last executing test programs: 8m10.283423281s ago: executing program 4 (id=4745): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104002400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000300012800b00010062726964676500002000028005000700080000000c002e0003000000030000000600270000000000"], 0x50}}, 0x800) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x710f955b, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0xb7dd3000) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}], 0x1) 8m9.709545426s ago: executing program 4 (id=4750): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000004c0)={0x1f, 0x0, 0x1}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000500)={0x1f, 0x802, 0x3}, 0x6) (async) bind$bt_hci(r7, &(0x7f0000000500)={0x1f, 0x802, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000540)=ANY=[], 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r5}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r5}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x2, 0x4, 0x1001, 0x16}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r8, &(0x7f0000000100), &(0x7f0000000100)=@udp6=r9}, 0x20) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000040)=@ethtool_stats}) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000040)=@ethtool_stats}) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x5) (async) listen(0xffffffffffffffff, 0x5) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x4000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x6}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r13, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x4000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x6}]}}}]}, 0x40}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x6e21, @remote}, 0x10) connect$inet(r12, &(0x7f0000000580)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r14 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4e21, 0x4e20, [0x100007f], [0x100007f], 0x0, [0xffffffff, 0xffffffff]}}}, 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r11, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) 8m8.294448s ago: executing program 4 (id=4759): write(0xca, &(0x7f0000000000)="0412cc50faac5087d17a929325e9f78e96e0", 0x12) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x18, 0x35, 0x9, 0x70bd2a, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r1, r2, 0x0, 0x7feff000) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x8b, 0x2) 8m7.978578951s ago: executing program 4 (id=4762): r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x22140, &(0x7f0000000040)={0x77359400}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x1234, 0x0, @loopback, 0xfffffff9}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0xff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000080)={'wlan1\x00', @random="000500000020"}) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) openat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 8m7.597817238s ago: executing program 4 (id=4766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000), 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000805000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x2400c0f0}, 0x10) 8m7.255352416s ago: executing program 4 (id=4770): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0000000095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1600e0ff0200956a894f142694bd4a2aba88a4c2c8af0000000000000200010000000000", @ANYRES8=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES64=r0], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000000000000f6f83d85dec8668650237b1ae3f699509a2772bde91a6042129e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) socketpair(0x1, 0x1, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r8}, &(0x7f0000001cc0), &(0x7f0000001d00)=r7}, 0x20) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001d80)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001dc0)={{r8}, &(0x7f0000001e00)=0x2, &(0x7f0000001e40)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001e80)={r8, &(0x7f0000001ec0)}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1001, 0x8}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r3, &(0x7f0000000a40)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000a80)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x8d, 0xab, &(0x7f0000000340)="20dfd3593dc38b956ec526af4ced2d12cb0c9759aadb778733dd5a4265b9668116534f27d37d866e339159333052eb35342146e3467cd5f47fce5a79a8a9b7a7eb532360e0f94d2212cf437b9ce19cba1cdcc09571da23474623961841fe77e663666e7e4443547a8bf7f41f98ba83fa79d170db1a67f2277c71116f81d3b7380593b7c0dae0ed3ca95e032c43", &(0x7f0000000400)=""/171, 0x3, 0x0, 0x5e, 0xc0, &(0x7f00000004c0)="6fdd09ebf72b1f38aa20267e0e88bec3f7ae3ac259d7e423fd096b4effaea5fdb63427670d8e94a3a5c833cb2398dfe4538b39c94cac8ce04ad447d27988287d863a47d44848f7ebf6e7e522b9db02e8c38a7588f8e2fb16293c40d2a72f", &(0x7f0000000540)="6c935abbc73283fb83791e361a43ff0ce9a6c1f36c102e749304f05a4e89f738165ad561ab981a673729bb5c0fe8816030729c3afb4d5138e1f7f4446f310e7640bf3053e595f264dc36b734b94a2ad64eb134ae6e7852a52c5556db0425f06af81bb1d61f89fa4d8561ffe7ccbaf78b99205679c6a8358cf40bee4c1944ce02b152f3566b2822b586beab1fc572f1b4fe447cc98d01acfe6599abbe417602198e8719e18d606e5177de25fd5e3fe18f4540bdec1d24c42e315f52d70acb98a3"}, 0x50) r9 = socket$alg(0x26, 0x5, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00), 0xfffffff8, r10}, 0x38) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d80)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {0x0, 0x4}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x40}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x81}, {}, {}, {}, {0x80000}, {0x0, 0xfffffffd}, {}, {}, {0x15d, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc}, {}, {0xdff8}, {}, {}, {}, {0x0, 0xfffffffc}, {0x4}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0xfff}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x40, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x800000}, {}, {0xffffffff, 0x10001}, {}, {0x0, 0x0, 0xd1000000}, {}, {0x800000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {0x0, 0x0, 0x7fff}, {0x0, 0x4}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0xda8, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d40)={r11, 0x1}, 0xc) bind$alg(r9, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r9, 0x0, 0x0, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000a000000000000935f5297a17a26e6ec", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000000000bf91000000000000b7020000000000008500000021000000b7000000000000009500000000000000ad509bdd8867a4763a6ffc2a27ce9f90d96e0af7e4b4649ab182e635328c41958254549e1d334c82d58f"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 7m52.156563711s ago: executing program 32 (id=4770): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0000000095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1600e0ff0200956a894f142694bd4a2aba88a4c2c8af0000000000000200010000000000", @ANYRES8=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES64=r0], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000000000000f6f83d85dec8668650237b1ae3f699509a2772bde91a6042129e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) socketpair(0x1, 0x1, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r8}, &(0x7f0000001cc0), &(0x7f0000001d00)=r7}, 0x20) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001d80)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001dc0)={{r8}, &(0x7f0000001e00)=0x2, &(0x7f0000001e40)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001e80)={r8, &(0x7f0000001ec0)}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1001, 0x8}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r3, &(0x7f0000000a40)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000a80)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x8d, 0xab, &(0x7f0000000340)="20dfd3593dc38b956ec526af4ced2d12cb0c9759aadb778733dd5a4265b9668116534f27d37d866e339159333052eb35342146e3467cd5f47fce5a79a8a9b7a7eb532360e0f94d2212cf437b9ce19cba1cdcc09571da23474623961841fe77e663666e7e4443547a8bf7f41f98ba83fa79d170db1a67f2277c71116f81d3b7380593b7c0dae0ed3ca95e032c43", &(0x7f0000000400)=""/171, 0x3, 0x0, 0x5e, 0xc0, &(0x7f00000004c0)="6fdd09ebf72b1f38aa20267e0e88bec3f7ae3ac259d7e423fd096b4effaea5fdb63427670d8e94a3a5c833cb2398dfe4538b39c94cac8ce04ad447d27988287d863a47d44848f7ebf6e7e522b9db02e8c38a7588f8e2fb16293c40d2a72f", &(0x7f0000000540)="6c935abbc73283fb83791e361a43ff0ce9a6c1f36c102e749304f05a4e89f738165ad561ab981a673729bb5c0fe8816030729c3afb4d5138e1f7f4446f310e7640bf3053e595f264dc36b734b94a2ad64eb134ae6e7852a52c5556db0425f06af81bb1d61f89fa4d8561ffe7ccbaf78b99205679c6a8358cf40bee4c1944ce02b152f3566b2822b586beab1fc572f1b4fe447cc98d01acfe6599abbe417602198e8719e18d606e5177de25fd5e3fe18f4540bdec1d24c42e315f52d70acb98a3"}, 0x50) r9 = socket$alg(0x26, 0x5, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00), 0xfffffff8, r10}, 0x38) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d80)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {0x0, 0x4}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x40}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x81}, {}, {}, {}, {0x80000}, {0x0, 0xfffffffd}, {}, {}, {0x15d, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc}, {}, {0xdff8}, {}, {}, {}, {0x0, 0xfffffffc}, {0x4}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0xfff}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x40, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x800000}, {}, {0xffffffff, 0x10001}, {}, {0x0, 0x0, 0xd1000000}, {}, {0x800000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {0x0, 0x0, 0x7fff}, {0x0, 0x4}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0xda8, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000d40)={r11, 0x1}, 0xc) bind$alg(r9, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r9, 0x0, 0x0, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000a000000000000935f5297a17a26e6ec", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000000000bf91000000000000b7020000000000008500000021000000b7000000000000009500000000000000ad509bdd8867a4763a6ffc2a27ce9f90d96e0af7e4b4649ab182e635328c41958254549e1d334c82d58f"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.398186792s ago: executing program 5 (id=8103): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) (async, rerun: 64) r1 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 64) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @remote, 'macvlan1\x00'}}, 0x1e) (async) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000140)) (async) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000080)=0x46, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (rerun: 64) 3.339214748s ago: executing program 3 (id=8104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x44, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_MAC={0xa, 0x6, @random="1e4958d8c48e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x24000880) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff55, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3000000000380004001400010003004e237f0000010000000000000000200002000a00"/90], 0x60}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) (async) r8 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'veth0\x00', &(0x7f0000000540)=@ethtool_cmd={0x9, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, 0x0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) (async) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000007c0), 0x10) (async) sendmsg$can_bcm(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}, 0x0) (async) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0500000000000000000000000000014e204e20"], 0x9e) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getpeername$packet(r12, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmmsg(r11, &(0x7f00000003c0)=[{{&(0x7f0000000400)=@xdp={0x2c, 0xdd86, r13}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)='A', 0x1}], 0x1}}], 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc5e0d91fdb9440bb, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004000) 2.823838499s ago: executing program 5 (id=8106): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000006c6f0000000000000000000000000000080002000000"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x88000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x5, 0x2, 0xca, 0x1, 0x0, 0x49, 0x20, 0x1, 0xfb, 0x0, 0xb4, 0xf, 0x53, 0x1}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e24, @empty}}, 0x10, 0x750}, &(0x7f00000003c0)=0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0x801c581f, 0x30000002000005c) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0x20048810) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.772681s ago: executing program 2 (id=8107): openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c40)=@newqdisc={0x164, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x134, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x7}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x4, 0xe82, 0x1d, 0x0, 0x18, 0x8}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x164}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x4008805) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r5, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r5) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="0701ff447b00d62244b38880c9b1e8c9954f2df031", @ANYRES16=r7, @ANYBLOB="000326bd7000fcdbdf250c0000008c0004800900010073797a31000000004400078008000400050000000800020001800000080003007a240000080004004e01000008000200060000000800010016000000080003000f00000008000200060000001300010062726f6164636173742d6c696e6b00000900010073797a30000000000900010073797a30000000000c0007800800040005000000"], 0xa0}, 0x1, 0x0, 0x0, 0x20008050}, 0x40001) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x1a, &(0x7f0000000a00)={0x84, @empty, 0x4e23, 0x3, 'none\x00', 0xf, 0x7, 0x49}, 0x2c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x1b, &(0x7f0000000980)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0xa}, 0x1a) sendmsg$nl_route_sched(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r3) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r12, 0x29, 0x1, 0x0, 0x34) r13 = socket$l2tp(0x2, 0x2, 0x73) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r14) sendmsg$NLBL_MGMT_C_ADD(r14, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES8=r14, @ANYBLOB="010027bd7000fbdbdf25010000070b0001004e45545f444d000008000200030000000800070000000000080004000300000008000800e0000001"], 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1c8, 0x98, 0x1c8, 0x130, 0x98, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x29}, 0xff, 0xff000000, 'nicvf0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3, 0x50}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38, 0xf, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'nicvf0\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 2.698784278s ago: executing program 0 (id=8109): r0 = socket(0xa, 0x3, 0x3a) connect$phonet_pipe(r0, &(0x7f0000000280)={0x23, 0x8, 0x3}, 0x10) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x54, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004008) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x56) (async) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x1, @loopback, 0x3}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "57d08e19a8dd7ab9", "7023281fdec6c209baa0d1f6e55d37cd9b4029076373d35b11c31261fc69b66f", "bc40dd55", "141f862748859918"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x11a, 0x5, 0x0, 0x0) (async, rerun: 32) close(0x3) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.520834311s ago: executing program 5 (id=8110): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b8", 0xffe0, 0x2000c851, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket(0x10, 0x800000000080002, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000240), 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4076cbba9945d516, &(0x7f0000000180)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000009c0)=[@in6={0xa, 0x3ff, 0xb, @remote, 0x10000}, @in6={0xa, 0x4e21, 0x80000001, @loopback, 0x100}, @in6={0xa, 0x4e21, 0xc, @loopback, 0x1}], 0x54) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x30, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x4, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x84000) socketpair(0x23, 0x3, 0x10001, &(0x7f0000000a80)) r5 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000ac0)=0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f00000004c0)=[{{&(0x7f0000000b00)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000b80)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r8, &(0x7f0000000bc0)='X', 0x34000, 0x600, &(0x7f0000000c00)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmsg$nl_netfilter(r3, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f0000000900)={&(0x7f0000000d00)=ANY=[@ANYBLOB="f4030000130701082cbd7000fbdbdf250a00000508002c00", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0x3f4}}, 0x4000001) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xc, &(0x7f0000000100), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0x9) bind$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0xf5, r2, 0x1, 0xf7}, 0x14) 2.427775359s ago: executing program 0 (id=8111): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc845}, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000200)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x401c5820, &(0x7f0000000280)) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x2348b5ad, 0x5, "e1ec4098085c613afb389f4fc19da5f0b7c56da8ababce6d5eef48d5fa6c46674e0db8a45cdcc9002aeecb049d06ff1d58a146de1a5abebcd7198389683d858f"}) 2.375729463s ago: executing program 1 (id=8112): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtaction={0x60, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000680)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003"], 0x44}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x10, 0x2, &(0x7f0000001240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r3, 0xffffffffffffffff, 0x14, 0x0, @void}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x9c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xac9e, 0x36}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0xe}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x15}}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x7}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xad}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x95}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xa6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x29}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x14}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r0, 0x35, 0x0, 0x861, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 2.375065534s ago: executing program 3 (id=8113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc}}}]}, 0x3c}}, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x9, 0x5, {{0x2a, 0x4, 0x1, 0x31, 0xa8, 0x65, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@generic={0x7, 0x6, "b8483ed9"}, @cipso={0x86, 0x39, 0x0, [{0x7, 0x8, "c45341ce0f08"}, {0x6, 0x5, "5e8fd6"}, {0x2, 0x9, "15db0ad70ffa8a"}, {0x7, 0x3, '\v'}, {0x5, 0x3, 'j'}, {0x7, 0x11, "4cf32d78c28d3c08c4a7847eab667e"}, {0x1, 0x6, "444195f5"}]}, @ra={0x94, 0x4}, @generic={0x44, 0x5, "5be65e"}, @timestamp_addr={0x44, 0xc, 0x23, 0x1, 0x3, [{@multicast1, 0xfffffff9}]}, @noop, @timestamp_addr={0x44, 0x3c, 0x54, 0x1, 0x8, [{@rand_addr=0x64010101, 0x6}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x9}, {@loopback, 0x10001}, {@remote, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@loopback, 0x2}]}]}}}}}) sendto$packet(r1, &(0x7f00000000c0)="5e05526cb564c7f3eeaa8ad14d6f88a06a64e665b0f74e2fcdb0aaa4fabe8483fd0b1f2cb809facd308ac35b834a8a5760ee790e0f9b921bd9a5a5ec1bf42665e156da2ff6261de31f1a72b54ed742131e3eb7ceb1faeb591f9991cacc63f1ee4a354a23feb5b10d898d40af41d0dc4843b745e814e53c54f367ae827feb4653630dc341141d18cc0f33c555cbd8631ad40324755b280ee3506eda88daa24c7673349b175237f6aa4e4c8e665d9193f6659701d646dff459", 0xb8, 0x4800, &(0x7f00000002c0)={0x11, 0x7893c669d9994308, r2, 0x1, 0xef, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) 2.232934934s ago: executing program 2 (id=8114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1d497eb446ff1a1d}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x2}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 2.059910822s ago: executing program 3 (id=8115): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000a80)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.991837762s ago: executing program 0 (id=8116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa611adeda1a99da2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x801) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x4, 0x3ff0}) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xdc, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r4 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@private=0xa010102, @in6=@empty, 0x4e22, 0x81, 0x4e20, 0x6, 0xa, 0xa0, 0xcc71213e3d398aa2, 0x32, r3, r4}, {0x3aa, 0x3, 0x5, 0x189, 0x100000000, 0x2, 0x7f, 0xffffffffffff5a59}, {0xbc, 0x4, 0x8e80, 0x5}, 0x47, 0x6e6bbd, 0x2, 0x1, 0x2, 0x2}, {{@in=@local, 0x4d3, 0x3c}, 0x2, @in=@multicast2, 0x3500, 0x0, 0x2, 0xc, 0x1, 0xa0, 0x7}}, 0xe8) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r6, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x4}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) r7 = socket$kcm(0x29, 0x2, 0x0) getsockname$packet(r2, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mptcp_MPTCP_FULL_INFO(r2, 0x11c, 0x4, &(0x7f00000011c0)={0x0, 0x70, 0x0, 0x108, 0x0, 0x1, &(0x7f0000000880)=[{0x0, {@in, @in6={{0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}}}], &(0x7f00000009c0), {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001280)=0x88) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000013c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x84, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r9}]}, 0x84}, 0x1, 0x0, 0x0, 0x2404c810}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001400)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001440)={0x1d, r10, 0x2, {0x0, 0x0, 0x2}, 0x1}, 0x18) r11 = getgid() ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000001480)={0x10, 0x0, "43a7590058484395eb5654c1a4b4636e"}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r12, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, 0x13, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r2, 0x0, 0x70, 0xfc, &(0x7f0000001600)="5b956c93ca3d85225fd1b9446a6e32b0c83cc456eed73633743ec365c70d7802912a52ede9f647629a0c609400c53b3d6fda2a356d9f9bc348b2c3d9ea3f02d14d1bbf2adbc1224975a145fb1f1be3d82874881d07569f991b714435db72247ee13792285c8472ee38dcfc314fd8e2a4", &(0x7f0000001680)=""/252, 0x80, 0x0, 0x9a, 0x7d, &(0x7f0000001780)="29575622ae7b89fa16750f01ee29a4b31a1c9ad3052ef14ae3a8eadcbf6e96c86c1adca96be86c76b6e329574c333c4e562137686bd7d842420930b5b645c0bfde16fc7c152d525a60ff88893478363f2ec6f37659310849f3073660fb6b992f3a479a5583434b63f57caa8d6e2eb7f2a5ab2749bc15ff7ab60e974750c30748ccb82b98683df271fe882e163c958336ce6f38f4dc2a7e869a2a", &(0x7f0000001840)="7f58bff1a84c99672be74cd7103277cc2417e311fd6a6ea45679c4fe09da98c72e154aedd5a13c9d78d4c63cfac766f4c080ddfc9c12668a1ef8a9ca0d186ba1f6881196fedff3abd334bdc39193e80aaa9ebb52e21383f0732d185e4686f2e20abb3b9f45ab5bfececf0f67746a3462c1f83b03e7e0cafbfd33ea62bc", 0x1, 0x0, 0x5}, 0x50) write$cgroup_subtree(r2, &(0x7f0000001940)={[{0x2d, 'cpu'}]}, 0x5) close(r2) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002e00)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002e40)={0x0}, &(0x7f0000002e80)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000001980)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002dc0)=[{&(0x7f00000019c0)={0x1400, 0x33, 0x200, 0x70bd2d, 0x25dfdbff, "", [@nested={0x11f, 0xf4, 0x0, 0x1, [@typed={0x8, 0xbe, 0x0, 0x0, @u32=0x80000001}, @nested={0x4, 0x121}, @typed={0x8, 0xc4, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xa8, 0x0, 0x0, @fd=r7}, @typed={0x5, 0x95, 0x0, 0x0, @str='\x00'}, @generic="b1c2e74f2f773d5b3af37fc9aea82f702a2395fac40827ce0f65c9cbe5a4ae4261160fa5a920fe429ebb01db831b3628033caf0337b3e7259be37b06b92de5bb270fac84062549bb1380138f3aa55acff2c8c104f0168834500e92bfb2c48eb87b80b3f02560b82b42f793566ccc6abfc04aeb644a82b1fe3e54270b02ede69aa9f7c076fda7c0ae9c2389e86d6f8533e6bb0b34280ee88caf2d07cd8866e630a87602222d645d110de0bee95c8889295e72ae9f8fcd7d4994a0554bbceffc4363b907b7d51776d1a5dbd6235fcc6c065eb8c04fd78c13182a5dc908b7584fb6a39dc2787c397327bfca12a8fb6a041aafa6de8bd6e3dd"]}, @generic="28cbcf584aa0fdfb8dd098c19df2797ae8987b7e4bed9432adf7951a2b9bcb6216d416bd0134c872912c3eb22163333a89fa28076020e93e704e148c8b91a21820930aef3f3776692c746703977f8d6d434cdd64f11cc5f0a71cd1ccaa7ef382e5788f8cb65954edfbc026f0a3f1a542a237bbd0dac639e2076a7366e23d3eb16a9b3acf27be5699ac44a93a423b08d5fdeb19840bb4711e72bf21a5", @generic="ceb344459e", @nested={0xfa, 0x10, 0x0, 0x1, [@typed={0x8, 0xd5, 0x0, 0x0, @fd=r8}, @nested={0x4, 0xf6}, @generic="8ecbb5c14edf007e3ef2753f7aa1694568a9040fc9cd72d5061b3cc4067b890fd69d73dba351f9fdc571bd2e594d8634bf1e7ff5c35fb89fa56b6f780d8d3124d7879684fb96f37da7f18665b477fe5c3496c27e3db1a81a17888d70d7cd567b5c8bf0ff0de25e51a533d3102255beebf7fbefb2039d45b2fa9f8f5131f406e022be2488b27eb743ea441c8bfa693bfda04b414c3c2d0356c44b732d9bb256a3b221b11e5c14c9d08bb96ed74af1e598d1df806f5ae149082e67bdc059e7939e777f2af60a80d2df8cb548f436bbb913283090ba97672dd2a2b9d7beaa29", @nested={0x4, 0x11}, @typed={0x8, 0x13, 0x0, 0x0, @u32=0x8}]}, @generic="f45fe6545caffc415582829c6647d54e41b2680f8d9ca1c7dae2afffd5500173de2c1eb15a22020de8c52bedab3286d8c0a040016207dd835a19b6e276e4a76ebd0ec240a84d40fbb72b680ad195dedf3f6b9c726899597e15e532207e5d15f5e59a0b51cad377e19144c92684", @typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@broadcast}, @generic="91d687c696e00463e298de2c79fcc45f2bc3bb2015831778e1dcbd967493e5b9498de073f934c31e816017d5436fc913a4e6ea23af88537cf1efeda8604519ecf8f1c9bee0a9f5d694c00ad5e0edf282deaef594237fe8d5770b42b53882981d0545f68062b339f97c20ac59a4", @typed={0x21, 0x151, 0x0, 0x0, @binary="1ce44bb6e56d3610504bf8daf52aee9b3c9d887ff09eaf2e36c48e0c2b"}, @generic="806eb6ea538ac06024273133e426cda996f445749c14782a4447cd076b64f70c73e5f60a583403befcb608", @generic="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"]}, 0x1400}], 0x1, &(0x7f0000002ec0)=[@cred={{0x1c, 0x1, 0x2, {r13, r4, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r14, r4, r11}}}], 0x40, 0x80}, 0x20008011) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f00000031c0)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003180)={&(0x7f0000002fc0)={0x1a8, r6, 0xf9cee3d0e95a9b65, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d4d84993482a2c63565d2c48b6d0e29842620add24bc546f2313f358b452b8b1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6b8b797e61259cb6"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0546597dcbfd7eed105194a058ba8744677035d4188f3ddcf7c3f0cda53fbde9"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0eff093b6009c1e5ce082df9119a4ac5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2ad7d58d5321ae0cb4f1011e24848338"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e9896f18165ca360343e37161884ae24"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="59756f82f4a8288eaeafaa653afa68de7a2a05822c7509a3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9a47743c565d2b11002a3b9429a1673a5f0263224e4b796409daab5e6a29934c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="adee120890be4cc89ecc6e9d3f14e076"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="73232bae887dcb328b4f229fe459df5a536a9540f4d72256c643753ddd19288f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="db7d1986c12c74b5cef0c8f423d3cfad"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e35082c23bb6ca9134c380e1f7894b4d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="50b0454308cdcc6269fefb7aea13c1e6f688d6cc2d51b6fae8bcec8aa0866de8"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="efbf9f67f99f4d0b523589f8545aa1b904a8bf6e89045b11"}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4045}, 0x24000010) 1.990120108s ago: executing program 1 (id=8117): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000100)={0x3, 0xfffffffffffffbff, @start={0x0, 0x0, "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", "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"}, [0x57a1, 0x6, 0x5, 0xfffffffffffffffa, 0x3, 0x1, 0x3, 0x1, 0x8, 0x4, 0xdb8, 0x6, 0x0, 0xc6, 0x4, 0x5, 0x4, 0x6, 0x68, 0xc37, 0xfff, 0x6404, 0x7, 0x9, 0xfffffffffffffff8, 0x83f, 0x1, 0x81, 0xffff, 0x7ff, 0x0, 0x2, 0x40, 0x6, 0x518, 0x3, 0xffffffffffffffff, 0x5371b0b9, 0x244, 0x4, 0x1, 0xffff, 0x4, 0x4, 0xcb, 0xfc00000000000000, 0x7fffffff, 0x2, 0x0, 0x0, 0x7ff000000000, 0x0, 0xc, 0x2, 0x2, 0x7ff, 0x0, 0x1, 0x9, 0x1, 0x8, 0x40000000000, 0x6, 0x101]}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) 1.865292822s ago: executing program 2 (id=8118): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xffff, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='devices.list\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f00000006c0)={'wlan1\x00', @random="000500000020"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2b, 0x3, 0x1, 0x6, 0x10, @loopback, @empty, 0x700, 0x700, 0x2, 0x40}}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@deltclass={0x68, 0x29, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x5, 0x5}, {0x1a, 0xa}, {0xffe0, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x2}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x9b1, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1000, 0x3}}]}}]}, 0x68}}, 0x8880) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@deltclass={0x68, 0x29, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x5, 0x5}, {0x1a, 0xa}, {0xffe0, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x2}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x9b1, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1000, 0x3}}]}}]}, 0x68}}, 0x8880) 1.847955208s ago: executing program 3 (id=8119): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb88a8230088a8"], 0xc6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x341000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'syzkaller0\x00'}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r5 = socket$inet6(0xa, 0x3, 0xff) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000240)={0x7, 0x6, 0x0, 0x1000, 0x10}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x4e, &(0x7f0000000980)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d4eb08", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x4, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0xa, 0x0, 0x0, {[@mss={0x2, 0x4, 0x8c05}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000980)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d4eb08", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x4, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0xa, 0x0, 0x0, {[@mss={0x2, 0x4, 0x8c05}]}}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r7) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r7) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, 0x0, 0x4) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, 0x0, 0x4) getpid() (async) r10 = getpid() r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e40)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=[0x18f10a58, 0x2, 0x0, 0x82d, 0xfff], &(0x7f0000000e00)=[0x0, 0x1, 0x2], 0x4, 0x5, 0x1, r12}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e40)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=[0x18f10a58, 0x2, 0x0, 0x82d, 0xfff], &(0x7f0000000e00)=[0x0, 0x1, 0x2], 0x4, 0x5, 0x1, r12}}, 0x40) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000c00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x2c, r8, 0x11, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000c00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x2c, r8, 0x11, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40) r13 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r2, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)=ANY=[@ANYBLOB="240080005800000329bd7000fcdbdf250008000200", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42884}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) 1.760202346s ago: executing program 5 (id=8120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@deltaction={0xac, 0x31, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9333}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x6e, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xa}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}, @qdisc_kind_options=@q_pie={{}, {0x0, 0x2, [@TCA_PIE_ECN={0x0, 0x6, 0x1}, @TCA_PIE_ALPHA={0x0, 0x4, 0x16}, @TCA_PIE_BETA={0x0, 0x5, 0x8}, @TCA_PIE_ALPHA={0x0, 0x4, 0x11}]}}, @qdisc_kind_options=@q_atm, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x80c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8001) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.742793678s ago: executing program 1 (id=8121): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b703000000000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cd000000b70000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000340)="6beced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x17) r1 = accept$inet_tcp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000740)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000780)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000840)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000008c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000900), 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000a40)={&(0x7f0000000a80)={0xa, 0x4e24, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x0) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="2c789f8e76b5dfa163b0f240ce61ebb2ff9766eb9e36e27959c4381c6ccccbf1ba06c894dd489f70475455638a9e7749e406574614cf4618804a58ca00bc7f9472d51d78301560ac68dbde5aa203730b5ccbf0123d3219fdf7c705fcbd", 0x5d}, {&(0x7f0000000380)="654583226f4dd7f8b1f4c1700999e0019122a61f590e716c1cc94c7c3dcef3d71871b3f11daf0a24ee1db2d05a53d745fa4f3b195a26c613d144046eefa62bceab9a8d2a882fdb0a19b81e8fd718ef1fb70c373435b1ef0b68252e59e651992b", 0x60}, {&(0x7f0000000400)="db99330b48308dfdec01339808c43e03c44528b85333c0c1c17caa9bfe8cc4002126621c5888c0724c73fea618aee13494464eb92dcc4a5cd10d24699436a1694b0aea5db016e460e219e8467cb6ab802c5641bce65ecfc921029d6b13e1fca0c73404dc222decf5291f1a7708342b2f41f1f2fc49cb23846849d3750b43499ccc6ebe8fbdafa7bf8cf7e525add41c74930c90ca121e553390b56159a518919b2d48b2efe12fc149c728340c534320a79534", 0xb2}, {&(0x7f00000004c0)="65fa38f61cbb6cf8441b165a1bd82c637bb2e8fbda515990ca", 0x19}, {&(0x7f0000000500)="7199e652ca7f87d60031669305acd4a7458ce529eb9821a4a379b193c561b5dd68918ba5e0022fbac4a19b5084fad221be", 0x31}, {&(0x7f0000000540)="449369c6053a3e2d0ffe611c909a3b0b67045eb7b6699567006ad95e96ebebf8435fb9637cac35c8e87cae70172c95ddb1e9023bbf2b7476d239679acd7a8ffccd7d8c022b201cabe8658d2f0419abe9c587f3fa940565159b59668dbbb4c397b83de0c95aa60fa4632657b57c60126cd3c596313282324d9fe0f928844fadfb5c367844ebc5a0b9bafa2bd3df68f976326b1ee612", 0x95}], 0x6, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010100}}}, @ip_tos_u8={{0x11}}], 0x50}, 0x4000054) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b703000000000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cd000000b70000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000340)="6beced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x17) (async) accept$inet_tcp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000740)={0x0, 0x5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000780)={0x0, 0xaf1}, 0x8) (async) bind$inet6(r2, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000840)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000008c0)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) (async) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000900), 0x8) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$inet6(r5, &(0x7f0000000a40)={&(0x7f0000000a80)={0xa, 0x4e24, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="2c789f8e76b5dfa163b0f240ce61ebb2ff9766eb9e36e27959c4381c6ccccbf1ba06c894dd489f70475455638a9e7749e406574614cf4618804a58ca00bc7f9472d51d78301560ac68dbde5aa203730b5ccbf0123d3219fdf7c705fcbd", 0x5d}, {&(0x7f0000000380)="654583226f4dd7f8b1f4c1700999e0019122a61f590e716c1cc94c7c3dcef3d71871b3f11daf0a24ee1db2d05a53d745fa4f3b195a26c613d144046eefa62bceab9a8d2a882fdb0a19b81e8fd718ef1fb70c373435b1ef0b68252e59e651992b", 0x60}, {&(0x7f0000000400)="db99330b48308dfdec01339808c43e03c44528b85333c0c1c17caa9bfe8cc4002126621c5888c0724c73fea618aee13494464eb92dcc4a5cd10d24699436a1694b0aea5db016e460e219e8467cb6ab802c5641bce65ecfc921029d6b13e1fca0c73404dc222decf5291f1a7708342b2f41f1f2fc49cb23846849d3750b43499ccc6ebe8fbdafa7bf8cf7e525add41c74930c90ca121e553390b56159a518919b2d48b2efe12fc149c728340c534320a79534", 0xb2}, {&(0x7f00000004c0)="65fa38f61cbb6cf8441b165a1bd82c637bb2e8fbda515990ca", 0x19}, {&(0x7f0000000500)="7199e652ca7f87d60031669305acd4a7458ce529eb9821a4a379b193c561b5dd68918ba5e0022fbac4a19b5084fad221be", 0x31}, {&(0x7f0000000540)="449369c6053a3e2d0ffe611c909a3b0b67045eb7b6699567006ad95e96ebebf8435fb9637cac35c8e87cae70172c95ddb1e9023bbf2b7476d239679acd7a8ffccd7d8c022b201cabe8658d2f0419abe9c587f3fa940565159b59668dbbb4c397b83de0c95aa60fa4632657b57c60126cd3c596313282324d9fe0f928844fadfb5c367844ebc5a0b9bafa2bd3df68f976326b1ee612", 0x95}], 0x6, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010100}}}, @ip_tos_u8={{0x11}}], 0x50}, 0x4000054) (async) 1.733086604s ago: executing program 0 (id=8122): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00', @ANYRES64, @ANYBLOB="010000000000000000003f"], 0x38}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffa, 0x25dfdbfd, {{@in=@multicast2, @in=@empty, 0x0, 0xfd, 0x2, 0x7f, 0xa, 0x20, 0x10}, {0x8, 0x14, 0x100001002, 0x81, 0xfff, 0xffffffffffffb473, 0xfffffffffffffffb}, {0x1000000000, 0x2000000000000001, 0x2, 0xffffffffffffffff}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000140)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000400)={{r2, &(0x7f0000000240)=' \x01\x00', 0x40200, &(0x7f00000002c0)={@align=0x3, {0x6, 0xffff, 0x7ff, 0x8000000000000000}}, 0x371f, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x10000}, {[0x3, 0x3, 0x618e, 0x5]}, 0x8, 0x55, &(0x7f0000000380)=""/85}) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@getrule={0x14, 0x22, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$kcm(r5, &(0x7f0000000a00)={&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x4, 0x3, 0x2, 0x4}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)="0149211e7d40b29996ea505b5d4bf1fd20222f62e26535ee245d1f4f809f22b09473b0db999ef3391717422ac107d544ba962103bd5f10f22edb947f14e4c0e57371614197e189cef0232985d29dd54f0867ddbd01b386af0cd078e2f25a497e6917e0b9187b70e1fe4e96d9a616fc8d679a0d49f444aed5c92144893445519bb3c7c2c4fb8ee9757191030af33659ff47cacd4232a75c958651798a88a49aebae284f8307dda2c7820b0f6ccfdcbefa0610fd8ad81d094a4e35b45f995b66d60b8791794d8ed985e67681568cdd616b00a9b6e08343016c1c5a8ab29d2010f0027fcf540763", 0xe6}, {&(0x7f0000000900)="5aa2cbfbbef903bb4ff0e59eb1fea93704a16d3125b84df2a609", 0x1a}], 0x2, &(0x7f0000000980)=[{0x48, 0x10b, 0x8001, "b30e73685363adb18fa39738206333981b5feb0a0dde6620ff9140682a1612a8e67720044cd6e2e013ecbf90da1c45ebbfe5acd284beb3"}], 0x48}, 0x4) 1.481572166s ago: executing program 2 (id=8123): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = accept4(r0, &(0x7f0000000000)=@ax25={{0x3, @null}, [@bcast, @null, @default, @null, @rose, @netrom, @remote, @bcast]}, &(0x7f00000001c0)=0x80, 0x0) bind$pptp(r1, &(0x7f0000000180)={0x18, 0x2, {0xfffc, @local}}, 0x1e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000020000000000300000a64000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000038000480340001800b0001006e756d67656e0000240002800800014000000016080002400000000708000440fffffffb0800034000000000140000001100010000000000000000000100000a"], 0x8c}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) 831.39437ms ago: executing program 2 (id=8124): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0x1c8, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x9], 0x1}}, @common=@ah={{0x30}, {[0xa, 0x5]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x358) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000280)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000003060003002b00480045a3002c00630000401190780a010104ff227e37dbffffff4e234e2000189078044000000900000005000000c2a4dfdc"], 0x3a) (async) close(0x3) 719.800823ms ago: executing program 1 (id=8125): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB='\b'], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711073000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r5, 0x1, 0x0, 0xfffffffe, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x200, 0x48}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]]}, 0x38}}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002980)={&(0x7f0000001180)={0x17e8, r5, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0xc0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x74, 0xd, 0x0, 0x1, [{0x6e, 0x0, "1bf9a7feb4203690a750bc71f19b22aac439a70b12097252abbae9916d464ad809a435991c2f39ee544aba8f720fb355ea177ec196e46e4457e668cdc2bcd22b52e4972193c4510a7ea002b88fc4754b2f333e77e5f8f9d778bce3f8ce50cc60fc9132a60619a69b3deb"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xec}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b80208ca4547"}]}, @NL80211_ATTR_NAN_FUNC={0x1534, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1518, 0xe, 0x0, 0x1, [{0xa3, 0x0, "c1f8f2ac00316f0ec62cbf2e654460ad436d8986dc3cdfb231958bf100c630c2687bae956145e47cfa8bbf24bdd6bc8cad1e3a283c9acce2fe9fbab03a087137af3d68e7e23795e7359b4ad8bf70b8398e041faa1cb99d521aa2d9d06cbd6553804737e904f04270a8a5d34f38afa34ba020a65eb7431e5fda611fe13cfb197bb6f5a9a728aefb99ff6d5102e4a6d91dd26908cd72e5586249810a74f78e57"}, {0xcc, 0x0, "3ce13a4c25cf5c3d1bae946968fd4bf171f9dfe54d6fde37d73632cbbe622290a262f2cd5ac90d601ba0ccaac35032a10d5d8b1a3674652ad48ac32a18293b6023d44c5ac14f1d6face010a21430d20cac9773ead4cfff4e97407a055b3652c48b7651a30b9f018bf6ba2f05640afea6289b09066bbeb3d7bc7dca4471132b8c215a21ea6f1905be363e8e5efffc0911e24be96fede97233e89a00b56b87979fb0e1f655d33be7165efed005429cc59781fbeb705ef3e98453ca75ebcfb5352c39c4ce03402ff7e8"}, {0x90, 0x0, "9e5c353e77e02ae8f7eafc82564350a6c6b86a3fa13ead0311f4ac7d6e8a7d68a5de14c22256fa4d1fa3e2aa34634a0e6d8cb291ac8d637453f45d20b278e9f0ed60bfd2e016d36954094b91656924db77b1a1db8978a17c31dd238ebd9eff8e7b354de287f913601e1a18debba2843987c67ed0419b03ff2e6d3da2916ebbf869f69b5cb406f361dbf6b8ad"}, {0x81, 0x0, "4a68a4d577818b76c3de93c5dfd7d98d92975797958173c55f3abc1dbc882c5dd263046f30c4fac9c35cbbdf9b4c25c1fdfa17fe125d17ec01f25e7ab186099084b2439a4ef23a3231eddaa6f2df344929cd88f328c33e4fbc146b649d91fd3449c6c8f009b19d1d224ec8b377b959593c116819770098cb21f8afa44e"}, {0xc1, 0x0, "7b22f4dbb5a81ba7d23ee2f06ee1eef5040b843d4cbec22eb5eea639bbd18cc14b580a8b9597f86353626df24f2d18a96c2ffea7054e23611a8505f83028d665b01451be793ca441fb34b1094481d668e4f9e853039b121a1fa83955f538235efcde20f880b221febfb7d874ee4255386328a4e5850aa364cbfa1315d2df32337d96012cc2bd1811674200b05f116ebc6283bbc5f06aae9a15c5919d3afb1d35fa4964ef4b81257adb88c77fd85ffedfc09089673860f498e77f09b375"}, {0x67, 0x0, "59d4ad345cadd36f1cc6b6db9c3049b78522c13981c82d54ab4d15870db543da96336240dbb3ce9a6a029bfbdb7261d2f7757050f5decc93f8e9cc85e55e6c8a03e71a9d8a58363d034d5f354c16096592e2c528db0442d2f34e7806819ed7fa615779"}, {0x1004, 0x0, "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"}, {0x4e, 0x0, "d8ca64c6d190666a4025aa90ecce87641a7b41a287666397f3b04d2b7054561f3a0da5e86e9ca39ee24e2f2473d2893155f401e33143e9f0957daed584ea36cd44803d57a572cfe0d21d"}, {0x3b, 0x0, "3b247fbc5b916b811ee76379a638b25fbf827d5df5157120e549c1a6e38f534abacdb436a7b201860e2bdfbdb58f34b7ce52cd1b543eb0"}, {0xd2, 0x0, "470c914dc4863daaf91c0366410a869c81568a9949474d4169633e98dda8f0e5f49ff92a3bc8fa24171f526e282f7129b4616e5d302fba03abce9e7b62462aa927f98914caea3782b69d26ce27bb7dea55bbdc580815beee250a38db75f6ca5a5f2ff0bb2cccfda6688c7c1bdd0b4e267b216626e00ab8b4eb95562d4782e5c42633af5abc6d458f379887a0660d85f1185f3487e061ae1c9bddbe89334e1c45d53ea241d60da02111c6b1fe79e5149ebdc0c0a32c445f304a8e40b6461158bb070bb51b642417266614136d39db"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xf8}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x15, 0xb, "cb2a6b9d6bf502b50a6adf2cb4364f7a5e"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x154, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xe5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x98, 0xe, 0x0, 0x1, [{0x91, 0x0, "f0951673bf8f2bb3155453f109e484ebdf8feef792d71f951fd450a7a2b6ddf02e8f7082a490ba9439f789f5823ca8c5940c9a5e562c51826abd51b73a26fba38f8f31858430f112ab87b74ea485d13d8a7d6d760ce9c46205114b6be47bbc9654db09e65175fcc4e9a4463425b82d2aaf57c65cbc630a79a719c2df9dfbe5fff32f88def8f67a7dae5e85bb01"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xa4, 0xe, 0x0, 0x1, [{0x9d, 0x0, "20b30d770a7448bb598ce3ac805a626c105ea54927b2d951286d73567f398feb35766bf488fb96b76d663843e257decb63a8908885fc09ed13ea19841018de14f6d1f7bc7f2a529a56551a5bd15848de4f6d85fea6e933eb6bb051283717fe538e9c22a759bca9b023c05aa0f94aadcc29142d400f8fc3f56dbd9bf0d447937dce332dd1575ad16ffd3d10b945469be118b828b487a2f7ffe2"}]}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x17e8}, 0x1, 0x0, 0x0, 0x8090}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 685.059252ms ago: executing program 5 (id=8126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=""/96, 0x2329000, 0x800}, 0x20) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=""/96, 0x2329000, 0x800}, 0x20) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c040) 611.529127ms ago: executing program 0 (id=8127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfffff7eb}, 0x8) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x3}, 0x80, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x30000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) (async) socket$kcm(0x11, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfffff7eb}, 0x8) (async) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x3}, 0x80, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x30000}, 0x0) (async) 549.357812ms ago: executing program 3 (id=8128): r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f00000002c0), &(0x7f0000000300)=0x10) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000380), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f00000003c0), 0x1a1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf255e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20044040}, 0x8092) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f0000000380)={0x3a, 0x9}) 436.175673ms ago: executing program 1 (id=8129): r0 = socket(0x11, 0x80000, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000100)=""/61, &(0x7f0000000140)=0x3d) 379.737038ms ago: executing program 5 (id=8130): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@enum={0x10, 0x2, 0x0, 0x4, 0x4, [{0x10, 0xf5c1}, {0x8, 0xa6b2}]}, @volatile={0x0, 0x0, 0x0, 0xb, 0x1}, @int={0x80d, 0x0, 0x0, 0x1, 0x9, 0x5, 0x0, 0x3, 0x2}]}}, 0x0, 0x52}, 0x28) socket$packet(0x11, 0x1, 0x300) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) r0 = socket$inet(0x2, 0x3, 0x2) (rerun: 32) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000500)={'filter\x00', 0x0, 0x3, 0x0, [0x80000000, 0x0, 0xfffffffffffffff8, 0x8, 0x5, 0x3], 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x78) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}}, 0x40000) (async, rerun: 32) close(0x4) (async, rerun: 32) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) (async) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 32) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4ed915da28f02c93) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='bbr', 0x3) (async, rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000fe7f032171000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46df12f2137e00000000000000000000000000000001000000004229be437bd795feafd68063c8eb82ee80ba9625", 0x89}], 0x1}, 0x4000080) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000080)={0xfffe, 0x1}, 0xc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000004"], 0x68) 269.970326ms ago: executing program 0 (id=8131): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f00000000c0)=0x10) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r3, 0x4}, &(0x7f00000001c0)=0x8) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r4, &(0x7f0000000000)="2d000000010001", 0x7) 265.761805ms ago: executing program 2 (id=8132): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2e, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r1, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d71000c0002"], 0x3c}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000680)={0x0, 0x5}) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 115.703598ms ago: executing program 1 (id=8133): syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000300), 0x4) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x23, 0x5, 0x0) (async) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000054) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x100, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=8134): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x3, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25030100800c0002"], 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): amily 0 port 8472 - 0 [ 936.786052][T22898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.786082][T22898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 936.981105][T22881] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.982195][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.982237][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.982272][ T31] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.180093][T22898] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 937.201653][T22898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 937.201691][T22898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.201721][T22898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 937.282857][T30953] lo speed is unknown, defaulting to 1000 [ 937.300593][T30953] rxe_eth0 speed is unknown, defaulting to 1000 [ 937.349063][T31056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6304'. [ 937.356899][T31050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6304'. [ 937.613894][T31065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6308'. [ 937.671866][ T9148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 937.739805][T22881] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 19999 - 0 [ 937.839725][ T5653] Bluetooth: hci1: command tx timeout [ 937.858055][T22898] pim6reg: left allmulticast mode [ 937.858193][T22898] dvmrp6: left allmulticast mode [ 937.890521][T22898] batman_adv: batadv0: Interface deactivated: gretap2 [ 938.626755][T31091] __nla_validate_parse: 1 callbacks suppressed [ 938.626778][T31091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6312'. [ 938.716016][T22898] batman_adv: batadv0: Removing interface: gretap2 [ 938.826995][T22898] bond2 (unregistering): (slave geneve2): Releasing active interface [ 938.948235][T22898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.976710][T22898] bond0 (unregistering): Released all slaves [ 938.993373][T22898] bond1 (unregistering): Released all slaves [ 939.012526][T22881] smbdirect: ib_dev[syz2] removed [ 939.064069][T22898] bond2 (unregistering): Released all slaves [ 939.116591][T22898] bond3 (unregistering): Released all slaves [ 939.163798][T22898] bond4 (unregistering): Released all slaves [ 939.193287][T22898] bond5 (unregistering): (slave veth5): Releasing active interface [ 939.197043][T22898] bond5 (unregistering): (slave veth7): Releasing active interface [ 939.228179][T22898] bond5 (unregistering): Released all slaves [ 939.255751][T22898] bond6 (unregistering): Released all slaves [ 939.284746][T22898] bond7 (unregistering): Released all slaves [ 939.314315][T22898] bond8 (unregistering): (slave wlan1): Releasing active interface [ 939.340618][T22898] bond8 (unregistering): Released all slaves [ 939.363643][T22898] bond9 (unregistering): Released all slaves [ 939.391564][T22898] bond10 (unregistering): Released all slaves [ 939.457126][T31080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6310'. [ 939.488886][T31082] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6310'. [ 939.488931][T22881] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 19999 - 0 [ 939.488976][T22881] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 939.919337][T22898] tipc: Disabling bearer [ 939.919477][T22898] tipc: Left network mode [ 939.920237][ T5653] Bluetooth: hci1: command tx timeout [ 940.720212][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 940.810351][T31125] Bluetooth: MGMT ver 1.23 [ 940.810390][T31125] Bluetooth: hci1: too big key_count value 32778 [ 940.867555][T31129] netlink: 'syz.2.6319': attribute type 1 has an invalid length. [ 940.933313][T31130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6319'. [ 941.042178][T31129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6319'. [ 941.247320][T31129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 941.670128][T31147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 941.688442][T31149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6324'. [ 941.780053][T31151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6324'. [ 941.780597][T30953] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.780771][T30953] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.780953][T30953] bridge_slave_0: entered allmulticast mode [ 941.817844][T30953] bridge_slave_0: entered promiscuous mode [ 941.977516][T30953] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.977633][T30953] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.977804][T30953] bridge_slave_1: entered allmulticast mode [ 942.000525][ T5653] Bluetooth: hci1: command tx timeout [ 942.011652][T30953] bridge_slave_1: entered promiscuous mode [ 942.244073][T30953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.262323][T30953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.469869][T30953] team0: Port device team_slave_0 added [ 942.472904][T31182] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6329'. [ 942.517943][T31182] gretap0: entered promiscuous mode [ 942.682098][T31182] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6329'. [ 942.712962][T30953] team0: Port device team_slave_1 added [ 942.870632][T31182] 0ªî{X¹¦: renamed from gretap0 [ 942.885606][T31182] 0ªî{X¹¦: left promiscuous mode [ 942.885630][T31182] 0ªî{X¹¦: entered allmulticast mode [ 942.914956][T31182] net_ratelimit: 10 callbacks suppressed [ 942.914978][T31182] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 943.160561][T30953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.160581][T30953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.160608][T30953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.218030][ T5299] 8021q: adding VLAN 0 to HW filter on device eth2 [ 943.247389][T30953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.247410][T30953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.247439][T30953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.627596][T31204] netlink: 'syz.0.6335': attribute type 32 has an invalid length. [ 943.645826][T31204] openvswitch: netlink: Multiple metadata blocks provided [ 943.754640][T30953] hsr_slave_0: entered promiscuous mode [ 943.757233][T30953] hsr_slave_1: entered promiscuous mode [ 943.764362][T30953] debugfs: 'hsr0' already exists in 'hsr' [ 943.764382][T30953] Cannot create hsr debugfs directory [ 943.825173][T22898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.825206][T22898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.837486][T22898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.837509][T22898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.052154][T31209] sctp: [Deprecated]: syz.0.6337 (pid 31209) Use of int in max_burst socket option. [ 944.052154][T31209] Use struct sctp_assoc_value instead [ 944.252916][T31214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6339'. [ 945.587184][T22898] team0 (unregistering): Port device team_slave_1 removed [ 945.913661][ T3306] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 946.055259][ T5299] 8021q: adding VLAN 0 to HW filter on device eth3 [ 946.373525][T31244] tipc: Started in network mode [ 946.373549][T31244] tipc: Node identity 203, cluster identity 4711 [ 946.373562][T31244] tipc: Node number set to 515 [ 946.434965][T31246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6344'. [ 946.593439][T31264] x_tables: duplicate underflow at hook 2 [ 946.630922][T31271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6344'. [ 947.697140][T31288] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6350'. [ 947.776743][T22898] IPVS: stop unused estimator thread 0... [ 947.962123][T30953] netdevsim netdevsim1 eth5 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 948.028858][T31302] ip_tables: iptables: counters copy to user failed while replacing table [ 948.135892][T30953] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 948.175267][T31303] netlink: 'syz.5.6354': attribute type 9 has an invalid length. [ 948.300708][T31312] netlink: 'syz.2.6356': attribute type 1 has an invalid length. [ 948.300734][T31312] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6356'. [ 948.884851][T30953] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 949.048052][T31343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6359'. [ 949.147106][T31350] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 949.158912][T31351] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 949.305759][T30953] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 949.981700][T31385] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 950.118599][T31389] netlink: 'syz.2.6369': attribute type 21 has an invalid length. [ 950.118684][T31389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6369'. [ 950.566934][ T9148] IPVS: starting estimator thread 0... [ 950.654032][T31404] IPVS: using max 29 ests per chain, 69600 per kthread [ 951.904106][T31342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 952.045017][T30953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 952.132145][T30953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 952.149392][T30953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 952.232249][T30953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 952.281987][T30953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 952.410452][T30953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 952.411666][T30953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 952.462977][T30953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 952.575540][T31446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6377'. [ 952.743885][T31446] bond1: Removing last ns target with arp_interval on [ 953.328031][T31479] syzkaller0: entered promiscuous mode [ 953.328224][T31479] syzkaller0: entered allmulticast mode [ 953.534359][T30953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.584678][T31491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6382'. [ 953.627116][T30953] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.687904][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.688015][ T9148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.774310][T22898] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.774433][T22898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.947699][T31505] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6384'. [ 953.947728][T31505] openvswitch: netlink: Flow key attribute not present in set flow. [ 953.966647][T31481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 954.132648][T31497] vlan2: entered allmulticast mode [ 954.132672][T31497] bond0: entered allmulticast mode [ 954.132686][T31497] bond_slave_0: entered allmulticast mode [ 954.133036][T31497] bond_slave_1: entered allmulticast mode [ 954.232843][T31505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6384'. [ 954.232980][T31505] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6384'. [ 954.936930][T31533] tipc: Started in network mode [ 954.936963][T31533] tipc: Node identity 321a9ea863da, cluster identity 4711 [ 954.937149][T31533] tipc: Enabled bearer , priority 0 [ 954.961918][T31534] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6390'. [ 955.025815][T31531] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 955.058338][T31531] tipc: Resetting bearer [ 955.103638][T31533] wireguard0: entered promiscuous mode [ 955.104820][T31538] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6388'. [ 955.641936][T31526] tipc: Disabling bearer [ 955.767864][T19540] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 955.798360][T31558] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 956.007155][T19540] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 956.172637][T31568] netlink: 'syz.0.6394': attribute type 28 has an invalid length. [ 956.172661][T31568] netlink: 'syz.0.6394': attribute type 3 has an invalid length. [ 956.172675][T31568] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6394'. [ 956.646168][T31580] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 957.319497][T30953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.607785][T31613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.639532][T30953] veth0_vlan: entered promiscuous mode [ 957.692631][T30953] veth1_vlan: entered promiscuous mode [ 957.761834][T31619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.812821][T31626] netlink: 'syz.0.6405': attribute type 28 has an invalid length. [ 957.812846][T31626] netlink: 'syz.0.6405': attribute type 3 has an invalid length. [ 957.812861][T31626] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6405'. [ 958.082804][T30953] veth0_macvtap: entered promiscuous mode [ 958.127569][T30953] veth1_macvtap: entered promiscuous mode [ 958.255017][T31635] sit1: entered promiscuous mode [ 958.255042][T31635] sit1: entered allmulticast mode [ 958.312128][T30953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.356671][T30953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.409439][ T1406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.410261][ T9148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.410471][ T9148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.410521][ T9148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.869546][ T9148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.869571][ T9148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.002349][ T9148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.002372][ T9148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.081550][T31655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6415'. [ 959.152272][T31652] ip_tables: iptables: counters copy to user failed while replacing table [ 959.249118][T31652] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6412'. [ 959.294889][T31652] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.322098][T31667] netlink: 'syz.3.6416': attribute type 1 has an invalid length. [ 959.322136][T31667] openvswitch: netlink: Actions may not be safe on all matching packets [ 959.324715][T31668] netlink: 'syz.3.6416': attribute type 1 has an invalid length. [ 959.324754][T31668] openvswitch: netlink: Actions may not be safe on all matching packets [ 960.082204][T22881] wlan0: Trigger new scan to find an IBSS to join [ 961.118605][T31734] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 961.118792][T31734] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 961.640608][T31753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6437'. [ 961.736310][T31755] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6435'. [ 961.815364][T31764] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6438'. [ 962.142305][T31757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6435'. [ 962.381421][T31776] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6439'. [ 962.388034][T31784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6439'. [ 963.123806][ T31] wlan0: Trigger new scan to find an IBSS to join [ 963.524309][T31827] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6449'. [ 963.549264][T31827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6449'. [ 963.591348][T31829] IPv6: NLM_F_CREATE should be specified when creating new route [ 963.667455][T31839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6449'. [ 963.735598][T31835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6449'. [ 963.811094][T31842] netlink: 'syz.5.6452': attribute type 1 has an invalid length. [ 963.829293][T31842] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32) [ 964.336849][T31862] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 964.573267][ T5652] Bluetooth: hci3: command 0x0406 tx timeout [ 964.952071][T31880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 965.134154][T31884] netlink: 'syz.1.6461': attribute type 5 has an invalid length. [ 965.579015][T31894] netlink: 'syz.2.6464': attribute type 2 has an invalid length. [ 965.887574][T31913] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 965.888894][T31913] netlink: 'syz.3.6470': attribute type 7 has an invalid length. [ 966.023517][T31909] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 966.027935][T31925] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 966.077881][T31909] bond2 (unregistering): Released all slaves [ 966.080747][T31928] netlink: 'syz.3.6470': attribute type 7 has an invalid length. [ 966.082135][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.618156][T31940] netlink: 'syz.0.6472': attribute type 58 has an invalid length. [ 966.704854][T31943] __nla_validate_parse: 76 callbacks suppressed [ 966.712231][T31943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6472'. [ 966.810711][T31943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6472'. [ 966.854650][T31953] netlink: 'syz.0.6472': attribute type 58 has an invalid length. [ 966.854672][T31953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6472'. [ 966.879223][T31956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6472'. [ 966.982820][T31956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6472'. [ 967.439456][T31974] tipc: Started in network mode [ 967.439492][T31974] tipc: Node identity ac14142f, cluster identity 4711 [ 967.443843][T31974] tipc: Enabled bearer , priority 10 [ 967.447557][T31974] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6480'. [ 967.515337][T31980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6481'. [ 967.515366][T31980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6481'. [ 967.518019][T31981] netlink: 'syz.1.6483': attribute type 1 has an invalid length. [ 967.571642][T31982] netlink: 'syz.3.6482': attribute type 1 has an invalid length. [ 967.571667][T31982] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6482'. [ 967.576307][T31980] netlink: 'syz.5.6481': attribute type 1 has an invalid length. [ 967.596151][T31980] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6481'. [ 967.863412][ T30] audit: type=1800 audit(1794519667.651:12): pid=31989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6484" name="memory.events" dev="tmpfs" ino=241 res=0 errno=-22 [ 968.563053][T29601] tipc: Node number set to 2886997039 [ 969.164065][T32040] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 969.167818][T32040] bond2 (unregistering): Released all slaves [ 969.534742][T32052] xt_hashlimit: size too large, truncated to 1048576 [ 969.592202][T32050] macsec1: entered promiscuous mode [ 969.594229][T32055] xt_hashlimit: size too large, truncated to 1048576 [ 969.679299][ T5653] Bluetooth: hci4: command 0x0405 tx timeout [ 970.115077][T32070] x_tables: duplicate underflow at hook 1 [ 971.203759][T32107] bond2: entered promiscuous mode [ 971.204334][T32107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 971.692085][T32116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 971.695811][T32116] sit1: left promiscuous mode [ 971.921118][T32128] __nla_validate_parse: 77 callbacks suppressed [ 971.921141][T32128] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6521'. [ 971.970219][T32135] validate_nla: 3 callbacks suppressed [ 971.970237][T32135] netlink: 'syz.3.6525': attribute type 3 has an invalid length. [ 971.988896][T32132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6523'. [ 972.695036][T32162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6529'. [ 972.877631][T32164] syzkaller0: entered promiscuous mode [ 972.877658][T32164] syzkaller0: entered allmulticast mode [ 972.905217][T32167] netlink: 'syz.0.6531': attribute type 1 has an invalid length. [ 973.025091][T32173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6531'. [ 973.136153][T32167] bond2: entered promiscuous mode [ 973.138121][T32167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 973.229585][T32169] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 973.229615][T32169] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 973.229632][T32169] bond2: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 973.359106][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 973.365861][T32174] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6531'. [ 973.366043][T32177] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6531'. [ 973.937982][T32196] dvmrp0: entered allmulticast mode [ 975.147455][T32249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6547'. [ 975.495274][T32265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6551'. [ 975.814425][T32277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6554'. [ 975.931831][T32282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6554'. [ 975.995779][T32280] tipc: Enabled bearer , priority 10 [ 976.656683][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057ce5800: rx timeout, send abort [ 977.150292][T32326] __nla_validate_parse: 2 callbacks suppressed [ 977.150315][T32326] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.6568'. [ 977.150336][T32326] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.6568'. [ 977.156739][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057ce5800: abort rx timeout. Force session deactivation [ 977.165185][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805430bc00: rx timeout, send abort [ 977.212801][T32317] netlink: 'syz.0.6567': attribute type 1 has an invalid length. [ 977.212824][T32317] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6567'. [ 977.270890][T32327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6567'. [ 977.316434][T32327] bridge_slave_1: left allmulticast mode [ 977.316477][T32327] bridge_slave_1: left promiscuous mode [ 977.316761][T32327] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.363420][T32327] bridge_slave_0: left allmulticast mode [ 977.363450][T32327] bridge_slave_0: left promiscuous mode [ 977.363680][T32327] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.665289][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805430bc00: abort rx timeout. Force session deactivation [ 978.275391][T32360] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 978.492881][T32371] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6577'. [ 979.010626][T32383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6582'. [ 979.060407][T32383] ip6gre1: entered promiscuous mode [ 979.060432][T32383] ip6gre1: entered allmulticast mode [ 979.142755][T32383] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6582'. [ 979.163108][T32389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6584'. [ 979.233452][T32398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6586'. [ 979.256013][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6586'. [ 979.613098][T32402] netlink: 'syz.5.6587': attribute type 32 has an invalid length. [ 979.814592][T32414] xt_hashlimit: overflow, try lower: 3/0 [ 979.857546][T32414] netlink: 'syz.0.6589': attribute type 9 has an invalid length. [ 979.940487][T32421] IPv6: NLM_F_CREATE should be specified when creating new route [ 980.457040][T32446] netlink: 'syz.0.6599': attribute type 1 has an invalid length. [ 980.457240][T32445] netlink: 'syz.0.6599': attribute type 1 has an invalid length. [ 980.646908][T32446] 8021q: adding VLAN 0 to HW filter on device bond3 [ 980.687068][T32448] bond3: (slave geneve2): making interface the new active one [ 980.697845][T32448] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 980.746819][T32456] xt_cgroup: path and classid specified [ 981.294900][ T9148] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.294944][ T9148] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 55158 - 0 [ 981.295137][T32473] syzkaller0: entered promiscuous mode [ 981.295167][T32473] syzkaller0: entered allmulticast mode [ 982.295531][T32489] __nla_validate_parse: 2 callbacks suppressed [ 982.295552][T32489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6610'. [ 982.710956][T32507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6614'. [ 983.422300][T32523] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 983.423070][ T3306] IPVS: starting estimator thread 0... [ 983.531359][T32528] IPVS: using max 26 ests per chain, 62400 per kthread [ 984.090249][ T5652] Bluetooth: hci2: ACL packet for unknown connection handle 3484 [ 984.182662][T32548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6622'. [ 984.182700][T32548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6622'. [ 984.278762][T32556] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 984.301897][T32556] bond4 (unregistering): Released all slaves [ 984.427602][T32554] netlink: 'syz.5.6621': attribute type 4 has an invalid length. [ 984.428901][T32556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6624'. [ 985.202079][T32584] sctp: [Deprecated]: syz.2.6632 (pid 32584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.202079][T32584] Use struct sctp_sack_info instead [ 985.202120][T32584] sctp: [Deprecated]: syz.2.6632 (pid 32584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.202120][T32584] Use struct sctp_sack_info instead [ 985.202147][T32584] sctp: [Deprecated]: syz.2.6632 (pid 32584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.202147][T32584] Use struct sctp_sack_info instead [ 985.202173][T32584] sctp: [Deprecated]: syz.2.6632 (pid 32584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.202173][T32584] Use struct sctp_sack_info instead [ 985.202199][T32584] sctp: [Deprecated]: syz.2.6632 (pid 32584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.202199][T32584] Use struct sctp_sack_info instead [ 985.202226][T32584] sctp: [Deprecated]: syz.2.6632 (pid 32584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.202226][T32584] Use struct sctp_sack_info instead [ 985.202252][T32584] sctp: [Deprecated]: syz.2.6632 (pid 32584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.202252][T32584] Use struct sctp_sack_info instead [ 985.202300][T32584] sctp: [Deprecated]: syz.2.6632 (pid 32584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.202300][T32584] Use struct sctp_sack_info instead [ 985.202326][T32584] sctp: [Deprecated]: syz.2.6632 (pid 32584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.202326][T32584] Use struct sctp_sack_info instead [ 985.202353][T32584] sctp: [Deprecated]: syz.2.6632 (pid 32584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.202353][T32584] Use struct sctp_sack_info instead [ 985.698209][T32594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6636'. [ 985.933725][T32607] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 986.393249][T32625] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6644'. [ 987.153213][T32646] ebt_limit: overflow, try lower: 4278190080/255 [ 987.650886][T32659] xt_connbytes: Forcing CT accounting to be enabled [ 987.650933][T32659] xt_CT: You must specify a L4 protocol and not use inversions on it [ 988.484992][T32692] x_tables: duplicate underflow at hook 1 [ 988.944439][T32708] netlink: 'syz.5.6670': attribute type 2 has an invalid length. [ 988.944464][T32708] netlink: 244 bytes leftover after parsing attributes in process `syz.5.6670'. [ 988.988857][T32709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6671'. [ 989.098923][T32709] netlink: 'syz.1.6671': attribute type 1 has an invalid length. [ 989.230890][T32709] veth1_macvtap: left promiscuous mode [ 989.230924][T32709] macsec0: entered promiscuous mode [ 990.983875][T32764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6687'. [ 991.064353][ T303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6686'. [ 991.141160][ T303] macvtap1: entered promiscuous mode [ 991.141186][ T303] vlan0: entered promiscuous mode [ 991.141692][ T303] macvtap1: entered allmulticast mode [ 991.141711][ T303] vlan0: entered allmulticast mode [ 991.141726][ T303] veth0_vlan: entered allmulticast mode [ 991.144996][ T304] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 991.977752][ T314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6690'. [ 993.361542][T32738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 993.928385][ T337] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6696'. [ 993.937213][ T337] 0ªî{X¹¦: entered promiscuous mode [ 993.937426][ T337] 0ªî{X¹¦: left allmulticast mode [ 994.030131][ T341] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6696'. [ 994.109866][ T340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6697'. [ 994.109899][ T340] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6697'. [ 994.189631][ T341] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 994.191872][ T344] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6699'. [ 994.231321][ T352] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 994.231695][ T341] 1ªî{X¹¦: left promiscuous mode [ 994.249794][ T346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6699'. [ 994.266741][ T352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6700'. [ 994.277090][ T341] 1ªî{X¹¦: entered allmulticast mode [ 994.285913][ T341] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 994.700963][ T346] bond1: entered promiscuous mode [ 994.701358][ T346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 994.991628][ T378] sit0: entered promiscuous mode [ 995.017557][ T378] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 995.017579][ T378] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6706'. [ 995.037160][ T378] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 995.037180][ T378] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6706'. [ 995.037476][ T378] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 995.037493][ T378] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6706'. [ 995.037686][ T378] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 995.037701][ T378] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6706'. [ 995.115835][ T378] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 995.116060][ T378] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 995.116278][ T378] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 995.116471][ T378] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 995.116681][ T378] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 995.135781][ T378] netlink: 'syz.1.6706': attribute type 1 has an invalid length. [ 996.349816][ T427] x_tables: duplicate underflow at hook 2 [ 996.699641][ T3306] IPVS: starting estimator thread 0... [ 996.789984][ T444] IPVS: using max 30 ests per chain, 72000 per kthread [ 997.557263][ T473] vlan2: entered promiscuous mode [ 997.557310][ T473] 0·: entered promiscuous mode [ 997.558147][ T473] vlan2: entered allmulticast mode [ 998.327561][ T1406] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 998.616862][ T534] xfrm1: entered promiscuous mode [ 998.617050][ T534] xfrm1: entered allmulticast mode [ 998.830083][ T5652] block nbd296: Receive control failed (result -32) [ 999.113845][ T542] __nla_validate_parse: 36 callbacks suppressed [ 999.113868][ T542] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6745'. [ 999.115064][ T542] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6745'. [ 999.116258][ T542] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6745'. [ 999.144618][ T542] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6745'. [ 999.164392][ T542] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6745'. [ 999.165570][ T542] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6745'. [ 999.168309][ T542] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6745'. [ 999.194601][ T542] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6745'. [ 999.217246][ T542] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6745'. [ 999.217546][ T542] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6745'. [ 999.321159][T22892] IPVS: starting estimator thread 0... [ 999.409613][ T551] IPVS: using max 30 ests per chain, 72000 per kthread [ 999.591995][ T561] syzkaller1: entered promiscuous mode [ 999.592020][ T561] syzkaller1: entered allmulticast mode [ 1000.094384][ T589] validate_nla: 92 callbacks suppressed [ 1000.094407][ T589] netlink: 'syz.5.6754': attribute type 1 has an invalid length. [ 1000.203674][ T589] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1000.620860][ T609] netlink: 'syz.2.6760': attribute type 3 has an invalid length. [ 1000.809751][ T617] syzkaller0: entered promiscuous mode [ 1000.809952][ T617] syzkaller0: entered allmulticast mode [ 1001.727329][ T644] ip_tables: iptables: counters copy to user failed while replacing table [ 1002.824354][ T683] xt_hashlimit: size too large, truncated to 1048576 [ 1002.827835][ T682] xt_hashlimit: size too large, truncated to 1048576 [ 1002.891346][ T684] xt_hashlimit: size too large, truncated to 1048576 [ 1003.079679][T15413] rxe_eth0 speed is unknown, defaulting to 1000 [ 1003.295362][ T693] bond0: option ad_select: unable to set because the bond device is up [ 1004.037046][ T732] veth3: entered allmulticast mode [ 1005.354470][ T786] __nla_validate_parse: 38 callbacks suppressed [ 1005.354493][ T786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6794'. [ 1005.518766][ T5652] Bluetooth: hci2: command 0x0406 tx timeout [ 1005.851209][ T808] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1006.145064][ T818] IPVS: ip_vs_add_dest(): server weight less than zero [ 1006.164523][ T819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6801'. [ 1006.166323][ T821] netlink: 4760 bytes leftover after parsing attributes in process `syz.2.6800'. [ 1006.166629][ T816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6800'. [ 1006.166656][ T816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6800'. [ 1006.227435][ T821] hsr_slave_0: left promiscuous mode [ 1006.254721][ T821] hsr_slave_1: left promiscuous mode [ 1006.632866][ T829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6802'. [ 1006.784405][ T832] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1007.462080][ T861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1007.496169][ T867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6808'. [ 1007.577285][ T870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1007.700433][ T867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6808'. [ 1008.547980][ T901] lo: entered allmulticast mode [ 1009.027014][ T899] dvmrp6: entered allmulticast mode [ 1009.044356][ T925] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6820'. [ 1009.044718][ T925] gretap0: entered promiscuous mode [ 1009.045079][ T925] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6820'. [ 1009.045182][ T925] 0ªî{X¹¦: renamed from gretap0 [ 1009.089659][ T925] 0ªî{X¹¦: left promiscuous mode [ 1009.089681][ T925] 0ªî{X¹¦: entered allmulticast mode [ 1009.097528][ T925] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1009.156112][ T928] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1009.346666][ T928] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1009.406032][ T925] 1ªî{X¹¦: entered promiscuous mode [ 1009.406224][ T925] 1ªî{X¹¦: left allmulticast mode [ 1009.638087][ T952] x_tables: duplicate underflow at hook 1 [ 1010.069056][ T966] netlink: 'syz.0.6827': attribute type 8 has an invalid length. [ 1010.444539][ T972] __nla_validate_parse: 2 callbacks suppressed [ 1010.444562][ T972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6829'. [ 1010.635536][ T977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6831'. [ 1010.859349][ T972] hsr_slave_1 (unregistering): left promiscuous mode [ 1011.145116][ T1003] netlink: 'syz.1.6835': attribute type 8 has an invalid length. [ 1012.568089][ T1055] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1012.657265][ T1054] bond7 (unregistering): Released all slaves [ 1012.703299][ T1069] netlink: 'syz.2.6844': attribute type 7 has an invalid length. [ 1012.804360][ T1068] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6842'. [ 1012.804385][ T1068] tc_dump_action: action bad kind [ 1012.828960][ T1067] ip_tables: iptables: counters copy to user failed while replacing table [ 1013.579680][ T1101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6850'. [ 1013.586515][ T1107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6850'. [ 1015.117432][ T1147] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1015.204010][ T1148] syzkaller1: entered promiscuous mode [ 1015.204213][ T1148] syzkaller1: entered allmulticast mode [ 1015.573337][ T1154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6861'. [ 1015.573364][ T1154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6861'. [ 1015.658497][ T1158] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6863'. [ 1015.834223][ T1149] netlink: 'syz.2.6861': attribute type 1 has an invalid length. [ 1015.834253][ T1149] nbd: nbd296 already in use [ 1016.015344][ T1187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6864'. [ 1016.030527][ T1185] x_tables: ip_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 1016.116265][ T1185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6865'. [ 1016.116667][ T1191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6864'. [ 1017.111552][ T1230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6872'. [ 1017.135313][ T1230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.200080][ T1229] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1017.349696][ T1237] vcan0: tx address claim with dest, not broadcast [ 1017.357183][ T1237] vcan0: tx address claim with dlc 485 [ 1017.467661][ T1243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6876'. [ 1018.223777][ T1274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6882'. [ 1018.418995][ T1279] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1018.678402][ T1291] netlink: 'syz.1.6885': attribute type 33 has an invalid length. [ 1018.749947][ T1291] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1018.831822][ T1299] netlink: 'syz.3.6887': attribute type 1 has an invalid length. [ 1018.846905][ T1291] bond2 (unregistering): Released all slaves [ 1018.976122][ T1309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6888'. [ 1018.976584][ T1309] netlink: 'syz.2.6888': attribute type 10 has an invalid length. [ 1019.157252][ T1317] openvswitch: netlink: Actions may not be safe on all matching packets [ 1019.270151][ T1299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1019.420639][ T1305] bond3: (slave geneve2): making interface the new active one [ 1019.425143][ T1305] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1019.453330][ T1034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.456607][T22892] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.456651][T22892] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.456688][T22892] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.711870][ T1309] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 1020.071932][ T1330] No such timeout policy "syz0" [ 1020.527837][ T1362] ip_tables: iptables: counters copy to user failed while replacing table [ 1020.745451][ T1365] __nla_validate_parse: 1 callbacks suppressed [ 1020.745477][ T1365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6896'. [ 1021.136296][ T1377] netlink: 'syz.0.6900': attribute type 10 has an invalid length. [ 1021.164672][ T1377] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1021.350205][ T1389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6901'. [ 1021.393971][ T1388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6901'. [ 1021.512386][ T1397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6906'. [ 1021.512577][ T1397] netlink: 'syz.0.6906': attribute type 1 has an invalid length. [ 1021.512594][ T1397] netlink: 'syz.0.6906': attribute type 2 has an invalid length. [ 1021.585326][ T1404] ip_tables: iptables: counters copy to user failed while replacing table [ 1021.586660][ T1404] v: renamed from vlan1 (while UP) [ 1021.587717][ T1397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6906'. [ 1022.537435][ T1449] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1022.537530][ T1449] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1022.573797][ T1449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6914'. [ 1023.110131][ T1469] ip_tables: iptables: counters copy to user failed while replacing table [ 1023.258291][ T1469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6918'. [ 1023.724615][ T1493] TC_ACT_REPEAT abuse ? [ 1024.160358][ T1512] sit0: left promiscuous mode [ 1024.474037][ T1512] veth1_macvtap: entered promiscuous mode [ 1024.474375][ T1512] macsec0: left promiscuous mode [ 1024.514491][ T1512] bond1: left promiscuous mode [ 1024.530130][ T1512] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1024.610748][ T1533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6932'. [ 1024.712662][ T1536] vlan1: entered promiscuous mode [ 1024.716342][ T1536] vlan1: entered allmulticast mode [ 1024.716361][ T1536] veth0_vlan: entered allmulticast mode [ 1025.016037][ T1545] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1025.930254][ T1576] xt_IDLETIMER: label is empty or not nul-terminated [ 1026.036743][ T1584] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6941'. [ 1026.130812][ T1584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.176797][ T1590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6944'. [ 1026.191930][ T1584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.230048][ T1584] bond0 (unregistering): Released all slaves [ 1026.346267][ T1597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6946'. [ 1026.359772][ T1597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1026.378245][ T1597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1026.469452][ T9148] bond5: (slave veth0_to_bond): link status definitely down, disabling slave [ 1026.469892][ T9148] bond5: now running without any active interface! [ 1026.542339][ T1602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6947'. [ 1028.076930][ T1649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6955'. [ 1028.144502][ T1643] sctp: [Deprecated]: syz.1.6953 (pid 1643) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1028.144502][ T1643] Use struct sctp_sack_info instead [ 1028.271123][ T1654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6955'. [ 1028.533143][ T1671] xt_esp: unknown flags DD [ 1028.550047][ T1672] xt_esp: unknown flags DD [ 1028.580890][ T1668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6959'. [ 1028.643232][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.657842][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.677292][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.695176][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.713603][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.733751][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.751457][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.756952][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.779658][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.782423][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.785425][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.816509][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.829830][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.832899][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.834920][ T1669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.204734][ T1691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6961'. [ 1029.686316][T22892] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1030.033413][ T1709] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6966'. [ 1031.609886][ T1769] tipc: Started in network mode [ 1031.609918][ T1769] tipc: Node identity ac14142f, cluster identity 4711 [ 1031.610534][ T1769] tipc: Enabled bearer , priority 10 [ 1032.205848][ T1777] syzkaller0: entered promiscuous mode [ 1032.205877][ T1777] syzkaller0: entered allmulticast mode [ 1032.265748][ T1784] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6979'. [ 1032.266273][ T1784] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6979'. [ 1032.266294][ T1784] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6979'. [ 1035.966809][T19540] tipc: Node number set to 2886997039 [ 1036.113472][ T1827] : renamed from bond0 (while UP) [ 1036.239703][ T5652] Bluetooth: hci5: command 0x0406 tx timeout [ 1036.394668][ T1835] ipt_ah: unknown flags FF [ 1036.407403][ T1835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6991'. [ 1036.462056][ T1835] ipt_ah: unknown flags FF [ 1036.510495][ T1845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6991'. [ 1036.548016][ T1836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6992'. [ 1036.946982][ T1853] net_ratelimit: 52 callbacks suppressed [ 1036.947102][ T1853] openvswitch: netlink: Flow actions attr not present in new flow. [ 1037.045660][ T1855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6997'. [ 1037.219978][ T1868] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7000'. [ 1037.291766][ T1862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6998'. [ 1037.302443][ T1868] netlink: 'syz.5.7000': attribute type 83 has an invalid length. [ 1037.327945][ T1875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7002'. [ 1037.327972][ T1875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7002'. [ 1037.350776][ T1875] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7002'. [ 1037.350798][ T1875] tc_dump_action: action bad kind [ 1037.686590][ T1875] IPVS: Scheduler module ip_vs_sip not found [ 1038.299172][ T1905] bridge2: entered promiscuous mode [ 1038.299237][ T1905] bridge2: entered allmulticast mode [ 1038.407173][ T1908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7012'. [ 1038.428267][ T1905] bridge3: entered promiscuous mode [ 1038.430449][ T1905] bridge3: entered allmulticast mode [ 1038.461262][ T1905] bridge4: entered promiscuous mode [ 1038.461287][ T1905] bridge4: entered allmulticast mode [ 1038.490061][ T1910] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7011'. [ 1038.537699][ T1905] bridge5: entered promiscuous mode [ 1038.537890][ T1905] bridge5: entered allmulticast mode [ 1038.751630][ T1905] bridge6: entered promiscuous mode [ 1038.751678][ T1905] bridge6: entered allmulticast mode [ 1038.909459][ T1905] bridge7: entered promiscuous mode [ 1038.909486][ T1905] bridge7: entered allmulticast mode [ 1038.981652][ T1905] bridge8: entered promiscuous mode [ 1038.981677][ T1905] bridge8: entered allmulticast mode [ 1039.101368][ T1905] bridge9: entered promiscuous mode [ 1039.101398][ T1905] bridge9: entered allmulticast mode [ 1039.282353][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1039.665615][ T1945] netlink: 'syz.2.7020': attribute type 32 has an invalid length. [ 1039.796097][ T1947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7021'. [ 1040.364268][ T1962] wlan1 speed is unknown, defaulting to 1000 [ 1040.364334][ T1962] wlan1 speed is unknown, defaulting to 1000 [ 1040.365164][ T1962] wlan1 speed is unknown, defaulting to 1000 [ 1040.394294][ T1962] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1040.394334][ T1962] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1040.394378][ T1962] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1040.594609][ T1962] wlan1 speed is unknown, defaulting to 1000 [ 1040.625767][ T1962] wlan1 speed is unknown, defaulting to 1000 [ 1040.731683][ T1962] wlan1 speed is unknown, defaulting to 1000 [ 1040.751672][ T1962] wlan1 speed is unknown, defaulting to 1000 [ 1040.755203][ T1962] wlan1 speed is unknown, defaulting to 1000 [ 1040.773274][ T1962] wlan1 speed is unknown, defaulting to 1000 [ 1040.786860][ T1962] wlan1 speed is unknown, defaulting to 1000 [ 1040.799057][ T1962] wlan1 speed is unknown, defaulting to 1000 [ 1040.801221][ T1962] wlan1 speed is unknown, defaulting to 1000 [ 1040.924098][ T1975] wg0 speed is unknown, defaulting to 1000 [ 1040.924164][ T1975] wg0 speed is unknown, defaulting to 1000 [ 1040.925141][ T1975] wg0 speed is unknown, defaulting to 1000 [ 1040.927618][ T1975] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1040.927654][ T1975] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1040.927691][ T1975] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1041.022815][ T1975] wg0 speed is unknown, defaulting to 1000 [ 1041.054923][ T1980] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7032'. [ 1041.070741][ T1975] wg0 speed is unknown, defaulting to 1000 [ 1041.093794][ T1975] wg0 speed is unknown, defaulting to 1000 [ 1041.108921][ T1975] wg0 speed is unknown, defaulting to 1000 [ 1041.113925][ T1975] wg0 speed is unknown, defaulting to 1000 [ 1041.135632][ T1975] wg0 speed is unknown, defaulting to 1000 [ 1041.198573][ T1975] wg0 speed is unknown, defaulting to 1000 [ 1041.256837][ T1975] wg0 speed is unknown, defaulting to 1000 [ 1041.270008][ T1975] wg0 speed is unknown, defaulting to 1000 [ 1041.383551][ T1981] netlink: 'syz.2.7030': attribute type 21 has an invalid length. [ 1041.383579][ T1981] IPv6: NLM_F_CREATE should be specified when creating new route [ 1041.383672][ T1981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1041.383684][ T1981] IPv6: NLM_F_CREATE should be set when creating new route [ 1041.383735][ T1981] IPv6: NLM_F_CREATE should be set when creating new route [ 1041.383763][ T1981] IPv6: NLM_F_CREATE should be set when creating new route [ 1041.733000][ T1999] ip_tables: iptables: counters copy to user failed while replacing table [ 1041.896828][ T2004] netlink: 'syz.3.7039': attribute type 1 has an invalid length. [ 1042.077638][ T2012] ip_tables: iptables: counters copy to user failed while replacing table [ 1042.392078][ T2018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7040'. [ 1042.465583][ T2027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7040'. [ 1042.499380][ T2021] netlink: 'syz.1.7043': attribute type 4 has an invalid length. [ 1043.089372][ T2048] ip_tables: iptables: counters copy to user failed while replacing table [ 1043.089758][ T2048] ip_tables: iptables: counters copy to user failed while replacing table [ 1043.090119][ T2048] ip_tables: iptables: counters copy to user failed while replacing table [ 1043.090495][ T2048] ip_tables: iptables: counters copy to user failed while replacing table [ 1043.090873][ T2048] ip_tables: iptables: counters copy to user failed while replacing table [ 1043.116216][ T2048] ip_tables: iptables: counters copy to user failed while replacing table [ 1043.136763][ T2048] ip_tables: iptables: counters copy to user failed while replacing table [ 1043.137886][ T2048] ip_tables: iptables: counters copy to user failed while replacing table [ 1043.182998][ T2048] ip_tables: iptables: counters copy to user failed while replacing table [ 1043.340571][ T2061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7053'. [ 1044.020465][ T2085] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7059'. [ 1044.077176][ T2089] xt_hl: Unknown Hop Limit match mode: 206 [ 1044.104714][ T2089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7059'. [ 1044.275365][ T2094] bond4 (unregistering): Released all slaves [ 1044.475861][ T2098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7061'. [ 1044.623064][ T2105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7063'. [ 1044.932028][ T2109] netlink: 'syz.3.7066': attribute type 1 has an invalid length. [ 1044.932052][ T2109] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7066'. [ 1045.354639][ T2126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7069'. [ 1045.719305][ T2149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7070'. [ 1046.331771][ T2173] bridge_slave_0: left allmulticast mode [ 1046.331802][ T2173] bridge_slave_0: left promiscuous mode [ 1046.332045][ T2173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.425955][ T2173] bridge_slave_1: left allmulticast mode [ 1046.425982][ T2173] bridge_slave_1: left promiscuous mode [ 1046.426184][ T2173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.486475][ T2173] bond5: (slave veth0_to_bond): Releasing active interface [ 1046.685795][ T2173] team0: Port device team_slave_0 removed [ 1046.752632][ T2173] team0: Port device team_slave_1 removed [ 1046.756508][ T2173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.756533][ T2173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.802431][ T2160] bond0: entered promiscuous mode [ 1046.802470][ T2160] bond_slave_0: entered promiscuous mode [ 1046.802716][ T2160] bond_slave_1: entered promiscuous mode [ 1047.014352][ T2190] team0: Port device xfrm0 added [ 1047.455416][ T2212] IPVS: set_ctl: invalid protocol: 0 5.0.0.0:0 [ 1047.455539][ T2212] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1047.489987][ T2211] net_ratelimit: 26 callbacks suppressed [ 1047.490006][ T2211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1047.634885][ T2224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7083'. [ 1047.902126][ T2234] netlink: 'syz.0.7086': attribute type 25 has an invalid length. [ 1047.902149][ T2234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7086'. [ 1047.984476][ T2234] netlink: 'syz.0.7086': attribute type 25 has an invalid length. [ 1047.984501][ T2234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7086'. [ 1048.000494][ T1406] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.001961][T22892] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.002072][T22892] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.002162][T22892] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.321821][ T2246] netlink: 'syz.1.7087': attribute type 1 has an invalid length. [ 1048.321844][ T2246] netlink: 'syz.1.7087': attribute type 4 has an invalid length. [ 1048.321858][ T2246] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7087'. [ 1048.324317][ T2246] netlink: 'syz.1.7087': attribute type 1 has an invalid length. [ 1048.324338][ T2246] netlink: 'syz.1.7087': attribute type 4 has an invalid length. [ 1048.324353][ T2246] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7087'. [ 1048.706775][ T2262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7088'. [ 1049.161414][ T2278] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7093'. [ 1049.517649][ T2285] netlink: 'syz.0.7094': attribute type 11 has an invalid length. [ 1049.573526][ T2288] netlink: 576 bytes leftover after parsing attributes in process `syz.2.7096'. [ 1050.441278][ T2308] ip_tables: iptables: counters copy to user failed while replacing table [ 1050.512869][ T2297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7098'. [ 1050.813896][ T2317] netlink: 'syz.2.7104': attribute type 1 has an invalid length. [ 1051.060731][ T2317] bond0: entered promiscuous mode [ 1051.065224][ T2317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.221031][ T2318] bond0: (slave bridge2): making interface the new active one [ 1051.221057][ T2318] bridge2: entered promiscuous mode [ 1051.247018][ T2318] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 1051.251869][ T2324] lo: entered promiscuous mode [ 1051.352848][ T2324] netlink: 'syz.2.7104': attribute type 2 has an invalid length. [ 1051.352873][ T2324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1052.095296][ T2368] xt_hashlimit: size too large, truncated to 1048576 [ 1052.663802][ T2383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1052.706355][ T2383] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 1052.790049][ T2395] netlink: 'syz.5.7121': attribute type 10 has an invalid length. [ 1052.790076][ T2395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7121'. [ 1053.968675][ T2462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7134'. [ 1053.968706][ T2462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7134'. [ 1054.001286][ T5652] Bluetooth: hci2: unexpected event for opcode 0x203d [ 1054.065466][ T5653] Bluetooth: hci2: unexpected event for opcode 0x203d [ 1054.216337][ T2480] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7136'. [ 1055.418885][ T2521] netlink: 'syz.1.7143': attribute type 7 has an invalid length. [ 1055.418910][ T2521] netlink: 'syz.1.7143': attribute type 5 has an invalid length. [ 1055.418925][ T2521] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7143'. [ 1055.602612][ T2523] netlink: 'syz.2.7144': attribute type 2 has an invalid length. [ 1055.602639][ T2523] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7144'. [ 1055.941183][ T2536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7147'. [ 1056.131820][ T2550] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1056.304525][ T2554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7146'. [ 1056.429791][ T2570] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1056.512640][ T2573] veth0: entered promiscuous mode [ 1056.513077][ T2573] veth0: left promiscuous mode [ 1056.634256][ T2570] netlink: 'syz.3.7152': attribute type 4 has an invalid length. [ 1057.514488][ T2616] ip_tables: iptables: counters copy to user failed while replacing table [ 1057.638125][ T2616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7159'. [ 1057.872319][ T2641] netlink: 'syz.5.7163': attribute type 1 has an invalid length. [ 1057.921043][ T2634] bond5: entered promiscuous mode [ 1057.921066][ T2634] bond5: entered allmulticast mode [ 1058.449546][ T2670] netlink: 'syz.0.7168': attribute type 1 has an invalid length. [ 1058.746182][ T2670] bond5: entered promiscuous mode [ 1058.746818][ T2670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1059.212850][ T2704] bridge5: entered promiscuous mode [ 1059.212946][ T2704] bridge5: entered allmulticast mode [ 1059.286181][ T2713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7175'. [ 1060.128046][ T2762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7181'. [ 1060.145309][ T2754] masquerade_tg_check: 56 callbacks suppressed [ 1060.145332][ T2754] xt_MASQUERADE: bad rangesize 2147483646 [ 1060.227360][ T2762] team0 (unregistering): Port device xfrm0 removed [ 1060.249831][ T5653] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 1060.522298][ T2778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7185'. [ 1060.931296][ T2783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7186'. [ 1060.936777][ T2783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.961068][ T2799] openvswitch: netlink: Key type 31 is not supported [ 1061.304632][ T2803] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7190'. [ 1061.424048][ T2811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1061.453762][ T2812] netlink: 'syz.5.7193': attribute type 1 has an invalid length. [ 1061.522737][ T2809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7193'. [ 1061.627533][ T2809] mac80211_hwsim hwsim57 syzkaller1: entered promiscuous mode [ 1061.627562][ T2809] mac80211_hwsim hwsim57 syzkaller1: entered allmulticast mode [ 1061.667840][ T2818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7195'. [ 1061.680884][T22898] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1061.762623][ T2820] ip_tables: iptables: counters copy to user failed while replacing table [ 1061.785906][ T2820] C: renamed from lo (while UP) [ 1061.795681][ T2820] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1061.971706][ T2823] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7197'. [ 1062.554435][ T2854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7204'. [ 1063.256132][ T2848] netlink: 'syz.1.7202': attribute type 4 has an invalid length. [ 1063.287301][ T2892] netlink: 'syz.5.7208': attribute type 3 has an invalid length. [ 1063.287325][ T2892] netlink: 244 bytes leftover after parsing attributes in process `syz.5.7208'. [ 1064.829270][ T2961] bond0: option miimon: invalid value (18446744071829782528) [ 1064.829301][ T2961] bond0: option miimon: allowed values 0 - 2147483647 [ 1064.866721][ T2958] xt_TCPMSS: Only works on TCP SYN packets [ 1065.159519][ T2978] xt_hl: Unknown Hop Limit match mode: 206 [ 1065.493711][ T2987] __nla_validate_parse: 5 callbacks suppressed [ 1065.493732][ T2987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7229'. [ 1065.493748][ T2987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7229'. [ 1065.562334][ T2994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7230'. [ 1065.851934][ T3000] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7232'. [ 1065.851958][ T3000] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7232'. [ 1065.851974][ T3000] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7232'. [ 1065.961602][ T3000] mac80211_hwsim hwsim57 syzkaller1: left promiscuous mode [ 1065.961632][ T3000] mac80211_hwsim hwsim57 syzkaller1: left allmulticast mode [ 1066.027973][ T3002] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7232'. [ 1066.028001][ T3002] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7232'. [ 1066.028020][ T3002] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7232'. [ 1066.203747][ T3007] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7233'. [ 1066.217599][ T3007] netlink: 'syz.0.7233': attribute type 10 has an invalid length. [ 1066.251217][ T3007] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.253990][ T3007] team0: entered promiscuous mode [ 1066.254456][ T3007] team_slave_0: entered promiscuous mode [ 1066.254674][ T3007] team_slave_1: entered promiscuous mode [ 1066.263244][ T3007] bond0: (slave team0): Enslaving as an active interface with an up link [ 1066.900688][ T3038] pim6reg: entered allmulticast mode [ 1067.223065][ T3051] macvlan0: entered promiscuous mode [ 1067.687190][ T3064] tipc: Enabled bearer , priority 0 [ 1067.692462][ T3065] tipc: Enabling of bearer rejected, already enabled [ 1067.712636][ T3064] syzkaller0: entered promiscuous mode [ 1067.712658][ T3064] syzkaller0: entered allmulticast mode [ 1067.755436][ T3064] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1068.016159][ T3065] tipc: Resetting bearer [ 1068.045007][ T3060] tipc: Resetting bearer [ 1068.418276][ T3060] tipc: Disabling bearer [ 1069.142815][ T3117] 1ªî{X¹¦: left allmulticast mode [ 1069.814481][ T3117] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1069.814848][ T3117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1069.894374][ T3117] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check. [ 1070.183564][ T3124] syzkaller0: entered promiscuous mode [ 1070.183591][ T3124] syzkaller0: entered allmulticast mode [ 1070.721770][ T3192] netlink: 'syz.2.7269': attribute type 1 has an invalid length. [ 1070.885326][ T3198] netlink: 'syz.2.7269': attribute type 2 has an invalid length. [ 1070.912517][ T3200] ip_tables: iptables: counters copy to user failed while replacing table [ 1070.952137][ T3192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1071.029244][ T3192] netlink: 'syz.2.7269': attribute type 10 has an invalid length. [ 1071.029269][ T3192] __nla_validate_parse: 12 callbacks suppressed [ 1071.029282][ T3192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7269'. [ 1071.125605][ T3203] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 1071.160701][ T3198] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1071.161393][ T3192] dummy0: entered promiscuous mode [ 1071.238240][ T3208] netlink: 'syz.5.7273': attribute type 83 has an invalid length. [ 1071.302687][ T3219] netlink: 'syz.5.7273': attribute type 10 has an invalid length. [ 1071.623722][ T3229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7274'. [ 1072.127044][ T3248] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1072.316942][ T3249] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7281'. [ 1072.316965][ T3249] tc_dump_action: action bad kind [ 1072.359684][ T3257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7280'. [ 1072.359708][ T3257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7280'. [ 1072.427699][ T3267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7282'. [ 1072.427978][ T3267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7282'. [ 1072.454951][ T3267] 8021q: VLANs not supported on ip6gre0 [ 1072.932413][ T3282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7287'. [ 1073.147920][ T5299] veth0_macvtap: left promiscuous mode [ 1073.345668][ T3313] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1073.361068][ T3314] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1073.381719][ T3315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7292'. [ 1073.391414][ T3313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1075.993171][ T3290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1075.993679][ T3298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1076.557711][ T3386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7298'. [ 1076.995756][ T3410] netlink: 'syz.0.7305': attribute type 2 has an invalid length. [ 1077.165586][ T3426] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7307'. [ 1077.455987][ T3437] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7310'. [ 1077.492319][ T3442] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7310'. [ 1077.534550][ T3444] netlink: 'syz.3.7312': attribute type 30 has an invalid length. [ 1078.683501][ T3482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1079.115257][ T3490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7320'. [ 1079.802432][ T3519] IPVS: length: 125 != 8 [ 1080.238097][ T3538] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1080.238189][ T3538] gretap0: entered promiscuous mode [ 1080.238208][ T3538] gretap0: entered allmulticast mode [ 1080.814547][ T3559] TC_ACT_REPEAT abuse ? [ 1080.838014][ T3559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7337'. [ 1081.189681][ T3515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7326'. [ 1081.331232][ T3585] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7340'. [ 1081.701470][ T3593] netlink: 'syz.0.7341': attribute type 9 has an invalid length. [ 1081.701497][ T3593] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.7341'. [ 1081.739040][ T3595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1082.036861][ T3605] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1082.037785][ T3605] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1082.041375][ T3605] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1082.046712][ T3605] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1082.055289][ T3605] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1082.061369][ T3605] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1082.074411][ T3605] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1082.076736][ T3605] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1082.083900][ T3605] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1083.074114][ T3644] 8021q: VLANs not supported on ip6gre0 [ 1083.269736][ T3660] IPv6: Can't replace route, no match found [ 1083.281689][ T3662] netlink: 'syz.1.7353': attribute type 6 has an invalid length. [ 1083.371268][ T3638] syzkaller0: entered promiscuous mode [ 1083.371294][ T3638] syzkaller0: entered allmulticast mode [ 1083.774563][ T3683] netlink: 'syz.1.7356': attribute type 1 has an invalid length. [ 1086.967855][ T3683] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1087.302647][ T3717] __nla_validate_parse: 27 callbacks suppressed [ 1087.302675][ T3717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7359'. [ 1087.302705][ T3717] netlink: 'syz.5.7359': attribute type 5 has an invalid length. [ 1087.302721][ T3717] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7359'. [ 1087.503598][ T3721] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7363'. [ 1087.916652][ T3740] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1088.327827][ T3755] lo: MTU not usable for tipc bearer [ 1088.327869][ T3755] tipc: Enabling of bearer rejected, failed to enable media [ 1088.568108][ T3770] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1088.568306][ T3770] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1088.972388][ T3786] IPVS: length: 76 != 24 [ 1089.054255][ T3789] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7377'. [ 1089.328630][ T3802] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7381'. [ 1089.982971][ T3835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7387'. [ 1089.983665][ T3836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7387'. [ 1090.085895][ T3833] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1090.211582][ T3833] bond6 (unregistering): Released all slaves [ 1090.471742][ T3856] netlink: 'syz.1.7390': attribute type 10 has an invalid length. [ 1090.584024][ T3856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.599047][ T3856] bond0: (slave team0): Enslaving as an active interface with an up link [ 1090.636330][ T3861] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1092.372102][ T3804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1092.576773][ T3895] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1092.656173][ T3898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7407'. [ 1092.656207][ T3898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7407'. [ 1092.771812][ T3906] netlink: 'syz.5.7408': attribute type 1 has an invalid length. [ 1092.887294][ T3909] x_tables: duplicate underflow at hook 1 [ 1092.915121][ T3906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.224442][ T3926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7409'. [ 1093.256771][ T3926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7409'. [ 1093.256841][ T3926] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1093.363646][ T3930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1093.364104][ T3930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1093.364558][ T3930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1093.412304][ T3930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1093.412789][ T3930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1093.413198][ T3930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1093.413631][ T3930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1093.414125][ T3930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1093.414564][ T3930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1093.547065][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7411'. [ 1093.680986][T22898] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1093.841210][ T3931] vlan1: entered promiscuous mode [ 1093.841235][ T3931] bond0: entered promiscuous mode [ 1093.845306][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7411'. [ 1093.853472][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7411'. [ 1093.860414][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7411'. [ 1093.869817][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7411'. [ 1093.938377][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7411'. [ 1095.256490][ T3988] xt_connbytes: Forcing CT accounting to be enabled [ 1095.256556][ T3988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1096.863521][T22898] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.863563][T22898] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.923010][ T4051] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1096.923560][ T4051] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1096.924111][ T4051] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1096.924648][ T4051] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1096.943184][ T4051] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1096.982076][ T4051] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1096.982629][ T4051] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1096.983191][ T4051] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1096.983729][ T4051] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1096.984294][ T4051] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1098.084859][ T4089] __nla_validate_parse: 38 callbacks suppressed [ 1098.084882][ T4089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7450'. [ 1098.084911][ T4089] netlink: 'syz.2.7450': attribute type 7 has an invalid length. [ 1098.084926][ T4089] netlink: 'syz.2.7450': attribute type 8 has an invalid length. [ 1098.084940][ T4089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7450'. [ 1098.661173][ T4119] netlink: 'syz.3.7457': attribute type 1 has an invalid length. [ 1098.996535][ T4134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7458'. [ 1099.302814][ T4111] syzkaller0: entered promiscuous mode [ 1099.303014][ T4111] syzkaller0: entered allmulticast mode [ 1101.238095][ T4211] wg2: entered allmulticast mode [ 1101.268587][ T4212] netlink: 'syz.5.7473': attribute type 10 has an invalid length. [ 1101.376012][ T4212] net_ratelimit: 24 callbacks suppressed [ 1101.376036][ T4212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1101.879791][ T4227] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7479'. [ 1102.071646][ T4236] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 1102.434472][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7483'. [ 1102.454559][ T4250] netlink: 'syz.3.7483': attribute type 6 has an invalid length. [ 1102.480584][ T4251] netlink: 288 bytes leftover after parsing attributes in process `syz.1.7481'. [ 1102.602898][ T4255] netlink: 'syz.2.7484': attribute type 4 has an invalid length. [ 1102.603868][ T4255] IPv6: NLM_F_CREATE should be specified when creating new route [ 1103.796561][ T4191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1103.841237][ T4264] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7486'. [ 1104.108630][ T4281] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 1104.169443][ T4284] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1104.212820][ T4284] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1104.484381][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7491'. [ 1104.881764][ T4321] ip_tables: iptables: counters copy to user failed while replacing table [ 1105.314890][ T4342] netlink: 'syz.0.7503': attribute type 2 has an invalid length. [ 1105.314915][ T4342] netlink: 'syz.0.7503': attribute type 8 has an invalid length. [ 1105.314929][ T4342] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7503'. [ 1106.513027][ T4395] netlink: 'syz.1.7516': attribute type 10 has an invalid length. [ 1106.580496][ T4395] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1106.580527][ T4395] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 1106.580696][ T4395] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 1106.581106][ T4397] @0Ù: renamed from bond_slave_1 (while UP) [ 1106.800638][ T4406] netlink: 'syz.1.7521': attribute type 10 has an invalid length. [ 1106.875969][ T4406] team0: Device wg2 is of different type [ 1107.852848][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7533'. [ 1107.852880][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7533'. [ 1107.852959][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7533'. [ 1107.857010][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7533'. [ 1107.857037][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7533'. [ 1107.857098][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7533'. [ 1107.924898][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7533'. [ 1108.446115][ T4457] netlink: 'syz.1.7535': attribute type 1 has an invalid length. [ 1108.446140][ T4457] netlink: 'syz.1.7535': attribute type 2 has an invalid length. [ 1108.715927][ T4462] ip_tables: iptables: counters copy to user failed while replacing table [ 1109.015533][ T4474] netlink: 'syz.2.7542': attribute type 1 has an invalid length. [ 1109.015563][ T4474] nbd: nbd296 already in use [ 1109.139859][ T4484] pim6reg: entered allmulticast mode [ 1109.142268][ T4486] pim6reg: left allmulticast mode [ 1109.241752][ T4478] TC_ACT_REPEAT abuse ? [ 1109.251567][ T4487] __nla_validate_parse: 94 callbacks suppressed [ 1109.251620][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7544'. [ 1110.001621][ T4527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7554'. [ 1110.184592][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.184806][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.185044][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.322281][ T4548] validate_nla: 28 callbacks suppressed [ 1110.322303][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.328914][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.329872][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.330836][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.348107][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.394355][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.394637][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.394857][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.395345][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.395552][ T4548] netlink: 'syz.2.7555': attribute type 2 has an invalid length. [ 1110.399458][ T4553] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1110.530653][ T4551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7555'. [ 1110.550565][ T4552] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7557'. [ 1111.115392][ T4573] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7559'. [ 1111.173401][ T4575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7561'. [ 1111.506274][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7565'. [ 1111.506301][ T4586] openvswitch: netlink: Flow key attr not present in new flow. [ 1112.924668][ T4527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1113.461570][ T4627] pim6reg1: entered promiscuous mode [ 1113.461599][ T4627] pim6reg1: entered allmulticast mode [ 1113.982333][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7579'. [ 1114.061519][ T4657] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1114.061955][ T4656] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1114.676030][ T4675] IPVS: length: 43 != 8 [ 1114.854897][ T7453] hid-generic 0005:0C45:4155.0004: unknown main item tag 0x0 [ 1114.894492][ T7453] hid-generic 0005:0C45:4155.0004: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1115.125414][ T4700] Unsupported ieee802154 address type: 0 [ 1115.703949][ T4718] syzkaller0: entered promiscuous mode [ 1115.703977][ T4718] syzkaller0: entered allmulticast mode [ 1115.758020][ T4725] validate_nla: 24 callbacks suppressed [ 1115.758042][ T4725] netlink: 'syz.1.7599': attribute type 1 has an invalid length. [ 1116.294036][ T4725] bond2: entered promiscuous mode [ 1116.295438][ T4725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1116.499834][ T4739] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1116.500228][ T4739] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1116.500247][ T4739] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1116.561582][ T4739] bond2: (slave ip6gre1): making interface the new active one [ 1116.561608][ T4739] ip6gre1: entered promiscuous mode [ 1116.590813][ T4739] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 1116.763277][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7602'. [ 1117.351724][ T4781] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7606'. [ 1117.426311][ T4781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7606'. [ 1117.653813][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7612'. [ 1117.731189][ T4798] macvtap1: entered promiscuous mode [ 1117.731214][ T4798] vlan0: entered promiscuous mode [ 1117.732028][ T4798] macvtap1: entered allmulticast mode [ 1117.732046][ T4798] vlan0: entered allmulticast mode [ 1117.732060][ T4798] veth0_vlan: entered allmulticast mode [ 1117.774399][ T4796] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7611'. [ 1117.814861][ T4798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7612'. [ 1119.702169][ T4764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1120.060723][ T4821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7619'. [ 1120.063831][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7619'. [ 1120.222733][ T4829] ip_tables: iptables: counters copy to user failed while replacing table [ 1120.246843][ T4821] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7619'. [ 1121.184862][ T4871] netlink: 'syz.3.7630': attribute type 4 has an invalid length. [ 1121.564984][ T4880] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7631'. [ 1121.714164][ T4892] nbd: must specify at least one socket [ 1121.836204][ T4893] __nla_validate_parse: 2 callbacks suppressed [ 1121.836226][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7635'. [ 1121.872446][ T4899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7635'. [ 1121.992501][ T4889] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7634'. [ 1122.021840][ T5653] Bluetooth: hci5: unexpected cc 0x1004 length: 38 > 11 [ 1122.021929][ T5653] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 1122.754893][ T4927] netlink: 'syz.3.7641': attribute type 1 has an invalid length. [ 1122.848604][ T4933] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7643'. [ 1123.113837][ T4927] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1123.826915][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7650'. [ 1123.942569][ T4971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7651'. [ 1124.026141][ T4978] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1124.150931][ T4984] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1124.250462][ T4988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7652'. [ 1124.496123][ T5001] ip_tables: iptables: counters copy to user failed while replacing table [ 1124.516606][ T5002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7654'. [ 1124.779838][ T5015] netlink: 'syz.1.7656': attribute type 9 has an invalid length. [ 1124.785852][ T5016] netlink: 'syz.1.7656': attribute type 9 has an invalid length. [ 1125.447334][ T5035] bridge7: entered allmulticast mode [ 1125.684839][T22883] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1126.432892][ T5079] netlink: 'syz.0.7671': attribute type 1 has an invalid length. [ 1126.494836][ T5076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7670'. [ 1126.521317][ T5077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7670'. [ 1126.688228][ T5079] bond7: (slave veth0_to_bond): making interface the new active one [ 1126.699746][ T5079] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1126.736258][ T5076] vxlan0: entered promiscuous mode [ 1127.143512][ T5103] IPv6: Can't replace route, no match found [ 1127.156175][ T5104] ip6t_REJECT: ECHOREPLY is not supported [ 1127.419876][ T5108] netlink: 'syz.0.7676': attribute type 1 has an invalid length. [ 1127.465608][ T5110] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7677'. [ 1127.468057][ T5110] 0ªî{X¹¦: entered promiscuous mode [ 1127.468081][ T5110] 0ªî{X¹¦: left allmulticast mode [ 1128.026825][ T5126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1128.124736][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7686'. [ 1128.180259][ T5130] xt_TCPMSS: Only works on TCP SYN packets [ 1128.400440][ T5138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7688'. [ 1128.653686][ T5148] block nbd4: server does not support multiple connections per device. [ 1128.654275][ T5148] block nbd4: shutting down sockets [ 1128.908022][ T5653] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 1128.908167][ T5653] Bluetooth: unknown link type 48 [ 1128.908226][ T5653] Bluetooth: hci3: connection err: -111 [ 1129.090907][ T5155] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1129.176116][ T5164] netlink: 'syz.0.7696': attribute type 1 has an invalid length. [ 1129.176144][ T5164] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7696'. [ 1129.973841][ T5193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7702'. [ 1130.013671][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7705'. [ 1130.061497][ T5197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7705'. [ 1130.666510][ T5191] NFSD: Failed to start, no listeners configured. [ 1131.071648][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7709'. [ 1131.440307][ T5652] Bluetooth: hci1: command 0x0405 tx timeout [ 1131.462296][ T5243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7713'. [ 1131.462330][ T5243] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7713'. [ 1131.961849][ T5261] smc: net device lo applied user defined pnetid SYZ0 [ 1132.306891][ T5277] lo: entered promiscuous mode [ 1132.317930][ T5277] tunl0: entered promiscuous mode [ 1132.423454][ T5277] gre0: entered promiscuous mode [ 1132.799490][ T5277] 1ªî{X¹¦: entered promiscuous mode [ 1133.545037][ T5277] erspan0: entered promiscuous mode [ 1133.584487][ T5277] ip_vti0: entered promiscuous mode [ 1133.950643][ T5319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.099582][ T5331] __nla_validate_parse: 1 callbacks suppressed [ 1134.099607][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7740'. [ 1134.099627][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7740'. [ 1134.099664][ T5331] netlink: 'syz.1.7740': attribute type 3 has an invalid length. [ 1134.411644][ T5344] xt_hl: Unknown TTL match mode: 255 [ 1134.508227][ T5346] netlink: 'syz.2.7747': attribute type 4 has an invalid length. [ 1134.508253][ T5346] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7747'. [ 1134.960811][ T5369] syzkaller0: entered promiscuous mode [ 1134.960834][ T5369] syzkaller0: entered allmulticast mode [ 1134.985982][ T5374] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7754'. [ 1134.986036][ T5374] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7754'. [ 1135.114326][ T5372] veth5: entered allmulticast mode [ 1135.114968][ T5382] : renamed from bond0 (while UP) [ 1135.251396][ T5372] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1135.252390][ T5372] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1135.359519][ T5388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7757'. [ 1136.735614][ T5420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7765'. [ 1136.847409][ T5429] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 1136.988260][ T5407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.004870][ T5407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.406777][ T5407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.406816][ T5407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.550031][ T5407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.550071][ T5407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.611698][ T5450] netlink: 292 bytes leftover after parsing attributes in process `syz.2.7769'. [ 1137.614910][ T5450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7769'. [ 1137.723282][ T5407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.723321][ T5407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.209024][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.209059][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.328663][ T5463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7775'. [ 1138.460621][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.460655][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.460708][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.460734][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.647124][T22883] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.647158][T22883] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.935057][ T5481] openvswitch: netlink: Multiple metadata blocks provided [ 1139.446843][ T5503] __nla_validate_parse: 2 callbacks suppressed [ 1139.446867][ T5503] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7784'. [ 1139.479071][ T5507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7783'. [ 1140.353638][ T5520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7787'. [ 1140.461489][ T5525] netlink: 'syz.3.7788': attribute type 21 has an invalid length. [ 1140.481219][ T5652] Bluetooth: hci1: command 0x0405 tx timeout [ 1140.546228][ T5525] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7788'. [ 1140.826173][ T5537] openvswitch: netlink: nsh attr 359 is out of range max 3 [ 1140.921615][ T5540] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7792'. [ 1140.972567][ T5541] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7793'. [ 1141.113746][ T5550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7794'. [ 1141.488872][ T5566] tunl0: entered promiscuous mode [ 1141.495363][ T5566] netlink: 'syz.2.7800': attribute type 3 has an invalid length. [ 1141.495385][ T5566] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7800'. [ 1141.587008][ T5566] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7800'. [ 1141.618043][ T5566] netlink: 'syz.2.7800': attribute type 2 has an invalid length. [ 1141.618070][ T5566] netlink: 'syz.2.7800': attribute type 2 has an invalid length. [ 1141.618086][ T5566] netlink: 'syz.2.7800': attribute type 2 has an invalid length. [ 1141.618102][ T5566] netlink: 'syz.2.7800': attribute type 2 has an invalid length. [ 1141.618118][ T5566] netlink: 'syz.2.7800': attribute type 2 has an invalid length. [ 1141.618133][ T5566] netlink: 'syz.2.7800': attribute type 2 has an invalid length. [ 1141.618149][ T5566] netlink: 'syz.2.7800': attribute type 2 has an invalid length. [ 1141.618164][ T5566] netlink: 'syz.2.7800': attribute type 2 has an invalid length. [ 1141.891142][ T5570] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7802'. [ 1142.182543][ T5586] lo: MTU not usable for tipc bearer [ 1142.182583][ T5586] tipc: Enabling of bearer rejected, failed to enable media [ 1144.393536][ T5688] openvswitch: netlink: IP tunnel dst address not specified [ 1144.412386][ T5692] ip_tables: iptables: counters copy to user failed while replacing table [ 1145.075094][ T5716] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1146.217165][ T5783] __nla_validate_parse: 3 callbacks suppressed [ 1146.217189][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7853'. [ 1146.252430][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7853'. [ 1146.676511][ T5650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1146.705739][ T5653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1146.721131][ T5653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1146.729409][ T5653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1146.762505][ T5653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1146.767150][ T5653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1147.429556][ T5807] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7858'. [ 1147.672281][ T5816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7860'. [ 1147.672346][ T5816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7860'. [ 1147.770120][ T5796] rxe_eth0 speed is unknown, defaulting to 1000 [ 1147.842139][ T5818] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1147.862891][ T5821] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1148.045475][ T5823] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 1148.215051][ T5796] wlan1 speed is unknown, defaulting to 1000 [ 1148.223919][ T5796] wg0 speed is unknown, defaulting to 1000 [ 1148.768190][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.771127][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.772395][ T5796] bridge_slave_0: entered allmulticast mode [ 1148.778255][ T5796] bridge_slave_0: entered promiscuous mode [ 1148.792221][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.792906][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.793257][ T5796] bridge_slave_1: entered allmulticast mode [ 1148.802922][ T5796] bridge_slave_1: entered promiscuous mode [ 1148.856242][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.869763][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.878923][ T5652] Bluetooth: hci0: command tx timeout [ 1148.917453][ T5796] team0: Port device team_slave_0 added [ 1148.925583][ T5796] team0: Port device team_slave_1 added [ 1148.972162][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.972198][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.972321][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.974535][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.974551][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.974580][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.077752][ T5777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1149.240339][ T5796] hsr_slave_0: entered promiscuous mode [ 1149.268059][ T5796] hsr_slave_1: entered promiscuous mode [ 1149.280431][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 1149.280453][ T5796] Cannot create hsr debugfs directory [ 1149.592018][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7867'. [ 1150.342614][ T5796] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.342657][ T5796] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 55158 - 0 [ 1150.361226][ T5875] x_tables: duplicate entry at hook 3 [ 1150.384384][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7874'. [ 1150.384408][ T5865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7874'. [ 1150.436431][ T5874] lo: left allmulticast mode [ 1150.710631][ T5796] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.710672][ T5796] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55158 - 0 [ 1150.953818][ T5796] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.953856][ T5796] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55158 - 0 [ 1150.968130][ T5652] Bluetooth: hci0: command tx timeout [ 1151.488012][ T5911] openvswitch: netlink: Message has -1 unknown bytes. [ 1151.497985][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7889'. [ 1151.652519][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7888'. [ 1151.670301][ T5922] IPVS: ip_vs_add_dest(): server weight less than zero [ 1151.965575][ T5928] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1152.026166][ T5796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1152.056009][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1152.067217][ T5796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1152.094289][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1152.114997][ T5796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1152.143166][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1152.163891][ T5796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1152.208092][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1152.621389][ T5959] ip_tables: iptables: counters copy to user failed while replacing table [ 1152.668144][ T5954] bond3 (unregistering): Released all slaves [ 1152.687396][ T5963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7897'. [ 1152.855103][ T5965] syzkaller0: entered promiscuous mode [ 1152.855313][ T5965] syzkaller0: entered allmulticast mode [ 1153.039709][ T5652] Bluetooth: hci0: command tx timeout [ 1153.102054][ T5969] validate_nla: 44 callbacks suppressed [ 1153.102078][ T5969] netlink: 'syz.2.7899': attribute type 1 has an invalid length. [ 1153.308936][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.408766][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.450089][T22876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.450226][T22876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.493262][T22894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.493390][T22894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.331782][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7908'. [ 1154.528025][ T6016] netlink: 344 bytes leftover after parsing attributes in process `syz.3.7910'. [ 1154.610980][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7910'. [ 1154.633263][ T6016] team0: Device ipvlan0 failed to register rx_handler [ 1155.120855][ T5652] Bluetooth: hci0: command tx timeout [ 1155.192427][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.906893][ T6029] nbd: must specify an index to disconnect [ 1156.050623][ T6056] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7919'. [ 1156.111181][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7919'. [ 1156.535902][ T6076] xt_REDIRECT: bad MAP_IPS. [ 1156.563278][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7923'. [ 1156.829714][ T5796] veth0_vlan: entered promiscuous mode [ 1156.891646][ T5796] veth1_vlan: entered promiscuous mode [ 1156.918958][ T6079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7924'. [ 1156.945193][ T6079] netlink: zone id is out of range [ 1156.945248][ T6079] netlink: zone id is out of range [ 1156.945259][ T6079] netlink: zone id is out of range [ 1156.945269][ T6079] netlink: zone id is out of range [ 1157.096833][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7926'. [ 1157.167749][ T5652] block nbd4: Receive control failed (result -107) [ 1157.197211][ T5796] veth0_macvtap: entered promiscuous mode [ 1157.256631][ T5796] veth1_macvtap: entered promiscuous mode [ 1157.333267][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.363380][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.509316][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.510257][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.510302][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.510341][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.941980][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.942006][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.214404][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.214431][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.323508][ T6071] Cannot find del_set index 4 as target [ 1158.423024][ T6111] macvlan0: entered promiscuous mode [ 1158.504229][ T6115] syzkaller1: entered promiscuous mode [ 1158.504257][ T6115] syzkaller1: entered allmulticast mode [ 1159.083319][ T6123] netlink: 'syz.3.7935': attribute type 11 has an invalid length. [ 1159.100659][T19532] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1159.432667][ T6134] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1159.432743][ T6134] syzkaller1: Refused to change device type [ 1159.498642][T19532] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1159.813801][ T6148] xt_IDLETIMER: label is empty or not nul-terminated [ 1159.884003][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7940'. [ 1159.884031][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7940'. [ 1159.884194][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7940'. [ 1159.884210][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7940'. [ 1159.884353][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7940'. [ 1159.884369][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7940'. [ 1159.884548][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7940'. [ 1160.486980][ T6176] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1161.119088][ T6205] netlink: 'syz.5.7953': attribute type 1 has an invalid length. [ 1161.604945][ T6223] netlink: 'syz.0.7958': attribute type 10 has an invalid length. [ 1161.674919][ T6223] wg2: entered promiscuous mode [ 1161.675227][ T6223] team0: Device wg2 is of different type [ 1161.675245][ T6223] wg2: left promiscuous mode [ 1161.806611][ T6228] nbd: couldn't find a device at index 0 [ 1161.848187][ T6223] netlink: 'syz.0.7958': attribute type 10 has an invalid length. [ 1161.848211][ T6223] __nla_validate_parse: 65 callbacks suppressed [ 1161.848224][ T6223] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7958'. [ 1161.910854][ T6228] netlink: 'syz.0.7958': attribute type 10 has an invalid length. [ 1161.910878][ T6228] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7958'. [ 1162.160344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.757335][ T6190] xt_recent: hitcount (536870918) is larger than allowed maximum (65535) [ 1162.768701][ T6193] xt_recent: hitcount (536870918) is larger than allowed maximum (65535) [ 1162.772315][ T6250] ip_tables: iptables: counters copy to user failed while replacing table [ 1162.796204][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7950'. [ 1162.835460][ T6250] xt_TCPMSS: Only works on TCP SYN packets [ 1163.035345][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7962'. [ 1163.057274][ T6254] netlink: 'syz.3.7962': attribute type 1 has an invalid length. [ 1163.385545][ T6189] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1163.695951][ T6259] bond8: (slave geneve5): making interface the new active one [ 1163.696453][ T6259] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 1163.781424][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7963'. [ 1163.804226][ T6263] netlink: 'syz.0.7963': attribute type 12 has an invalid length. [ 1163.818338][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7964'. [ 1163.825289][T22899] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1163.826077][T22899] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1163.826185][T22899] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1163.826276][T22899] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1164.583466][ T6284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7971'. [ 1164.830455][ T6293] netlink: 'syz.1.7974': attribute type 21 has an invalid length. [ 1164.830480][ T6293] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7974'. [ 1164.830554][ T6293] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7974'. [ 1164.988124][ T6294] bond1: option downdelay: invalid value (18446744073709551615) [ 1164.988150][ T6294] bond1: option downdelay: allowed values 0 - 2147483647 [ 1165.005638][ T6294] bond1 (unregistering): Released all slaves [ 1165.354913][ T6310] ip_tables: iptables: counters copy to user failed while replacing table [ 1165.384783][ T6310] netlink: 'syz.1.7980': attribute type 20 has an invalid length. [ 1165.384808][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7980'. [ 1165.616970][ T6310] netlink: 'syz.1.7980': attribute type 20 has an invalid length. [ 1165.627455][T22883] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1165.627510][T22883] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1165.627553][T22883] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1165.627594][T22883] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1165.732380][ T6315] vti0: entered promiscuous mode [ 1165.732406][ T6315] vti0: entered allmulticast mode [ 1167.205833][ T6365] __nla_validate_parse: 2 callbacks suppressed [ 1167.205854][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7991'. [ 1167.279992][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1168.077247][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7995'. [ 1168.461066][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7999'. [ 1168.517041][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7999'. [ 1168.608202][ T6399] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1168.617846][ T6399] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8002'. [ 1168.913502][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8006'. [ 1168.956091][ T6418] netlink: 'syz.1.8008': attribute type 2 has an invalid length. [ 1168.956114][ T6418] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8008'. [ 1169.099014][ T6416] netlink: 'syz.3.8007': attribute type 1 has an invalid length. [ 1169.099039][ T6416] netlink: 'syz.3.8007': attribute type 2 has an invalid length. [ 1169.100285][ T6419] netlink: 'syz.3.8007': attribute type 1 has an invalid length. [ 1169.100302][ T6419] netlink: 'syz.3.8007': attribute type 2 has an invalid length. [ 1169.165641][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8010'. [ 1169.222973][ T6428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8006'. [ 1169.580476][ T6438] netlink: 'syz.3.8012': attribute type 1 has an invalid length. [ 1170.054088][ T6456] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8019'. [ 1170.153832][ T6463] Bluetooth: MGMT ver 1.23 [ 1170.196563][ T6461] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 1170.996820][ T6499] netlink: 'syz.1.8025': attribute type 1 has an invalid length. [ 1171.081931][ T6505] netlink: 'syz.1.8025': attribute type 1 has an invalid length. [ 1172.005776][ T6533] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1172.053511][ T6533] bond1: (slave lo): Enslaving as an active interface with an up link [ 1172.158499][ T6533] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1172.625323][ T6562] __nla_validate_parse: 9 callbacks suppressed [ 1172.625345][ T6562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8037'. [ 1172.651513][ T6561] syzkaller0: entered promiscuous mode [ 1172.651719][ T6561] syzkaller0: entered allmulticast mode [ 1172.902474][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8039'. [ 1173.046449][ T6571] ip_tables: iptables: counters copy to user failed while replacing table [ 1173.324529][ T6586] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8041'. [ 1173.524182][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8042'. [ 1173.626274][ T6591] hsr_slave_1 (unregistering): left promiscuous mode [ 1173.688737][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8042'. [ 1174.121395][ T6612] ip_tables: iptables: counters copy to user failed while replacing table [ 1174.139588][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8050'. [ 1174.207588][ T6617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1174.245119][ T6625] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1174.665404][ T6631] syzkaller0: MTU not usable for tipc bearer [ 1174.665444][ T6631] tipc: Enabling of bearer rejected, failed to enable media [ 1174.686980][ T6630] syzkaller0: mtu less than device minimum [ 1174.703820][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8053'. [ 1174.952139][ T6640] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.8056'. [ 1175.083192][ T6640] veth1_to_bond: entered allmulticast mode [ 1175.103056][ T6637] veth1_to_bond: left allmulticast mode [ 1175.155931][ T6653] netlink: 'syz.3.8060': attribute type 1 has an invalid length. [ 1175.244360][ T6653] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1175.296185][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8060'. [ 1175.312279][ T6655] netlink: 'syz.3.8060': attribute type 12 has an invalid length. [ 1175.312302][ T6655] netlink: 'syz.3.8060': attribute type 29 has an invalid length. [ 1175.312318][ T6655] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8060'. [ 1175.471143][ T6662] bridge12: entered promiscuous mode [ 1175.471204][ T6662] bridge12: entered allmulticast mode [ 1175.517742][ T6664] netlink: 'syz.0.8063': attribute type 6 has an invalid length. [ 1175.616561][ T6669] xt_MASQUERADE: bad rangesize 2147483646 [ 1175.682540][ T6671] netlink: 'syz.0.8068': attribute type 1 has an invalid length. [ 1175.882210][ T6679] bridge6: entered promiscuous mode [ 1175.885912][ T6679] bond8: (slave bridge6): making interface the new active one [ 1175.886748][ T6679] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 1176.126125][ T6686] ip_tables: iptables: counters copy to user failed while replacing table [ 1176.286910][ T6694] openvswitch: netlink: Key type 251 is out of range max 32 [ 1176.324087][ T6697] batman_adv: batadv0: Adding interface: veth0 [ 1176.324108][ T6697] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.324140][ T6697] batman_adv: batadv0: Interface activated: veth0 [ 1176.355925][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.356376][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.388107][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.397824][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.405883][ T6698] batman_adv: batadv0: Interface deactivated: veth0 [ 1176.406364][ T6698] batman_adv: batadv0: Removing interface: veth0 [ 1176.514266][ T6695] xt_hashlimit: size too large, truncated to 1048576 [ 1177.170958][ T6728] netlink: 'syz.2.8082': attribute type 1 has an invalid length. [ 1177.245884][ T6732] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1177.299731][ T6735] netlink: 'syz.2.8082': attribute type 10 has an invalid length. [ 1177.447057][ T6728] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1177.515874][ T6730] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 1177.771901][ T6750] __nla_validate_parse: 3 callbacks suppressed [ 1177.771924][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8087'. [ 1177.771989][ T6750] block nbd5: Unsupported socket: should be TCP or UNIX. [ 1177.805529][ T6750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1177.958268][ T6761] netlink: 'syz.1.8088': attribute type 1 has an invalid length. [ 1177.985606][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8088'. [ 1178.127689][ T6761] macvtap1: entered promiscuous mode [ 1178.127717][ T6761] vlan0: entered promiscuous mode [ 1178.128157][ T6761] macvtap1: entered allmulticast mode [ 1178.128174][ T6761] vlan0: entered allmulticast mode [ 1178.163763][ T6769] 8021q: VLANs not supported on ip6tnl0 [ 1178.264841][ T6768] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8091'. [ 1178.318191][ T6763] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8090'. [ 1178.428192][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8093'. [ 1178.438255][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8093'. [ 1178.441998][ T6778] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8093'. [ 1178.442148][ T6778] netlink: 'syz.0.8093': attribute type 5 has an invalid length. [ 1178.660331][ T6785] netlink: 'syz.3.8096': attribute type 3 has an invalid length. [ 1178.757948][ T6788] netlink: 'syz.3.8096': attribute type 3 has an invalid length. [ 1179.001205][ T6805] sctp: [Deprecated]: syz.1.8098 (pid 6805) Use of int in max_burst socket option deprecated. [ 1179.001205][ T6805] Use struct sctp_assoc_value instead [ 1179.055345][ T6800] syzkaller0: MTU not usable for tipc bearer [ 1179.055391][ T6800] tipc: Enabling of bearer rejected, failed to enable media [ 1179.372470][ T6813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8101'. [ 1179.725828][ T6825] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8104'. [ 1179.853822][ T6826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8104'. [ 1181.020751][ T6868] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1181.023343][ T6868] netlink: 'syz.3.8119': attribute type 1 has an invalid length. [ 1181.028141][ T6870] netlink: 'syz.3.8119': attribute type 1 has an invalid length. [ 1181.233490][ T6870] bond10: option mode: invalid value (8) [ 1181.250631][ T6870] bond10 (unregistering): Released all slaves [ 1181.540667][ T6868] bond10: option mode: invalid value (8) [ 1181.542671][ T6868] bond10 (unregistering): Released all slaves [ 1181.725792][ T6884] tipc: Started in network mode [ 1181.725828][ T6884] tipc: Node identity 66b064e93ed5, cluster identity 4711 [ 1181.725997][ T6884] tipc: Enabled bearer , priority 0 [ 1181.726603][ T6888] syzkaller0: entered promiscuous mode [ 1181.726624][ T6888] syzkaller0: entered allmulticast mode [ 1181.766566][ T6900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1181.787679][ T6899] tipc: Resetting bearer [ 1181.787865][ T6904] dummy0: left promiscuous mode [ 1181.824796][ T6871] tipc: Resetting bearer [ 1181.853065][ T6871] tipc: Disabling bearer [ 1182.442463][ T6928] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1182.443060][ T6928] gretap1: entered promiscuous mode [ 1182.443245][ T6928] gretap1: entered allmulticast mode [ 1182.803711][ C0] ------------[ cut here ]------------ [ 1182.803728][ C0] !rcu_read_lock_held() [ 1182.803743][ C0] WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x41d9/0x64e0, CPU#0: ksoftirqd/0/15 [ 1182.824090][ C0] Modules linked in: [ 1182.828064][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 1182.837365][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1182.847525][ C0] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 1182.853602][ C0] Code: be b5 01 00 00 48 c7 c2 20 fb 53 8d e8 40 fb 06 f7 e9 aa fc ff ff e8 96 a9 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 88 a9 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 87 05 52 fa 84 c0 0f 84 e1 00 [ 1182.873404][ C0] RSP: 0018:ffffc90000147660 EFLAGS: 00010246 [ 1182.879570][ C0] RAX: ffffffff8a9d67e8 RBX: 0000000000000000 RCX: ffff88801eee9f40 [ 1182.887575][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 1182.895628][ C0] RBP: ffffc900001478f0 R08: 0000000000000100 R09: 1ffffffff237bfb7 [ 1182.903670][ C0] R10: dffffc0000000000 R11: fffffbfff237bfb8 R12: dffffc0000000000 [ 1182.911749][ C0] R13: ffff8880598d2a58 R14: ffff88802f0d4bd0 R15: ffff888026fb9980 [ 1182.919803][ C0] FS: 0000000000000000(0000) GS:ffff888123409000(0000) knlGS:0000000000000000 [ 1182.928820][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1182.935432][ C0] CR2: 00007fd51741aeb8 CR3: 000000003bb06000 CR4: 00000000003526f0 [ 1182.943488][ C0] Call Trace: [ 1182.946796][ C0] [ 1182.949839][ C0] ? __pfx_xfrm_output_resume+0x10/0x10 [ 1182.955431][ C0] ? iptfs_get_inner_mtu+0xa0/0x210 [ 1182.960818][ C0] ? __asan_memset+0x22/0x50 [ 1182.965466][ C0] ? xfrm_output+0xa03/0x1ca0 [ 1182.970236][ C0] iptfs_delay_timer+0x3803/0x4310 [ 1182.975427][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 1182.980973][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1182.986035][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1182.991501][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1182.997377][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 1183.002931][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1183.008187][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1183.013377][ C0] handle_softirqs+0x265/0x8d0 [ 1183.018199][ C0] run_ksoftirqd+0x36/0x60 [ 1183.022713][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 1183.027694][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 1183.032816][ C0] kthread+0x38b/0x480 [ 1183.036929][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1183.042458][ C0] ? __pfx_kthread+0x10/0x10 [ 1183.047085][ C0] ret_from_fork+0x514/0xb70 [ 1183.051754][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1183.056909][ C0] ? __switch_to+0xc78/0x1410 [ 1183.061684][ C0] ? __pfx_kthread+0x10/0x10 [ 1183.066354][ C0] ret_from_fork_asm+0x1a/0x30 [ 1183.071215][ C0] [ 1183.074286][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1183.081596][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 1183.090813][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1183.100914][ C0] Call Trace: [ 1183.104223][ C0] [ 1183.107221][ C0] vpanic+0x26f/0x710 [ 1183.111243][ C0] panic+0xc5/0xd0 [ 1183.115034][ C0] ? __pfx_panic+0x10/0x10 [ 1183.119508][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1183.124489][ C0] __warn+0x315/0x4c0 [ 1183.128506][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 1183.133919][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 1183.139347][ C0] __report_bug+0x276/0x570 [ 1183.143904][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 1183.149352][ C0] ? __pfx___report_bug+0x10/0x10 [ 1183.154420][ C0] ? lock_acquire+0x115/0x350 [ 1183.159147][ C0] ? netlink_has_listeners+0x77/0x3f0 [ 1183.164621][ C0] ? xfrm_aevent_is_on+0x18/0x230 [ 1183.169699][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 1183.175123][ C0] report_bug+0x16b/0x220 [ 1183.179506][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 1183.184918][ C0] ? xfrm_output_resume+0x41db/0x64e0 [ 1183.190338][ C0] handle_bug+0x9c/0x200 [ 1183.194627][ C0] exc_invalid_op+0x1a/0x50 [ 1183.199207][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1183.204098][ C0] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 1183.210158][ C0] Code: be b5 01 00 00 48 c7 c2 20 fb 53 8d e8 40 fb 06 f7 e9 aa fc ff ff e8 96 a9 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 88 a9 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 87 05 52 fa 84 c0 0f 84 e1 00 [ 1183.229810][ C0] RSP: 0018:ffffc90000147660 EFLAGS: 00010246 [ 1183.235909][ C0] RAX: ffffffff8a9d67e8 RBX: 0000000000000000 RCX: ffff88801eee9f40 [ 1183.243917][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 1183.251948][ C0] RBP: ffffc900001478f0 R08: 0000000000000100 R09: 1ffffffff237bfb7 [ 1183.259955][ C0] R10: dffffc0000000000 R11: fffffbfff237bfb8 R12: dffffc0000000000 [ 1183.267955][ C0] R13: ffff8880598d2a58 R14: ffff88802f0d4bd0 R15: ffff888026fb9980 [ 1183.275961][ C0] ? xfrm_output_resume+0x41d8/0x64e0 [ 1183.281442][ C0] ? __pfx_xfrm_output_resume+0x10/0x10 [ 1183.287037][ C0] ? iptfs_get_inner_mtu+0xa0/0x210 [ 1183.292281][ C0] ? __asan_memset+0x22/0x50 [ 1183.296917][ C0] ? xfrm_output+0xa03/0x1ca0 [ 1183.301644][ C0] iptfs_delay_timer+0x3803/0x4310 [ 1183.306827][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 1183.312340][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1183.317409][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1183.322829][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1183.328667][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 1183.334170][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1183.339425][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1183.344573][ C0] handle_softirqs+0x265/0x8d0 [ 1183.349386][ C0] run_ksoftirqd+0x36/0x60 [ 1183.353837][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 1183.358815][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 1183.363913][ C0] kthread+0x38b/0x480 [ 1183.368059][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1183.373545][ C0] ? __pfx_kthread+0x10/0x10 [ 1183.378174][ C0] ret_from_fork+0x514/0xb70 [ 1183.382797][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1183.387945][ C0] ? __switch_to+0xc78/0x1410 [ 1183.392681][ C0] ? __pfx_kthread+0x10/0x10 [ 1183.397314][ C0] ret_from_fork_asm+0x1a/0x30 [ 1183.402143][ C0] [ 1183.405818][ C0] Kernel Offset: disabled [ 1183.410162][ C0] Rebooting in 86400 seconds..