last executing test programs: 40.379731861s ago: executing program 4 (id=2112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x800}, @val={0x2, 0x4, 0x6, 0x3, 0x80, 0x6}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0x0, 0x0, 0x9, 0x11, 0x0, @rand_addr=0x640100fc, @dev={0xac, 0x14, 0x14, 0x14}}, {0x0, 0x4e23, 0x8}}}}, 0x2a) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000b40)=@delchain={0x3548, 0x65, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x2, 0xe}, {0xe, 0x7}, {0xffff, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @TCA_RATE={0x6, 0x5, {0x1, 0xc2}}, @filter_kind_options=@f_cgroup={{0xb}, {0x34e0, 0x2, [@TCA_CGROUP_EMATCHES={0x1764, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xbc, 0x1, 0x0, 0x0, {{0xec, 0x0, 0xf5b}, "a5abeea5572e5374ea0675a7612185275caed4ded8a6ae79e33a72254a2d9bba28d30b7411ff7012b127b5e144a4e3eff660c79128051150e695a645ea46be62326ded7025e33e69daaead605c7265f11ae43020f6b4320ce10ba03cf76a9c8221f6808509b3ec00165136f1111e2e91b480d6fb1bac792ea477f34af1d4722f1d83cb36b01b69e55a643683bf3ae0272dc4535f3f113d5e935fe10c4336c701f92656d2940886ce97dba5653bab9f"}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x81, 0xfffffffb, 0x3, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x1138, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0x6b}, {0xd1, 0x7, 0xbb6c, 0x2, 0x7, 0x2, 0x1}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x6}, {0x7f, 0x0, 0x9, 0x5}}}, @TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x2}, "b7a5464faccbd6c4823a2f79a7e090cb239c154afb6c386343cc760d94d5a1b8b67c5972cdedf0cfd07aaebe4324bf559ee8e6096fe85313f0c2ade293eaa7e504ad69f52094b7a4363509c2f06f657e8d64e1b56c4533dc39060d2fda42352139f40a26c832019ed76384861edbd49da0171ab2fb530a70a9cefc3a926cf142bfa7c44781731ad19ec7243718d9baa872554abf957b40aabbb2ca6aacb2eecf2530f0a2fc06e6cbad9fe216c7c2e0490ed058897960a605514af82cac2049816940e3822b"}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x7}, "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"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x3fe}, {{0x4}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x238, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8eee, 0x2, 0xfff}, {0x2, 0x5, 0x1, "7d3bedd494"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0xfff7}, {0xffffffff, 0x66d80e81, 0x37, 0x2, 0x2, 0x2, 0x1}}}, @TCF_EM_META={0x50, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0x0, 0x1}, {0x3cd, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0x37, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="d888ab4741", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="467b5ddfd480047d70e6", @TCF_META_TYPE_VAR="87ede1e051a8f5cf88d4", @TCF_META_TYPE_VAR="ed625e00aa07302af5d6"]}]}}, @TCF_EM_IPT={0x8c, 0x3, 0x0, 0x0, {{0x6}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x6c, 0x5, "98d8ba72bf9e3ccbffee0fc5c673a760286235bec31061a5c79c527fb05d6ae62373d4d611b4f3c276657338a12055661ece920d09aad167ea80840508db4f58c84208ca6c29c53a56f03cee91c2bcd4af4b60c87238eeb149b6bfaf0444f9d9a33cc2f7378bc00c"}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xd, 0x8, 0x9}, {0x0, 0x1, 0x4}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa, 0x3, 0x7}, {0x0, 0x2, 0x800, 0x1e7}}}, @TCF_EM_IPT={0xc4, 0x1, 0x0, 0x0, {{0xffff, 0x9, 0x6}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0xad, 0x5, "c09927065011d0de0f5990138b41dee10a987c25ee908d4b4a30291bd87d9fafad75f1742150084a110096f7b013ff78ac89156d7f0074a459e141d205f20807571ad73440644f0aff293af3cbb0ce74c8f4bf19ace0921a2fe91c7903df39b62721251f3e2a4b976e78db665699a3812c895aee0b7bd37d32bf228e69506d86d6890ef896ec336c1b7d2052fa3d719a43f31d7d4b7e838b2b155455e472879632fe859f8c348da6b0"}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0xe5}, {0xf1c1, 0xafbf, 0xfffffff9, 0x6}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xd, 0x2, 0x4}, {0x9, 0x9, 0x2, "45b6400207b79551ae"}}}]}, @TCA_EMATCH_TREE_LIST={0x300, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3ff, 0x3, 0x6}, {0x9, 0x941, 0x1, 0x1}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x1ef9, 0x9, 0xc26}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x66e5, 0x8, 0x200}, {0x0, 0x2, 0x6}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfffc, 0x3, 0x6}, {0x5, 0x8, 0x2144, 0x40}}}, @TCF_EM_CONTAINER={0xd0, 0x3, 0x0, 0x0, {{0xfff9, 0x0, 0x6}, "0c4ea521227518d4ecc04fcb28bf6b3928adae951dae211fe7412fd1f464acf8b4b574b23e95b5af283fb7478b7cf65e83b2bb915720b8a8f3b733ec3b41b4c8160579dc4c6304089f830ed6d6f8559a504cec4c93c6ff8abb1521c6131b941e68d92bf37a3a4b7a877c027fedafa069a5933ab7bb91bca391a360fa48c04e32f49d4cb93d145f46c4bab8518eb04e6b1c20bec95ef9ae581666179c57d9f03b00ae67865ab3bd3fe9ab4e3ce6935496b5dfef1b73904ebd63814c65691b5be0b1f3882a"}}, @TCF_EM_META={0x78, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x5800}, [@TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="50cfe0", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='u%z', @TCF_META_TYPE_VAR="a8483dcebd1b9e", @TCF_META_TYPE_VAR="cbd8e0", @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xfe, 0x1}, {0xd8d8, 0x8, 0x1}}}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="1aa7b3", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff8, 0x7a, 0x2}, {0x8, 0x3}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='g', @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="040581"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4, 0x2}, {0xffff, 0x3}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_IPT={0x44, 0x1, 0x0, 0x0, {{0xffff, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x9}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf}]}}, @TCF_EM_IPT={0xe8, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x5}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xb1, 0x5, "74f87fa280b776b3ded4a8075d989b61c8fb62e26a73db5523883cee9d7cb8c2f0332d8fd49784af14a39af32b50ee3538b1ca6e2a408cccc3bb33f839dfff279d41851bbbbcfe1936e8765c2aafeaf47486b6ea0c30e160e2a904f369ea04ca040c36fa3f83e4659d57aa650923a8325bb0c0bf1e4dbe5b45c7898dc37a99b11b1e63c47ec94a9db3baf73cd690f05ad56d3c4164fcff27d4817cc025ee94099f52aeefa9f89320f58324a66e"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x8000}, {0xffffffff, 0x10000, 0x7, 0x7, 0x0, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x7ff}, {0x8001, 0x3, 0x0, "ae9809"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_CGROUP_ACT={0x1d78, 0x1, [@m_pedit={0xff8, 0xd, 0x0, 0x0, {{0xa}, {0xfcc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xf0, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xd3104cf0a562f3c3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x8, 0x0, 0x3, 0x1000, 0x6d}, 0x3, 0x8, [{0x8, 0x9, 0x4, 0x7, 0xfffffffa, 0xea}, {0x7fffffff, 0x3, 0xffffffff, 0xfffffffb, 0x0, 0x4}, {0xffff, 0x3, 0x101, 0x1, 0xffffff3c, 0x1}, {0xb8, 0x3, 0xcf, 0xfff, 0x2, 0xd}]}, [{0x9, 0x8001, 0x0, 0x7, 0x8, 0x9}, {0x5, 0x9, 0x87df, 0xd, 0x10001, 0x2}, {0x10e6, 0x8, 0x1, 0xe, 0x2, 0xe5}, {0xffffffff, 0x400, 0x7fff, 0x6, 0x8, 0x2}, {0x0, 0x8, 0x7, 0x6, 0x8, 0x4553}, {0x4, 0x0, 0xb, 0x9, 0xffffffff, 0x3}, {0x3, 0x6, 0xd96, 0x80000001, 0xffffffff, 0x49725bbc}, {0x1600000, 0x5, 0xfffffffc, 0x7, 0x2, 0x9}, {0x3, 0x1ff, 0x401, 0x80000000, 0x80000000, 0x3a}, {0x100, 0xfe000000, 0x7fff, 0x81, 0x1, 0x410f}, {0x81, 0x80, 0x3, 0x1, 0x9, 0x1c0}, {0x8, 0x8, 0x4, 0xffffff6e, 0x39, 0x4}, {0x4, 0x9, 0x1ff, 0x7ff, 0x18, 0x8}, {0x100, 0x99, 0xffffffff, 0x80000000, 0x8, 0x4d4}, {0x0, 0x6, 0x9604, 0x6, 0x8000, 0x3}, {0x80000001, 0x5, 0x3, 0x5, 0x6, 0x6}, {0x0, 0x40, 0x1, 0x80000001, 0xa236, 0x1}, {0x7fff, 0x3, 0x2, 0x2, 0xe, 0xc}, {0x0, 0x2, 0x6, 0x0, 0x2, 0x1}, {0xfffffffe, 0x5, 0x5, 0x5, 0x5, 0x3}, {0x9, 0x3, 0x4298, 0x7, 0x63, 0x24}, {0xfffffff9, 0x5, 0x5, 0xc6f0, 0xfffffc00, 0x81}, {0x9, 0x8, 0x1000, 0x8, 0x8, 0x87700000}, {0x7, 0x6, 0x6, 0x3, 0x6a, 0xa}, {0x6, 0x3bf, 0x10001, 0x4, 0x7, 0x2}, {0x8, 0x9, 0x8, 0xf85, 0xffff, 0x6}, {0x7fe, 0x4, 0x1, 0xe, 0x7, 0x5}, {0x1, 0xffffff80, 0xa, 0x6, 0x2, 0x539a}, {0x7, 0x8, 0x0, 0x6, 0xe01}, {0x1, 0xffffffff, 0x4, 0xe, 0x33, 0x8}, {0x20, 0x3, 0x8, 0x80000001, 0xc, 0xffffff81}, {0x3, 0xfffffffd, 0x6613, 0x5, 0x6, 0xc0}, {0xa, 0x1, 0x0, 0xfffffc91, 0x7, 0x600}, {0x8, 0x2, 0xdab1, 0x7f, 0xc, 0x5}, {0x5, 0x55b7, 0xf0e, 0xfffffff9, 0x80000000, 0x95e}, {0x2, 0x4, 0x7, 0x9, 0x546, 0x80}, {0x2, 0x8, 0x4, 0x1ff, 0x7fff, 0xfffffff9}, {0xffff, 0x7, 0x100, 0x3, 0x6, 0x5}, {0x7, 0x1e, 0x0, 0x4, 0x7fffffff, 0xffffffff}, {0x5, 0x81, 0x6, 0x8000, 0x101, 0x7ff}, {0x6, 0x101, 0xaa, 0xfffffff2, 0x9, 0x196e}, {0x1, 0x6, 0xa, 0xb7e6, 0x3, 0x5}, {0x7, 0x8, 0x1, 0xffffffd7, 0x7, 0x7}, {0x3, 0x2, 0x0, 0x4, 0xc, 0x7}, {0x7ff, 0x2, 0x59170514, 0xb, 0x69, 0x2}, {0x125, 0x9, 0x3, 0x7, 0x40, 0x9}, {0x74, 0x0, 0x1, 0x6, 0x2}, {0x10, 0xa94, 0xe65, 0x7f, 0xbb, 0x3}, {0x8, 0x9, 0x80, 0x0, 0x8000, 0xfffffff7}, {0x3, 0x0, 0x7, 0x7, 0x5}, {0x80, 0x3, 0x0, 0x6, 0x81}, {0xafa, 0xc293, 0x94, 0x9, 0xac, 0x32}, {0x8, 0x40, 0x9, 0x1, 0x10001, 0x1}, {0x9, 0x54, 0x4, 0x1, 0xfffffffc, 0x40}, {0x4, 0x0, 0x2, 0x9, 0x5c, 0xf}, {0x7, 0x4, 0xffffffff, 0xfff, 0x4, 0x5}, {0xa, 0x7, 0x7, 0xb671, 0x0, 0x2b2d}, {0x81, 0x9, 0x5, 0x0, 0x8, 0x6596fdfa}, {0x9, 0x2, 0xfffffffb, 0x1, 0x5, 0x5e1}, {0xa, 0x5d, 0x8c8, 0x4, 0xfffffffc, 0x4}, {0x1, 0xf80f, 0xffffff8d, 0x6, 0x0, 0x4}, {0x29, 0xe15, 0x2, 0x200, 0x390d, 0x7}, {0x9, 0x5, 0x2, 0xffff, 0xc}, {0x3, 0x0, 0x727, 0xffffffff, 0x5, 0x9}, {0x8001, 0x0, 0x5, 0x1000, 0x101, 0x1}, {0x6, 0xfffffffd, 0x9, 0x756, 0x3}, {0x0, 0xa, 0xc, 0x68000, 0x0, 0x200}, {0x6, 0x8000, 0x2, 0x7, 0x1}, {0x7, 0x1, 0x3ff, 0x69e, 0x7ff, 0x800}, {0x9, 0xd0eb, 0x5, 0x6, 0x9, 0x7fffffff}, {0x2, 0x9, 0x8001, 0x9, 0x2, 0x3}, {0x0, 0x7fff, 0x8, 0x7, 0x3, 0x4}, {0x6, 0xe, 0x2, 0xc, 0xf162, 0x9}, {0x200, 0xffffff41, 0x2, 0x7, 0x40, 0x800}, {0x2, 0x2, 0x6, 0x7de1, 0x5, 0xe}, {0x8000, 0xf81, 0xd, 0x7dc, 0x4, 0x2}, {0xb, 0x2, 0xb28, 0x7, 0xf41, 0x8000}, {0x4, 0x80000000, 0x9, 0x6, 0x2, 0x9e0}, {0x1, 0x8685, 0x684771b2, 0x3, 0xdf, 0x40}, {0x0, 0xaa, 0x1, 0x7, 0x6, 0x9}, {0xd6, 0xeb, 0x2, 0x1241, 0x6, 0x3}, {0x3, 0x6, 0x8000, 0xf7e, 0x2, 0x3}, {0x1ff, 0x85700000, 0x8, 0xf, 0x0, 0x80000001}, {0x8, 0x5, 0x14ff, 0x3, 0x7, 0x5}, {0x7fffffff, 0x87f, 0x7, 0x0, 0x89, 0xb169}, {0xa76, 0x7fffffff, 0xb, 0x6, 0x7, 0x6}, {0xfff, 0x8, 0x0, 0x9, 0x3, 0x7}, {0x5, 0xffff, 0x80000001, 0x4, 0x6, 0x3}, {0xff, 0x2, 0xff, 0x8000, 0x7f, 0x1ff}, {0x7, 0x8, 0x41, 0xffff0bf3, 0xe01, 0xfffffff9}, {0x6, 0x1, 0xe, 0x4, 0x9, 0xb}, {0x8d6, 0x0, 0x8, 0x5, 0x5, 0x10}, {0x3, 0x9728, 0xddc, 0x140, 0x6000, 0x73a}, {0x2, 0x9, 0xb, 0x8, 0xe9e, 0x40}, {0x2, 0x9, 0x8001, 0x2, 0x9, 0x6}, {0x2, 0xfffffff6, 0x1, 0x2, 0x200, 0x80000001}, {0xf, 0x5, 0x3d, 0x1, 0x7, 0x9}, {0x39b, 0x9, 0x9, 0x6, 0x7}, {0x384e, 0x4f09, 0x8, 0x81, 0xb, 0x8}, {0x9, 0xffff0001, 0xc, 0x11, 0x8, 0x6}, {0x6, 0x78, 0x0, 0xfff, 0x5, 0x33580000}, {0x1, 0xffffffff, 0x59, 0x7fffffff, 0x9b44, 0x800}, {0x5, 0x10, 0x4, 0x170, 0xe, 0xfff}, {0x1, 0x0, 0x3b8daa6, 0x1, 0x400, 0x1}, {0x1000, 0x44, 0x2, 0x3, 0x3, 0xc67}, {0x5, 0x1, 0x347a, 0xa, 0xd4, 0xc3ea00}, {0x7, 0x4b2, 0x101, 0x8, 0x1ff, 0x9}, {0x1, 0x1, 0x8, 0x101, 0x1000, 0x95c}, {0x8, 0x4, 0x3ff, 0x7, 0x5, 0x7}, {0x9, 0x49a3, 0xff, 0x8, 0x86, 0xa}, {0x8cc, 0x5, 0x7, 0xf, 0x2, 0x73}, {0x7f, 0xc0, 0x401, 0x4, 0x0, 0x9}, {0xfffffffd, 0xff, 0x9e4, 0xfff, 0x5, 0x1}, {0x1, 0x0, 0xd1, 0xdb, 0x1, 0x3}, {0x8001, 0xffffff5b, 0x0, 0x9, 0x8000, 0x401}, {0x3, 0x40, 0x100, 0x2, 0x8, 0x3}, {0x6, 0x1, 0x4, 0x2fa049cc, 0x3, 0x1}, {0x7, 0x8000, 0x1, 0x2, 0xb, 0xc58a}, {0x6, 0x7f, 0x47, 0x80000000, 0x4, 0xd9c}, {0x4, 0xf, 0x7, 0x9, 0x101, 0x6}, {0x8, 0x7, 0xb954, 0xe, 0x1, 0x849}, {0x10, 0x1, 0x60be, 0x0, 0x2, 0x3}, {0x9f75, 0x3, 0x100, 0x4, 0x2, 0x7ff}, {0x5, 0x0, 0x101, 0xfffffff7, 0x1ff, 0x8}, {0x4, 0x9, 0x7, 0x4, 0x7fff, 0x9}, {0x3, 0x8001, 0x80000000, 0x3, 0x7fff, 0xfffffffb}, {0x101, 0xfff, 0x9, 0x80000000, 0x7, 0xfffffff9}, {0x7, 0xae3, 0x0, 0x10, 0xac9a, 0x401}], [{0x4, 0x1}, {0xc3baac26ee09cc2d}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {0x3}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x5}, {0x3}, {0x1, 0x639508aeb891194e}, {0x4}, {0x4}, {0x2}, {0x2}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x135b9f54b24d1b39, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x1, 0x1}, {0x5}, {0xc056cc6fbff9bbb5}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0xcd4, 0x3, 0x0, 0x0, {{0xb}, {0xc84, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3b2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5b, 0x4, 0x6, 0x9, 0x5, 0x98fa, 0x1254b76d, 0x80000000, 0x4, 0x800, 0x3, 0xf4, 0x8, 0x8, 0x7, 0x3, 0x0, 0x8, 0x2d, 0xd, 0x7f, 0x854, 0x10001, 0xffff7fff, 0xff, 0x9, 0xfffffffd, 0x2, 0x3, 0xfffffffd, 0x5, 0x1, 0x6, 0xae, 0x3, 0xff, 0x5, 0x97f9, 0xc82, 0x5, 0x1, 0x2, 0x2d8c, 0x2, 0x5c5, 0x7, 0x5, 0xa, 0x3, 0x32, 0xb8, 0x4, 0x100, 0x3, 0x12, 0x5348d0e6, 0x200, 0x54, 0x7, 0xffffff14, 0x1, 0x8001, 0x6, 0x1, 0x5, 0x1, 0x5, 0x80000000, 0x3, 0x9, 0x24, 0x3, 0x7, 0x20000000, 0x2, 0x6, 0x4, 0x1, 0x2, 0x200, 0x6e3a22d6, 0xff, 0x5, 0x7, 0x100, 0x4000, 0x3, 0x3, 0x2, 0x0, 0x5, 0x2, 0x71c7, 0x3ff, 0x2, 0x4, 0x4, 0x7fffffff, 0x4, 0x80000000, 0x8001, 0x7f, 0x3, 0x8, 0x3, 0x2, 0xfffffffd, 0x7, 0x6, 0xffffffff, 0xffff, 0x0, 0x7, 0x800, 0x5, 0xf7b, 0x8000, 0x4e, 0xe, 0x2, 0xd1b5, 0x3, 0x40, 0x28e, 0x1, 0x1, 0xfffffffe, 0x1a, 0x90d, 0xe, 0x200, 0x3, 0x8, 0x2, 0x4, 0x1, 0x10001, 0x1, 0x9, 0x5, 0xffffffff, 0x3, 0x6, 0x5, 0x2, 0x1, 0xae6d, 0x8, 0xbcc, 0x5, 0x9, 0x7, 0xc75, 0x4, 0x5, 0xfffffff2, 0xfff, 0x5, 0xffff, 0x80, 0xffffffff, 0x101, 0x10000, 0xf, 0x400, 0x3, 0x4, 0x7fff, 0x9, 0x7, 0x4, 0x6cc, 0x7000, 0x9, 0x0, 0x4, 0x8, 0x6, 0xffffff73, 0x7, 0xc, 0x8001, 0x5a19, 0x3, 0x1, 0x9, 0x81, 0xd5, 0x7ff, 0x100, 0xe, 0x3ff, 0x1, 0x9, 0xb441bf20, 0xc, 0x7, 0x4, 0x7fff, 0xffff, 0xb, 0x6, 0xffffffff, 0x9, 0x70, 0x3, 0x8, 0x99, 0x4, 0xca7, 0x4, 0x8, 0x5, 0x3, 0x4f, 0xb23, 0x32f, 0x200, 0xd, 0x4, 0x86, 0x4, 0x8, 0x8, 0x9, 0x58a9, 0x4, 0x0, 0x88, 0xfffffffa, 0x7, 0x7, 0x2f5, 0x3, 0x2d, 0x9, 0x5, 0xe, 0x6, 0xffffffda, 0x2, 0x15ce, 0x10001, 0x6, 0xd, 0x1, 0xe7e2, 0x5, 0x3, 0xfb2, 0x7c, 0x1, 0xaf, 0x80000001, 0x7, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xa, 0xffffffff, 0x7, 0x8, 0xce4, 0xa6, 0x3, 0x10, 0x6, 0x315, 0x1ff3, 0x3, 0x9, 0x3ff, 0x0, 0x2, 0x80000000, 0x8000, 0xffffffff, 0x5, 0x1918e5ee, 0x8, 0x1, 0x9, 0x2, 0xef, 0x4, 0x6, 0x5, 0x8, 0x7, 0x1, 0x6, 0xe23a, 0xfffffff9, 0x80, 0x2, 0x2f99, 0x10, 0x5, 0xe134, 0x8, 0xfe, 0x1de, 0x8, 0x8, 0x9, 0x8, 0x3, 0x401, 0x6, 0x0, 0x3, 0x5, 0x1416, 0x5, 0x1, 0x2e, 0x3, 0x7, 0x3, 0x9, 0x1, 0x1, 0x33b, 0x0, 0x24c73001, 0x7, 0x7, 0x9, 0x1, 0x447, 0x7, 0x3, 0x5, 0xffffffff, 0x2, 0x2, 0x5fe1, 0x0, 0x8001, 0xf63, 0x9, 0x9, 0x6c, 0x3fc26ea2, 0xfff, 0xf7ae, 0x8, 0x200, 0x9af7, 0x1, 0x1, 0x8001, 0xb803, 0x1, 0x5, 0x8, 0xffff, 0xa, 0x2, 0x9, 0x5, 0x4, 0x101, 0xfffffffb, 0x6, 0x9, 0x77, 0x1, 0x7, 0x7, 0x5234, 0x9, 0x59, 0xb, 0x7, 0x3, 0x0, 0x6, 0x6, 0x401, 0x8, 0x5, 0x51b, 0x4, 0x3, 0x8, 0xb, 0x3, 0x555, 0x40, 0x800, 0x40, 0x7fff, 0x2, 0x6e2ec940, 0x6, 0x7fff, 0x101, 0x7, 0x1341, 0x0, 0x1, 0x7f, 0x1ff, 0x2, 0x0, 0x7, 0xfffffffb, 0x80, 0x6, 0x1, 0x8, 0x3, 0xcf, 0x1, 0x5, 0xffffff01, 0x3a8, 0xfffffff8, 0x6, 0x0, 0x1, 0xa, 0xfffffff8, 0x5, 0x3, 0x5, 0x6, 0x2, 0x3, 0x8, 0x0, 0x80000001, 0x0, 0xffffffff, 0xf0, 0x10000, 0x7, 0x9, 0xe46, 0x8, 0x5, 0xc988e02, 0x0, 0x2000000, 0x1, 0xffffff45, 0x2, 0x8, 0x30, 0xff, 0x0, 0x0, 0x6, 0x4, 0xf, 0x400, 0xe, 0x3, 0x7, 0x2d, 0x9c7, 0xba, 0x1d, 0x3, 0xb, 0x10, 0x1000, 0x2, 0x8, 0x4, 0x0, 0x2, 0x8, 0x0, 0x4, 0x0, 0x3, 0x7, 0x8, 0x7f, 0x6, 0xd, 0x0, 0x4, 0x0, 0x99, 0x7ff, 0xaf, 0x4, 0x8e0, 0x7, 0x5ca, 0x7, 0xfffff001, 0xb, 0x2, 0x3, 0x5, 0x7, 0xb, 0x9, 0x5, 0xffffffff, 0x6, 0x3, 0xff, 0x7, 0x0, 0x9, 0x1, 0xfff, 0x865]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5eb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb4d0}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9a}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x3, 0x6, 0x9, 0x3, 0xfffffbff, 0x401, 0x4, 0x7, 0x7, 0x7, 0x8, 0x3, 0x6, 0x9, 0x9, 0x9, 0x8, 0x1, 0x3, 0xaa0, 0x1a97ff95, 0x8, 0x5, 0x8, 0x0, 0xffff, 0x3, 0x6, 0x6, 0xe149, 0x5, 0x7, 0x9, 0x3, 0x4, 0x7, 0x8e2d, 0x3, 0x3, 0x2, 0x4, 0x2, 0xc0000000, 0x7f, 0x9, 0x2, 0x0, 0x6, 0x7, 0x5, 0xb, 0x9, 0x1b, 0x0, 0x5, 0x5, 0x1, 0x0, 0x20000000, 0x1, 0x7fbe, 0x1, 0x0, 0x67f, 0x7fff, 0x4, 0x3, 0x7, 0xdad, 0x2, 0x5, 0x5, 0x2, 0x5, 0x9, 0x8f, 0x1, 0x6, 0x5, 0x3, 0x7, 0xa, 0x86, 0x2, 0x7fff, 0x2, 0x8, 0x81, 0x3, 0x1, 0x5, 0x4b, 0x8f2, 0x2, 0x5, 0xebc, 0x5, 0xfffffffa, 0x53, 0xed1, 0x6, 0x2, 0x8001, 0x87, 0xc, 0xfffffff8, 0x8, 0x9, 0x84, 0x6, 0x0, 0xfffffffd, 0x7, 0x1, 0xfff, 0x6, 0xe03, 0x42d, 0x3, 0x2, 0x6, 0xf069, 0x1, 0x200, 0x7, 0x10, 0x5, 0x13, 0x6, 0x5911, 0x5, 0x8, 0x271, 0x9, 0xc, 0xf, 0x7, 0x9, 0x9, 0x8, 0x0, 0x8, 0x9, 0xd, 0x1, 0x6fe, 0x2, 0xfffffff5, 0x3, 0xbaba, 0x1, 0x3, 0x2, 0x3b2, 0xfffffffa, 0x5, 0xe7, 0x4, 0x5, 0x14, 0x1, 0x0, 0x331, 0x71b6, 0xe, 0x4, 0x9, 0x1, 0xffffffff, 0x5, 0xf, 0x401, 0xfffffffd, 0x4, 0x8, 0x3, 0x7, 0x4, 0xee0, 0x3, 0x81, 0x6, 0x401, 0x8, 0xffffffff, 0x2, 0x2, 0x2, 0x8, 0x7fff, 0x7, 0x2, 0xfffffffa, 0xffffff00, 0x0, 0x5, 0xfffffffb, 0x1, 0x8, 0xeaf6, 0x8, 0x1c000, 0x80, 0x9, 0x0, 0x8, 0x800, 0x7, 0x8, 0x3, 0x3, 0x8a0, 0x5, 0x1000, 0x1, 0x40, 0x20, 0x2, 0x302b, 0xf, 0x8, 0x33, 0x4, 0x6, 0x81, 0x1000, 0x7, 0xfffc0000, 0x8000, 0x5, 0x9, 0x6, 0x800, 0x2, 0x1, 0x5, 0xff, 0x71b2, 0xf, 0x0, 0x2, 0x9, 0x10000, 0x5, 0x5, 0x4, 0x4, 0x2, 0x5, 0x10001, 0x0, 0x9, 0x5, 0xbe79, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8}]]}, {0x26, 0x6, "eedd9ba5fd948b5a0c98f4769015a55f77e2dd934797154d395b58d679cb910516e3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_sample={0xa8, 0x12, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xec}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0x4b, 0x6, "f220c4343ab764d7f6331d3a464506bbaaeabf94d9fc54525e47c682d7cc068703de76b50b6ea9f79f21a9d62d680f700e55e970ffadc5aacea908ad84c73b31faafe4e57a9898"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x3548}, 0x1, 0x0, 0x0, 0x4004}, 0x8085) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 39.634345763s ago: executing program 4 (id=2119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0xffffff}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r4 = epoll_create(0x7) (async) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)) (async) r8 = epoll_create1(0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0x60000000}) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000080)={0x1008}) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff00000000020000000100000700000000080006000200000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) 39.312609143s ago: executing program 4 (id=2125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "baa32ad2976d1307d6faf33ee3a49671"}}}]}, 0x48}}, 0x8804) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="9ee93fc73496311800000000000000bcc60000feffffff71100400000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13, @ANYRES64], 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b22, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fdffffff00000000000000008500000020000000850000002a0000009500000051000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000003000000362300000600000082520400", @ANYRES32, @ANYBLOB="7bdac92a7204b9f500"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="01000000020000000400"/28], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000004200f3ff052100000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00100004000000040000000180000000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r9}, 0x38) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000400)={0x3, [0x0, 0x0, 0x2]}, 0xa) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x138, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000e0ff000000001000000800000000000000", @ANYRES32=r6, @ANYBLOB='{\a\x00'/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="03000000000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 38.962606673s ago: executing program 4 (id=2128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x88ad28828771d3a0}, 0x8080) 38.735055946s ago: executing program 4 (id=2131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x0, 0x4e24, 0x2, 0x2, 0x20, 0x20, 0x73}, {@in6=@loopback, 0x4d2, 0x32}, @in=@local, {0x4, 0x6, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f, 0x2}, {0x0, 0x8, 0x4}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe, 0x5c}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "82875676a015709e040000002389825596cb68e50661050000004a"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x81c) 38.296851668s ago: executing program 4 (id=2135): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) write(r2, &(0x7f0000000240)="53e07bc444fcee74f9", 0x9) (async, rerun: 64) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r4, 0x0, 0x0) close(0x3) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) (async) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) listen(r1, 0x50) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000080)={&(0x7f0000000180)="a811de9839b52b7446adbb44b8c7e748065f48a6e8f6b5c8a1488c22d2d2af7c6c589081b72fe3528307f7647ccda5cb2cfd4bd28228ea05983c45edf648f15c622e26da3b287de1a8825c2e5ce28d48348a815ccaf8b542ce", 0x59}, 0x1, 0x0, 0x0, 0x40001}, 0x4000004) (async, rerun: 64) sendmsg$inet(r1, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x6) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x0, 'veth0_to_bridge\x00', {0x1}, 0x6}) 23.210669878s ago: executing program 32 (id=2135): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) write(r2, &(0x7f0000000240)="53e07bc444fcee74f9", 0x9) (async, rerun: 64) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r4, 0x0, 0x0) close(0x3) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) (async) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) listen(r1, 0x50) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000080)={&(0x7f0000000180)="a811de9839b52b7446adbb44b8c7e748065f48a6e8f6b5c8a1488c22d2d2af7c6c589081b72fe3528307f7647ccda5cb2cfd4bd28228ea05983c45edf648f15c622e26da3b287de1a8825c2e5ce28d48348a815ccaf8b542ce", 0x59}, 0x1, 0x0, 0x0, 0x40001}, 0x4000004) (async, rerun: 64) sendmsg$inet(r1, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x6) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x0, 'veth0_to_bridge\x00', {0x1}, 0x6}) 2.051500616s ago: executing program 1 (id=2641): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x24}}, 0x2000c000) (async) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000400200000020010000200000008000c018500000008003f0025e50368566310f6307be5a4b925838b76cadb9e384f39b44c5c65a28454dffcbec111bde14cb56a25c3fa0156f36200e30700ef24fca2b382ae4bf7556bbfa81fb4eb20ca50a86ac6c297f7ff26da7f9ba06bc60c00293de5cf0dec40d646c21f046b5755bf78b19d7f76cd587ff2db5dad5d95ab46a30c8a85c24628887fbb34b9eb2a37cd002aa94bda5d2f816cabb07cbe421009dbf2e048817f0cdecd81d47b41e67101e31e25c42dea07ab9bb000000000000000003abd866274a4da09385e84a26bbf9a01845f27b2118bb7fdec52539f4e69216e0f6da3fd26647e7e922c5a68dec09f1c773afdfd6bfdbebdad7ff82e9ff03201119731f6da76ef6a3063b0f757f0b18ea08d72502c01a5a7b4416b5d6a8def4233921141"], 0x24}}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='a\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002abd7000fedbdf250a00000008000300", @ANYRES32=r5, @ANYBLOB="0800090005ac0f00"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}]}, 0x60}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.051028682s ago: executing program 3 (id=2642): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xb0, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x94, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x8c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x44, 0x84, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x400}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0xfa}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xcf3}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x90}, 0x8085) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r7, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x24}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0xe, 0x4) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8905, &(0x7f0000000100)) 1.902926908s ago: executing program 3 (id=2645): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) 1.801322058s ago: executing program 1 (id=2647): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004) 1.688390569s ago: executing program 3 (id=2650): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x10, 0x14, &(0x7f0000000c00)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf253400000008000300", @ANYRES32=r2, @ANYBLOB="0a0005f108021100008280157fc7d74bc73a37"], 0x3c}, 0x1, 0x0, 0x0, 0x20044054}, 0x0) r3 = socket(0x21, 0x3, 0x8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000640)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1811000000000000afe4000000000000630a00ff000000009500684000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x21) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r12}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000580)) socket(0x2a, 0x2, 0x0) 1.155221966s ago: executing program 2 (id=2656): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x683, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x408, 0x2e, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x300, 0x10f3, 0x0, 0x1, [@nested={0xc, 0xe5, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @pid}]}, @nested={0x15d, 0x7f, 0x0, 0x1, [@generic="cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913", @generic="f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee5", @generic="8a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2af8f34aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf62"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @generic="053b3a0b0a3176fa81d5dd205df77d46f70df08bc18894624e7bffe90164484395675b08b5cb590c676c2142be91e216739d0690e72a5925af7fb13fb2a4be76902e2211229172bd7c360f6d603e8eff61b35dd6ff34fe58dc5d3ba23ebb70b0d2f8d302084ad3e98ec61864d2cb9d0647451ab80d4f325eadc8d7ad364274f68cf6f7874b0d0c1b6442967dae092f893ad27643e311bc94a206618e9e36515064a0fab336692db34956ed512f98d73cf478601a"]}, @generic="bfe0d86a9ce9720b7b306fe49d7d97f44ab47d8b7c35a1b391de4351dca5d26218470fe6df06bd55e42ef28b16249f75cca600212f22c16327e396a652a078b4fe09806592da8e8b53ac92068bb16f47c396ece214d18d496f00c4e5a19c8e93c524fc63afc7011ae62ed3a8ada2a2cb23eec00714a6c0d223ae5f9bd54d7bf3bdaaf3fa400b069822e2700dc59772162bb0869f778433888d7d0f74631bfc723760f33f3df576d1e13f0a812e494837278b887f8e294766b0f0b1f11378ac77f2ee3ccacc21df09d32a0c8404e285d36583cc4ebb357b5bb0d0ec048249ed2274730b", @typed={0x14, 0xab, 0x0, 0x0, @ipv6=@loopback}]}, 0x408}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.099404447s ago: executing program 0 (id=2657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xe1e571d2193a0e72) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 999.10376ms ago: executing program 5 (id=2658): syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x20, 0x6, 0xfc, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x9}]}}}}}}}}, 0x0) 973.800935ms ago: executing program 2 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0x8004b706, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000080)={0x8, 'netdevsim0\x00', {'dvmrp1\x00'}, 0x400}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x70bd29, 0x100002, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xe}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x6c00}, 0x0) 938.846022ms ago: executing program 5 (id=2660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) unshare(0xa020480) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000100)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x80015}, 0x1c) setsockopt$inet6_mreq(r3, 0x29, 0x2d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) preadv(r2, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/171, 0xab}], 0x1, 0x1, 0x10000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4080}, 0x4048010) 839.620802ms ago: executing program 0 (id=2661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0xffffffffffffffb8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r1}, 0x38) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c0700000a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d0800064000000002080004400000001705000200e80000000900010073797a30000000000900020073797a3200000200000000000a"], 0x94}}, 0x0) 835.803856ms ago: executing program 2 (id=2662): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000000c0), 0x4) 834.76724ms ago: executing program 1 (id=2663): r0 = socket(0x1a, 0x6, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) shutdown(r2, 0x1) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0x7}, {0x1, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22040028}, 0x40040) (async) r7 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async, rerun: 64) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x3b5) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x15, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x3d}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x6, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x5, 0x3, 0xb}, {0x1, 0x4, 0x9, 0xa}, {0x1, 0x5, 0xd, 0xa}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x13, &(0x7f0000000140)={0x0, r9, 0x0, 0xe8}, 0x18) 721.146964ms ago: executing program 2 (id=2664): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xb, 0x10, 0x0, 0x1, [@generic="07000000772e8b"]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0x4010) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x80}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) (async) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x72489}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x400000000010, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0xe) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 637.396421ms ago: executing program 0 (id=2665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x38}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req={0xe, 0x1, 0x53, 0x8}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000190001090000000000000000021800000000fe010000000008000100ac1414000800050d0a01010218"], 0x5c}}, 0x0) 636.348495ms ago: executing program 3 (id=2666): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x9, 'vlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x90, 0x1, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8004}, 0x20000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x6}}) socket$rds(0x15, 0x5, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x9, 'vlan1\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x90, 0x1, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8004}, 0x20000) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x6}}) (async) 634.475797ms ago: executing program 5 (id=2667): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25210000000c000600010000000100000044002d80080002000700000008000300fd9500000500040001000000050004000000000005000400000000000500019f61ddf15f06b50bdefc87013b89b1c10df956e451c38cce42652c56835abfbd2e6a8bda9627e4c8bae16a83a555c7578717d6ad46d47270e0"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0x142}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0xfffffffffffffdb8, &(0x7f0000000340)=[{&(0x7f00000010c0)="f3", 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) 475.733524ms ago: executing program 1 (id=2668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltclass={0x24, 0x29, 0x819, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x2}, {0xa, 0x2}, {0x10, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x20000080) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) socket(0x1e, 0x4, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltclass={0x24, 0x29, 0x819, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x2}, {0xa, 0x2}, {0x10, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x20000080) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) close(0x3) (async) 474.992126ms ago: executing program 2 (id=2669): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async, rerun: 32) close(r0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=ANY=[@ANYBLOB="30000000000000007521bf0a8e4871338c9d0000ff7f00"/32], 0x30}}, 0x0) 473.9102ms ago: executing program 3 (id=2670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0175de31562ee4cbcf19670d69f036c8a11c46eca735f77bf525ebc0b780d8f419f47a3d4f427f83bc239e6ce6f658a3892361594a52f2645570e2f570b6cba26e9d69c9ca151efebea654739daff38a"], 0x48) unshare(0x20000400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x248241, 0x0) writev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x5, &(0x7f0000001e00)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$kcm(r4, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10, 0x117, 0x4}], 0x10}, 0x20000001) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x1, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000002c0)) 467.977322ms ago: executing program 0 (id=2671): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010000d04040000005c000000", @ANYRES32=0x0, @ANYBLOB="00000000195000001c0012800c0001006d6163766c616e000c0002800600020001000000140035006d6163766c616e30"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191eb1300fe05f2a4a515ea418214eed0c9edec2b8bee7f454be00c3bccb3926e9fc9b4693700ecd", 0x3d}], 0x1}}], 0x1, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040080}, 0x40) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000b40)={0x20c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0xab, 0x34b, 0x1, 0x9, 0x6a, 0x2, 0x22f, 0x0, 0x7948]}, @NL80211_ATTR_FRAME={0x1cc, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @broadcast, @random="9d499ac4bced", {0x8, 0x7}}, 0x420, 0x5c, @default, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x2, 0x0, {0x111, 0x395, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x1, 0xae1, 0x5}}, [{0xdd, 0x1e, "0b36a0affe51b62264fa0bd2275e564975c6a2081ab6edae72a5e66348a2"}, {0xdd, 0x29, "4097bee68c69d80437c5b71353df97a5d02d905feeca48c50fe845ef98895db0868dd36451bbd86423"}, {0xdd, 0x70, "e0acb215b869e80cebc81960feacebe365e4cda8dd2eeb7ef18a5bcb4ef57ed13f3cd4c0659eef9068ebc35f6309cc0fac474d5699e52e7819e797b6be1cadd9e642ca2b8a76bc1289309eaaed765436faafd3bd7fb852e14264b17b9cdfefab6973227782c68238e87d3d70d059a7be"}, {0xdd, 0xcf, "ba99a211a84658a9eef79bfd3819e752347564f70993ca7c38a7474e4fef4c46e126552aaa3d90c7c432c4f7aa3a43b8b35c0a5daddfc583d7c6deb80cfe2a826ce50d5eeab899bde86b7e00b2db5901440c7581b51a6feef1c304ea6608378563ef4199389b8a102015a63b13af08e7c43fa93faad5e556648597016936cdc6412158ff0cd29520ea520a83e6078a9254b5d4cf038064105159187678b931be3443cd6fbca4f1edd88fce1da7f1b67176f64039da049b8006caa2d7cb0dbf638fedaf20f128200309b18598f3e30b"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x9, 0x1000, 0x1, 0xffff, 0xfb8, 0x5]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20040044}, 0x4) 423.416327ms ago: executing program 5 (id=2672): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0) (async, rerun: 32) r1 = socket$inet(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x81, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x413c5000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x2000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r6 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r6, 0x3a, 0x0, 0x0, 0x2000005d) ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f0000000080)) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 347.815618ms ago: executing program 1 (id=2673): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r0, 0x0, 0x0, 0x800) writev(r2, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x11, 0x34, @random="5633e5bde725f2b28b44e0b849"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) 266.138953ms ago: executing program 2 (id=2674): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2ce99f91668f7c09000000", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf25050000000800020005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000740), r0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000bc0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4048000}, 0x24004010) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c004000", @ANYRES16=0x0, @ANYBLOB="200027bd7000fddbdf250800000008e339d89629ed02c6a6fa2c3562000300", @ANYRESOCT=r3, @ANYBLOB="79c1a4ff81cca8bf74edded31ecd02bdc63ddace11a418d10028b35c7fda0333fac097df3bbb298540d170f420bf8c837a80acf6b450c56a3db0a740babc02642f9e1cdd0a7a"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x18, 0x0, &(0x7f0000000280)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x4e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000000)={r8}) close(r8) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x22004810) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x158, 0x158, 0x98, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@local, @multicast2, 0xff000000, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x33, 0x3, 0xc}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0xffffffff, 0xffffff00, 'batadv_slave_0\x00', 'veth0_to_team\x00', {0xff}, {}, 0xff, 0x0, 0x50}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "d52a"}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x81}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a0300000009000200735b7a310000000008"], 0x34}}, 0x4000040) 183.477849ms ago: executing program 0 (id=2675): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000304100000f7295242bb4c89872200000002000000bc121000fcffffff9500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 182.872549ms ago: executing program 5 (id=2676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x1, 0x6, 0x41, @dev={0xfe, 0x80, '\x00', 0x44}, @local, 0x7800, 0x10, 0x6}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x0, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8811}, 0xc080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000000000000000006000300000000000800010000000000240002000200000000000000000000000000000001"], 0x4c}}, 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/215, 0xd7}, {&(0x7f0000000100)=""/82, 0x52}, {&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f0000000240)=""/155, 0x9b}], 0x4, 0x200, 0x2) 169.139295ms ago: executing program 1 (id=2677): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) close(r0) sendmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="c26a857f16ceed7fb2ef185c43f11252d2cb829db29f322d2ac6aceb5faf51ff361068c22d0c3d3219ec864fe22f5e93b86ab15075a525f791db02d1e50c1fe0d39b551a0976737ab165fbfb7dac4c0cd8be951bbec13dac14981f60cf9dfa5304652fc726d8d77d04797404a26d6a8e203e3f860f25051b7e293ddd8ee5e05eccc804953f15409703c267609da460c085e1c8a7147d01f4ef69389c82cec302ca9579b82c14a559ea3ef9609e51ccc30d", 0xb1}], 0x1}}, {{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x3, @random="6127014953e2", 'bond_slave_0\x00'}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000040)="182299ed81b359f5cdad4f36641787230b214fde3e0c84d420539993796dd0fc8b05664851255582faf62cf5df64af", 0x2f}, {&(0x7f0000000100)="38bc", 0x2}, {&(0x7f0000001400)="02762f1090ee86cae56efcebdb544d638325c8d9d129102cdd40cce35f718716e9f467e9bb596768df21aba2f7ec80e6a234e443cce8069033869eb3fa675036854abd2535fa72e40296ba73aa4eef668954381cfade92963a0625edddd1e1d726b7f9a64ba535f7d008ac5576ed323ce7fe2c409e4647094293b77bb5a837d6f9c72c401c89a3e9b97a9af7a931c3223e1e1743cd7f408981107ed08e9d040754b2d71550da23fc", 0xa8}, {&(0x7f0000002600)="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", 0x1084}, {&(0x7f00000024c0)="4fa34b6d394ef01e340524ec5bca83f0672044503dc3d855f2105856ff9f3751fab651d5f19f92801339619bdb17d296424e5d9423968fc84c80ba9d2639853dcb96cee34b11c7bb5d0280b32c12978064a903250d7db5486b6d1a3ee55f475a312728fc6cf33d9b42c82564b8db6e4da33f7e1f18ad77b8f28994d453cf75b95d0a1e0a0128e07496bfa3bf5669c0cf0dcb3fa2b36b32337bea887ca6d4f8d1f578e34546d6b47688e78718fc9fcac3d559b9b1d03354c8fe0aaf681b07", 0xbe}], 0x6, &(0x7f0000002600)}}], 0x2, 0x1) 86.030205ms ago: executing program 5 (id=2678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) (async) 1.020386ms ago: executing program 3 (id=2679): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) unshare(0x600) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711084000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=0x1, @ANYRES32=r6, @ANYBLOB="008ed0fad958be206ef28958c3f764722e7107eceaf7d78add93ab772e6a9d239a73b67744078ea1ed921824eb557daaec296cdead1c95ba4a377e8e2731e58f0d4c96f360e09233d538b8cbd9e86175e8b950903d0f8d29e6fc431e8f7331dc0ee42a5f768b7445c31a814c85f6dab12198d6d532d4e6c08650176205c978ba715760d97c7bb6d8f8279fc0e871d1c502a24277c3b0d8f354816e0582aba9bf6d9cf10061050e68eb4638d62cb3595530469d5b79a714a7b853c14f667077f713da0823a4aea35bbd1b50b73de0ae7c4b6629e79304f74c07e89b7622944a47cf2f2fd40772da9da773b73efff0fd1ce56250479466000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x4e24, 0xfff, 0x4e21, 0x8, 0xa, 0x80, 0x20, 0x33, r8, r9}, {0x4, 0x7, 0x3, 0x1, 0x200, 0x4, 0x2, 0x5}, {0x4, 0x100, 0x80000001, 0x2}, 0x7, 0x6e6bbc, 0x1, 0x0, 0x1, 0x1}, {{@in6=@private2, 0x4d4, 0x32}, 0x8, @in6=@private1, 0x0, 0x2, 0x3, 0xf, 0x5, 0x6, 0x7}}, 0xe8) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x3e, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x2e, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 0 (id=2680): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r2, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000003c0)={0x0, 'veth0_vlan\x00', {}, 0x200}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000, 0x1, &(0x7f0000000480)=""/135, 0x87}, &(0x7f0000000380)=0x40) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), r4) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x74, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x51b}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6928a5f2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2479}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3d4ffbc}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc8002}, 0x4000010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x200, 0x9377b5336e15b955}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r8, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000d0a0500000000000000000007000005797a30000000000900010073797a310000000064eade737e958ca1a1a72f68969c3ac158efa01651ab049834f37dbab51b2f27ccb244063865f3810db03ffe794b69c7fbc9"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x280080c5) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$bt_hci(r9, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xdc0, 0x0, &(0x7f0000000300)="0400000071a76d2688ca006588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r10], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r11, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x18, 0x3f9, 0x2, 0x70bd2b, 0x25dfdbf9, {0x8001}, ["", ""]}, 0x7a}, 0x1, 0x0, 0x0, 0x20008000}, 0x81) connect$inet(r9, &(0x7f0000001680)={0x2, 0x4e22, @multicast1}, 0x10) kernel console output (not intermixed with test programs): icast mode [ 133.849831][ T7911] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 134.604839][ T7960] netlink: 'syz.2.549': attribute type 4 has an invalid length. [ 134.618929][ T7964] netlink: 'syz.1.550': attribute type 22 has an invalid length. [ 134.734618][ T7970] xfrm1: entered promiscuous mode [ 134.775638][ T7970] xfrm1: entered allmulticast mode [ 135.137985][ T7997] netlink: 'syz.2.556': attribute type 2 has an invalid length. [ 135.190403][ T7997] SET target dimension over the limit! [ 135.416864][ T5839] Bluetooth: hci1: command tx timeout [ 135.626424][ T8027] syzkaller0: entered promiscuous mode [ 135.642126][ T8027] syzkaller0: entered allmulticast mode [ 136.610509][ T8067] __nla_validate_parse: 12 callbacks suppressed [ 136.610530][ T8067] netlink: 112 bytes leftover after parsing attributes in process `syz.2.575'. [ 136.811202][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.578'. [ 136.846777][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.853981][ T8076] bridge0: port 2(bridge_slave_1) entered listening state [ 136.869626][ T8076] bridge0: entered allmulticast mode [ 136.908656][ T8074] tipc: Enabled bearer , priority 0 [ 136.928662][ T8080] netlink: 'syz.2.579': attribute type 1 has an invalid length. [ 136.958648][ T8083] syzkaller0: entered promiscuous mode [ 136.985005][ T8083] syzkaller0: entered allmulticast mode [ 137.215871][ T8080] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 137.247156][ T8097] bridge0: port 3(ipvlan0) entered blocking state [ 137.274561][ T8097] bridge0: port 3(ipvlan0) entered disabled state [ 137.282882][ T8097] ipvlan0: entered allmulticast mode [ 137.291313][ T8097] ipvlan0: left allmulticast mode [ 137.347473][ T8073] tipc: Resetting bearer [ 137.402946][ T8073] tipc: Disabling bearer [ 137.978456][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.985309][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.417140][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 197.505438][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.512693][ C0] bridge0: topology change detected, propagating [ 198.466817][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 198.479144][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1c used by aa:aa:aa:aa:aa:1c detected! [ 199.418329][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.424737][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.669418][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 211.740685][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 211.741370][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 211.754817][ T5845] Bluetooth: hci0: command 0x080f tx timeout [ 211.762112][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 212.388095][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 212.398692][ T8157] xt_ecn: cannot match TCP bits for non-tcp packets [ 212.463209][ T8160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.487643][ T8160] bond0: (slave rose0): Enslaving as an active interface with an up link [ 212.536741][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 212.796712][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'. [ 212.859400][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 212.873532][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'. [ 212.895318][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 212.938497][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.599'. [ 212.982851][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.601'. [ 213.231284][ T8196] netlink: 64 bytes leftover after parsing attributes in process `syz.4.603'. [ 213.427980][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 213.740644][ T8218] openvswitch: netlink: IP tunnel dst address not specified [ 213.843614][ T8229] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 213.987844][ T8229] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.064780][ T8236] bond4: (slave veth5): Enslaving as an active interface with a down link [ 214.132946][ T8239] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 214.154333][ T8239] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 214.478164][ T8263] vlan0: entered promiscuous mode [ 214.513172][ T8263] geneve1: entered promiscuous mode [ 214.541684][ T8263] vlan0: entered allmulticast mode [ 214.556691][ T8263] geneve1: entered allmulticast mode [ 214.687291][ T8278] netlink: 'syz.0.622': attribute type 9 has an invalid length. [ 215.647918][ T8339] IPv6: sit1: Disabled Multicast RS [ 215.674836][ T8339] sit1: entered allmulticast mode [ 216.211993][ T8370] netlink: 'syz.0.646': attribute type 2 has an invalid length. [ 216.273645][ T8377] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.594792][ T8396] netlink: 'syz.3.655': attribute type 10 has an invalid length. [ 216.634600][ T8399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.530381][ T8439] lo: entered promiscuous mode [ 217.539398][ T8439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.713013][ T8452] __nla_validate_parse: 75 callbacks suppressed [ 217.713032][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 217.915067][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 218.054516][ T8470] netlink: 104 bytes leftover after parsing attributes in process `syz.3.679'. [ 219.488621][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 219.499408][ T8511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.610115][ T8511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.693661][ T8524] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004 [ 219.762943][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'. [ 219.962400][ T8537] trusted_key: syz.1.693 sent an empty control message without MSG_MORE. [ 220.219025][ T8552] netlink: 'syz.4.697': attribute type 3 has an invalid length. [ 220.299311][ T8545] xt_CT: No such helper "snmp_trap" [ 220.316897][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'. [ 220.600349][ T8573] bridge_slave_0: left allmulticast mode [ 220.606332][ T8573] bridge_slave_0: left promiscuous mode [ 220.612311][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.792998][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 220.971395][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 221.008051][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 221.037491][ T8596] workqueue: name exceeds WQ_NAME_LEN. Truncating to: “&˜%àï÷åQÍ0@æjÛÈÊ«–Óéôð} [ 221.089941][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 221.145004][ T8596] xt_SECMARK: invalid mode: 9 [ 221.382186][ T8621] netlink: 'syz.3.720': attribute type 1 has an invalid length. [ 221.424915][ T8623] netlink: 'syz.3.720': attribute type 1 has an invalid length. [ 221.889641][ T8647] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 221.909252][ T8652] atomic_op ffff88805771d998 conn xmit_atomic 0000000000000000 [ 222.701035][ T8696] netlink: 'syz.4.740': attribute type 1 has an invalid length. [ 222.730438][ T8696] __nla_validate_parse: 4 callbacks suppressed [ 222.730457][ T8696] netlink: 228 bytes leftover after parsing attributes in process `syz.4.740'. [ 222.888341][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 222.898653][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 223.122753][ T8722] sctp: [Deprecated]: syz.4.753 (pid 8722) Use of int in maxseg socket option. [ 223.122753][ T8722] Use struct sctp_assoc_value instead [ 223.175403][ T8134] Bluetooth: hci4: command 0x0405 tx timeout [ 223.239150][ T8725] nbd1: detected capacity change from 0 to 63 [ 223.569387][ T52] block nbd1: Receive control failed (result -104) [ 223.777453][ T8756] RDS: rds_bind could not find a transport for 400:0:1200::ffff:ffff, load rds_tcp or rds_rdma? [ 224.043050][ T8774] netlink: 'syz.4.764': attribute type 1 has an invalid length. [ 224.206742][ T8788] v: renamed from ipvlan1 [ 224.557340][ T8788] infiniband syz1: set active [ 224.562292][ T8788] infiniband syz1: added veth0_to_bond [ 224.645059][ T8788] RDS/IB: syz1: added [ 224.673675][ T8788] smc: adding ib device syz1 with port count 1 [ 224.680339][ T8788] smc: ib device syz1 port 1 has no pnetid [ 225.481154][ T8830] netlink: 'syz.3.777': attribute type 4 has an invalid length. [ 225.524118][ T8830] netlink: 'syz.3.777': attribute type 4 has an invalid length. [ 225.800580][ T8841] netlink: 'syz.2.779': attribute type 21 has an invalid length. [ 225.838535][ T8841] netlink: 'syz.2.779': attribute type 1 has an invalid length. [ 225.879792][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 225.979667][ T8846] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.245015][ T8847] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.264813][ T8847] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 226.329598][ T8847] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 227.280964][ T8908] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.788'. [ 227.816190][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 227.888876][ T8928] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.795'. [ 227.929882][ T8928] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.795'. [ 227.982426][ T8928] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.795'. [ 228.002645][ T8928] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.795'. [ 228.013005][ T8928] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.795'. [ 228.028915][ T8928] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.795'. [ 228.039954][ T8928] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.795'. [ 228.052797][ T8928] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.795'. [ 228.083829][ T8928] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.795'. [ 228.227688][ T8936] openvswitch: netlink: IP tunnel dst address not specified [ 228.351515][ T8947] syzkaller0: entered promiscuous mode [ 228.358926][ T8947] syzkaller0: entered allmulticast mode [ 228.397684][ T8945] tipc: Started in network mode [ 228.436743][ T8945] tipc: Node identity 6e20e972c805, cluster identity 4711 [ 228.444055][ T8945] tipc: Enabled bearer , priority 0 [ 228.500891][ T8945] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 228.645619][ T8945] tipc: Resetting bearer [ 228.718412][ T8945] tipc: Disabling bearer [ 228.889104][ T8980] syzkaller1: entered promiscuous mode [ 228.918964][ T8980] syzkaller1: entered allmulticast mode [ 229.250569][ T9004] x_tables: duplicate underflow at hook 2 [ 229.520974][ T9018] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 229.539498][ T9018] bond3: (slave lo): Enslaving as a backup interface with an up link [ 229.557764][ T9018] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 229.845805][ T9031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.920526][ T9032] bond6: (slave lo): Device is not bonding slave [ 229.945617][ T9032] bond6: option active_slave: invalid value (lo) [ 229.957536][ T9032] bond6 (unregistering): Released all slaves [ 230.136018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.794969][ T9065] netlink: 'syz.0.832': attribute type 21 has an invalid length. [ 230.827716][ T9065] netlink: 'syz.0.832': attribute type 10 has an invalid length. [ 230.911595][ T9073] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.127704][ T9084] nftables ruleset with unbound chain [ 231.697804][ T1844] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.732847][ T1844] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.768032][ T9114] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 231.790253][ T3535] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.811795][ T3535] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.988586][ T9122] syzkaller0: entered promiscuous mode [ 231.994140][ T9122] syzkaller0: entered allmulticast mode [ 232.982072][ T9195] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:0 [ 233.072522][ T9189] macsec1: entered promiscuous mode [ 233.098488][ T9181] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 233.165001][ T9202] --map-set only usable from mangle table [ 233.204513][ T9202] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 233.294205][ T9205] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20001 [ 233.335628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.344279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.562588][ T9226] x_tables: duplicate underflow at hook 2 [ 233.672926][ T9231] __nla_validate_parse: 71 callbacks suppressed [ 233.672945][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 233.977059][ T1087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.566565][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.893'. [ 234.689764][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'. [ 234.766137][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 234.794416][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 234.822882][ T9284] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 234.941265][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'. [ 235.072953][ T9306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.900'. [ 235.097545][ T9291] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 235.226370][ T9308] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 235.261367][ T1087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.280323][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.291848][ T9308] bond3: entered promiscuous mode [ 235.302696][ T9308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.328489][ T9317] bond3: (slave bridge3): making interface the new active one [ 235.361521][ T9317] bridge3: entered promiscuous mode [ 235.373512][ T9317] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 235.394435][ T5916] IPVS: starting estimator thread 0... [ 235.505398][ T9324] IPVS: using max 27 ests per chain, 64800 per kthread [ 235.569166][ T9326] netlink: 596 bytes leftover after parsing attributes in process `syz.3.909'. [ 235.806432][ T9343] netlink: 'syz.1.915': attribute type 1 has an invalid length. [ 235.857280][ T9349] netlink: 48 bytes leftover after parsing attributes in process `syz.0.917'. [ 235.878003][ T9349] netlink: 48 bytes leftover after parsing attributes in process `syz.0.917'. [ 235.914709][ T9355] netlink: 'syz.0.917': attribute type 21 has an invalid length. [ 235.952240][ T9355] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.966040][ T9355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.973662][ T9355] IPv6: NLM_F_CREATE should be set when creating new route [ 235.980986][ T9355] IPv6: NLM_F_CREATE should be set when creating new route [ 235.988255][ T9355] IPv6: NLM_F_CREATE should be set when creating new route [ 236.138025][ T9367] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 236.144918][ T9367] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 236.165442][ T9370] syzkaller0: entered promiscuous mode [ 236.170957][ T9370] syzkaller0: entered allmulticast mode [ 236.193220][ T9370] 8021q: VLANs not supported on ip6gre0 [ 236.370899][ T9377] bond4: option all_slaves_active: invalid value (222) [ 236.379770][ T9377] bond4 (unregistering): Released all slaves [ 236.507351][ T9383] openvswitch: netlink: Flow actions attr not present in new flow. [ 236.742394][ T9393] netlink: 'syz.4.931': attribute type 1 has an invalid length. [ 236.770677][ T9391] vlan2: entered promiscuous mode [ 236.778059][ T9391] bridge0: entered promiscuous mode [ 236.826120][ T9393] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.845521][ T9393] netlink: 'syz.4.931': attribute type 1 has an invalid length. [ 236.857585][ T9398] bond4: (slave geneve3): making interface the new active one [ 236.871515][ T9398] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 236.882270][ T9397] tipc: Enabling of bearer rejected, failed to enable media [ 236.909048][ T9397] pim6reg1: entered promiscuous mode [ 236.914376][ T9397] pim6reg1: entered allmulticast mode [ 237.061327][ T9407] block nbd4: not configured, cannot reconfigure [ 237.603215][ T9442] netlink: 'syz.1.945': attribute type 1 has an invalid length. [ 237.784656][ T9452] tipc: Enabled bearer , priority 11 [ 238.113178][ T9473] xt_CONNSECMARK: invalid mode: 0 [ 238.532790][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.554311][ T9506] netlink: 'syz.0.966': attribute type 1 has an invalid length. [ 238.581889][ T9506] netlink: 'syz.0.966': attribute type 1 has an invalid length. [ 238.895648][ T10] tipc: Node number set to 2787502450 [ 239.437469][ T9559] __nla_validate_parse: 13 callbacks suppressed [ 239.437488][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'. [ 239.470805][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 239.487455][ T9569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.980'. [ 239.525619][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'. [ 239.544744][ T9568] netlink: 'syz.4.981': attribute type 14 has an invalid length. [ 239.566609][ T9568] netlink: 'syz.4.981': attribute type 13 has an invalid length. [ 239.858989][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 239.895623][ T9584] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 239.958696][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.988'. [ 239.986369][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.988'. [ 240.294664][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 240.413431][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.993'. [ 240.687712][ T9618] netlink: 100 bytes leftover after parsing attributes in process `syz.2.996'. [ 241.075539][ T9635] atomic_op ffff888069071998 conn xmit_atomic 0000000000000000 [ 241.240321][ T9638] vcan0: entered promiscuous mode [ 241.245808][ T9638] vcan0: entered allmulticast mode [ 241.288315][ T9637] vcan0: entered promiscuous mode [ 241.293639][ T9637] vcan0: entered allmulticast mode [ 241.721350][ T9665] ip6t_REJECT: ECHOREPLY is not supported [ 241.728627][ T9665] xt_addrtype: ipv6 does not support BROADCAST matching [ 242.182532][ T9697] xt_CT: No such helper "syz1" [ 242.398346][ T9711] tipc: Enabled bearer , priority 0 [ 242.420450][ T9711] tipc: Resetting bearer [ 242.492338][ T9710] tipc: Disabling bearer [ 242.779636][ T9739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.810123][ T9744] netlink: 'syz.4.1029': attribute type 1 has an invalid length. [ 242.918174][ T9744] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.943216][ T9747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.631085][ T9782] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 243.747374][ T9795] openvswitch: netlink: Flow actions attr not present in new flow. [ 243.771448][ T9798] openvswitch: netlink: Flow actions attr not present in new flow. [ 244.472014][ T9835] netlink: 'syz.1.1061': attribute type 11 has an invalid length. [ 244.753125][ T9848] syzkaller1: entered promiscuous mode [ 244.768547][ T9848] syzkaller1: entered allmulticast mode [ 244.912431][ T9851] syzkaller0: entered promiscuous mode [ 244.929394][ T9851] syzkaller0: entered allmulticast mode [ 245.574888][ T9879] __nla_validate_parse: 46 callbacks suppressed [ 245.574902][ T9879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1073'. [ 245.973772][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 246.262568][ T9883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.809825][ T9924] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.854840][ T9925] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1084'. [ 246.882005][ T9932] pim6reg: entered allmulticast mode [ 246.931047][ T9925] IPv6: sit1: Disabled Multicast RS [ 246.939379][ T9925] sit1: entered allmulticast mode [ 247.032916][ T9943] netlink: 'syz.4.1089': attribute type 20 has an invalid length. [ 247.051224][ T9943] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.343659][ T9953] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 247.407806][ T9963] pimreg: entered allmulticast mode [ 247.456260][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 247.508521][ T9971] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1094'. [ 247.576229][ T8134] Bluetooth: hci4: command 0x0405 tx timeout [ 247.591915][ T9974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1100'. [ 247.602054][ T9974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1100'. [ 247.804497][ T9984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.833842][ T9984] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.951954][ T9994] netlink: 'syz.1.1105': attribute type 10 has an invalid length. [ 248.037966][ T9997] netlink: 464 bytes leftover after parsing attributes in process `syz.2.1107'. [ 248.104956][ T9994] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 248.214961][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 248.424721][T10010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1112'. [ 248.482539][T10018] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 248.604362][T10018] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 248.662356][T10025] pimreg: entered allmulticast mode [ 248.985802][T10049] netlink: 'syz.1.1121': attribute type 12 has an invalid length. [ 249.005862][T10049] netlink: 'syz.1.1121': attribute type 29 has an invalid length. [ 249.113787][T10052] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 249.231574][T10052] bond6: entered promiscuous mode [ 249.252884][T10052] 8021q: adding VLAN 0 to HW filter on device bond6 [ 249.470867][T10071] --map-set only usable from mangle table [ 249.470883][T10072] --map-set only usable from mangle table [ 250.068721][T10096] bridge_slave_1: left allmulticast mode [ 250.075032][T10096] bridge_slave_1: left promiscuous mode [ 250.101820][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.152368][T10096] bridge_slave_0: left allmulticast mode [ 250.165426][T10096] bridge_slave_0: left promiscuous mode [ 250.171337][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.738948][T10120] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 250.811189][T10130] __nla_validate_parse: 8 callbacks suppressed [ 250.811208][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 250.827600][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 250.838739][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 250.856961][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'. [ 250.921390][T10129] netlink: 'syz.1.1147': attribute type 1 has an invalid length. [ 251.049531][T10139] bond4: entered promiscuous mode [ 251.056833][T10139] bond4: entered allmulticast mode [ 251.062952][T10139] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.609775][T10184] syz.3.1159 uses old SIOCAX25GETINFO [ 251.771586][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1160'. [ 251.824941][T10195] xt_ipcomp: unknown flags 1D [ 251.916945][T10199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1165'. [ 252.153867][T10207] lo: left promiscuous mode [ 252.207216][T10211] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1168'. [ 252.218575][T10211] openvswitch: netlink: Flow key attr not present in new flow. [ 252.242365][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1168'. [ 252.255770][T10218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.434437][T10227] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1172'. [ 252.443845][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 252.609489][T10237] netlink: 'syz.2.1174': attribute type 10 has an invalid length. [ 252.670509][T10234] ip_vti0: entered promiscuous mode [ 252.737337][T10243] netlink: 'syz.0.1175': attribute type 21 has an invalid length. [ 253.494732][T10272] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.663959][T10284] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 253.797106][T10290] bond4: (slave geneve3): making interface the new active one [ 253.817325][ T25] block nbd1: Possible stuck request ffff888025500000: control (read@0,1024B). Runtime 30 seconds [ 253.818682][T10290] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 253.831854][ T25] block nbd1: Possible stuck request ffff888025500200: control (read@1024,1024B). Runtime 30 seconds [ 253.853944][ T25] block nbd1: Possible stuck request ffff888025500400: control (read@2048,1024B). Runtime 30 seconds [ 253.865133][ T25] block nbd1: Possible stuck request ffff888025500600: control (read@3072,1024B). Runtime 30 seconds [ 253.892317][ T8867] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 20004 - 0 [ 253.907762][ T8867] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 253.947228][ T8867] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 253.987334][ T8867] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 254.027194][T10299] gtp0: entered promiscuous mode [ 254.032315][T10299] gtp0: entered allmulticast mode [ 254.214610][T10312] vlan3: entered promiscuous mode [ 254.235583][T10312] hsr_slave_1: entered promiscuous mode [ 254.243669][T10312] vlan3: entered allmulticast mode [ 254.252897][T10313] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 254.306259][T10318] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 254.307935][T10312] hsr_slave_1: entered allmulticast mode [ 254.428768][T10324] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 254.802049][T10359] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 255.459070][T10403] sctp: [Deprecated]: syz.1.1219 (pid 10403) Use of int in max_burst socket option deprecated. [ 255.459070][T10403] Use struct sctp_assoc_value instead [ 256.058504][T10442] xt_ecn: cannot match TCP bits for non-tcp packets [ 256.084246][T10443] __nla_validate_parse: 16 callbacks suppressed [ 256.084265][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'. [ 256.114852][T10443] block nbd2: Unsupported socket: should be TCP or UNIX. [ 256.255845][T10458] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1233'. [ 256.274774][T10452] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 256.305066][T10452] netlink: 'syz.0.1232': attribute type 2 has an invalid length. [ 256.324847][T10452] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 256.365524][T10452] netlink: 'syz.0.1232': attribute type 3 has an invalid length. [ 256.373314][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 256.438227][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 256.527065][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 256.671915][T10492] netlink: 196116 bytes leftover after parsing attributes in process `syz.4.1240'. [ 256.840671][T10500] tipc: Enabling of bearer rejected, failed to enable media [ 257.000723][T10513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.130219][T10518] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 257.204486][T10522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1254'. [ 257.381716][T10537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1260'. [ 257.564231][T10542] syzkaller0: entered promiscuous mode [ 257.580311][T10542] syzkaller0: entered allmulticast mode [ 257.906441][T10565] xt_socket: unknown flags 0x50 [ 257.918223][T10574] xt_l2tp: missing protocol rule (udp|l2tpip) [ 257.931849][T10571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.041490][T10584] netlink: 'syz.3.1272': attribute type 6 has an invalid length. [ 258.188523][T10591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1275'. [ 258.291885][T10598] 0ªî{X¹¦: left allmulticast mode [ 258.370017][T10598] bond2: left allmulticast mode [ 258.394376][T10598] bond3: left allmulticast mode [ 258.418744][T10603] veth1_virt_wifi: entered promiscuous mode [ 258.639651][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 258.705264][T10620] lo: entered promiscuous mode [ 258.725046][T10620] tunl0: entered promiscuous mode [ 258.735119][T10620] gre0: entered promiscuous mode [ 258.751058][T10620] gretap0: entered promiscuous mode [ 258.768420][T10620] erspan0: entered promiscuous mode [ 258.784276][T10620] ip_vti0: entered promiscuous mode [ 258.989056][T10630] netlink: 'syz.4.1288': attribute type 26 has an invalid length. [ 259.016387][T10636] tls_set_device_offload_rx: netdev not found [ 259.114304][T10641] netlink: 'syz.1.1290': attribute type 1 has an invalid length. [ 259.185116][T10641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.248700][T10643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.269532][T10643] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 259.296314][T10643] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 259.401481][T10641] veth3: entered promiscuous mode [ 259.414219][T10641] bond1: (slave veth3): Enslaving as an active interface with a down link [ 259.462366][T10648] vlan1: entered allmulticast mode [ 259.503475][T10648] bond1: entered allmulticast mode [ 259.799098][T10670] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 260.860072][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.916926][T10674] IPv6: sit1: Disabled Multicast RS [ 260.923025][T10674] sit1: entered allmulticast mode [ 260.991726][T10680] : renamed from hsr0 (while UP) [ 261.137150][T10693] __nla_validate_parse: 2 callbacks suppressed [ 261.137169][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'. [ 261.165970][T10694] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 261.172998][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'. [ 261.312130][T10699] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 261.351200][T10699] bond5: (slave vti0): Error -95 calling set_mac_address [ 261.450774][T10714] sch_fq: defrate 0 ignored. [ 261.627066][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1314'. [ 261.879403][T10738] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1322'. [ 262.027824][T10751] tipc: Enabled bearer , priority 0 [ 262.037787][T10751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1326'. [ 262.051243][T10751] veth0_to_bond: entered promiscuous mode [ 262.058131][T10751] veth0_to_bond: entered allmulticast mode [ 262.069852][T10750] tipc: Disabling bearer [ 262.337704][T10769] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1332'. [ 262.358765][T10769] openvswitch: netlink: Flow key attr not present in new flow. [ 262.390188][T10769] netlink: 'syz.3.1332': attribute type 39 has an invalid length. [ 262.435012][T10769] syz_tun (unregistering): left allmulticast mode [ 262.444335][T10769] syz_tun (unregistering): left promiscuous mode [ 262.453884][T10769] bridge0: port 3(syz_tun) entered disabled state [ 262.495875][T10776] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 262.502055][T10776] syzkaller1: linktype set to 823 [ 262.582666][T10776] bond5: invalid ARP target 0.0.0.0 specified for addition [ 262.616974][T10776] bond5: option arp_ip_target: invalid value (0) [ 262.643388][T10776] bond5 (unregistering): Released all slaves [ 262.677971][T10781] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 262.701597][T10786] netlink: 'syz.4.1339': attribute type 10 has an invalid length. [ 262.709650][T10786] openvswitch: netlink: Key type 45 is out of range max 32 [ 262.777899][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1341'. [ 262.927226][T10798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1342'. [ 263.242406][T10830] lo: entered allmulticast mode [ 263.257912][T10830] lo: left allmulticast mode [ 263.403281][T10839] netlink: 'syz.4.1356': attribute type 10 has an invalid length. [ 263.403283][T10840] netlink: 'syz.4.1356': attribute type 10 has an invalid length. [ 263.420946][T10840] syz_tun: entered promiscuous mode [ 263.462981][T10842] netlink: 'syz.4.1356': attribute type 10 has an invalid length. [ 263.514860][T10842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.525008][T10842] team0: Port device bond0 added [ 263.671056][T10840] team0: Port device bond0 removed [ 263.709849][T10840] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.771769][T10843] netlink: 'syz.3.1357': attribute type 1 has an invalid length. [ 263.811875][T10848] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 264.115713][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'. [ 264.197203][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1366'. [ 264.752703][T10905] netlink: 'syz.4.1373': attribute type 1 has an invalid length. [ 265.571603][T10949] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 265.860841][T10979] openvswitch: netlink: Actions may not be safe on all matching packets [ 265.878165][T10970] macvtap1: entered promiscuous mode [ 265.892202][T10962] "syz.1.1391" (10962) uses obsolete ecb(arc4) skcipher [ 265.899900][T10970] vlan0: entered promiscuous mode [ 265.908092][T10970] macvtap1: entered allmulticast mode [ 265.916744][T10981] netlink: 'syz.2.1396': attribute type 13 has an invalid length. [ 265.926793][T10970] vlan0: entered allmulticast mode [ 265.933453][T10970] veth0_vlan: entered allmulticast mode [ 266.055060][T10989] netlink: 'syz.4.1398': attribute type 1 has an invalid length. [ 266.130778][T10981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.153742][T10981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.166375][T10981] tipc: Resetting bearer [ 266.310600][T11002] sctp: [Deprecated]: syz.4.1400 (pid 11002) Use of int in max_burst socket option. [ 266.310600][T11002] Use struct sctp_assoc_value instead [ 266.391280][ T8867] netdevsim netdevsim2 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.402188][ T8867] netdevsim netdevsim2 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.412056][ T8867] netdevsim netdevsim2 ÿÿÿÿÿÿ: unset [1, 1] type 2 family 0 port 20004 - 0 [ 266.421914][ T8867] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.431408][ T8867] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.441060][ T8867] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 266.499097][ T8867] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.531716][ T8867] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.556476][ T8867] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 266.586433][ T8867] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.607498][ T8867] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.625831][ T8867] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 266.715178][T11017] netlink: 'syz.1.1405': attribute type 3 has an invalid length. [ 266.994510][T11034] __nla_validate_parse: 11 callbacks suppressed [ 266.994531][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 267.134144][T11044] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 267.293359][T11052] netlink: 'syz.1.1417': attribute type 1 has an invalid length. [ 267.361070][T11056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.416466][T11052] bond2: (slave erspan0): making interface the new active one [ 267.459276][T11052] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 267.482019][T11057] bond2: entered allmulticast mode [ 267.516468][T11057] erspan0: entered allmulticast mode [ 267.526717][T11061] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1420'. [ 267.577184][ T8134] Bluetooth: hci0: command 0x080f tx timeout [ 267.604352][T11065] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1423'. [ 267.726378][T11073] tap0: tun_chr_ioctl cmd 1074025678 [ 267.731760][T11073] tap0: group set to 0 [ 267.830301][T11085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.838085][T11081] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1428'. [ 268.042814][T11099] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1434'. [ 268.126203][T11099] syzkaller0: entered promiscuous mode [ 268.142506][T11099] syzkaller0: entered allmulticast mode [ 268.238331][T11109] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1436'. [ 268.279341][T11109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1436'. [ 268.317569][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 268.356282][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 268.367487][T11112] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 268.437763][T11112] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.463909][T11109] veth1_to_batadv: entered promiscuous mode [ 268.514257][T11109] bond3: (slave veth1_to_batadv): making interface the new active one [ 268.529062][T11109] bond3: (slave veth1_to_batadv): Enslaving as an active interface with an up link [ 268.937061][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 269.083349][T11152] xt_bpf: check failed: parse error [ 269.165141][T11157] xt_TCPMSS: Only works on TCP SYN packets [ 269.342642][T11168] netlink: 'syz.0.1454': attribute type 1 has an invalid length. [ 269.612900][T11182] batadv_slave_1: entered promiscuous mode [ 269.658749][T11181] batadv_slave_1: left promiscuous mode [ 270.280644][T11227] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 270.298172][T11228] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 270.544180][T11236] IPv6: sit1: Disabled Multicast RS [ 272.209209][T11332] __nla_validate_parse: 12 callbacks suppressed [ 272.209230][T11332] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1496'. [ 272.976091][T11367] vlan1: entered allmulticast mode [ 273.007259][T11369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1507'. [ 273.390844][T11391] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1515'. [ 273.412028][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 273.433578][T11384] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 273.478042][T11396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1516'. [ 273.563995][T11401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1516'. [ 273.599538][T11401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1516'. [ 273.633840][T11396] team0: Cannot enslave team device to itself [ 273.783781][T11413] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 273.923203][T11423] xt_bpf: check failed: parse error [ 274.180558][T11434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.426670][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 274.495850][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 274.569027][T11464] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1531'. [ 274.674078][T11469] netlink: 'syz.1.1534': attribute type 10 has an invalid length. [ 274.981626][T11490] netlink: 'syz.4.1540': attribute type 1 has an invalid length. [ 274.993445][T11491] syzkaller0: entered promiscuous mode [ 274.999162][T11491] syzkaller0: entered allmulticast mode [ 275.010735][ T8866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.047250][ T8866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.143731][T11490] bond7: entered promiscuous mode [ 275.161969][T11490] bond7: entered allmulticast mode [ 275.189367][T11490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 275.309582][T11506] sctp: [Deprecated]: syz.3.1544 (pid 11506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.309582][T11506] Use struct sctp_sack_info instead [ 275.380070][T11510] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 275.636543][T11525] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 275.823550][T11546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.125164][T11561] netlink: 'syz.3.1564': attribute type 1 has an invalid length. [ 276.328284][T11571] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 276.346833][T11571] bond4 (unregistering): Released all slaves [ 277.336590][T11624] tipc: Enabling of bearer rejected, media not registered [ 277.364788][T11624] netlink: 'syz.2.1576': attribute type 1 has an invalid length. [ 277.382872][T11624] netlink: 'syz.2.1576': attribute type 7 has an invalid length. [ 277.401390][T11624] netlink: 'syz.2.1576': attribute type 8 has an invalid length. [ 277.421251][T11629] __nla_validate_parse: 10 callbacks suppressed [ 277.421268][T11629] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1578'. [ 277.427699][T11624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1576'. [ 277.493069][T11630] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.730669][T11645] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1583'. [ 277.753959][T11647] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1583'. [ 277.797658][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 278.747710][T11706] IPVS: Scheduler module ip_vs_sip not found [ 278.862873][T11715] ip6gretap2: entered promiscuous mode [ 278.876087][T11715] ip6gretap2: entered allmulticast mode [ 278.926886][T11714] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1600'. [ 278.956327][T11714] openvswitch: netlink: Flow key attr not present in new flow. [ 279.009543][T11720] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 279.191544][T11720] syzkaller0: entered promiscuous mode [ 279.212653][T11720] syzkaller0: entered allmulticast mode [ 279.394181][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 279.425557][T11751] netlink: 'syz.2.1608': attribute type 7 has an invalid length. [ 279.479240][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 279.548500][T11751] netlink: 'syz.2.1608': attribute type 7 has an invalid length. [ 279.580511][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 279.612452][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 279.679238][T11751] validate_nla: 31 callbacks suppressed [ 279.679256][T11751] netlink: 'syz.2.1608': attribute type 7 has an invalid length. [ 279.711881][T11751] netlink: 'syz.2.1608': attribute type 7 has an invalid length. [ 279.732265][T11751] netlink: 'syz.2.1608': attribute type 7 has an invalid length. [ 279.764313][T11751] netlink: 'syz.2.1608': attribute type 7 has an invalid length. [ 279.839534][T11751] netlink: 'syz.2.1608': attribute type 7 has an invalid length. [ 279.866374][T11751] netlink: 'syz.2.1608': attribute type 7 has an invalid length. [ 279.892109][T11751] netlink: 'syz.2.1608': attribute type 7 has an invalid length. [ 279.913834][T11751] netlink: 'syz.2.1608': attribute type 7 has an invalid length. [ 279.936333][T11751] netlink: 'syz.2.1608': attribute type 7 has an invalid length. [ 279.985965][T11751] netlink: 'syz.2.1608': attribute type 7 has an invalid length. [ 280.331712][T11764] lec:lec_atm_close: lec0: Shut down! [ 280.354725][T11784] tipc: Enabled bearer , priority 0 [ 280.490471][T11784] syzkaller0: entered promiscuous mode [ 280.508254][T11784] syzkaller0: entered allmulticast mode [ 280.514625][T11784] tipc: Resetting bearer [ 280.664905][T11805] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 280.684145][T11782] tipc: Resetting bearer [ 282.099402][T11782] tipc: Disabling bearer [ 282.185326][ T24] tipc: Node number set to 469525591 [ 282.297864][T11847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.367812][ T5916] lec:lec_start_xmit: lec0:No lecd attached [ 282.407230][T11858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.453621][T11858] bond7: (slave gretap0): making interface the new active one [ 282.472123][T11858] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 282.885879][T11880] __nla_validate_parse: 68 callbacks suppressed [ 282.885899][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1636'. [ 282.961419][T11880] 8021q: adding VLAN 0 to HW filter on device bond8 [ 283.047102][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'. [ 283.057423][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'. [ 283.216710][T11902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.247424][T11904] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 283.396586][T11907] x_tables: duplicate underflow at hook 1 [ 283.749370][T11932] openvswitch: netlink: Message has 592 unknown bytes. [ 283.758093][T11932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.814817][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 283.839224][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'. [ 283.880941][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 283.905720][ T25] block nbd1: Possible stuck request ffff888025500000: control (read@0,1024B). Runtime 60 seconds [ 283.922097][ T25] block nbd1: Possible stuck request ffff888025500200: control (read@1024,1024B). Runtime 60 seconds [ 283.933383][ T25] block nbd1: Possible stuck request ffff888025500400: control (read@2048,1024B). Runtime 60 seconds [ 283.944761][ T25] block nbd1: Possible stuck request ffff888025500600: control (read@3072,1024B). Runtime 60 seconds [ 284.001242][T11937] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.062770][T11940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1651'. [ 284.089865][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 284.134410][T11942] dvmrp6: entered allmulticast mode [ 284.140838][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1651'. [ 284.140883][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1651'. [ 284.226629][T11953] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.430957][T11961] sch_fq: defrate 0 ignored. [ 284.547823][T11967] netlink: del zone limit has 8 unknown bytes [ 284.608287][T11965] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 284.792036][T11978] openvswitch: netlink: IP tunnel TTL not specified. [ 284.987318][T12000] sctp: [Deprecated]: syz.3.1668 (pid 12000) Use of int in maxseg socket option. [ 284.987318][T12000] Use struct sctp_assoc_value instead [ 284.988908][T12002] validate_nla: 27 callbacks suppressed [ 284.988965][T12002] netlink: 'syz.1.1666': attribute type 4 has an invalid length. [ 285.246826][ T5202] udevd[5202]: worker [8136] /devices/virtual/block/nbd1 is taking a long time [ 285.548739][T12018] netlink: 'syz.4.1675': attribute type 1 has an invalid length. [ 286.522233][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 286.569607][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 286.577293][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 286.962113][T12061] infiniband syz2: set active [ 286.968445][T12061] infiniband syz2: added vxcan1 [ 287.018436][T12061] RDS/IB: syz2: added [ 287.027133][T12061] smc: adding ib device syz2 with port count 1 [ 287.047010][T12061] smc: ib device syz2 port 1 has no pnetid [ 287.083606][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 287.090732][ T5916] vxcan1 speed is unknown, defaulting to 1000 [ 287.104030][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 287.367519][T12096] sit2: entered promiscuous mode [ 287.372587][T12096] sit2: entered allmulticast mode [ 287.521521][T12098] hsr_slave_1 (unregistering): left promiscuous mode [ 287.536497][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 288.163538][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 288.375223][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6010 ms [ 288.383655][ C0] lec:lec_tx_timeout: lec0 [ 288.389086][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 288.537086][T12134] __nla_validate_parse: 16 callbacks suppressed [ 288.537105][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 288.592579][T12134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1709'. [ 288.679491][T12146] netlink: 'syz.4.1712': attribute type 23 has an invalid length. [ 288.718968][T12134] geneve4: entered promiscuous mode [ 288.724226][T12134] geneve4: entered allmulticast mode [ 288.774356][ T3535] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.842886][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 288.879834][ T3535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.915462][ T3535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.936420][ T3535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.946959][T12157] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1715'. [ 289.411367][T12175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1719'. [ 289.561393][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 289.631054][T12179] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1720'. [ 290.139651][T12200] bond0: (slave bond_slave_0): Releasing backup interface [ 290.210005][T12200] bond0: (slave bond_slave_1): Releasing backup interface [ 290.256006][T12200] team0: Port device team_slave_0 removed [ 290.269565][T12200] team0: Port device team_slave_1 removed [ 290.278320][T12200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.290693][T12210] netlink: 'syz.4.1724': attribute type 16 has an invalid length. [ 290.307962][T12200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.330612][T12200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.346868][T12210] netlink: 'syz.4.1724': attribute type 17 has an invalid length. [ 290.504852][T12208] pimreg: left allmulticast mode [ 290.622226][T12210] ip_vti0: left promiscuous mode [ 290.644891][T12219] netlink: 'syz.2.1727': attribute type 1 has an invalid length. [ 290.689752][T12210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.713712][T12210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.919466][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 290.931705][T12225] bond7: (slave bridge0): making interface the new active one [ 290.968129][T12239] netlink: 'syz.1.1731': attribute type 5 has an invalid length. [ 290.985093][T12225] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 291.018278][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1731'. [ 291.112692][T12239] geneve2: entered promiscuous mode [ 291.127930][T12239] geneve2: entered allmulticast mode [ 291.153890][T12248] IPv6: NLM_F_REPLACE set, but no existing node found! [ 291.166630][ T71] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 291.185040][ T71] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 291.229520][ T71] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 291.287216][ T71] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 291.332504][T12250] netem: change failed [ 291.405587][T12264] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 291.414478][T12263] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1738'. [ 291.926807][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 291.938532][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 292.116766][T12301] syzkaller1: entered promiscuous mode [ 292.124110][T12301] syzkaller1: entered allmulticast mode [ 292.187544][T12307] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 292.253607][T12316] pimreg3: entered allmulticast mode [ 292.343318][T12316] netlink: 'syz.2.1753': attribute type 1 has an invalid length. [ 292.420294][T12316] netlink: 'syz.2.1753': attribute type 1 has an invalid length. [ 292.498888][T12325] tipc: Enabled bearer , priority 0 [ 292.515697][T12325] syzkaller0: entered promiscuous mode [ 292.521615][T12325] syzkaller0: entered allmulticast mode [ 292.535836][T12330] rdma_rxe: rxe_newlink: failed to add lo [ 292.571179][T12312] 8021q: adding VLAN 0 to HW filter on device bond9 [ 292.582022][T12312] bond8: (slave bond9): making interface the new active one [ 292.592078][T12312] bond8: (slave bond9): Enslaving as an active interface with an up link [ 292.602832][T12325] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 292.644996][T12325] tipc: Resetting bearer [ 292.653557][T12324] tipc: Resetting bearer [ 292.673167][T12324] tipc: Disabling bearer [ 292.706148][T12336] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 292.897532][T12348] netlink: 'syz.1.1761': attribute type 21 has an invalid length. [ 293.020180][T12358] netlink: 'syz.2.1765': attribute type 11 has an invalid length. [ 293.257473][T12375] netlink: 'syz.3.1767': attribute type 83 has an invalid length. [ 293.456898][T12386] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 293.574936][T12386] bond5 (unregistering): Released all slaves [ 293.783634][T12408] __nla_validate_parse: 4 callbacks suppressed [ 293.783653][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 293.864133][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 293.983607][T12416] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1778'. [ 294.012973][T12427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1780'. [ 294.135276][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 294.143348][ C0] lec:lec_tx_timeout: lec0 [ 294.148096][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 294.307246][T12434] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 294.463188][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'. [ 294.509412][T12448] tipc: Enabling of bearer rejected, failed to enable media [ 294.545718][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 294.554873][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 294.588946][T12450] syzkaller0: entered promiscuous mode [ 294.600996][T12455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1790'. [ 294.613096][T12450] syzkaller0: entered allmulticast mode [ 294.628128][ T3008] syzkaller0: tun_net_xmit 70 [ 294.641322][T12450] syzkaller0: tun_net_xmit 14 [ 294.851391][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 294.938137][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1796'. [ 295.785404][T12508] vxcan1 speed is unknown, defaulting to 1000 [ 296.121801][T12536] syzkaller0: entered promiscuous mode [ 296.138146][T12536] syzkaller0: entered allmulticast mode [ 296.951834][T12583] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 297.149488][T12588] sctp: [Deprecated]: syz.1.1824 (pid 12588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.149488][T12588] Use struct sctp_sack_info instead [ 297.200625][T12588] validate_nla: 4 callbacks suppressed [ 297.200664][T12588] netlink: 'syz.1.1824': attribute type 12 has an invalid length. [ 297.538647][T12613] netlink: 'syz.4.1834': attribute type 1 has an invalid length. [ 297.949688][T12636] syzkaller0: entered promiscuous mode [ 297.955535][T12636] syzkaller0: entered allmulticast mode [ 298.380245][ T8866] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 298.545906][T12679] netlink: 'syz.3.1852': attribute type 30 has an invalid length. [ 298.787439][T12697] __nla_validate_parse: 18 callbacks suppressed [ 298.787459][T12697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1860'. [ 298.882043][T12702] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 299.103962][T12727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1868'. [ 299.199299][T12729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1868'. [ 299.228074][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1868'. [ 299.567879][T12757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1876'. [ 299.582099][T12759] x_tables: duplicate underflow at hook 2 [ 299.626137][T12761] netem: incorrect ge model size [ 299.636012][T12761] netem: change failed [ 299.747219][T12770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.750257][T12773] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1883'. [ 299.895219][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 299.903368][ C0] lec:lec_tx_timeout: lec0 [ 299.908447][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 299.930177][T12779] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 299.947569][T12785] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 300.061410][T12782] bond10: (slave gretap1): making interface the new active one [ 300.073990][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1887'. [ 300.123164][T12782] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 300.435107][T12785] syzkaller1: entered promiscuous mode [ 300.442087][T12785] syzkaller1: entered allmulticast mode [ 300.489642][T12785] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 300.518263][T12785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1886'. [ 300.829550][T12830] sctp: [Deprecated]: syz.0.1898 (pid 12830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.829550][T12830] Use struct sctp_sack_info instead [ 300.832271][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1899'. [ 300.932294][T12840] netlink: 'syz.3.1901': attribute type 3 has an invalid length. [ 300.973943][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 301.040564][ T2940] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 301.162045][T12856] xt_recent: Unsupported userspace flags (000000b1) [ 301.259472][T12861] syzkaller0: entered promiscuous mode [ 301.273698][T12861] syzkaller0: entered allmulticast mode [ 301.589136][T12877] netlink: 'syz.3.1911': attribute type 1 has an invalid length. [ 301.797342][T12889] veth3: entered allmulticast mode [ 302.168001][T12901] syzkaller0: entered promiscuous mode [ 302.173941][T12901] syzkaller0: entered allmulticast mode [ 302.213343][T12897] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 302.243497][T12897] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 302.303849][T12897] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 302.344912][T12897] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 302.405582][T12897] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.423360][T12897] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 302.492309][T12897] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 302.510023][T12897] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 302.540686][T12897] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 302.548526][T12897] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 302.548712][T12934] lo: entered promiscuous mode [ 302.573772][T12934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.616971][T12934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.680777][T12935] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 303.151496][T12973] openvswitch: netlink: Flow key attr not present in new flow. [ 303.226519][T12971] 8021q: adding VLAN 0 to HW filter on device bond8 [ 303.449270][T12989] netlink: 'syz.4.1937': attribute type 1 has an invalid length. [ 303.510853][T12989] bond10: (slave geneve4): making interface the new active one [ 303.519279][T12989] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 303.531328][T11357] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 303.574888][T11357] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 303.638044][T11357] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 303.681682][T11357] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 303.852079][T13011] netlink: 'syz.1.1942': attribute type 10 has an invalid length. [ 303.893471][T13011] team0: Device veth1_macvtap failed to register rx_handler [ 304.306516][T13042] __nla_validate_parse: 5 callbacks suppressed [ 304.306535][T13042] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1948'. [ 304.601212][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'. [ 304.610926][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'. [ 304.935437][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 304.943595][ C0] lec:lec_tx_timeout: lec0 [ 304.948709][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 305.207599][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1956'. [ 305.386197][T13092] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 305.819848][T13117] netlink: 'syz.2.1967': attribute type 10 has an invalid length. [ 305.879797][T13119] netlink: 'syz.2.1967': attribute type 10 has an invalid length. [ 305.958453][T13129] netlink: 'syz.4.1969': attribute type 4 has an invalid length. [ 305.995421][T13129] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1969'. [ 306.023975][T13129] `: renamed from bond0 (while UP) [ 306.429789][T13162] xt_hashlimit: invalid interval [ 306.509796][T13168] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 306.649934][T13175] netlink: 'syz.4.1982': attribute type 1 has an invalid length. [ 306.819777][T13175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.830624][T13181] bond0: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 306.844656][T13181] bond0: entered allmulticast mode [ 306.864570][T13187] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1981'. [ 306.949735][T13189] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 307.272225][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 307.421896][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 307.452708][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 307.495421][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 307.875067][T13263] C: renamed from team_slave_0 [ 307.965428][T13263] netlink: 'syz.4.2003': attribute type 1 has an invalid length. [ 308.008273][T13263] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 308.224537][T13278] netlink: 'syz.3.2007': attribute type 1 has an invalid length. [ 308.404562][T13287] 8021q: VLANs not supported on ip6_vti0 [ 308.592826][T13300] syzkaller0: entered promiscuous mode [ 308.622468][T13300] syzkaller0: entered allmulticast mode [ 308.896707][T13320] netlink: 'syz.0.2017': attribute type 1 has an invalid length. [ 308.943276][T13325] bridge0: port 1(wlan0) entered blocking state [ 308.955028][T13325] bridge0: port 1(wlan0) entered disabled state [ 308.963739][T13325] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 308.973832][T13325] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 309.007606][T13320] syzkaller0: entered promiscuous mode [ 309.024728][T13320] syzkaller0: entered allmulticast mode [ 309.229582][T13337] netlink: 'syz.2.2021': attribute type 83 has an invalid length. [ 309.507928][T13359] __nla_validate_parse: 93 callbacks suppressed [ 309.507946][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 309.541334][T13359] netlink: 'syz.1.2028': attribute type 1 has an invalid length. [ 309.557716][T13359] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2028'. [ 309.738900][T13374] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2032'. [ 309.965599][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 309.973698][ C0] lec:lec_tx_timeout: lec0 [ 309.983578][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 310.193030][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2038'. [ 310.226547][T13393] openvswitch: netlink: Key type 31 is not supported [ 310.259068][T13405] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 310.345526][T13410] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2042'. [ 310.545746][T13401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2040'. [ 310.600167][T13422] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2044'. [ 310.788733][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 311.088444][T13451] netlink: 'syz.3.2052': attribute type 8 has an invalid length. [ 311.127859][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2055'. [ 311.165588][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 311.247202][T13462] 8021q: VLANs not supported on ip6gre0 [ 311.277126][T13465] ip_vti0: entered promiscuous mode [ 311.552217][T13476] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 311.574665][T13476] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 311.613514][T13486] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 311.625699][T13486] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 311.632758][T13486] bridge0: port 1(wlan0) entered disabled state [ 312.194465][T13520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.542653][T13544] netlink: 'syz.1.2073': attribute type 5 has an invalid length. [ 313.000631][T13540] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.026907][T13540] bridge0: left allmulticast mode [ 313.180585][T13575] tipc: Trying to set illegal importance in message [ 313.455676][T13540] veth0_to_bond: left promiscuous mode [ 313.461188][T13540] veth0_to_bond: left allmulticast mode [ 313.617166][T13540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.631701][T13540] veth1_to_batadv: left promiscuous mode [ 313.659804][T13540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.995660][ T25] block nbd1: Possible stuck request ffff888025500000: control (read@0,1024B). Runtime 90 seconds [ 314.006501][ T25] block nbd1: Possible stuck request ffff888025500200: control (read@1024,1024B). Runtime 90 seconds [ 314.017473][ T25] block nbd1: Possible stuck request ffff888025500400: control (read@2048,1024B). Runtime 90 seconds [ 314.028416][ T25] block nbd1: Possible stuck request ffff888025500600: control (read@3072,1024B). Runtime 90 seconds [ 314.056526][T13540] vlan2: left allmulticast mode [ 314.061451][T13540] : left allmulticast mode [ 314.088021][T13540] hsr_slave_0: left allmulticast mode [ 314.093660][T13540] hsr_slave_1: left allmulticast mode [ 314.112049][T13540] xfrm1: left promiscuous mode [ 314.117646][T13540] xfrm1: left allmulticast mode [ 314.122917][T13540] vlan0: left promiscuous mode [ 314.131311][T13540] geneve1: left promiscuous mode [ 314.136826][T13540] vlan0: left allmulticast mode [ 314.142123][T13540] geneve1: left allmulticast mode [ 314.175156][T13540] gtp0: left promiscuous mode [ 314.180020][T13540] gtp0: left allmulticast mode [ 314.191385][T13540] veth3: left promiscuous mode [ 314.229208][T13540] bond2: left allmulticast mode [ 314.235832][T13540] erspan0: left allmulticast mode [ 314.282476][T13540] geneve2: left promiscuous mode [ 314.287693][T13540] geneve2: left allmulticast mode [ 314.338383][T13544] geneve3: entered promiscuous mode [ 314.343666][T13544] geneve3: entered allmulticast mode [ 314.412631][T13584] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 314.421516][ T6037] vxcan1 speed is unknown, defaulting to 1000 [ 314.441096][ T6037] syz2: Port: 1 Link DOWN [ 314.463101][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.506066][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.552078][T13593] vxcan1 speed is unknown, defaulting to 1000 [ 314.625711][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.653708][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.696802][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.708751][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.719092][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.728498][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.795309][T13613] netlink: 'syz.4.2086': attribute type 1 has an invalid length. [ 314.919275][T13622] __nla_validate_parse: 10 callbacks suppressed [ 314.919295][T13622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2088'. [ 314.995635][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 315.003701][ C0] lec:lec_tx_timeout: lec0 [ 315.008756][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 315.195853][T13607] vxcan1 speed is unknown, defaulting to 1000 [ 315.287212][T13638] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2091'. [ 315.438387][ T8809] udevd[8809]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 315.480140][ T8807] udevd[8807]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 315.636153][T13653] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 315.643900][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 315.697362][T13654] vlan0: entered allmulticast mode [ 315.702558][T13654] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 315.993307][T13681] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2104'. [ 316.160577][T13690] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2106'. [ 316.446349][T13706] netlink: 'syz.4.2112': attribute type 1 has an invalid length. [ 316.497963][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2111'. [ 316.791108][T13712] bond11: (slave ip6gretap2): making interface the new active one [ 316.806918][T13725] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2115'. [ 316.816638][T13712] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 316.837545][T13712] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 316.865843][T13712] bond11: (slave ip6gretap2): Enslaving as an active interface with an up link [ 316.884151][T13716] netlink: 'syz.2.2114': attribute type 12 has an invalid length. [ 316.989768][T13732] : renamed from hsr0 (while UP) [ 317.036782][T13738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2118'. [ 317.248858][T13747] vlan0: entered allmulticast mode [ 317.263101][T13747] bridge_slave_0: entered allmulticast mode [ 317.485904][T13766] syzkaller1: entered promiscuous mode [ 317.503598][T13766] syzkaller1: entered allmulticast mode [ 317.764071][T13752] vxcan1 speed is unknown, defaulting to 1000 [ 317.859190][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'. [ 317.870167][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2127'. [ 318.060686][T13788] netlink: 'syz.3.2130': attribute type 11 has an invalid length. [ 318.137140][T13779] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 318.168667][T13779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.193547][T13779] bond0 (unregistering): Released all slaves [ 318.262564][T13785] tipc: Enabling of bearer rejected, media not registered [ 318.368342][T13593] syz1: Port: 1 Link DOWN [ 318.466153][T13803] syzkaller1: entered promiscuous mode [ 318.471689][T13803] syzkaller1: entered allmulticast mode [ 318.796519][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059a74c00: rx timeout, send abort [ 319.046865][T13841] netlink: 'syz.1.2141': attribute type 30 has an invalid length. [ 319.055012][T13839] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 319.258168][T13853] s5ÿÿø: renamed from vlan1 (while UP) [ 319.297273][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f6800: rx timeout, send abort [ 319.305811][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059a74c00: abort rx timeout. Force session deactivation [ 319.341244][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 319.591143][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f5400: rx timeout, send abort [ 320.015241][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 320.023328][ C0] lec:lec_tx_timeout: lec0 [ 320.028272][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 320.099558][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f5400: abort rx timeout. Force session deactivation [ 320.131154][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 320.381047][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f7000: rx timeout, send abort [ 320.402163][T13860] mpoa:mpoad_close: () going down [ 320.690002][T13917] syzkaller0: entered promiscuous mode [ 320.696842][T13917] syzkaller0: entered allmulticast mode [ 320.889368][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f7000: abort rx timeout. Force session deactivation [ 320.916348][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 321.165785][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f7c00: rx timeout, send abort [ 321.674081][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f7c00: abort rx timeout. Force session deactivation [ 321.697268][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 321.881956][T13967] tipc: Enabled bearer , priority 0 [ 321.890603][T13967] syzkaller0: entered promiscuous mode [ 321.901858][T13967] syzkaller0: entered allmulticast mode [ 321.911890][T13967] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 321.945967][T13967] tipc: Resetting bearer [ 321.951828][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f5c00: rx timeout, send abort [ 321.977349][T13967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.988730][T13974] __nla_validate_parse: 6 callbacks suppressed [ 321.988747][T13974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2168'. [ 322.005580][T13966] tipc: Resetting bearer [ 322.021182][T13966] tipc: Disabling bearer [ 322.116810][T13978] openvswitch: netlink: IPv6 tunnel dst address is zero [ 322.229004][T13984] syzkaller0: entered promiscuous mode [ 322.234667][T13984] syzkaller0: entered allmulticast mode [ 322.310820][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.451941][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f5c00: abort rx timeout. Force session deactivation [ 322.486194][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 322.736608][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f5800: rx timeout, send abort [ 323.244898][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f5800: abort rx timeout. Force session deactivation [ 323.278870][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 323.528404][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805954a400: rx timeout, send abort [ 323.682441][T14000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2176'. [ 323.692422][T14002] netlink: 'syz.3.2178': attribute type 1 has an invalid length. [ 323.778491][T14002] bond9: entered promiscuous mode [ 323.784066][T14002] 8021q: adding VLAN 0 to HW filter on device bond9 [ 323.809458][T14002] bond9: (slave bridge4): making interface the new active one [ 323.819773][T14002] bridge4: entered promiscuous mode [ 323.845946][T14002] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 323.950497][T13586] IPVS: starting estimator thread 0... [ 324.036899][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805954a400: abort rx timeout. Force session deactivation [ 324.047321][T14021] IPVS: using max 26 ests per chain, 62400 per kthread [ 324.058883][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'. [ 324.060868][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 324.281825][T14034] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 324.310530][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805954b400: rx timeout, send abort [ 324.392094][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2192'. [ 324.420218][T14046] netlink: 'syz.2.2193': attribute type 1 has an invalid length. [ 324.497877][T14046] bond13: entered promiscuous mode [ 324.503668][T14046] 8021q: adding VLAN 0 to HW filter on device bond13 [ 324.534173][T14046] bond13: (slave bridge4): making interface the new active one [ 324.545458][T14046] bridge4: entered promiscuous mode [ 324.556922][T14046] bridge4: left promiscuous mode [ 324.818844][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805954b400: abort rx timeout. Force session deactivation [ 324.849372][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 324.972042][T14084] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2203'. [ 325.035291][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 325.043409][ C0] lec:lec_tx_timeout: lec0 [ 325.049054][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 325.099244][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059549c00: rx timeout, send abort [ 325.408609][T14108] vlan1: entered allmulticast mode [ 325.456498][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2212'. [ 325.493129][T14120] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20001 [ 325.607554][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059549c00: abort rx timeout. Force session deactivation [ 325.624714][T14129] pim6reg527: entered allmulticast mode [ 325.635027][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 325.824232][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 325.851283][T14133] netlink: 'syz.0.2219': attribute type 1 has an invalid length. [ 325.877742][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2219'. [ 325.884969][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058cad400: rx timeout, send abort [ 325.892378][T14133] netlink: 'syz.0.2219': attribute type 5 has an invalid length. [ 325.925364][T14133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2219'. [ 325.948670][T14133] tipc: Enabling of bearer rejected, already enabled [ 326.394883][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058cad400: abort rx timeout. Force session deactivation [ 326.417326][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 326.667234][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058caf000: rx timeout, send abort [ 326.720035][T14182] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2233'. [ 326.858455][T14186] netlink: 'syz.1.2234': attribute type 26 has an invalid length. [ 326.895702][T14186] netlink: 'syz.1.2234': attribute type 26 has an invalid length. [ 327.175853][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058caf000: abort rx timeout. Force session deactivation [ 327.197329][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 327.447246][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058caec00: rx timeout, send abort [ 327.529590][T14203] geneve5: entered promiscuous mode [ 327.549082][T14203] geneve5: entered allmulticast mode [ 327.568146][ T3008] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 19999 - 0 [ 327.599772][ T3008] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 327.627508][ T3008] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 327.658795][ T3008] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 327.955569][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058caec00: abort rx timeout. Force session deactivation [ 327.981753][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 328.010212][T14216] __nla_validate_parse: 4 callbacks suppressed [ 328.010231][T14216] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2246'. [ 328.230970][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058cadc00: rx timeout, send abort [ 328.739704][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058cadc00: abort rx timeout. Force session deactivation [ 328.760180][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 328.895599][T14265] netlink: 'syz.3.2261': attribute type 21 has an invalid length. [ 328.905854][T14265] netlink: 'syz.3.2261': attribute type 6 has an invalid length. [ 328.913860][T14265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2261'. [ 328.932949][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2262'. [ 328.959686][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2262'. [ 328.969552][T14266] netlink: 'syz.0.2262': attribute type 14 has an invalid length. [ 328.978853][T14266] netlink: 'syz.0.2262': attribute type 13 has an invalid length. [ 329.010081][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866d400: rx timeout, send abort [ 329.117694][T14274] netlink: 'syz.0.2266': attribute type 4 has an invalid length. [ 329.132683][T14278] IPVS: length: 4096 != 8 [ 329.140722][T14278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2265'. [ 329.258493][T14282] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2267'. [ 329.317696][T14282] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2267'. [ 329.362228][ T8807] udevd[8807]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 329.426654][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2269'. [ 329.518394][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866d400: abort rx timeout. Force session deactivation [ 329.546888][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 329.674662][T14296] bond4 (unregistering): Released all slaves [ 329.796764][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866d000: rx timeout, send abort [ 329.852388][T14312] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2275'. [ 329.867901][T14310] netlink: 'syz.2.2274': attribute type 13 has an invalid length. [ 329.898409][T14315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.909939][T14310] macvtap0: entered allmulticast mode [ 329.929187][T14310] macvtap0: refused to change device tx_queue_len [ 329.987498][T14319] netlink: 'syz.0.2277': attribute type 1 has an invalid length. [ 330.055642][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 330.063743][ C0] lec:lec_tx_timeout: lec0 [ 330.068747][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 330.084167][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'. [ 330.191246][T14338] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 330.305140][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866d000: abort rx timeout. Force session deactivation [ 330.340362][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 330.413322][T14347] bond0: Invalid ad_actor_system MAC address. [ 330.420044][T14347] bond0: option ad_actor_system: invalid value (1) [ 330.428675][T14347] bond0 (unregistering): Released all slaves [ 330.453362][T14350] syzkaller0: entered promiscuous mode [ 330.464184][T14350] syzkaller0: entered allmulticast mode [ 330.589600][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866e000: rx timeout, send abort [ 330.668930][T14361] 8021q: adding VLAN 0 to HW filter on device bond14 [ 330.679640][T14370] netlink: 'syz.3.2290': attribute type 2 has an invalid length. [ 331.097909][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866e000: abort rx timeout. Force session deactivation [ 331.130346][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 331.232397][T14393] syzkaller0: entered promiscuous mode [ 331.238283][T14393] syzkaller0: entered allmulticast mode [ 331.380240][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866e400: rx timeout, send abort [ 331.889392][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866e400: abort rx timeout. Force session deactivation [ 331.909739][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 332.159675][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866fc00: rx timeout, send abort [ 332.668003][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866fc00: abort rx timeout. Force session deactivation [ 332.703936][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 332.953426][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866f400: rx timeout, send abort [ 333.234513][T14446] __nla_validate_parse: 7 callbacks suppressed [ 333.234535][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2311'. [ 333.279990][T14443] tipc: Enabling of bearer rejected, failed to enable media [ 333.289180][T14451] tipc: Enabling of bearer rejected, failed to enable media [ 333.434605][T14455] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2314'. [ 333.461720][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866f400: abort rx timeout. Force session deactivation [ 333.497328][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 333.679548][T14467] netlink: 'syz.0.2318': attribute type 13 has an invalid length. [ 333.695306][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2318'. [ 333.724830][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2318'. [ 333.740777][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2318'. [ 333.749852][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866ec00: rx timeout, send abort [ 333.858775][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.868597][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.877208][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.888224][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.897595][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.916749][ T8134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.924149][ T8134] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.932126][ T8134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.940291][ T8134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.948182][ T8134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.056460][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 334.083602][T14474] openvswitch: netlink: Flow actions attr not present in new flow. [ 334.249911][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807866ec00: abort rx timeout. Force session deactivation [ 334.283162][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 334.532337][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058b20800: rx timeout, send abort [ 334.613103][T14471] vxcan1 speed is unknown, defaulting to 1000 [ 334.793264][T14516] tipc: Enabled bearer , priority 0 [ 334.821656][T14516] syzkaller0: entered promiscuous mode [ 334.839977][T14516] syzkaller0: entered allmulticast mode [ 335.026646][T14517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2331'. [ 335.036383][T14517] validate_nla: 1 callbacks suppressed [ 335.036401][T14517] netlink: 'syz.1.2331': attribute type 7 has an invalid length. [ 335.041926][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058b20800: abort rx timeout. Force session deactivation [ 335.060687][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 335.075316][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 335.083402][ C0] lec:lec_tx_timeout: lec0 [ 335.088512][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 335.096600][T14517] netlink: 'syz.1.2331': attribute type 8 has an invalid length. [ 335.104354][T14517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 335.175115][T14528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2336'. [ 335.196788][T14516] bond4: option all_slaves_active: invalid value (222) [ 335.217749][T14516] bond4 (unregistering): Released all slaves [ 335.313087][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058b20000: rx timeout, send abort [ 335.331944][T14517] tipc: Resetting bearer [ 335.392011][T14515] tipc: Resetting bearer [ 335.436590][T14515] tipc: Disabling bearer [ 335.679155][T14558] netlink: 'syz.0.2342': attribute type 11 has an invalid length. [ 335.687291][T14558] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2342'. [ 335.697113][T14555] netlink: 'syz.1.2343': attribute type 1 has an invalid length. [ 335.818100][T14565] netlink: 'syz.2.2345': attribute type 1 has an invalid length. [ 335.826080][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058b20000: abort rx timeout. Force session deactivation [ 335.840578][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 335.885458][T14471] chnl_net:caif_netlink_parms(): no params data found [ 335.950661][T14565] 8021q: adding VLAN 0 to HW filter on device bond15 [ 335.975409][ T8134] Bluetooth: hci5: command tx timeout [ 336.004211][T14579] bond15: (slave gretap2): making interface the new active one [ 336.013550][T14579] bond15: (slave gretap2): Enslaving as an active interface with an up link [ 336.090483][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058b20400: rx timeout, send abort [ 336.192144][T14471] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.200092][T14471] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.216445][T14471] bridge_slave_0: entered allmulticast mode [ 336.229025][T14471] bridge_slave_0: entered promiscuous mode [ 336.244995][T14594] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 336.262980][T14594] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 336.273762][T14594] team0: Failed to send options change via netlink (err -105) [ 336.291270][T14594] team0: Port device batadv2 added [ 336.308388][T14471] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.320837][T14471] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.338843][T14471] bridge_slave_1: entered allmulticast mode [ 336.357042][T14471] bridge_slave_1: entered promiscuous mode [ 336.403291][T14591] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 336.438515][T14591] bond0 (unregistering): Released all slaves [ 336.598876][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058b20400: abort rx timeout. Force session deactivation [ 336.618966][T14471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.634074][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 336.664288][T14471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.753057][T14616] netlink: 'syz.3.2358': attribute type 1 has an invalid length. [ 336.764114][T14471] team0: Port device team_slave_0 added [ 336.778684][T14471] team0: Port device team_slave_1 added [ 336.859344][T14471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.875600][T14471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.901635][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058ec1000: rx timeout, send abort [ 336.913956][T14471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.936690][T14471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.943810][T14471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.972612][T14471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.179659][T14471] hsr_slave_0: entered promiscuous mode [ 337.192917][T14471] hsr_slave_1: entered promiscuous mode [ 337.310932][T14639] netlink: 'syz.1.2366': attribute type 1 has an invalid length. [ 337.325597][T14639] netlink: 'syz.1.2366': attribute type 1 has an invalid length. [ 337.401714][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058ec1000: abort rx timeout. Force session deactivation [ 337.424179][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 337.674065][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b7ce000: rx timeout, send abort [ 337.797687][T14471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 337.830302][T14471] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 337.885934][T14471] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 337.915828][T14471] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.979211][T14672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.060037][ T8134] Bluetooth: hci5: command tx timeout [ 338.086689][T14471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.117339][T14685] netlink: 'syz.1.2379': attribute type 2 has an invalid length. [ 338.120599][T14471] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.143220][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.150416][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.176546][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.182409][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b7ce000: abort rx timeout. Force session deactivation [ 338.183987][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.214073][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 338.439934][T14698] __nla_validate_parse: 10 callbacks suppressed [ 338.439956][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'. [ 338.463941][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b7cdc00: rx timeout, send abort [ 338.583546][T14702] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2386'. [ 338.677883][T14705] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2385'. [ 338.694083][T14471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.769959][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'. [ 338.779045][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 338.972254][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b7cdc00: abort rx timeout. Force session deactivation [ 339.001790][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 339.189176][T14471] veth0_vlan: entered promiscuous mode [ 339.209082][T14471] veth1_vlan: entered promiscuous mode [ 339.251696][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059653000: rx timeout, send abort [ 339.281417][T14471] veth0_macvtap: entered promiscuous mode [ 339.303280][T14471] veth1_macvtap: entered promiscuous mode [ 339.346878][T14471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.378855][T14471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.410938][ T38] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.432360][ T38] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.468019][ T38] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.499440][T14741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2396'. [ 339.510378][ T38] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.537256][T14741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2396'. [ 339.647927][T14747] netlink: 'syz.1.2397': attribute type 1 has an invalid length. [ 339.718463][T14747] 8021q: adding VLAN 0 to HW filter on device bond4 [ 339.735005][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 339.756299][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 339.760034][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059653000: abort rx timeout. Force session deactivation [ 339.798639][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 339.827085][T14758] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2397'. [ 339.837330][T14752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 339.844429][T14752] bond4: (slave vxcan7): The slave device specified does not support setting the MAC address [ 339.861248][T14752] bond4: (slave vxcan7): Error -95 calling set_mac_address [ 339.893153][ T3426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.920815][ T3426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.964104][T14747] veth5: entered promiscuous mode [ 339.991325][T14747] bond4: (slave veth5): Enslaving as an active interface with a down link [ 340.048556][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059653400: rx timeout, send abort [ 340.088372][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.096400][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 340.096473][ C0] lec:lec_tx_timeout: lec0 [ 340.109141][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 340.130485][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.139056][ T8134] Bluetooth: hci5: command tx timeout [ 340.200806][T14771] ip6t_rpfilter: unknown options [ 340.247898][ T2940] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.260250][ T2940] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.286299][T14773] sit1: entered promiscuous mode [ 340.291315][T14773] sit1: entered allmulticast mode [ 340.308342][ T2940] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.323894][ T2940] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.340650][T14782] netlink: 'syz.0.2406': attribute type 23 has an invalid length. [ 340.472194][T14787] .: renamed from bridge_slave_1 (while UP) [ 340.519796][T14790] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 340.556849][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059653400: abort rx timeout. Force session deactivation [ 340.583970][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 340.597619][T14796] 8021q: VLANs not supported on tunl0 [ 340.670576][T14800] netlink: 'syz.3.2412': attribute type 21 has an invalid length. [ 340.699124][T14800] netlink: 'syz.3.2412': attribute type 4 has an invalid length. [ 340.717701][T14800] netlink: 'syz.3.2412': attribute type 5 has an invalid length. [ 340.833190][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059653800: rx timeout, send abort [ 340.868326][T14808] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 340.909994][T14814] tipc: Enabled bearer , priority 0 [ 340.920917][T14814] syzkaller0: entered promiscuous mode [ 340.926898][T14814] syzkaller0: entered allmulticast mode [ 340.976217][T14814] tipc: Resetting bearer [ 341.010950][T14819] netlink: 'syz.1.2421': attribute type 2 has an invalid length. [ 341.022551][T14812] tipc: Resetting bearer [ 341.113449][T14812] tipc: Disabling bearer [ 341.141105][T14822] : entered promiscuous mode [ 341.341542][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059653800: abort rx timeout. Force session deactivation [ 341.365640][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 341.448136][T14847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.614912][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bfdc400: rx timeout, send abort [ 341.688241][T14864] netlink: 'syz.0.2433': attribute type 39 has an invalid length. [ 341.713413][T14864] sctp: [Deprecated]: syz.0.2433 (pid 14864) Use of int in maxseg socket option. [ 341.713413][T14864] Use struct sctp_assoc_value instead [ 342.112045][T14898] netlink: 'syz.2.2443': attribute type 1 has an invalid length. [ 342.123232][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bfdc400: abort rx timeout. Force session deactivation [ 342.149183][T14901] IPVS: set_ctl: invalid protocol: 0 172.30.1.6:20002 [ 342.159231][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 342.190933][T14898] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 342.216282][ T52] Bluetooth: hci5: command tx timeout [ 342.256233][T14911] netlink: 'syz.1.2446': attribute type 10 has an invalid length. [ 342.291565][T14911] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.323710][T14911] bond0: (slave team0): Enslaving as an active interface with an up link [ 342.408561][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bfde400: rx timeout, send abort [ 342.811477][T14955] netlink: 'syz.5.2456': attribute type 1 has an invalid length. [ 342.865071][T14957] netlink: 'syz.3.2458': attribute type 1 has an invalid length. [ 342.916941][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bfde400: abort rx timeout. Force session deactivation [ 342.952048][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 343.086851][T14970] openvswitch: netlink: Flow key attribute not present in set flow. [ 343.201301][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880593ff000: rx timeout, send abort [ 343.229800][T14988] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 343.285619][T14978] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 343.492665][T15002] netem: change failed [ 343.709641][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880593ff000: abort rx timeout. Force session deactivation [ 343.737721][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 343.987157][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880593ff800: rx timeout, send abort [ 344.010514][T15026] ipt_REJECT: TCP_RESET invalid for non-tcp [ 344.028512][T15024] __nla_validate_parse: 17 callbacks suppressed [ 344.028547][T15024] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2477'. [ 344.065946][ T25] block nbd1: Possible stuck request ffff888025500000: control (read@0,1024B). Runtime 120 seconds [ 344.077297][ T25] block nbd1: Possible stuck request ffff888025500200: control (read@1024,1024B). Runtime 120 seconds [ 344.088410][ T25] block nbd1: Possible stuck request ffff888025500400: control (read@2048,1024B). Runtime 120 seconds [ 344.091710][T15032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2478'. [ 344.100465][ T25] block nbd1: Possible stuck request ffff888025500600: control (read@3072,1024B). Runtime 120 seconds [ 344.116146][T15031] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2479'. [ 344.153554][T15031] tipc: New replicast peer: 255.255.255.255 [ 344.166592][T15031] tipc: Enabled bearer , priority 10 [ 344.174952][T15033] IPVS: Error connecting to the multicast addr [ 344.296645][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 344.371772][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2480'. [ 344.426368][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2480'. [ 344.447535][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2480'. [ 344.495848][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880593ff800: abort rx timeout. Force session deactivation [ 344.521278][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 344.692435][T15054] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 344.719816][T15054] bond1: (slave lo): Enslaving as a backup interface with an up link [ 344.755600][T15054] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 344.771231][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880593fe800: rx timeout, send abort [ 345.019104][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 345.137065][T15072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.144399][T15072] IPv6: NLM_F_CREATE should be set when creating new route [ 345.151768][T15072] IPv6: NLM_F_CREATE should be set when creating new route [ 345.217756][T15072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.271279][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880593fe800: abort rx timeout. Force session deactivation [ 345.282346][T13594] tipc: Node number set to 1739016299 [ 345.303469][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 345.396140][T15084] netlink: 'syz.2.2495': attribute type 11 has an invalid length. [ 345.421000][T15084] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2495'. [ 345.552641][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880593fc400: rx timeout, send abort [ 345.570777][T15093] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 345.595991][T15092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2498'. [ 345.637172][T15097] syzkaller0: entered promiscuous mode [ 345.659186][T15097] syzkaller0: entered allmulticast mode [ 345.760179][T15100] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2502'. [ 345.895218][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 345.903321][ C0] lec:lec_tx_timeout: lec0 [ 345.912553][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 346.060950][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880593fc400: abort rx timeout. Force session deactivation [ 346.097386][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 346.346504][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057174800: rx timeout, send abort [ 346.378744][T15143] sctp: [Deprecated]: syz.5.2511 (pid 15143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.378744][T15143] Use struct sctp_sack_info instead [ 346.405721][T15140] syzkaller0: entered promiscuous mode [ 346.411232][T15140] syzkaller0: entered allmulticast mode [ 346.656404][T15155] syzkaller1: entered promiscuous mode [ 346.661934][T15155] syzkaller1: entered allmulticast mode [ 346.671660][T15155] validate_nla: 35 callbacks suppressed [ 346.671676][T15155] netlink: 'syz.2.2517': attribute type 10 has an invalid length. [ 346.691279][T15155] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 346.854852][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057174800: abort rx timeout. Force session deactivation [ 346.882062][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 346.954592][T15170] netlink: 'syz.1.2520': attribute type 10 has an invalid length. [ 346.969469][T15166] netlink: 'syz.1.2520': attribute type 10 has an invalid length. [ 346.995529][T15166] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 347.012328][T15170] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 347.131267][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057174c00: rx timeout, send abort [ 347.259846][T15186] batman_adv: batadv0: Adding interface: dummy0 [ 347.267032][T15186] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.294439][T15186] batman_adv: batadv0: Interface activated: dummy0 [ 347.327757][T15186] batadv0: mtu less than device minimum [ 347.346734][T15186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.358613][T15186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.370297][T15186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.382075][T15186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.393757][T15186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.405585][T15186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.417417][T15186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.429134][T15186] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 347.592587][T15203] netlink: 'syz.0.2531': attribute type 21 has an invalid length. [ 347.633227][T15203] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 347.639596][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057174c00: abort rx timeout. Force session deactivation [ 347.675416][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 347.925602][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057177c00: rx timeout, send abort [ 348.225504][T15244] 8021q: adding VLAN 0 to HW filter on device bond16 [ 348.263937][T15244] 8021q: adding VLAN 0 to HW filter on device bond16 [ 348.271570][T15244] bond16: (slave vxcan5): The slave device specified does not support setting the MAC address [ 348.282772][T15244] bond16: (slave vxcan5): Error -95 calling set_mac_address [ 348.433902][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057177c00: abort rx timeout. Force session deactivation [ 348.460708][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 348.613134][T15261] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 348.694073][T15263] sctp: [Deprecated]: syz.2.2551 (pid 15263) Use of int in maxseg socket option. [ 348.694073][T15263] Use struct sctp_assoc_value instead [ 348.710614][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a9a400: rx timeout, send abort [ 348.800249][T15269] syzkaller0: entered promiscuous mode [ 348.818193][T15269] syzkaller0: entered allmulticast mode [ 348.826182][T15268] tipc: Enabled bearer , priority 0 [ 348.894714][T15268] tipc: Resetting bearer [ 348.950700][T15268] tipc: Disabling bearer [ 349.034928][T15273] tipc: Enabled bearer , priority 0 [ 349.051830][T15276] syzkaller0: entered promiscuous mode [ 349.060874][T15281] netlink: 'syz.5.2556': attribute type 2 has an invalid length. [ 349.060887][T15276] syzkaller0: entered allmulticast mode [ 349.136542][T15273] tipc: Resetting bearer [ 349.177900][T15272] tipc: Resetting bearer [ 349.219706][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a9a400: abort rx timeout. Force session deactivation [ 349.234951][T15290] __nla_validate_parse: 15 callbacks suppressed [ 349.234970][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2558'. [ 349.250793][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 349.267395][T15272] tipc: Disabling bearer [ 349.279158][T15297] atomic_op ffff88805959d998 conn xmit_atomic 0000000000000000 [ 349.416467][T15300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2562'. [ 349.479559][T15304] netlink: 'syz.2.2563': attribute type 29 has an invalid length. [ 349.491715][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a9b400: rx timeout, send abort [ 349.507776][T15304] netlink: 'syz.2.2563': attribute type 29 has an invalid length. [ 349.519264][T15304] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2563'. [ 349.564923][T15307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2565'. [ 349.679174][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2568'. [ 349.715705][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2568'. [ 349.784598][T15323] !€ÿ: renamed from bond_slave_0 (while UP) [ 349.812335][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2570'. [ 349.823498][T15323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.969585][T15323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.000020][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a9b400: abort rx timeout. Force session deactivation [ 350.036312][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 350.064251][T15339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2575'. [ 350.286211][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a99800: rx timeout, send abort [ 350.381636][T15356] xt_l2tp: missing protocol rule (udp|l2tpip) [ 350.452828][T15356] syzkaller0: entered promiscuous mode [ 350.480515][T15356] syzkaller0: entered allmulticast mode [ 350.498190][T15361] tipc: Failed to remove unknown binding: 66,1,1/0:1647462201/1647462203 [ 350.516067][T15361] tipc: Failed to remove unknown binding: 66,1,1/0:1647462201/1647462203 [ 350.794512][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a99800: abort rx timeout. Force session deactivation [ 350.816073][T15372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2591'. [ 350.825949][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 350.848470][T15372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'. [ 350.935300][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 350.943382][ C0] lec:lec_tx_timeout: lec0 [ 350.948830][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 351.033066][T15387] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 351.043371][T15388] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 351.075922][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a9bc00: rx timeout, send abort [ 351.204085][T15397] bond5: entered promiscuous mode [ 351.211310][T15400] net_ratelimit: 31 callbacks suppressed [ 351.211331][T15400] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 351.232101][T15397] 8021q: adding VLAN 0 to HW filter on device bond5 [ 351.330494][T15402] bond5: (slave bridge7): making interface the new active one [ 351.368050][T15402] bridge7: entered promiscuous mode [ 351.382020][T15402] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 351.584322][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a9bc00: abort rx timeout. Force session deactivation [ 351.616778][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 351.866719][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a9a000: rx timeout, send abort [ 352.351736][T15413] vlan0 (unregistering): left allmulticast mode [ 352.358790][T15413] veth0_vlan (unregistering): left allmulticast mode [ 352.368291][T15413] vlan0 (unregistering): left promiscuous mode [ 352.374985][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a9a000: abort rx timeout. Force session deactivation [ 352.410904][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 352.660362][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058a99000: rx timeout, send abort [ 352.975562][T15469] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 353.070709][T15476] geneve2: entered promiscuous mode [ 353.168796][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058a99000: abort rx timeout. Force session deactivation [ 353.206383][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 353.448210][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880321c7400: rx timeout, send abort [ 353.702187][T15513] syzkaller1: entered promiscuous mode [ 353.713237][T15513] syzkaller1: entered allmulticast mode [ 353.956527][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880321c7400: abort rx timeout. Force session deactivation [ 353.977997][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 354.235714][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b6ac00: rx timeout, send abort [ 354.326173][T15528] netlink: 'syz.3.2634': attribute type 11 has an invalid length. [ 354.473981][T15549] __nla_validate_parse: 12 callbacks suppressed [ 354.474000][T15549] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2638'. [ 354.509593][T15543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2636'. [ 354.743990][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b6ac00: abort rx timeout. Force session deactivation [ 354.756723][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2641'. [ 354.767155][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 354.806342][T15566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.815619][T15567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.886307][T15573] xt_cluster: node mask cannot exceed total number of nodes [ 355.016457][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b69800: rx timeout, send abort [ 355.148327][T15589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2650'. [ 355.244028][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2650'. [ 355.253705][T15595] block nbd2: Unsupported socket: should be TCP or UNIX. [ 355.524738][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b69800: abort rx timeout. Force session deactivation [ 355.552941][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 355.802111][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b6a000: rx timeout, send abort [ 355.939063][T15631] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2660'. [ 355.955239][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 355.963385][ C0] lec:lec_tx_timeout: lec0 [ 355.968370][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 356.067018][T15639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2664'. [ 356.156259][T15646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2665'. [ 356.169811][T15648] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2667'. [ 356.310419][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b6a000: abort rx timeout. Force session deactivation [ 356.334853][T15657] tipc: Enabled bearer , priority 0 [ 356.343178][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f6800: connection exists (fe ff). last cmd: 20 [ 356.359141][T15657] syzkaller0: entered promiscuous mode [ 356.364654][T15657] syzkaller0: entered allmulticast mode [ 356.388174][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2671'. [ 356.467627][T15657] tipc: Resetting bearer [ 356.560710][T15657] tipc: Resetting bearer [ 356.592565][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b68000: rx timeout, send abort [ 356.617200][T15657] tipc: Disabling bearer [ 356.687202][T15678] netlink: 'syz.1.2677': attribute type 11 has an invalid length. [ 356.710404][T15680] ------------[ cut here ]------------ [ 356.716010][T15680] WARNING: net/core/flow_dissector.c:1131 at __skb_flow_dissect+0xb57/0x68b0, CPU#0: syz.5.2678/15680 [ 356.727059][T15680] Modules linked in: [ 356.731032][T15680] CPU: 0 UID: 0 PID: 15680 Comm: syz.5.2678 Not tainted syzkaller #0 PREEMPT(full) [ 356.740516][T15680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.750656][T15680] RIP: 0010:__skb_flow_dissect+0xb57/0x68b0 [ 356.756658][T15680] Code: 55 00 00 80 3d 74 c4 36 06 01 0f 85 b3 55 00 00 e8 1e 8b 8b f8 e9 83 f9 ff ff e8 14 8b 8b f8 e9 b0 03 00 00 e8 0a 8b 8b f8 90 <0f> 0b 90 e9 16 ff ff ff e8 fc 8a 8b f8 c6 05 3d c4 36 06 01 48 c7 [ 356.776354][T15680] RSP: 0018:ffffc9000bc86f40 EFLAGS: 00010293 [ 356.782463][T15680] RAX: ffffffff8935c9ae RBX: 0000000000000001 RCX: ffff88801114bd00 [ 356.790506][T15680] RDX: 0000000000000000 RSI: ffffffff8bc08340 RDI: ffffffff8bc08300 [ 356.798547][T15680] RBP: ffffc9000bc87558 R08: ffffffff89356568 R09: ffffffff8df41aa0 [ 356.806586][T15680] R10: ffffc9000bc875e0 R11: fffff52001790ec6 R12: dffffc0000000000 [ 356.814593][T15680] R13: ffffffff89356568 R14: 0000000000000000 R15: ffffffff8f8261d0 [ 356.822657][T15680] FS: 00007f0d34d4d6c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 356.831652][T15680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.838401][T15680] CR2: 0000200000000240 CR3: 00000000787ce000 CR4: 00000000003526f0 [ 356.846502][T15680] Call Trace: [ 356.849809][T15680] [ 356.852810][T15680] ? stack_trace_save+0x9c/0xe0 [ 356.857728][T15680] ? __pfx_stack_trace_save+0x10/0x10 [ 356.863146][T15680] ? __lock_acquire+0x6b6/0x2cf0 [ 356.868166][T15680] ? __pfx___skb_flow_dissect+0x10/0x10 [ 356.873754][T15680] ? __update_page_owner_handle+0x5a/0x570 [ 356.879662][T15680] ? __page_table_check_zero+0x6a/0x3e0 [ 356.885268][T15680] ? lock_acquire+0x107/0x340 [ 356.890026][T15680] ? __page_table_check_zero+0x6a/0x3e0 [ 356.895667][T15680] ? __page_table_check_zero+0x6a/0x3e0 [ 356.901255][T15680] ? __page_table_check_zero+0x397/0x3e0 [ 356.906988][T15680] ? __page_table_check_zero+0x6a/0x3e0 [ 356.912577][T15680] ? post_alloc_hook+0x247/0x290 [ 356.917654][T15680] ? get_page_from_freelist+0x24e0/0x2580 [ 356.923425][T15680] ? rht_lock+0x8b/0x180 [ 356.927783][T15680] ? __lock_acquire+0x6b6/0x2cf0 [ 356.932770][T15680] ? rcu_is_watching+0x15/0xb0 [ 356.937626][T15680] ? trace_mm_page_alloc+0x3e/0x140 [ 356.942872][T15680] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 356.948936][T15680] ? pfn_valid+0x125/0x4d0 [ 356.953412][T15680] ? lock_acquire+0x107/0x340 [ 356.958212][T15680] ? __lock_acquire+0x6b6/0x2cf0 [ 356.963206][T15680] __bond_xmit_hash+0x2d7/0xba0 [ 356.968173][T15680] ? __pfx___bond_xmit_hash+0x10/0x10 [ 356.973618][T15680] ? pfn_valid+0x125/0x4d0 [ 356.978121][T15680] ? lock_acquire+0x107/0x340 [ 356.983089][T15680] ? pfn_valid+0x125/0x4d0 [ 356.987772][T15680] bond_xdp_get_xmit_slave+0x1fd/0x710 [ 356.993323][T15680] xdp_master_redirect+0x13f/0x2c0 [ 356.998542][T15680] bpf_test_run_xdp_live+0x14b8/0x1b20 [ 357.004053][T15680] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 357.009770][T15680] ? bpf_test_run_xdp_live+0x393/0x1b20 [ 357.015416][T15680] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 357.021282][T15680] ? 0xffffffffa02057c0 [ 357.025584][T15680] ? 0xffffffffa02019d4 [ 357.029820][T15680] ? 0xffffffffa0201a54 [ 357.034011][T15680] ? 0xffffffffa0206f58 [ 357.038296][T15680] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 357.044260][T15680] ? _copy_from_user+0x94/0xb0 [ 357.049113][T15680] ? bpf_test_init+0x113/0x150 [ 357.053916][T15680] ? xdp_convert_md_to_buff+0x5b/0x330 [ 357.059483][T15680] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 357.064933][T15680] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.070842][T15680] ? __fget_files+0x2a/0x420 [ 357.075516][T15680] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.081395][T15680] bpf_prog_test_run+0x2c7/0x340 [ 357.086447][T15680] __sys_bpf+0x562/0x860 [ 357.090743][T15680] ? __pfx___sys_bpf+0x10/0x10 [ 357.095625][T15680] ? rcu_is_watching+0x15/0xb0 [ 357.100446][T15680] __x64_sys_bpf+0x7c/0x90 [ 357.104908][T15680] do_syscall_64+0xec/0xf80 [ 357.109511][T15680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.115719][T15680] ? trace_irq_disable+0x37/0x100 [ 357.120805][T15680] ? clear_bhb_loop+0x60/0xb0 [ 357.125576][T15680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.131517][T15680] RIP: 0033:0x7f0d33f8f749 [ 357.136050][T15680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.155988][T15680] RSP: 002b:00007f0d34d4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.164416][T15680] RAX: ffffffffffffffda RBX: 00007f0d341e5fa0 RCX: 00007f0d33f8f749 [ 357.172465][T15680] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 357.180515][T15680] RBP: 00007f0d34013f91 R08: 0000000000000000 R09: 0000000000000000 [ 357.188586][T15680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.196627][T15680] R13: 00007f0d341e6038 R14: 00007f0d341e5fa0 R15: 00007ffc7fd8a3c8 [ 357.204655][T15680] [ 357.207779][T15680] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 357.215083][T15680] CPU: 0 UID: 0 PID: 15680 Comm: syz.5.2678 Not tainted syzkaller #0 PREEMPT(full) [ 357.224472][T15680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.234565][T15680] Call Trace: [ 357.237856][T15680] [ 357.240795][T15680] vpanic+0x1e0/0x670 [ 357.244820][T15680] panic+0xb9/0xc0 [ 357.248552][T15680] ? __pfx_panic+0x10/0x10 [ 357.253091][T15680] __warn+0x317/0x4b0 [ 357.257102][T15680] ? __skb_flow_dissect+0xb57/0x68b0 [ 357.262406][T15680] ? __skb_flow_dissect+0xb57/0x68b0 [ 357.267731][T15680] __report_bug+0x288/0x500 [ 357.272266][T15680] ? __lock_acquire+0x6b6/0x2cf0 [ 357.277217][T15680] ? __skb_flow_dissect+0xb57/0x68b0 [ 357.282532][T15680] ? __pfx___report_bug+0x10/0x10 [ 357.287566][T15680] ? __lock_acquire+0x6b6/0x2cf0 [ 357.292541][T15680] ? unwind_next_frame+0xa5/0x23d0 [ 357.297675][T15680] ? is_bpf_text_address+0x26/0x2b0 [ 357.302890][T15680] ? lock_acquire+0x107/0x340 [ 357.307589][T15680] ? __skb_flow_dissect+0xb57/0x68b0 [ 357.312907][T15680] report_bug+0x16a/0x220 [ 357.317252][T15680] ? __skb_flow_dissect+0xb57/0x68b0 [ 357.322544][T15680] ? __skb_flow_dissect+0xb59/0x68b0 [ 357.327844][T15680] handle_bug+0x98/0x200 [ 357.332129][T15680] exc_invalid_op+0x1a/0x50 [ 357.336703][T15680] asm_exc_invalid_op+0x1a/0x20 [ 357.341583][T15680] RIP: 0010:__skb_flow_dissect+0xb57/0x68b0 [ 357.347485][T15680] Code: 55 00 00 80 3d 74 c4 36 06 01 0f 85 b3 55 00 00 e8 1e 8b 8b f8 e9 83 f9 ff ff e8 14 8b 8b f8 e9 b0 03 00 00 e8 0a 8b 8b f8 90 <0f> 0b 90 e9 16 ff ff ff e8 fc 8a 8b f8 c6 05 3d c4 36 06 01 48 c7 [ 357.367106][T15680] RSP: 0018:ffffc9000bc86f40 EFLAGS: 00010293 [ 357.373204][T15680] RAX: ffffffff8935c9ae RBX: 0000000000000001 RCX: ffff88801114bd00 [ 357.381187][T15680] RDX: 0000000000000000 RSI: ffffffff8bc08340 RDI: ffffffff8bc08300 [ 357.389202][T15680] RBP: ffffc9000bc87558 R08: ffffffff89356568 R09: ffffffff8df41aa0 [ 357.397240][T15680] R10: ffffc9000bc875e0 R11: fffff52001790ec6 R12: dffffc0000000000 [ 357.405263][T15680] R13: ffffffff89356568 R14: 0000000000000000 R15: ffffffff8f8261d0 [ 357.413285][T15680] ? __skb_flow_dissect+0x408/0x68b0 [ 357.418598][T15680] ? __skb_flow_dissect+0x408/0x68b0 [ 357.423929][T15680] ? __skb_flow_dissect+0x684e/0x68b0 [ 357.429384][T15680] ? stack_trace_save+0x9c/0xe0 [ 357.434283][T15680] ? __pfx_stack_trace_save+0x10/0x10 [ 357.439673][T15680] ? __lock_acquire+0x6b6/0x2cf0 [ 357.444663][T15680] ? __pfx___skb_flow_dissect+0x10/0x10 [ 357.450223][T15680] ? __update_page_owner_handle+0x5a/0x570 [ 357.456051][T15680] ? __page_table_check_zero+0x6a/0x3e0 [ 357.461628][T15680] ? lock_acquire+0x107/0x340 [ 357.466345][T15680] ? __page_table_check_zero+0x6a/0x3e0 [ 357.471922][T15680] ? __page_table_check_zero+0x6a/0x3e0 [ 357.477530][T15680] ? __page_table_check_zero+0x397/0x3e0 [ 357.483197][T15680] ? __page_table_check_zero+0x6a/0x3e0 [ 357.488753][T15680] ? post_alloc_hook+0x247/0x290 [ 357.493698][T15680] ? get_page_from_freelist+0x24e0/0x2580 [ 357.499444][T15680] ? rht_lock+0x8b/0x180 [ 357.503697][T15680] ? __lock_acquire+0x6b6/0x2cf0 [ 357.508645][T15680] ? rcu_is_watching+0x15/0xb0 [ 357.513427][T15680] ? trace_mm_page_alloc+0x3e/0x140 [ 357.518658][T15680] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 357.524659][T15680] ? pfn_valid+0x125/0x4d0 [ 357.529103][T15680] ? lock_acquire+0x107/0x340 [ 357.533834][T15680] ? __lock_acquire+0x6b6/0x2cf0 [ 357.538805][T15680] __bond_xmit_hash+0x2d7/0xba0 [ 357.543710][T15680] ? __pfx___bond_xmit_hash+0x10/0x10 [ 357.549181][T15680] ? pfn_valid+0x125/0x4d0 [ 357.553741][T15680] ? lock_acquire+0x107/0x340 [ 357.558529][T15680] ? pfn_valid+0x125/0x4d0 [ 357.563062][T15680] bond_xdp_get_xmit_slave+0x1fd/0x710 [ 357.568568][T15680] xdp_master_redirect+0x13f/0x2c0 [ 357.573744][T15680] bpf_test_run_xdp_live+0x14b8/0x1b20 [ 357.579250][T15680] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 357.584911][T15680] ? bpf_test_run_xdp_live+0x393/0x1b20 [ 357.590486][T15680] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 357.596331][T15680] ? 0xffffffffa02057c0 [ 357.600535][T15680] ? 0xffffffffa02019d4 [ 357.604712][T15680] ? 0xffffffffa0201a54 [ 357.608877][T15680] ? 0xffffffffa0206f58 [ 357.613065][T15680] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 357.618991][T15680] ? _copy_from_user+0x94/0xb0 [ 357.623777][T15680] ? bpf_test_init+0x113/0x150 [ 357.628560][T15680] ? xdp_convert_md_to_buff+0x5b/0x330 [ 357.634048][T15680] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 357.639466][T15680] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.645323][T15680] ? __fget_files+0x2a/0x420 [ 357.649969][T15680] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.655798][T15680] bpf_prog_test_run+0x2c7/0x340 [ 357.660764][T15680] __sys_bpf+0x562/0x860 [ 357.665035][T15680] ? __pfx___sys_bpf+0x10/0x10 [ 357.669861][T15680] ? rcu_is_watching+0x15/0xb0 [ 357.674655][T15680] __x64_sys_bpf+0x7c/0x90 [ 357.679118][T15680] do_syscall_64+0xec/0xf80 [ 357.683678][T15680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.689766][T15680] ? trace_irq_disable+0x37/0x100 [ 357.694824][T15680] ? clear_bhb_loop+0x60/0xb0 [ 357.699580][T15680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.705499][T15680] RIP: 0033:0x7f0d33f8f749 [ 357.709951][T15680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.729573][T15680] RSP: 002b:00007f0d34d4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.738021][T15680] RAX: ffffffffffffffda RBX: 00007f0d341e5fa0 RCX: 00007f0d33f8f749 [ 357.746016][T15680] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 357.754004][T15680] RBP: 00007f0d34013f91 R08: 0000000000000000 R09: 0000000000000000 [ 357.762002][T15680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.769984][T15680] R13: 00007f0d341e6038 R14: 00007f0d341e5fa0 R15: 00007ffc7fd8a3c8 [ 357.778002][T15680] [ 357.781643][T15680] Kernel Offset: disabled [ 357.785978][T15680] Rebooting in 86400 seconds..