmulticast mode [ 1336.682567][T23959] veth1_to_bridge: entered promiscuous mode [ 1336.725970][T23958] ip_vti0: entered promiscuous mode [ 1337.254385][T23994] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1337.269160][T23992] lo: MTU too low for tipc bearer [ 1337.284384][T23992] tipc: Enabling of bearer rejected, failed to enable media [ 1337.301231][T24000] netlink: 'syz.0.13489': attribute type 1 has an invalid length. [ 1337.422442][T24000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1337.523244][T24004] bond2: (slave ip6gretap1): making interface the new active one [ 1337.539497][T24004] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1338.192255][T24046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.200791][T24052] __nla_validate_parse: 18 callbacks suppressed [ 1338.200835][T24052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13504'. [ 1338.224116][T24046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.232328][T24052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13504'. [ 1338.292226][T24046] tipc: Resetting bearer [ 1338.304559][T24046] tipc: Resetting bearer [ 1338.363344][T24055] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13502'. [ 1341.369671][T24090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13510'. [ 1341.449887][T24092] netlink: 'syz.4.13512': attribute type 4 has an invalid length. [ 1341.593781][T24103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13516'. [ 1341.646173][T24103] netlink: 'syz.0.13516': attribute type 21 has an invalid length. [ 1341.687041][T24103] IPv6: NLM_F_CREATE should be specified when creating new route [ 1341.716067][T24103] netlink: 'syz.0.13516': attribute type 1 has an invalid length. [ 1341.852915][T24122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13521'. [ 1341.973901][T24128] netlink: 88 bytes leftover after parsing attributes in process `syz.0.13523'. [ 1341.984622][T24128] syzkaller1: entered promiscuous mode [ 1341.990428][T24128] syzkaller1: entered allmulticast mode [ 1342.097806][T24138] vcan1: entered promiscuous mode [ 1342.102904][T24138] vcan1: entered allmulticast mode [ 1342.258457][T24133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1342.645339][T24159] netlink: 'syz.3.13535': attribute type 11 has an invalid length. [ 1342.993118][T24177] tipc: Enabling of bearer rejected, failed to enable media [ 1343.051922][T24185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13545'. [ 1343.073225][T24179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13546'. [ 1343.089388][T24189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13547'. [ 1343.210232][T24185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13545'. [ 1343.441383][T24203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1343.651418][T24215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13552'. [ 1343.846373][T24234] netlink: 'syz.0.13559': attribute type 7 has an invalid length. [ 1343.858510][T24233] netlink: 'syz.0.13559': attribute type 7 has an invalid length. [ 1343.911201][T24226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13556'. [ 1343.921679][T24230] geneve3: entered allmulticast mode [ 1343.935235][T24226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13556'. [ 1344.271136][T24233] netlink: 'syz.0.13559': attribute type 7 has an invalid length. [ 1344.290034][T24234] netlink: 'syz.0.13559': attribute type 7 has an invalid length. [ 1344.981529][T24290] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13574'. [ 1345.076038][T24292] sctp: [Deprecated]: syz.3.13575 (pid 24292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1345.076038][T24292] Use struct sctp_sack_info instead [ 1347.173677][T24259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1347.371898][T24334] netlink: 'syz.0.13584': attribute type 10 has an invalid length. [ 1347.443689][T24334] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1347.472468][T24338] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1347.722949][T24335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13586'. [ 1347.781187][ T30] audit: type=1804 audit(1782157944.132:30): pid=24354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.13592" name="/newroot/510/cgroup.controllers" dev="tmpfs" ino=2612 res=1 errno=0 [ 1347.828165][T24357] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1347.833996][ T30] audit: type=1800 audit(1782157944.132:31): pid=24354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13592" name="cgroup.controllers" dev="tmpfs" ino=2612 res=0 errno=0 [ 1347.874573][T24359] nbd: illegal input index 2958377 [ 1347.881783][T24359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13593'. [ 1347.913377][T24359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13593'. [ 1348.122075][T24370] netlink: 'syz.3.13597': attribute type 5 has an invalid length. [ 1348.320819][T24382] bond10: entered promiscuous mode [ 1348.329993][T24382] bond10: entered allmulticast mode [ 1348.336365][T24382] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1348.764684][T24407] netlink: 'syz.1.13607': attribute type 1 has an invalid length. [ 1348.784503][T24409] netlink: 'syz.0.13610': attribute type 1 has an invalid length. [ 1348.793455][T24407] netlink: 760 bytes leftover after parsing attributes in process `syz.1.13607'. [ 1348.803838][T24409] netlink: 15938 bytes leftover after parsing attributes in process `syz.0.13610'. [ 1348.842875][T24411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13609'. [ 1348.969686][T24419] openvswitch: netlink: Message has 8 unknown bytes. [ 1348.977511][T24419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1348.998494][T24414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13609'. [ 1349.337835][T24432] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1349.373758][T24434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13617'. [ 1349.744635][T24455] netlink: 108 bytes leftover after parsing attributes in process `syz.2.13627'. [ 1349.828659][T24458] netlink: 240 bytes leftover after parsing attributes in process `syz.4.13626'. [ 1350.071498][T24471] veth0: entered promiscuous mode [ 1350.081645][T24471] veth0: left promiscuous mode [ 1350.220732][T24474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13634'. [ 1350.398375][T24490] netlink: 208 bytes leftover after parsing attributes in process `syz.1.13639'. [ 1350.425709][T24490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1350.433571][T24493] sctp: [Deprecated]: syz.2.13640 (pid 24493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1350.433571][T24493] Use struct sctp_sack_info instead [ 1350.508387][T24495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13642'. [ 1353.023866][T24466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1354.320369][T24572] netlink: 'syz.0.13665': attribute type 20 has an invalid length. [ 1354.330208][T24572] IPv6: NLM_F_CREATE should be specified when creating new route [ 1354.428182][T24578] __nla_validate_parse: 9 callbacks suppressed [ 1354.428199][T24578] netlink: 13 bytes leftover after parsing attributes in process `syz.4.13668'. [ 1354.447022][T24582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13670'. [ 1354.481892][T24582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1354.714209][T24596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.731614][T24596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.796168][T24596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1354.808354][T24596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1354.824729][T24596] veth1_vlan: left promiscuous mode [ 1354.830876][T24596] veth0_vlan: left promiscuous mode [ 1354.836793][T24596] veth0_vlan: entered promiscuous mode [ 1354.844809][T24596] veth1_vlan: entered promiscuous mode [ 1354.855649][T24596] veth0_macvtap: left promiscuous mode [ 1354.862043][T24596] veth0_macvtap: entered promiscuous mode [ 1354.873432][T24596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1354.881490][T24596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1354.889533][T24596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1354.897524][T24596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1354.908668][T24596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1354.931862][T24596] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1354.943303][T24596] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1354.950682][T24596] bond7: entered allmulticast mode [ 1354.955833][T24596] bridge3: entered allmulticast mode [ 1354.961672][T24596] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1354.969579][T24596] bridge3: entered promiscuous mode [ 1354.981352][T24596] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1354.993253][T24868] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1355.001568][T24868] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1355.012309][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.019426][ T5936] bridge0: port 2(bridge_slave_1) entered listening state [ 1355.049230][ T5936] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1355.056430][ T5936] bridge0: port 3(veth1_to_bridge) entered listening state [ 1355.102681][T24616] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1356.782861][ C1] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1356.927922][T24861] wlan1: Trigger new scan to find an IBSS to join [ 1357.277965][T24639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13682'. [ 1357.335632][T24639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13682'. [ 1359.022982][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1359.172150][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1361.887749][T24868] wlan1: Trigger new scan to find an IBSS to join [ 1362.777655][ T5936] wlan1: Creating new IBSS network, BSSID f6:3a:8b:64:6d:32 [ 1367.424724][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1368.065516][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1368.848469][ T5626] Bluetooth: hci3: command 0x0405 tx timeout [ 1371.444294][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1371.455000][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1371.464966][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1371.481186][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1371.493143][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1371.782962][T11292] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1371.799220][T11292] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1371.819312][T11292] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1371.833824][T11292] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1371.844301][T11292] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1372.060079][T30030] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1372.072769][T30030] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1372.081317][T30030] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1372.101442][T30030] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1372.115375][T30030] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1372.442016][T30030] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1372.458793][T30030] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1372.480478][T30030] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1372.494340][T30030] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1372.516099][T30030] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1373.304103][T11292] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1373.316346][T11292] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1373.328716][T11292] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1373.337358][T11292] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1373.347775][T11292] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1373.570409][T11292] Bluetooth: hci0: command tx timeout [ 1373.888887][T11292] Bluetooth: hci6: command tx timeout [ 1374.218148][ T5626] Bluetooth: hci7: command tx timeout [ 1374.610264][ T5626] Bluetooth: hci8: command tx timeout [ 1375.328830][ T5626] Bluetooth: hci9: command tx timeout [ 1375.647935][ T5626] Bluetooth: hci0: command tx timeout [ 1375.968535][ T5626] Bluetooth: hci6: command tx timeout [ 1376.287679][ T5626] Bluetooth: hci7: command tx timeout [ 1376.689468][ T5626] Bluetooth: hci8: command tx timeout [ 1377.407731][ T5626] Bluetooth: hci9: command tx timeout [ 1377.727580][ T5626] Bluetooth: hci0: command tx timeout [ 1378.048621][ T5626] Bluetooth: hci6: command tx timeout [ 1378.367695][ T5626] Bluetooth: hci7: command tx timeout [ 1378.769319][ T5626] Bluetooth: hci8: command tx timeout [ 1379.487733][ T5626] Bluetooth: hci9: command tx timeout [ 1379.809782][ T5626] Bluetooth: hci0: command tx timeout [ 1380.130077][ T5626] Bluetooth: hci6: command tx timeout [ 1380.448134][ T5626] Bluetooth: hci7: command tx timeout [ 1380.849775][T11292] Bluetooth: hci8: command tx timeout [ 1381.567955][T11292] Bluetooth: hci9: command tx timeout [ 1383.410567][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1384.699439][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1385.329297][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1394.929072][T24860] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1399.572114][T11292] Bluetooth: hci1: command 0x0406 tx timeout [ 1412.170940][ T5932] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1412.180950][ T5932] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1412.192165][ T5932] bond4: (slave veth3): making interface the new active one [ 1412.202740][ T5932] bond4: active interface up! [ 1413.393947][ C1] sched: DL replenish lagged too much [ 1413.472254][T24605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13676'. [ 1415.410218][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1415.418050][ C1] bridge0: topology change detected, propagating [ 1415.425221][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1415.429046][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1415.440252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1415.449761][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1415.461900][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1415.473514][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1415.485545][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1415.497406][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1415.509419][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1415.521165][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1416.066699][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1417.331137][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1420.427548][ C1] net_ratelimit: 22043 callbacks suppressed [ 1420.427591][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1420.427600][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1420.431050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1420.436319][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1420.447781][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1420.461349][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1420.471213][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1420.482757][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1420.494884][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1420.506573][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1425.437295][ C1] net_ratelimit: 22348 callbacks suppressed [ 1425.437330][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1425.438515][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1425.444477][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1425.458687][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1425.468079][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1425.480254][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1425.491973][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1425.506109][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1425.515759][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1425.527814][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1430.447224][ C1] net_ratelimit: 23085 callbacks suppressed [ 1430.447267][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1430.447272][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1430.451871][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1430.455086][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1430.469330][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1430.477907][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1430.490134][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1430.501817][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1430.513998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1430.525530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1435.457289][ C1] net_ratelimit: 24596 callbacks suppressed [ 1435.457325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1435.458256][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1435.464469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1435.478525][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1435.488208][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1435.500271][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1435.512024][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1435.523882][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1435.535800][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1435.547750][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1440.467322][ C0] net_ratelimit: 23208 callbacks suppressed [ 1440.467365][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1440.467371][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1440.469935][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1440.474786][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1440.488677][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1440.498214][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1440.510245][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1440.522071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1440.533977][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1440.546050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1443.574806][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1445.477204][ C1] net_ratelimit: 22648 callbacks suppressed [ 1445.477239][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1445.478682][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1445.484435][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1445.498809][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1445.507893][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1445.520240][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1445.531784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1445.543932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1445.555558][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1445.567757][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1450.487473][ C0] net_ratelimit: 24625 callbacks suppressed [ 1450.487481][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1450.487507][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1450.490131][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1450.495011][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1450.509069][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1450.518278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1450.530187][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1450.541981][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1450.553936][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1450.565811][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1455.497567][ C1] net_ratelimit: 24080 callbacks suppressed [ 1455.497594][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1455.497615][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1455.499693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1455.506644][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1455.517576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1455.531491][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1455.541012][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1455.552960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1455.564678][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1455.576764][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.507291][ C0] net_ratelimit: 21504 callbacks suppressed [ 1460.507337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.508604][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1460.514671][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.528612][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1460.538424][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.549999][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1460.562149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.573861][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1460.586038][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1460.597663][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1465.517336][ C0] net_ratelimit: 22216 callbacks suppressed [ 1465.517378][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.517422][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1465.526846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.537476][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1465.551287][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.560810][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1465.572943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.584594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1465.596669][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1465.608396][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1479.422357][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1484.539504][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1560.647150][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1560.654154][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18442/2:b..l [ 1560.662179][ C0] rcu: (detected by 0, t=10503 jiffies, g=245609, q=938 ncpus=2) [ 1560.670021][ C0] task:kworker/0:11 state:R running task stack:24432 pid:18442 tgid:18442 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1560.683639][ C0] Workqueue: mld mld_ifc_work [ 1560.688362][ C0] Call Trace: [ 1560.691659][ C0] [ 1560.694615][ C0] __schedule+0x17d9/0x56c0 [ 1560.699158][ C0] ? mld_ifc_work+0x839/0xe70 [ 1560.703871][ C0] ? netif_rx_internal+0x120/0x550 [ 1560.709023][ C0] ? __pfx___schedule+0x10/0x10 [ 1560.713908][ C0] ? lock_release+0x4b/0x3c0 [ 1560.718539][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.723342][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1560.728419][ C0] irqentry_exit+0x14f/0x8f0 [ 1560.733039][ C0] ? trace_irq_disable+0x3b/0x140 [ 1560.738115][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1560.744119][ C0] RIP: 0010:__local_bh_enable_ip+0xd8/0x130 [ 1560.750051][ C0] Code: 8b e8 3c 74 20 0a 65 66 8b 05 5c b1 b2 11 66 85 c0 75 32 bf 01 00 00 00 e8 f5 ee 0b 00 e8 00 94 46 00 fb 65 8b 05 38 b1 b2 11 <85> c0 75 05 e8 3f e0 ab ff 5b 41 5e e9 97 55 23 0a cc 90 0f 0b 90 [ 1560.769691][ C0] RSP: 0018:ffffc900035a74a8 EFLAGS: 00000246 [ 1560.775804][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000001 [ 1560.783800][ C0] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: ffffffff81878ef0 [ 1560.791796][ C0] RBP: ffffc900035a7780 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 1560.799796][ C0] R10: dffffc0000000000 R11: fffffbfff20622df R12: dffffc0000000000 [ 1560.807794][ C0] R13: 1ffff920006b4eb8 R14: ffffffff897aae1b R15: 00000001010a82a0 [ 1560.815802][ C0] ? __dev_queue_xmit+0x29b/0x37f0 [ 1560.820951][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1560.826277][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1560.831610][ C0] ? __dev_queue_xmit+0x29b/0x37f0 [ 1560.836754][ C0] __dev_queue_xmit+0x1ed7/0x37f0 [ 1560.841812][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.846613][ C0] ? in6_dev_get+0x1a/0x290 [ 1560.851151][ C0] ? __dev_queue_xmit+0x29b/0x37f0 [ 1560.856284][ C0] ? ___neigh_create+0x1cd2/0x22b0 [ 1560.861424][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.866214][ C0] ? ___neigh_create+0x1cd2/0x22b0 [ 1560.871364][ C0] ? trace_irq_enable+0x3b/0x140 [ 1560.871399][ T31] INFO: task kworker/u8:0:12 blocked for more than 189 seconds. [ 1560.876345][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1560.883980][ T31] Not tainted syzkaller #0 [ 1560.889373][ C0] ? neigh_resolve_output+0x428/0x720 [ 1560.894308][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1560.899684][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.908381][ T31] task:kworker/u8:0 state:D [ 1560.913148][ C0] ? eth_header+0x11b/0x200 [ 1560.913176][ T31] stack:22616 pid:12 tgid:12 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1560.917939][ C0] ? __asan_memcpy+0x40/0x70 [ 1560.917975][ C0] ? ip6_output+0x11e/0x540 [ 1560.917997][ C0] ip6_output+0x337/0x540 [ 1560.918019][ C0] ? __pfx_ip6_output+0x10/0x10 [ 1560.918040][ C0] NF_HOOK+0x177/0x4f0 [ 1560.918063][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1560.918083][ C0] ? icmp6_dst_alloc+0x39b/0x430 [ 1560.918107][ C0] ? __pfx_dst_output+0x10/0x10 [ 1560.918127][ C0] ? trace_irq_enable+0x3b/0x140 [ 1560.918155][ C0] ? icmp6_dst_alloc+0x39b/0x430 [ 1560.918177][ C0] ? icmp6_dst_alloc+0x39b/0x430 [ 1560.918201][ C0] mld_sendpack+0x890/0xe10 [ 1560.918230][ C0] ? mld_sendpack+0x206/0xe10 [ 1560.918252][ C0] ? __pfx_mld_sendpack+0x10/0x10 [ 1560.918280][ C0] ? mld_ifc_work+0x817/0xe70 [ 1560.918303][ C0] mld_ifc_work+0x839/0xe70 [ 1560.918328][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1560.918355][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1560.918396][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1560.918421][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1560.918450][ C0] ? assign_work+0x3cf/0x5d0 [ 1560.918477][ C0] worker_thread+0xa47/0xfb0 [ 1560.918530][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1560.918565][ C0] kthread+0x388/0x470 [ 1560.918584][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1560.918610][ C0] ? __pfx_kthread+0x10/0x10 [ 1560.918643][ C0] ret_from_fork+0x514/0xb70 [ 1560.918665][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1560.918685][ C0] ? __switch_to+0xc89/0x1420 [ 1560.918714][ C0] ? __pfx_kthread+0x10/0x10 [ 1560.918734][ C0] ret_from_fork_asm+0x1a/0x30 [ 1560.918773][ C0] [ 1560.918783][ C0] rcu: rcu_preempt kthread starved for 10522 jiffies! g245609 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1560.918807][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1560.918818][ C0] rcu: RCU grace-period kthread stack dump: [ 1560.918826][ C0] task:rcu_preempt state:R running task stack:28040 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1560.918887][ C0] Call Trace: [ 1560.918895][ C0] [ 1560.918905][ C0] __schedule+0x17d9/0x56c0 [ 1560.918931][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.918959][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.918979][ C0] ? __pfx___schedule+0x10/0x10 [ 1560.918999][ C0] ? schedule+0x90/0x360 [ 1560.919024][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.919045][ C0] ? lock_release+0x4b/0x3c0 [ 1560.919077][ C0] schedule+0x164/0x360 [ 1560.919101][ C0] schedule_timeout+0x152/0x2c0 [ 1560.919122][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1560.919143][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1560.919172][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1560.919195][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1560.919223][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1560.919254][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1560.919282][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1560.919330][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1560.919356][ C0] ? trace_irq_enable+0x3b/0x140 [ 1560.919386][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1560.919417][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1560.919447][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1560.919475][ C0] ? __kthread_parkme+0x196/0x1f0 [ 1560.919506][ C0] kthread+0x388/0x470 [ 1560.919526][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1560.919556][ C0] ? __pfx_kthread+0x10/0x10 [ 1560.919576][ C0] ret_from_fork+0x514/0xb70 [ 1560.919599][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1560.919619][ C0] ? __switch_to+0xc89/0x1420 [ 1560.919660][ C0] ? __pfx_kthread+0x10/0x10 [ 1560.919678][ C0] ret_from_fork_asm+0x1a/0x30 [ 1560.919726][ C0] [ 1560.919735][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1560.919750][ C0] CPU: 0 UID: 0 PID: 5932 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 1560.919782][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1560.919798][ C0] Workqueue: krds_cp_wq#19/0 rds_connect_worker [ 1560.919831][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x90 [ 1560.919861][ C0] Code: 89 44 11 20 c3 cc cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d f8 44 74 11 65 8b 15 19 45 74 11 81 e2 00 01 ff 00 74 [ 1560.919879][ C0] RSP: 0018:ffffc90000006d00 EFLAGS: 00000246 [ 1560.919898][ C0] RAX: ffffffff897b03cd RBX: 00001aaaaaaa9999 RCX: 0000ffffffffffff [ 1560.919915][ C0] RDX: 0000000000000100 RSI: 00001aaaaaaa9999 RDI: 0000000000000000 [ 1560.919930][ C0] RBP: ffffc90000006f50 R08: ffff88822458aee3 R09: 1ffff110448b15dc [ 1560.919947][ C0] R10: dffffc0000000000 R11: ffffed10448b15dd R12: ffff888223689c90 [ 1560.919963][ C0] R13: dffffc0000000000 R14: ffff88822458a102 R15: aaaa160000003333 [ 1560.919980][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 1560.919999][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1560.920015][ C0] CR2: 000055d9d4fc3000 CR3: 00000000354a0000 CR4: 00000000003526f0 [ 1560.920035][ C0] Call Trace: [ 1560.920043][ C0] [ 1560.920052][ C0] bpf_prog_run_generic_xdp+0x56d/0x14b0 [ 1560.920090][ C0] do_xdp_generic+0xac2/0x12d0 [ 1560.920118][ C0] ? __pfx_do_xdp_generic+0x10/0x10 [ 1560.920145][ C0] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 1560.920166][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.920193][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.920217][ C0] __netif_receive_skb_core+0x10e0/0x30b0 [ 1560.920242][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.920266][ C0] ? ebt_do_table+0x2605/0x27d0 [ 1560.920298][ C0] ? ebt_do_table+0x2605/0x27d0 [ 1560.920329][ C0] ? trace_irq_enable+0x3b/0x140 [ 1560.920357][ C0] ? ebt_do_table+0x2605/0x27d0 [ 1560.920388][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1560.920412][ C0] ? ebt_do_table+0x2605/0x27d0 [ 1560.920443][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.920470][ C0] ? netif_receive_skb+0x102/0xbf0 [ 1560.920493][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.920514][ C0] ? lock_acquire+0x5f/0x350 [ 1560.920548][ C0] ? netif_receive_skb+0x102/0xbf0 [ 1560.920571][ C0] ? netif_receive_skb+0x102/0xbf0 [ 1560.920594][ C0] netif_receive_skb+0x1fe/0xbf0 [ 1560.920617][ C0] ? NF_HOOK+0xfa/0x3a0 [ 1560.920643][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.920667][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 1560.920690][ C0] ? lock_release+0x4b/0x3c0 [ 1560.920720][ C0] ? nf_hook_slow+0x182/0x220 [ 1560.920742][ C0] ? rcu_read_lock_held+0xa/0x50 [ 1560.920774][ C0] ? br_netif_receive_skb+0x126/0x190 [ 1560.920806][ C0] NF_HOOK+0xa4/0x3a0 [ 1560.920833][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1560.920862][ C0] ? NF_HOOK+0xfa/0x3a0 [ 1560.920889][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1560.920918][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1560.920950][ C0] ? br_pass_frame_up+0x275/0x420 [ 1560.920980][ C0] br_handle_frame_finish+0x1192/0x1990 [ 1560.921016][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1560.921055][ C0] ? nf_hook_slow+0x176/0x220 [ 1560.921079][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1560.921107][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 1560.921140][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1560.921170][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1560.921199][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1560.921236][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1560.921267][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1560.921300][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1560.921331][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1560.921361][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1560.921393][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1560.921436][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 1560.921468][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1560.921494][ C0] br_handle_frame+0x127f/0x1510 [ 1560.921527][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1560.921555][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1560.921582][ C0] ? lock_release+0x4b/0x3c0 [ 1560.921611][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1560.921644][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1560.921682][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 1560.921704][ C0] ? ktime_get+0x1f5/0x220 [ 1560.921730][ C0] ? lapic_next_event+0x11/0x20 [ 1560.921758][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1560.921787][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.921807][ C0] ? trace_irq_enable+0x3b/0x140 [ 1560.921839][ C0] ? lock_acquire+0x5f/0x350 [ 1560.921866][ C0] ? process_backlog+0x3c3/0x1860 [ 1560.921891][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.921911][ C0] ? process_backlog+0x3c3/0x1860 [ 1560.921936][ C0] process_backlog+0x706/0x1860 [ 1560.921962][ C0] ? process_backlog+0x3c3/0x1860 [ 1560.921992][ C0] __napi_poll+0xaa/0x330 [ 1560.922016][ C0] net_rx_action+0x61d/0xf50 [ 1560.922046][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1560.922068][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1560.922094][ C0] ? lock_release+0x4b/0x3c0 [ 1560.922129][ C0] handle_softirqs+0x225/0x840 [ 1560.922155][ C0] ? do_softirq+0x76/0xd0 [ 1560.922181][ C0] ? __inet6_bind+0x386/0xf30 [ 1560.922207][ C0] do_softirq+0x76/0xd0 [ 1560.922231][ C0] [ 1560.922238][ C0] [ 1560.922246][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1560.922271][ C0] __inet6_bind+0x386/0xf30 [ 1560.922303][ C0] kernel_bind+0x13e/0x1c0 [ 1560.922322][ C0] ? trace_irq_enable+0x3b/0x140 [ 1560.922348][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 1560.922365][ C0] ? irqentry_exit+0x218/0x8f0 [ 1560.922402][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 1560.922430][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1560.922449][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1560.922476][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1560.922499][ C0] ? rcu_is_watching+0x15/0xb0 [ 1560.922519][ C0] ? lock_acquire+0x5f/0x350 [ 1560.922550][ C0] rds_connect_worker+0x1d8/0x290 [ 1560.922576][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1560.922600][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1560.922637][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1560.922660][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1560.922685][ C0] ? assign_work+0x3cf/0x5d0 [ 1560.922711][ C0] worker_thread+0xa47/0xfb0 [ 1560.922749][ C0] kthread+0x388/0x470 [ 1560.922773][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1560.922797][ C0] ? __pfx_kthread+0x10/0x10 [ 1560.922815][ C0] ret_from_fork+0x514/0xb70 [ 1560.922835][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1560.922854][ C0] ? __switch_to+0xc89/0x1420 [ 1560.922882][ C0] ? __pfx_kthread+0x10/0x10 [ 1560.922900][ C0] ret_from_fork_asm+0x1a/0x30 [ 1560.922930][ C0]