last executing test programs: 3.532475116s ago: executing program 2 (id=5386): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000005c0)=@req={0x8d2, 0xcf, 0x4, 0x3}, 0x10) (async) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000001c0)={0x46, 0x8, 0xa, 0xb, 0x3, 0x81}) connect$x25(r1, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003880)={0xe, 0x4, &(0x7f0000003940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ac0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000003b00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000003c00), 0x366, 0x10, &(0x7f0000003c40), 0x1dd}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000003cc0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000003d00)=r5, 0x4) (async) close(r5) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000e00)={0x0, 0x5}, 0x8) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000003e40)={0x0, 0xaf1}, 0x8) (async) bind$inet6(r6, &(0x7f0000003e80)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003ec0)=[{{&(0x7f0000003f00)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000003f40)=[{&(0x7f0000003f80)='\b', 0x1}], 0x1}}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000004000)={0x0, 0x8215, 0x2}, 0x8) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x880, 0x0) ioctl$PPPIOCGIDLE(r7, 0x8010743f, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000003d40)=""/176, &(0x7f0000003e00)=0xb0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) recvmmsg(r1, &(0x7f0000003700)=[{{&(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/41, 0x29}], 0x2, &(0x7f00000003c0)=""/47, 0x2f}, 0xa5}, {{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f0000000d40)=[{&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000006c0)=""/207, 0xcf}, {&(0x7f00000007c0)=""/155, 0x9b}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/29, 0x1d}, {&(0x7f0000000980)=""/79, 0x4f}, {&(0x7f0000000a00)=""/177, 0xb1}, {&(0x7f0000000ac0)=""/156, 0x9c}, {&(0x7f0000000b80)=""/235, 0xeb}, {&(0x7f0000000c80)=""/152, 0x98}], 0xa, &(0x7f0000000e00)}, 0x4}, {{&(0x7f0000000e40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000ec0)=""/204, 0xcc}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/237, 0xed}, {&(0x7f00000020c0)=""/34, 0x22}], 0x4, &(0x7f0000002140)=""/122, 0x7a}, 0xd}, {{&(0x7f00000021c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002240)=""/84, 0x54}], 0x1, &(0x7f0000002300)=""/222, 0xde}, 0x3}, {{&(0x7f0000002400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000002480)=""/121, 0x79}, {&(0x7f0000002500)=""/251, 0xfb}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x3, &(0x7f0000003640)=""/129, 0x81}, 0x1}], 0x5, 0x0, &(0x7f0000003840)) 2.37085482s ago: executing program 2 (id=5395): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}}, 0x0) r2 = socket(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000880)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYRES16=r0, @ANYRESDEC=r2, @ANYBLOB="b206c92af8adc27f87640f99b56e94811a2394f51f3aad69b2f3b883474d921612bedc5b326976964f8504c733e21632217e8578fb52aa9b3df94a4f148cc113b0d1dd7700acd9037885d20e7d18de38754d4e81090bc760fa9880b89e3cbf6a8e01987560c443485a580e3ef7157fd6fbafa7c900ac39461a63ee11933884e4e0b0080168dae1ef41aab90a111d14b08ebb9c2d4cec544714966fd9563a3ce493be14c0d7442b04d1438acb44f5bc205e0c7d7cffc4b7d0feb9c9a67ba9c3fd44bd1c547bd0748061247a71ed807a76a94f159d3903ca8b1551d3e8523d68980eb851dd03a71c8064745ee9eb2648284e35bcd7b82020a054a1402202", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES16=r2], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x11, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f00000004c0)='1', 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f00000008c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x0) pread64(r4, &(0x7f0000000080)=""/61, 0x3d, 0x7fffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0xc96, 0x0, 0xb6d5, 0xffff}, &(0x7f0000000100)=0x18) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000380)=0xc) sendmsg$802154_dgram(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)="80be71a8d936f91ac4648a696613aef6fac1c5110593e20f3fe76ba113e506149c4d2744991bcb935eab3ef7500cd6435cb985bd69959c671754672e8fb701e26a1783e24760ee9378d4fc709dd2a78161bff33ce080139baa08709005b76016ad472502f9583d46b506686a4022b859202744c45ad67e9ffdfe2c4b5a5764f90645bd3089f4ccddb9f6a191ffc95a6d1ddb47ef20788df86b4b733f32b476478d0b65ba4653ed0b3a109e796d549babb43493db32e5cff102e3d5f73883ae8591839572beba22a381a556c1d1e155c328e5c65d334d818b77", 0xd9}, 0x1, 0x0, 0x0, 0x22040801}, 0x4040001) getsockopt$inet_sctp_SCTP_EVENT(r4, 0x84, 0x7f, &(0x7f0000000140)={r6, 0x8001}, &(0x7f0000000180)=0x8) 2.148612006s ago: executing program 2 (id=5398): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x80000000, 0x9, 0x5}) (async) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32, @ANYBLOB="180006"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "000000000000000000000500"}}}]}, 0x48}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x4, &(0x7f0000000740)=0x1000, 0x4) (async) getsockopt$inet_tcp_int(r7, 0x6, 0x4, 0x0, &(0x7f0000000780)) (async) sendmsg$nl_route(r1, &(0x7f0000000700)={&(0x7f0000000380), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=@getlink={0xbc, 0x12, 0x800, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x28239, 0x2202}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x1}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'ip6gre0\x00'}, {0x14, 0x35, 'ip6erspan0\x00'}, {0x14, 0x35, 'xfrm0\x00'}, {0x14, 0x35, 'team_slave_0\x00'}, {0x14, 0x35, 'gretap0\x00'}]}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x5}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8014}, 0x40) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="10002abd7000fe37df252e0000001000b0000800000030000b000500040008009f000000000005001801300000000400cc0008004200010000000400d000"], 0x44}, 0x1, 0x0, 0x0, 0x8000004}, 0x4000010) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000300)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003240)={0x14, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x7e}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.058934886s ago: executing program 3 (id=5399): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="b384ea48c512"}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0500000000000000000000000000014e204e20"], 0x9e) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000180)="07000300010001", 0x7) (async) write(r7, &(0x7f0000000180)="07000300010001", 0x7) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000500)={0x7, 'team0\x00', {0x400}, 0xc0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000dbdf25022001c800"/20, @ANYRES32=r6, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x40000c0) socket$inet(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) ioctl$OCFS2_IOC_RESVSP64(r8, 0x4030582a, &(0x7f0000000200)={0x1, 0x0, 0x1, 0x8000, 0x8, 0x6}) (async) ioctl$OCFS2_IOC_RESVSP64(r8, 0x4030582a, &(0x7f0000000200)={0x1, 0x0, 0x1, 0x8000, 0x8, 0x6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x20702, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) 2.02189398s ago: executing program 1 (id=5400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000480), 0x56) sendmsg$kcm(r5, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r7, 0x3}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000600)="9942d6af00007f8f", 0x8}], 0x2}, 0x20000910) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 1.522352668s ago: executing program 4 (id=5403): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x41, 0x2, 0x7, 0x10, @private0, @empty, 0x80, 0x20, 0x1, 0x2}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) r5 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89f2, &(0x7f00000000c0)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) 1.40504675s ago: executing program 2 (id=5404): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) recvfrom$inet6(r2, &(0x7f0000000280)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)='P', 0x1}], 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000480)=0xffff1884, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) pselect6(0x40, &(0x7f0000000500)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f0000000540)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r4, &(0x7f00000000c0)="45e046"}, 0x20) 1.334870587s ago: executing program 3 (id=5405): syz_emit_ethernet(0x56, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x20, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x1, 0x0, 0xffd, {[@mptcp]}}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) r2 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@hci, &(0x7f0000000340)=0x80, 0x80000) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x7, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5793}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x503}, 0x18}}, 0x0) 1.290288585s ago: executing program 0 (id=5406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x6, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000000101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="33030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) 1.254062426s ago: executing program 4 (id=5407): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000d}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.24855713s ago: executing program 1 (id=5408): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) epoll_create1(0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)="2ba44d", 0x3}, 0x1, 0x0, 0x0, 0x2000}, 0xa80c) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b40500000000000071104d000000000063012d00000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000900)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x51}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000980)=[@in={0x2, 0x0, @local}]}, &(0x7f00000009c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000a00)={r4, 0x8, 0x10}, &(0x7f0000000a40)=0xc) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x4, 0x4, 0x2, 0x4810, 0x1, 0xfffffffc}, 0x50) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@dev, @remote, 0x0}, &(0x7f0000000600)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000640)={r2, 0x8, 0x10000, 0x8}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="210000000000000000000000b504e028bc350000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="00000000050000000100"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640), 0x1000, r9}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r9, &(0x7f00000006c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f00000001c0), &(0x7f0000000200)=@tcp6=r5, 0x1}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r10, r12, 0x25, 0x2, @void}, 0x10) 1.182412177s ago: executing program 3 (id=5409): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xf0}, 0x1, 0x0, 0x0, 0x58014}, 0x44040) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xf0}, 0x1, 0x0, 0x0, 0x58014}, 0x44040) (async) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) (async) 1.085334254s ago: executing program 3 (id=5410): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000001000010000000000000000000000000a20000000000a"], 0xa8}}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000000380), 0x2e9, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r4, 0x17d78b3928965e95, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00\r'], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd0e42, 0x52002}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vrf={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, 0x2}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) 1.072907784s ago: executing program 4 (id=5411): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x2f, 0x1, 0x0, 0x25dfdc00, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x104}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @pid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x2f, 0x1, 0x0, 0x25dfdc00, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x104}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @pid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 978.588501ms ago: executing program 0 (id=5412): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, r0}, 0x94) 977.914179ms ago: executing program 1 (id=5413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000310009002abd7000000000000400000004001d"], 0x18}}, 0x84) 875.586784ms ago: executing program 3 (id=5414): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="07000000f191d6fd2632344603d2f1b589060e89468210d099d5c32ec490ca128823d2509ea6ba2c470185090e29b12a0f036fc3e2e068aa668dbb842f176508b2e5e584bf92c4c8e13ed1dc75131f907151edbeff5595b8b572edeefcd782", @ANYRES16=0x0, @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4750a8f0842baf26}, 0x408c0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7d, &(0x7f0000000d00)=@assoc_value, &(0x7f0000000d40)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) listen(r1, 0x649) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000b00)={'syzkaller0\x00', 0x1}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0xfffffffd) sendmsg$nl_route_sched(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newqdisc={0x3c, 0x24, 0x300, 0x70bd09, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r9, 0x8000000000000003, {0x0, 0xf0}}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003240)=ANY=[@ANYBLOB="140000002600090122bd7008f1ffffff7e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000500)=""/148, 0x94, 0x0, &(0x7f00000005c0)=""/223, 0xdf}}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000d80)={0x0, 0x0, 0x0}, &(0x7f0000000dc0)=0xc) ioctl$TUNSETGROUP(r5, 0x400454ce, r11) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000780)='^]}*\x0e#\x00', 0x0, &(0x7f00000007c0)={@align=0x4, {0x0, 0x9, 0x7f, 0x4}}, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x7ff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x4c, &(0x7f0000000e40), 0x4) sendmsg$inet(r12, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) 804.193584ms ago: executing program 0 (id=5415): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x9, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x16b9e}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0x1}]}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) 694.749557ms ago: executing program 1 (id=5416): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00090000000000000000000201"], 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 693.483696ms ago: executing program 3 (id=5417): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="0200000004000000080000000100000088000000", @ANYRES32=0x0, @ANYBLOB="00000000000000009b47c756bc0000000cd712a36af0426f5425e379315f000040009f2ffcba540681cc08d4191346c81397033172805c5627a1d082ab0b79f5b32c9f8ea8f3c816138ddeb3d3bcef5a7442365fcdc0b50664730f400dfe56", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28, @ANYRESOCT=0x0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000001c80)={r1, &(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x900, &(0x7f0000000200)={@align=0x3, {0xfffb, 0x1, 0x37, 0x2}}, 0x9f7c, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f00000007c0)=0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x20000000000002fc, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500ffff85000000950000000000000057261b68e4b773a7fab24fc4ef15b1e3ee34a9c5957cf91796af68a8c0780600d37b9a18"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x101d, &(0x7f0000002f00)=""/4125, 0x41000}, 0x94) socket(0x200000000000011, 0x2, 0xd) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/net\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000740), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYRES16, @ANYRESOCT], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x100}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001a40)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bind$packet(r3, &(0x7f0000000040)={0x11, 0xe3, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r13, &(0x7f0000000880)='X', 0x1, 0x40, &(0x7f0000000900)={0xa, 0x0, 0x1, @loopback={0xe0ffffff00000000}, 0x7}, 0x1c) shutdown(r13, 0x1) recvmsg(r13, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMP(r13, 0x80108907, &(0x7f0000001ac0)) 618.837593ms ago: executing program 4 (id=5418): unshare(0x22020600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) write$nci(r1, &(0x7f00000000c0)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0xff, 0x1}, 0x4) unshare(0x20000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 573.262323ms ago: executing program 0 (id=5419): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="00008bb8b238e6f300025c74bbf4000000000000fd0cc198b4689f77a136f6e45b1b10779f87c00c8527ad30b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r3, &(0x7f0000000380), 0x0}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000040)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200b5f383ca00ea6356b5000000000004"], 0x1c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 502.901422ms ago: executing program 1 (id=5420): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002a00)={0x3, 0x16, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000034c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000003500), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x80002, 0xc3, &(0x7f00000002c0)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001740)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003900)) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create(0x4) pipe(&(0x7f0000003940)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000003980)) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000039c0)) sendmsg$nl_route_sched(r2, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003a80)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003ac0)={0x0, 0x0, 0x0, &(0x7f0000003b00), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x6, 0x10, &(0x7f0000003c00)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c40)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003c80)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000003cc0)={'wlan1\x00', @random="000500000020"}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000003540)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000003580)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003600)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r4, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000001600)="5aee41dea401000000fba17f11c714ee", 0x0, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_create(0x3ff) epoll_create1(0x0) 366.424235ms ago: executing program 4 (id=5421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400), 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r3}, 0x8) read(r4, &(0x7f0000000480)=""/185, 0xb9) read(r4, 0x0, 0x60) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000540)=0x1, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa510211}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000140000000000000000000a40000000020a010200000000000000000b00000108000240000000020c00044000000000000000010f0006009f488638af21664330df0600080002400000000114000000180a0102000000000000000005000001140000001100010000000000000000000a00000a"], 0x7c}, 0x1, 0x0, 0x0, 0xc044}, 0x40010) openat$cgroup_ro(r4, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r5) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000880)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000c40)=ANY=[@ANYBLOB="398fed0996e99fe20562aef4c8f871927a4a9d07bd0d6d4e1bd9bdf7d9f3ad07f39e56446d869a4d772d83139c57d8f9d7f466b7bb13001aa2e0827b71d4f59c78bc0e27369fd79491", @ANYRES16=r8, @ANYBLOB="0c0529bd7000fddbdf253400000008000300", @ANYRES32=r9, @ANYBLOB="0c009900080000006500000005002001200000001400fe00e2b6d0fb59abcde25ecf349b39731fdf0a003400010101010101000008001f01090000000a00340001010101010100000a00060056a2a24f058c00000500200102000000"], 0x78}, 0x1, 0x0, 0x0, 0x42004}, 0xc0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f0000000a40)={0x0, 0xfffffffffffffd42, &(0x7f0000000a80)={&(0x7f0000000340)={0x30, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000380)=ANY=[@ANYBLOB="58903d1610c37099e0", @ANYRES16=r8, @ANYBLOB="000227bd7000fedbdf250f00000008000300", @ANYRES32=r12, @ANYBLOB="04004600"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x400c095) r13 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x6000000) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x20000094) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r14, 0x84, 0x12, &(0x7f0000000140), 0x4) write$tun(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0280070004000600810064c916b2002c0600fc000000000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000d8dea5c4695109b65abbc7980300004e24000081000000000300000002e87c8dee24b9d54021a6"], 0x5e) 362.81884ms ago: executing program 0 (id=5422): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xcd, 0x4, 0x100000000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xaa, 0x6, "cb66c3639c82ec33f47bae2c3a1eb22f3626d0356c29c4293c252fb92f948a5e5c62894b0fafdd1f06793f4555e7a2b76c59eab8d3751f3e41c171d2d4d2c5ad62ccc2fe60b222cb4062faa9de5a8fcce77816b86d9add1fa5ac075d350583b65084e37672956accc3e7789001f404ef81964491a520fc35f4f8e276696ef7f1adf4078c42eeb1c35a0382943411d6fe9fa73f39b131c42253f71952c5461d0edd3b618206f4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELRULE={0xa4, 0x8, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88b5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}]}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x308}, 0x1, 0x0, 0x0, 0x44011}, 0x48044) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xfffffff1}, 0x0) 354.798999ms ago: executing program 2 (id=5423): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 126.909589ms ago: executing program 0 (id=5424): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b80)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000bc0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000c00)={r3, 0x3, 0x6, @remote}, 0x10) write(r1, &(0x7f0000000c40)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x20008001}, 0x0) close(r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x8, 0x2, 0x49, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000740), &(0x7f0000000780)=r5}, 0x20) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r7 = socket(0xa, 0x3, 0x87) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r8, @ANYRES16=r10, @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES8, @ANYBLOB="0404a191", @ANYRESHEX=r12], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4c090) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x18, r9}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r9}) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) 125.487889ms ago: executing program 1 (id=5425): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000380)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e21, @dev}, {0x1, @local}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0xd, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="3b07040000080000fe8000000000000000000000000000010526"], 0x40) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 119.188858ms ago: executing program 2 (id=5426): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES64], 0xfdef) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="b702000004000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd000071d3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def6132e4f8acf03438b1d01ccbe27e5be5b46304c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1eaf8deff211a307626d8b27f4356755a8b3a8103e73bb2c7114e85ab2f2ee3f2ea8a4188a7d5917e790629887c1c51f56d10a8400fb4193dd79dd657ec190acfbd00e5b3a37b6205b6b5c438ebaaea9d47acc662e5ef3c51cc2add70aa9a6420abb168651d78e3a61b3007e5c86b03ffdaaebc7545061274f1b7bfefecea707423af2601bd1608abc6f7dc4bc1ab8933d11c825efb1308d2fc80d2c19d6e083bed16f8063497f59174a8e2d0500d4c1f5f0384fd8b54faa13ecde3080a17bd3b60191a8bc1cdc985d70c539e53c1b99a8e07"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x60, 0x80000) pread64(r1, &(0x7f00000001c0)=""/14, 0xe, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 4 (id=5427): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000300), 0x4) (async) r3 = accept4$inet6_tcp(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000440)=0x1c, 0x800) accept$inet6_tcp(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, &(0x7f00000004c0)=0x1c) (async) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): 01][T18623] hsr_slave_0: entered promiscuous mode [ 407.771095][T18623] hsr_slave_1: entered promiscuous mode [ 407.776179][T18623] debugfs: 'hsr0' already exists in 'hsr' [ 407.776198][T18623] Cannot create hsr debugfs directory [ 407.905728][T18724] pimreg: entered allmulticast mode [ 407.954453][T18726] syzkaller0: entered promiscuous mode [ 407.954474][T18726] syzkaller0: entered allmulticast mode [ 407.969004][T18728] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3261'. [ 407.969024][T18728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3261'. [ 408.130442][T18723] pimreg: left allmulticast mode [ 408.330172][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'. [ 408.548975][T18623] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.549009][T18623] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 408.557490][T18623] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.672187][T18623] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.672222][T18623] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 408.672252][T18623] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.723933][ T53] Bluetooth: hci4: command tx timeout [ 408.801582][T18623] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.801615][T18623] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 408.801634][T18623] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.906050][T18751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.918511][T18623] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.918542][T18623] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 408.918570][T18623] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.956376][T18751] netlink: 'syz.0.3267': attribute type 4 has an invalid length. [ 408.967675][T18752] netlink: 'syz.0.3267': attribute type 4 has an invalid length. [ 408.980695][T18751] .`: renamed from bond0 [ 409.190640][T18623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 409.211410][T18623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.221085][T18623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 409.235795][T18623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.238284][T18623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 409.259461][T18623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.261537][T18623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 409.288808][T18623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.463151][T18623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.517966][T18623] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.566953][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.567061][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.599412][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.599514][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.307735][T18812] IPVS: Scheduler module ip_vs_mh not found [ 410.640431][T18838] netlink: 'syz.0.3286': attribute type 10 has an invalid length. [ 410.712254][ C1] net_ratelimit: 33 callbacks suppressed [ 410.712273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.712623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.712943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.713272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.713582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.792828][ T53] Bluetooth: hci4: command tx timeout [ 411.025919][T18623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.224325][T18860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.238492][T18860] bond1 (unregistering): Released all slaves [ 411.295580][T18866] tipc: Started in network mode [ 411.295600][T18866] tipc: Node identity 4, cluster identity 4711 [ 411.295611][T18866] tipc: Node number set to 4 [ 411.397423][T18869] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 411.453274][T18623] veth0_vlan: entered promiscuous mode [ 411.477233][T18623] veth1_vlan: entered promiscuous mode [ 411.518790][T18871] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 411.532173][T18871] ip_tables: iptables: counters copy to user failed while replacing table [ 411.545276][T18623] veth0_macvtap: entered promiscuous mode [ 411.550851][T18623] veth1_macvtap: entered promiscuous mode [ 411.582816][T18623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.601154][T18623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.666832][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.689676][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.723945][ T9556] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.762630][ T9550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.764384][ T9556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.764400][ T9556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.836026][ T9554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.836047][ T9554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.865450][T18875] xt_ecn: cannot match TCP bits for non-tcp packets [ 411.935068][T18881] __nla_validate_parse: 7 callbacks suppressed [ 411.935085][T18881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3296'. [ 412.192834][T18893] x_tables: duplicate underflow at hook 2 [ 412.269901][T18897] ip6tnl0: entered allmulticast mode [ 412.303242][T18897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3298'. [ 412.635660][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 412.640563][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 412.654336][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 412.674003][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 412.682912][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.873084][ T53] Bluetooth: hci4: command tx timeout [ 413.042310][T18934] netlink: 'syz.0.3309': attribute type 12 has an invalid length. [ 413.042330][T18934] netlink: 'syz.0.3309': attribute type 29 has an invalid length. [ 413.042341][T18934] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3309'. [ 413.042356][T18934] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3309'. [ 413.191868][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 413.295172][T18943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3311'. [ 413.295205][T18943] netlink: 'syz.1.3311': attribute type 8 has an invalid length. [ 413.302593][T18942] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3312'. [ 413.337545][T18943] netlink: 'syz.1.3311': attribute type 83 has an invalid length. [ 413.832705][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.833012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.833274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.076930][T18917] wg0 speed is unknown, defaulting to 1000 [ 414.077838][T18917] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.218573][T18954] netlink: 23 bytes leftover after parsing attributes in process `syz.1.3314'. [ 414.248913][T18960] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3317'. [ 414.574254][T18969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3320'. [ 414.574286][T18969] netlink: 'syz.3.3320': attribute type 7 has an invalid length. [ 414.574299][T18969] netlink: 'syz.3.3320': attribute type 8 has an invalid length. [ 414.574310][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3320'. [ 414.712298][ T5637] Bluetooth: hci0: command tx timeout [ 415.069816][T18980] 8021q: VLANs not supported on xfrm0 [ 415.217796][T18979] bond0: Unable to set up delay as MII monitoring is disabled [ 415.240969][T18979] bond0 (unregistering): Released all slaves [ 415.323170][T18917] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.323285][T18917] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.323439][T18917] bridge_slave_0: entered allmulticast mode [ 415.325500][T18917] bridge_slave_0: entered promiscuous mode [ 415.327096][T18991] netlink: 'syz.4.3326': attribute type 23 has an invalid length. [ 415.378195][T18917] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.378300][T18917] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.378422][T18917] bridge_slave_1: entered allmulticast mode [ 415.380165][T18917] bridge_slave_1: entered promiscuous mode [ 415.446508][T18979] bond0: Unable to set up delay as MII monitoring is disabled [ 415.451152][T18979] bond0 (unregistering): Released all slaves [ 415.519183][T18994] geneve2: entered promiscuous mode [ 415.597218][T18979] bond0: Unable to set up delay as MII monitoring is disabled [ 415.599579][T18979] bond0 (unregistering): Released all slaves [ 415.676603][T18917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.699477][T18917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.761609][T18979] bond0: Unable to set up delay as MII monitoring is disabled [ 415.771534][T18979] bond0 (unregistering): Released all slaves [ 415.830646][T18917] team0: Port device team_slave_0 added [ 415.847735][T18917] team0: Port device team_slave_1 added [ 415.941398][T18917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.941415][T18917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.941440][T18917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.951518][T18917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.951534][T18917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.951558][T18917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.060710][T18917] hsr_slave_0: entered promiscuous mode [ 416.063916][T18917] hsr_slave_1: entered promiscuous mode [ 416.066254][T18917] debugfs: 'hsr0' already exists in 'hsr' [ 416.066270][T18917] Cannot create hsr debugfs directory [ 416.290381][T19012] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 416.308791][T19012] bond1 (unregistering): Released all slaves [ 416.794274][ T5637] Bluetooth: hci0: command tx timeout [ 416.840832][T18917] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.840868][T18917] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.840891][T18917] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 416.992576][T19042] netlink: 'syz.1.3339': attribute type 1 has an invalid length. [ 417.030885][T19042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.032782][ C1] net_ratelimit: 4 callbacks suppressed [ 417.032798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.033107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.033425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.033731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.104800][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3339'. [ 417.196123][T18917] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.196157][T18917] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.196181][T18917] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 417.263934][T19042] bond1: (slave bridge2): making interface the new active one [ 417.265769][T19042] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 417.428561][T18917] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.428593][T18917] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.428617][T18917] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 417.609920][T19068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 417.629804][T19068] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 417.747127][T18917] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.757824][T18917] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.757857][T18917] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 418.069117][T18917] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 418.089461][T18917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.126645][T18917] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.129260][T18917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.130335][T18917] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.158631][T18917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.184161][T18917] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.191017][T18917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 418.345086][T18917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.371059][T18917] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.390611][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.390702][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.443259][T11469] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.443366][T11469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.767066][T19112] xt_TCPMSS: Only works on TCP SYN packets [ 418.802958][T19118] xt_TCPMSS: Only works on TCP SYN packets [ 418.871995][ T5637] Bluetooth: hci0: command tx timeout [ 419.018455][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3357'. [ 419.018480][T19128] block nbd2: Unsupported socket: should be TCP or UNIX. [ 419.032111][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3357'. [ 419.176905][T19132] bond2: (slave bond_slave_0): Device is not our slave [ 419.176926][T19132] bond2: option active_slave: invalid value (bond_slave_0) [ 419.206784][T19132] bond2 (unregistering): Released all slaves [ 419.419071][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3360'. [ 419.460570][T18917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.516891][T18917] veth0_vlan: entered promiscuous mode [ 419.540458][T18917] veth1_vlan: entered promiscuous mode [ 419.569653][T19157] dvmrp1: entered allmulticast mode [ 419.601115][T18917] veth0_macvtap: entered promiscuous mode [ 419.616213][T18917] veth1_macvtap: entered promiscuous mode [ 419.640489][T18917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.656315][T18917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.727069][ T9550] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.727351][ T9550] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.727598][ T9550] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.727630][ T9550] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.806371][ T7665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.806391][ T7665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.861517][ T9550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.861537][ T9550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.152201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.152546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.152863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.153196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.153522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.360838][T19192] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3369'. [ 420.382061][T19192] pimreg: entered allmulticast mode [ 420.502782][T19194] netlink: 'syz.0.3371': attribute type 12 has an invalid length. [ 420.502802][T19194] netlink: 'syz.0.3371': attribute type 29 has an invalid length. [ 420.502809][T19194] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3371'. [ 420.502818][T19194] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3371'. [ 420.905808][T19218] syzkaller0: entered promiscuous mode [ 420.905855][T19218] syzkaller0: entered allmulticast mode [ 420.952410][ T5637] Bluetooth: hci0: command tx timeout [ 422.586392][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3383'. [ 422.974632][T19248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3386'. [ 423.044752][T19263] veth1_to_bridge: entered allmulticast mode [ 423.076486][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.132512][T19258] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 423.168612][T19258] netlink: 'syz.4.3389': attribute type 1 has an invalid length. [ 423.201027][T19266] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3392'. [ 423.272255][ C1] net_ratelimit: 1 callbacks suppressed [ 423.272274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.272689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.273097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.273462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.287681][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3393'. [ 423.287699][T19278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3393'. [ 425.531415][T19292] netlink: 'syz.3.3398': attribute type 29 has an invalid length. [ 425.531440][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3398'. [ 425.615964][T19298] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3396'. [ 425.616080][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 426.089996][T19318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3403'. [ 426.392838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.393233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.393498][T19332] netlink: 'syz.1.3408': attribute type 15 has an invalid length. [ 426.393515][T19332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3408'. [ 426.393593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.393960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.394326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.402939][T19325] syzkaller1: entered promiscuous mode [ 426.402958][T19325] syzkaller1: entered allmulticast mode [ 427.838172][T19416] __nla_validate_parse: 2 callbacks suppressed [ 427.838185][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3430'. [ 428.002779][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3433'. [ 428.008890][T19427] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3432'. [ 428.552409][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 431.682106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.682447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.682683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.682842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.352123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.352421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.352704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.353003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.192086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.192287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.192459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.192672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.951970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.952216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.952410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.952583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.722034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.722208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.722360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.722516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.832090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.832434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.832657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.832885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.921991][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 464.952008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.952297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.952482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.712023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.712222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.712478][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.552018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.552232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.762059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.762279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.762432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.513329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.513542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.513696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.513845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.552019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.552315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.552580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.552783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.282231][T19454] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3436'. [ 491.282588][T19454] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3436'. [ 491.282605][T19454] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3436'. [ 491.286361][T19456] xt_hashlimit: size too large, truncated to 1048576 [ 491.358366][T19457] netlink: 844 bytes leftover after parsing attributes in process `syz.3.3438'. [ 491.593086][T19480] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 491.736041][T19490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3447'. [ 491.738275][T19490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3447'. [ 491.738293][T19490] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3447'. [ 492.041906][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3455'. [ 492.042166][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3455'. [ 492.107858][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3457'. [ 492.107893][T19519] netlink: 'syz.1.3457': attribute type 30 has an invalid length. [ 492.164950][T19519] netlink: 'syz.1.3457': attribute type 30 has an invalid length. [ 492.276565][T19529] netlink: 'syz.1.3461': attribute type 10 has an invalid length. [ 492.276973][T19529] macvlan1: entered promiscuous mode [ 492.276990][T19529] macvlan1: entered allmulticast mode [ 492.278597][T19531] netlink: 'syz.1.3461': attribute type 4 has an invalid length. [ 492.288454][T19529] veth1_vlan: entered allmulticast mode [ 492.300539][T19529] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 492.316962][T19531] netlink: 'syz.1.3461': attribute type 4 has an invalid length. [ 492.320222][T19531] netlink: 'syz.1.3461': attribute type 4 has an invalid length. [ 492.326559][T19531] netlink: 'syz.1.3461': attribute type 4 has an invalid length. [ 492.331396][T19531] netlink: 'syz.1.3461': attribute type 4 has an invalid length. [ 492.333692][T19531] netlink: 'syz.1.3461': attribute type 4 has an invalid length. [ 492.337302][T19531] netlink: 'syz.1.3461': attribute type 4 has an invalid length. [ 492.435492][T19535] bond1: invalid ARP target 0.0.0.0 specified for addition [ 492.435524][T19535] bond1: option arp_ip_target: invalid value (0) [ 492.439268][T19535] bond1 (unregistering): Released all slaves [ 492.874522][T19558] syzkaller0: entered promiscuous mode [ 492.874542][T19558] syzkaller0: entered allmulticast mode [ 493.289176][T19587] ip_tables: iptables: counters copy to user failed while replacing table [ 493.320608][T19582] hsr_slave_0: left promiscuous mode [ 493.328966][T19582] hsr_slave_1: left promiscuous mode [ 493.355178][ T53] Bluetooth: hci5: command 0x040f tx timeout [ 493.752025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.752329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.752632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.245259][T19607] pim6reg527: entered allmulticast mode [ 494.279938][T19615] netlink: get zone limit has 4 unknown bytes [ 494.308266][T19615] Bluetooth: MGMT ver 1.23 [ 494.356564][T19615] veth3: entered allmulticast mode [ 494.420590][T19622] nbd: error processing sock list [ 494.448690][T19623] nbd: error processing sock list [ 494.487705][T19622] nbd: illegal input index 65508 [ 494.863922][T19654] ip_tables: iptables: counters copy to user failed while replacing table [ 495.055583][T19667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.073979][T19667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.563038][T19767] tipc: Enabling of bearer rejected, failed to enable media [ 496.563854][T19767] openvswitch: netlink: Flow actions attr not present in new flow. [ 496.593969][T19770] openvswitch: netlink: Flow actions attr not present in new flow. [ 496.595663][T19768] tipc: Enabling of bearer rejected, failed to enable media [ 496.832566][T19781] __nla_validate_parse: 64 callbacks suppressed [ 496.832585][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3538'. [ 496.889550][T19781] ip_tables: iptables: counters copy to user failed while replacing table [ 496.951964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.952204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.028053][T19794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.069915][T19795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.078530][T19794] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3542'. [ 497.229717][T11469] IPVS: starting estimator thread 0... [ 497.312641][T19813] IPVS: using max 33 ests per chain, 79200 per kthread [ 497.575124][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3547'. [ 497.665069][T19839] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3550'. [ 497.878968][T19850] Bluetooth: MGMT ver 1.23 [ 498.195547][T19870] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3561'. [ 498.335287][T19870] C: renamed from lo (while UP) [ 498.563297][T19892] validate_nla: 33 callbacks suppressed [ 498.563315][T19892] netlink: 'syz.3.3563': attribute type 2 has an invalid length. [ 498.786912][T19905] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 498.874945][T19921] --map-set only usable from mangle table [ 499.768403][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3577'. [ 499.923140][T19972] ip6tnl0: left allmulticast mode [ 499.975633][T19972] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 499.989320][T19972] net_ratelimit: 3 callbacks suppressed [ 499.989337][T19972] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 500.091567][ T5637] Bluetooth: hci4: link tx timeout [ 500.091585][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.100838][T19987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3582'. [ 500.100918][T19987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.100929][T19987] IPv6: NLM_F_CREATE should be set when creating new route [ 500.219847][ T5637] Bluetooth: hci4: link tx timeout [ 500.219867][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.254235][ T5637] Bluetooth: hci4: link tx timeout [ 500.254254][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.389184][T20007] xt_bpf: check failed: parse error [ 500.677408][ T5637] Bluetooth: hci4: link tx timeout [ 500.677427][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.739794][T20025] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3591'. [ 500.792216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.792588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.792917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.794849][ T5637] Bluetooth: hci4: link tx timeout [ 500.794864][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 500.923936][T20035] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 501.074308][T20044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3596'. [ 501.184562][T20047] netlink: 'syz.2.3597': attribute type 1 has an invalid length. [ 501.241391][T20056] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 501.291290][T20047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.340382][T20064] netlink: 'syz.1.3600': attribute type 1 has an invalid length. [ 501.340382][T20062] netlink: 'syz.1.3600': attribute type 1 has an invalid length. [ 501.340402][T20064] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3600'. [ 501.450737][ T5637] Bluetooth: hci4: link tx timeout [ 501.450757][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.714701][T20087] netlink: 'syz.3.3606': attribute type 29 has an invalid length. [ 501.717087][T20089] ip_tables: iptables: counters copy to user failed while replacing table [ 501.754084][ T5637] Bluetooth: hci4: link tx timeout [ 501.754100][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.085540][ T5637] Bluetooth: hci4: link tx timeout [ 502.085558][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 502.116376][T20117] __nla_validate_parse: 3 callbacks suppressed [ 502.116392][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3617'. [ 502.154935][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 502.209558][T20117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.237527][T20128] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3619'. [ 502.245541][T20128] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3619'. [ 502.297596][T20131] netlink: 'syz.1.3618': attribute type 2 has an invalid length. [ 502.297617][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 502.371929][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 502.371951][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3623'. [ 502.496336][T20143] tun0: tun_chr_ioctl cmd 1074025675 [ 502.496356][T20143] tun0: persist enabled [ 502.505397][T20148] tun0: tun_chr_ioctl cmd 1074025673 [ 502.520976][T20143] tun0: tun_chr_ioctl cmd 1074025675 [ 502.521005][T20143] tun0: persist enabled [ 502.737544][T20160] tap0: tun_chr_ioctl cmd 1074025672 [ 502.737565][T20160] tap0: ignored: set checksum disabled [ 502.737911][T20160] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3628'. [ 502.996169][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3637'. [ 502.998400][T20181] netlink: 'syz.3.3637': attribute type 4 has an invalid length. [ 503.023584][T20181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3637'. [ 503.026039][T20176] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 503.165609][T20184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3635'. [ 503.306421][T20198] bridge0: port 3(veth1_to_bridge) entered blocking state [ 503.306513][T20198] bridge0: port 3(veth1_to_bridge) entered disabled state [ 503.309021][T20198] veth1_to_bridge: entered promiscuous mode [ 503.511058][T20208] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.662012][T20208] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.752780][T20208] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.887534][T20208] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.083926][ T9550] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.092299][ T9554] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.153363][ T9554] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.172408][ T7665] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.236113][T20300] netlink: zone id is out of range [ 505.236427][T20300] netlink: zone id is out of range [ 505.236810][T20300] netlink: zone id is out of range [ 505.236968][T20300] netlink: zone id is out of range [ 505.236976][T20300] netlink: zone id is out of range [ 505.236982][T20300] netlink: zone id is out of range [ 505.236989][T20300] netlink: zone id is out of range [ 505.236995][T20300] netlink: zone id is out of range [ 505.237002][T20300] netlink: zone id is out of range [ 505.237008][T20300] netlink: zone id is out of range [ 505.443325][T20315] veth1_to_bond: entered allmulticast mode [ 505.470740][T20314] veth1_to_bond: left allmulticast mode [ 505.725865][T20329] tipc: Started in network mode [ 505.725892][T20329] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 505.726784][T20329] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 505.727081][T20329] tipc: Enabled bearer , priority 10 [ 507.796739][ T5757] tipc: Node number set to 1 [ 508.017916][T20361] __nla_validate_parse: 19 callbacks suppressed [ 508.017935][T20361] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3687'. [ 508.017948][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3687'. [ 508.017961][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3687'. [ 508.458344][T20384] syzkaller0: entered promiscuous mode [ 508.458366][T20384] syzkaller0: entered allmulticast mode [ 508.480766][T20384] tipc: Started in network mode [ 508.480793][T20384] tipc: Node identity 66e56167b787, cluster identity 4711 [ 508.480977][T20384] tipc: Enabled bearer , priority 0 [ 508.519880][T20384] tipc: Resetting bearer [ 508.535836][T20383] tipc: Resetting bearer [ 508.608107][T20383] tipc: Disabling bearer [ 508.649383][T20392] Bluetooth: MGMT ver 1.23 [ 508.715410][T20125] Bluetooth: hci3: command 0x0406 tx timeout [ 508.765759][T20394] bond2: entered promiscuous mode [ 508.765781][T20394] bond2: entered allmulticast mode [ 508.813042][T20388] bond2: left allmulticast mode [ 508.813679][T20388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.969317][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3700'. [ 510.562669][T20450] netlink: 'syz.1.3712': attribute type 1 has an invalid length. [ 510.638241][T20450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 510.937650][T20472] bond3: (slave bond_slave_0): Device is not our slave [ 510.937675][T20472] bond3: option active_slave: invalid value (bond_slave_0) [ 510.942883][T20472] bond3 (unregistering): Released all slaves [ 511.032112][ C1] net_ratelimit: 258 callbacks suppressed [ 511.032130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.032447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.032753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.033067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.381554][T20491] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 511.381577][T20491] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 511.381590][T20491] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 511.381604][T20491] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 511.422717][T20491] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 511.422735][T20491] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 511.422749][T20491] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 511.422761][T20491] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 511.422772][T20491] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 511.642796][T20504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'. [ 511.689717][T20516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'. [ 511.690192][T20516] xt_cgroup: path and classid specified [ 511.726610][T20516] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3725'. [ 511.730491][T20516] macvlan0: entered promiscuous mode [ 511.782120][T20521] syzkaller0: entered promiscuous mode [ 511.782140][T20521] syzkaller0: entered allmulticast mode [ 512.019803][T20530] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3729'. [ 512.169543][T20539] ip_tables: iptables: counters copy to user failed while replacing table [ 512.885454][T20582] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3738'. [ 512.885494][T20582] NCSI netlink: No device for ifindex 813332851 [ 513.235508][T20604] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3745'. [ 513.238744][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3745'. [ 513.238762][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3745'. [ 513.269595][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3745'. [ 513.269614][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3745'. [ 513.321862][ T7665] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 513.321903][ T7665] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 513.321933][ T7665] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 513.321963][ T7665] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 513.376377][T20616] Bluetooth: MGMT ver 1.23 [ 513.459516][T20622] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 513.536404][T20626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3750'. [ 513.608413][T20635] nbd: must specify an index to disconnect [ 513.608669][T20635] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3750'. [ 513.609983][T20630] bond4: entered promiscuous mode [ 513.610864][T20630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 513.722385][T20645] vlan2: entered allmulticast mode [ 513.722405][T20645] bond4: entered allmulticast mode [ 513.768183][T20648] bond4: (slave bridge1): making interface the new active one [ 513.768918][T20648] bridge1: entered promiscuous mode [ 513.769109][T20648] bridge1: entered allmulticast mode [ 513.779430][T20648] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 513.910378][T20657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3758'. [ 513.977023][T20661] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3759'. [ 514.164242][T20675] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3764'. [ 515.185148][T20728] ip_tunnel: non-ECT from 172.30.1.2 with TOS=0x3 [ 515.590055][T20750] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 515.591134][T20755] bond5: (slave veth0_to_bond): making interface the new active one [ 515.622647][T20755] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 515.814513][T20770] bond2: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 515.832699][T20770] bond2 (unregistering): Released all slaves [ 515.866417][T20768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.890037][T20768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.162059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.162390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.162691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.163024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.359100][T20799] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 516.870541][T20825] validate_nla: 117 callbacks suppressed [ 516.870560][T20825] netlink: 'syz.4.3799': attribute type 6 has an invalid length. [ 516.924170][T20829] bridge_slave_0: left allmulticast mode [ 516.924193][T20829] bridge_slave_0: left promiscuous mode [ 516.924393][T20829] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.938302][T20829] bridge_slave_1: left allmulticast mode [ 516.938337][T20829] bridge_slave_1: left promiscuous mode [ 516.938528][T20829] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.987590][T20829] bond0: (slave bond_slave_0): Releasing backup interface [ 517.018872][T20829] bond0: (slave bond_slave_1): Releasing backup interface [ 517.109146][T20829] team0: Port device team_slave_0 removed [ 517.150185][T20829] team0: Port device team_slave_1 removed [ 517.155621][T20829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.155642][T20829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.180194][T20829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.180216][T20829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.209941][T20829] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 517.244910][T20839] tipc: Started in network mode [ 517.244939][T20839] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 517.245117][T20839] tipc: Enabled bearer , priority 0 [ 517.283471][T20853] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 517.620223][T20873] netlink: 'syz.4.3810': attribute type 1 has an invalid length. [ 517.639224][T20875] netlink: 'syz.1.3812': attribute type 1 has an invalid length. [ 517.773536][T20881] tipc: Resetting bearer [ 517.774449][T20881] tipc: Resetting bearer [ 517.812453][T20881] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 518.331833][T17757] tipc: Node number set to 11578026 [ 518.419769][T20905] ipt_ECN: cannot use operation on non-tcp rule [ 518.953015][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 520.560097][T20865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.761006][T20926] __nla_validate_parse: 22 callbacks suppressed [ 520.761026][T20926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3830'. [ 520.795347][T20926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.807320][T20923] netlink: 'syz.3.3831': attribute type 1 has an invalid length. [ 520.824288][T20929] netlink: 'syz.3.3831': attribute type 12 has an invalid length. [ 520.971163][T20929] bond6: option primary_reselect: invalid value (255) [ 520.982458][T20929] bond6 (unregistering): Released all slaves [ 521.134105][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3833'. [ 521.134414][T20940] gretap0: Device is already in use. [ 521.199270][T20937] netlink: 'syz.2.3832': attribute type 10 has an invalid length. [ 521.263500][T20937] team0: Port device wg2 added [ 521.272051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.272370][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.272687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.272999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.642704][T20969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3836'. [ 521.826384][T20977] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3838'. [ 521.992626][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 522.043306][T20986] openvswitch: netlink: Unknown key attributes 2 [ 522.140252][T20997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 522.140365][T20997] smc: net device lo applied user defined pnetid SYZ0 [ 522.229804][T20998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3843'. [ 522.559120][T21021] netlink: 'syz.4.3853': attribute type 30 has an invalid length. [ 522.598934][T21021] bond1: option arp_missed_max: invalid value (0) [ 522.598959][T21021] bond1: option arp_missed_max: allowed values 1 - 255 [ 522.605953][T21021] bond1 (unregistering): Released all slaves [ 522.789668][T21035] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3856'. [ 522.806272][T21029] bond6: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 522.813580][T21029] bond6 (unregistering): Released all slaves [ 522.846435][T21034] tipc: Started in network mode [ 522.846466][T21034] tipc: Node identity ac14142f, cluster identity 4711 [ 522.848771][T21034] tipc: Enabled bearer , priority 10 [ 522.850734][T21038] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 523.379461][T21076] netlink: 'syz.1.3869': attribute type 8 has an invalid length. [ 523.593166][T21092] tipc: Enabled bearer , priority 0 [ 523.903779][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3879'. [ 523.903794][T21105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3879'. [ 523.963575][T13481] tipc: Node number set to 2886997039 [ 524.254752][T21129] netlink: 'syz.3.3886': attribute type 13 has an invalid length. [ 524.374103][T21140] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3887'. [ 524.610666][T21151] syzkaller0: entered promiscuous mode [ 524.610689][T21151] syzkaller0: entered allmulticast mode [ 524.914782][T21160] vrf0: entered promiscuous mode [ 524.914804][T21160] vrf0: entered allmulticast mode [ 524.917762][ T9] tipc: Node number set to 3512885607 [ 525.152966][T21184] bond1: entered allmulticast mode [ 525.153361][T21184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.240345][T21183] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.464894][T21198] netlink: 'syz.0.3900': attribute type 10 has an invalid length. [ 525.504460][T21198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 525.508285][T21198] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 525.510669][T21198] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 525.613899][T13481] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 525.935626][T21223] ip_tables: iptables: counters copy to user failed while replacing table [ 525.976864][T21223] netlink: 'syz.2.3908': attribute type 2 has an invalid length. [ 526.036970][T21231] netlink: 'syz.0.3910': attribute type 3 has an invalid length. [ 526.039720][T21231] __nla_validate_parse: 38 callbacks suppressed [ 526.039736][T21231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3910'. [ 526.233345][T21240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3913'. [ 526.233659][T21240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3913'. [ 526.286213][T21242] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 526.286799][T21242] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20001 [ 526.350360][T21244] netlink: 'syz.3.3916': attribute type 16 has an invalid length. [ 526.350382][T21244] netlink: 'syz.3.3916': attribute type 3 has an invalid length. [ 526.350394][T21244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3916'. [ 526.526579][T21256] netlink: 'syz.0.3921': attribute type 3 has an invalid length. [ 526.554483][T10863] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 527.031967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.032371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.032728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.033055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.143885][T21291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3929'. [ 527.789861][T21338] ip_tables: iptables: counters copy to user failed while replacing table [ 527.918957][T21344] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 527.918957][T21344] Please contact the netfilter-devel mailing list or update your nftables rules. [ 528.289517][T21362] ip_tables: iptables: counters copy to user failed while replacing table [ 528.579125][T21380] ip6t_rt: address list match requested but addrnr is 0 [ 528.600198][T21374] tipc: Enabling of bearer rejected, failed to enable media [ 528.845656][T21392] pim6reg: entered allmulticast mode [ 528.879213][T21394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3953'. [ 529.513523][T21428] netlink: 'syz.3.3959': attribute type 1 has an invalid length. [ 529.649228][T21435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.667952][T21434] netlink: 'syz.0.3962': attribute type 1 has an invalid length. [ 529.667973][T21434] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3962'. [ 529.667997][T21434] block nbd0: NBD_DISCONNECT [ 529.668016][T21434] block nbd0: Send disconnect failed -32 [ 529.668048][T21434] block nbd0: shutting down sockets [ 529.731165][T21396] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 529.751475][T21396] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 529.751511][T21396] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 529.798391][T21440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3965'. [ 529.859470][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3964'. [ 529.916128][T21440] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3965'. [ 530.015470][T21454] netlink: 'syz.2.3964': attribute type 9 has an invalid length. [ 530.441199][ T1140] bond7 (unregistering): (slave bridge0): Releasing backup interface [ 530.441273][ T1140] bridge0 (unregistering): left promiscuous mode [ 530.485049][ T1140] bond0 (unregistering): Released all slaves [ 530.489546][ T1140] bond1 (unregistering): Released all slaves [ 530.503842][ T1140] bond2 (unregistering): Released all slaves [ 530.516011][ T1140] bond3 (unregistering): Released all slaves [ 530.525614][ T1140] bond4 (unregistering): Released all slaves [ 530.553314][ T1140] bond5 (unregistering): Released all slaves [ 530.561568][ T1140] bond6 (unregistering): Released all slaves [ 530.578182][ T1140] bond7 (unregistering): Released all slaves [ 530.612248][ T1140] bond8 (unregistering): Released all slaves [ 530.629738][ T1140] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 530.631268][ T1140] bond9 (unregistering): Released all slaves [ 530.661525][ T1140] bond10 (unregistering): Released all slaves [ 530.678196][ T1140] bond11 (unregistering): Released all slaves [ 530.898823][T21482] erspan0: entered promiscuous mode [ 530.909587][T21482] vlan3: entered promiscuous mode [ 530.995811][ T1140] tipc: Left network mode [ 531.378194][T21512] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 531.604182][T21521] __nla_validate_parse: 3 callbacks suppressed [ 531.604201][T21521] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3984'. [ 531.606288][T21522] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3984'. [ 532.015179][T21540] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3990'. [ 532.015200][T21540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3990'. [ 532.015216][T21540] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3990'. [ 532.015228][T21540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3990'. [ 532.015240][T21540] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3990'. [ 532.025719][T21543] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3990'. [ 532.025737][T21543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3990'. [ 532.025753][T21543] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3990'. [ 532.516535][ T1140] hsr_slave_0: left promiscuous mode [ 532.518888][ T1140] hsr_slave_1: left promiscuous mode [ 532.549064][ T1140] veth1_vlan: left promiscuous mode [ 532.549108][ T1140] veth0_vlan: left promiscuous mode [ 532.646233][T21575] netlink: 'syz.2.3995': attribute type 1 has an invalid length. [ 533.470156][T21575] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 534.024315][ T1140] IPVS: stop unused estimator thread 0... [ 534.968772][T21683] wg2: Caught tx_queue_len zero misconfig [ 535.277553][T20125] Bluetooth: hci4: Malformed Event: 0x13 [ 535.335369][T21700] bond3: entered promiscuous mode [ 535.440616][T21708] netlink: 'syz.4.4019': attribute type 1 has an invalid length. [ 535.669557][T21708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.750193][T21708] macvlan2: entered promiscuous mode [ 535.750216][T21708] macvlan2: entered allmulticast mode [ 535.768771][T21708] bond2: entered promiscuous mode [ 535.770088][T21708] bond2: entered allmulticast mode [ 535.770791][T21708] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 535.810947][T21708] bond2: left allmulticast mode [ 535.810992][T21708] bond2: left promiscuous mode [ 536.019839][T21732] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 536.276413][T21759] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 536.636241][T21767] bond4: entered promiscuous mode [ 536.637926][T21767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 536.686698][T21773] __nla_validate_parse: 11 callbacks suppressed [ 536.686716][T21773] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4031'. [ 537.285498][T21821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.336820][T21822] No such timeout policy "syz0" [ 537.426737][T21822] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4040'. [ 537.430006][T21822] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4040'. [ 537.556397][T21835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4043'. [ 537.665215][T21843] x_tables: duplicate underflow at hook 1 [ 537.922258][T21854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4048'. [ 538.187844][T21871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4054'. [ 538.224304][T21871] bridge2: entered promiscuous mode [ 538.224371][T21871] bridge2: entered allmulticast mode [ 538.608003][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4059'. [ 538.646051][T21890] macsec1: entered promiscuous mode [ 538.646073][T21890] bridge0: entered promiscuous mode [ 538.646257][T21890] macsec1: entered allmulticast mode [ 538.646270][T21890] bridge0: entered allmulticast mode [ 539.071481][T21906] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 539.207494][T21911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4065'. [ 539.340020][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4067'. [ 539.551961][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4071'. [ 539.551994][T21927] netlink: 'syz.2.4071': attribute type 10 has an invalid length. [ 539.615271][T21927] geneve2: entered promiscuous mode [ 539.615295][T21927] geneve2: entered allmulticast mode [ 539.851350][T21945] syzkaller0: entered promiscuous mode [ 539.851373][T21945] syzkaller0: entered allmulticast mode [ 540.032724][T21958] openvswitch: netlink: Key type 134 is out of range max 32 [ 540.058829][T21960] openvswitch: netlink: Key type 134 is out of range max 32 [ 540.245630][T21972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.245653][T21972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.331547][T21975] syzkaller0: entered promiscuous mode [ 540.331568][T21975] syzkaller0: entered allmulticast mode [ 540.485504][T21983] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 540.533504][T21987] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 540.878126][T22003] ip_tables: iptables: counters copy to user failed while replacing table [ 540.958133][T22007] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 541.243407][T22018] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 541.265187][T22018] openvswitch: netlink: IP tunnel dst address not specified [ 541.882830][T22030] __nla_validate_parse: 12 callbacks suppressed [ 541.882850][T22030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4107'. [ 542.017676][T22045] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 542.128885][T22045] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4113'. [ 542.128913][T22045] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4113'. [ 542.296395][T22062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4117'. [ 542.318026][T22068] netlink: 'syz.3.4120': attribute type 33 has an invalid length. [ 542.355383][T22062] netlink: 'syz.2.4117': attribute type 8 has an invalid length. [ 542.355403][T22062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 542.355431][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4117'. [ 542.508112][T22074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4123'. [ 542.691220][T22098] netlink: 'syz.4.4129': attribute type 1 has an invalid length. [ 542.808635][T22108] bridge0: port 3(syz_tun) entered blocking state [ 542.809278][T22108] bridge0: port 3(syz_tun) entered disabled state [ 542.809427][T22108] syz_tun: entered allmulticast mode [ 542.833620][T22108] syz_tun: entered promiscuous mode [ 542.834716][T22108] bridge0: port 3(syz_tun) entered blocking state [ 542.834831][T22108] bridge0: port 3(syz_tun) entered forwarding state [ 542.950452][T22112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4130'. [ 542.965540][T22106] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 542.988560][T22106] bond5 (unregistering): Released all slaves [ 543.468043][T22139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4140'. [ 543.670661][T22157] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 543.711118][T22162] openvswitch: netlink: IP tunnel dst address not specified [ 544.428557][T22196] .`: (slave netdevsim0): Releasing backup interface [ 544.432552][T22196] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 544.554814][T22211] vlan3: entered allmulticast mode [ 544.554838][T22211] gretap0: entered allmulticast mode [ 545.006219][T22242] ip_tables: iptables: counters copy to user failed while replacing table [ 545.010866][T22243] pimreg: entered allmulticast mode [ 545.058814][T22244] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4160'. [ 545.270410][T13481] hid-generic 0005:0008:0007.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 545.388404][T22255] fido_id[22255]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 547.435222][T22200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.624616][T22261] ip_tables: iptables: counters copy to user failed while replacing table [ 547.664976][T22266] ip6t_rt: too many addresses specified [ 547.780821][T22270] __nla_validate_parse: 1 callbacks suppressed [ 547.780839][T22270] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4168'. [ 547.861961][T22275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4171'. [ 548.074526][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4172'. [ 548.094240][T22291] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4173'. [ 548.094261][T22291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4173'. [ 548.094273][T22291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4173'. [ 548.500498][T22326] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4176'. [ 548.500526][T22326] openvswitch: netlink: Missing key (keys=40, expected=100) [ 548.664861][ T5296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 548.819459][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4172'. [ 548.855196][T22340] bond0: Caught tx_queue_len zero misconfig [ 548.946303][T22348] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4181'. [ 549.043030][T22355] netlink: 'syz.1.4184': attribute type 1 has an invalid length. [ 549.050969][T22355] : entered promiscuous mode [ 549.121364][T22361] xt_hashlimit: size too large, truncated to 1048576 [ 549.154762][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4182'. [ 549.159104][T22362] netlink: 'syz.1.4186': attribute type 2 has an invalid length. [ 549.441487][T22376] bond1: option mode: unable to set because the bond device is up [ 550.388631][T22411] bond0: (slave bond_slave_0): Releasing backup interface [ 550.437107][T22411] bond_slave_0: entered promiscuous mode [ 550.437131][T22411] bond_slave_0: entered allmulticast mode [ 550.677475][T22433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.686332][T22440] lo: Caught tx_queue_len zero misconfig [ 550.710346][T22436] tipc: Enabled bearer , priority 0 [ 550.759622][T22436] syzkaller0: entered promiscuous mode [ 550.759647][T22436] syzkaller0: entered allmulticast mode [ 550.760369][T22436] tipc: Resetting bearer [ 550.912224][ T9556] tipc: Resetting bearer [ 550.922575][T22431] tipc: Resetting bearer [ 552.743943][T22431] tipc: Disabling bearer [ 552.797801][T22465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 552.867175][T22490] __nla_validate_parse: 12 callbacks suppressed [ 552.867193][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4220'. [ 553.410930][T22522] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 554.389640][T22566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4236'. [ 554.446949][T22566] bond3: entered promiscuous mode [ 554.446996][T22566] bond3: entered allmulticast mode [ 554.450065][T22566] xt_cgroup: invalid path, errno=-2 [ 554.976734][T22591] block nbd0: not configured, cannot reconfigure [ 555.011985][T22606] netlink: 'syz.2.4244': attribute type 23 has an invalid length. [ 555.263376][T22621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4249'. [ 555.263403][T22621] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4249'. [ 555.327119][T22622] netlink: 'syz.4.4245': attribute type 1 has an invalid length. [ 555.443011][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4249'. [ 555.443027][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4249'. [ 555.449537][T22632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.451588][T22621] netlink: 'syz.3.4249': attribute type 2 has an invalid length. [ 555.494677][T22621] !: entered promiscuous mode [ 555.509638][T22621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4249'. [ 555.509690][T22621] !: left promiscuous mode [ 555.602929][T22636] veth0_to_bridge: entered promiscuous mode [ 555.609041][T22635] veth0_to_bridge: left promiscuous mode [ 555.610723][T22632] syzkaller0: entered promiscuous mode [ 555.610733][T22632] syzkaller0: entered allmulticast mode [ 555.840353][ T9549] IPVS: starting estimator thread 0... [ 555.922330][T22662] IPVS: using max 27 ests per chain, 64800 per kthread [ 555.984260][T22667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 556.242720][T22684] xt_hl: Unknown TTL match mode: 255 [ 556.319479][T22689] netlink: 'syz.4.4267': attribute type 10 has an invalid length. [ 556.346827][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4270'. [ 556.348770][T22688] xt_hl: Unknown TTL match mode: 255 [ 556.386919][T22689] team0: Port device dummy0 added [ 556.399845][T22699] netlink: 'syz.3.4269': attribute type 33 has an invalid length. [ 556.618658][T22713] netlink: 'syz.2.4274': attribute type 1 has an invalid length. [ 556.618679][T22713] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4274'. [ 556.822259][T22726] netlink: 'syz.4.4279': attribute type 1 has an invalid length. [ 556.826986][T22724] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 556.829671][T22726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4279'. [ 556.848870][T20125] Bluetooth: hci2: Malformed HCI Event [ 556.848926][T20125] Bluetooth: hci2: Malformed HCI Event [ 557.093564][T22741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.100512][T22741] bond0 (unregistering): Released all slaves [ 557.336243][T22754] netlink: 'syz.2.4288': attribute type 1 has an invalid length. [ 557.946521][T22789] netlink: 'syz.2.4301': attribute type 1 has an invalid length. [ 557.977879][T22789] bond5: entered promiscuous mode [ 557.978302][T22789] 8021q: adding VLAN 0 to HW filter on device bond5 [ 558.008589][T22789] vlan2: entered allmulticast mode [ 558.008610][T22789] bond5: entered allmulticast mode [ 558.036236][T22789] bond5: (slave bridge3): making interface the new active one [ 558.036259][T22789] bridge3: entered promiscuous mode [ 558.036440][T22789] bridge3: entered allmulticast mode [ 558.037821][T22789] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 558.179513][T22804] __nla_validate_parse: 5 callbacks suppressed [ 558.179533][T22804] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4305'. [ 558.257226][T22800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4303'. [ 558.380863][T22818] netlink: 'syz.4.4309': attribute type 4 has an invalid length. [ 558.837930][T22827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.992458][T22836] ipvlan1: Caught tx_queue_len zero misconfig [ 559.148916][T22850] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 559.187907][T22850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4318'. [ 559.347529][T22862] sctp: [Deprecated]: syz.3.4323 (pid 22862) Use of int in max_burst socket option deprecated. [ 559.347529][T22862] Use struct sctp_assoc_value instead [ 559.761057][T22875] bond4: entered promiscuous mode [ 559.761466][T22875] 8021q: adding VLAN 0 to HW filter on device bond4 [ 559.769898][T22866] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.884580][T22889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4330'. [ 560.001068][T22892] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 560.035995][T22887] syzkaller0: entered promiscuous mode [ 560.036015][T22887] syzkaller0: entered allmulticast mode [ 560.108812][T22897] syzkaller0: entered promiscuous mode [ 560.108834][T22897] syzkaller0: entered allmulticast mode [ 560.146452][T22897] validate_nla: 3 callbacks suppressed [ 560.146472][T22897] netlink: 'syz.0.4333': attribute type 32 has an invalid length. [ 560.146485][T22897] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4333'. [ 560.149825][T22901] netlink: 'syz.0.4333': attribute type 32 has an invalid length. [ 560.149843][T22901] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4333'. [ 560.264502][T20125] Bluetooth: hci4: link tx timeout [ 560.264521][T20125] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 560.324781][T22902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4334'. [ 560.373893][T22907] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4335'. [ 560.386995][T22907] sctp: [Deprecated]: syz.1.4335 (pid 22907) Use of int in max_burst socket option deprecated. [ 560.386995][T22907] Use struct sctp_assoc_value instead [ 560.444995][T22909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4335'. [ 561.045924][T22948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4346'. [ 562.313427][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 562.518615][T23023] tipc: Enabled bearer , priority 9 [ 562.519727][T23022] tipc: Enabling of bearer rejected, already enabled [ 562.767446][T23044] netlink: 'syz.4.4369': attribute type 4 has an invalid length. [ 562.889471][T23050] netlink: 'syz.4.4369': attribute type 4 has an invalid length. [ 563.098861][ T50] dvmrp1: left allmulticast mode [ 563.277581][T23079] xt_hashlimit: size too large, truncated to 1048576 [ 563.399051][T23082] __nla_validate_parse: 6 callbacks suppressed [ 563.399070][T23082] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4372'. [ 563.458043][T23084] netlink: 'syz.0.4376': attribute type 1 has an invalid length. [ 563.568433][T23089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4376'. [ 563.591121][ T50] team0: Port device xfrm0 removed [ 563.743228][ T50] bond0 (unregistering): (slave bridge4): Releasing backup interface [ 563.743254][ T50] bridge4 (unregistering): left allmulticast mode [ 563.748794][ T50] bond10 (unregistering): (slave bridge0): Releasing active interface [ 563.785688][ T50] .` (unregistering): (slave team0): Releasing backup interface [ 563.786872][ T50] .` (unregistering): Released all slaves [ 563.814364][ T50] bond1 (unregistering): (slave bond0): Releasing backup interface [ 563.820480][ T50] bond0 (unregistering): Released all slaves [ 563.838983][ T50] bond1 (unregistering): Released all slaves [ 563.852535][ T50] bond2 (unregistering): Released all slaves [ 563.860654][ T50] bond3 (unregistering): Released all slaves [ 563.876944][ T50] bond4 (unregistering): Released all slaves [ 563.891401][ T50] bond5 (unregistering): Released all slaves [ 563.913651][ T50] bond6 (unregistering): Released all slaves [ 563.921522][ T50] bond7 (unregistering): Released all slaves [ 563.939444][ T50] bond8 (unregistering): Released all slaves [ 563.955618][ T50] bond9 (unregistering): Released all slaves [ 563.971586][ T50] bond10 (unregistering): Released all slaves [ 563.988154][ T50] bond11 (unregistering): Released all slaves [ 564.148415][T23084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 564.210626][ T50] !: left promiscuous mode [ 564.331418][ T50] tipc: Disabling bearer [ 564.345854][ T50] tipc: Left network mode [ 564.386629][T23102] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 564.796428][T23130] geneve0: entered allmulticast mode [ 564.958938][T23135] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 565.218268][T23146] IPVS: mh: UDP 224.0.0.2:0 - no destination available [ 565.313242][T23161] tipc: Enabled bearer , priority 0 [ 565.356696][T23161] xt_ecn: cannot match TCP bits for non-tcp packets [ 565.356808][T23161] xt_ecn: cannot match TCP bits for non-tcp packets [ 565.356903][T23161] xt_ecn: cannot match TCP bits for non-tcp packets [ 565.356996][T23161] xt_ecn: cannot match TCP bits for non-tcp packets [ 565.357090][T23161] xt_ecn: cannot match TCP bits for non-tcp packets [ 565.357179][T23161] xt_ecn: cannot match TCP bits for non-tcp packets [ 565.357273][T23161] xt_ecn: cannot match TCP bits for non-tcp packets [ 565.357374][T23161] xt_ecn: cannot match TCP bits for non-tcp packets [ 565.357470][T23161] xt_ecn: cannot match TCP bits for non-tcp packets [ 565.357588][T23161] xt_ecn: cannot match TCP bits for non-tcp packets [ 565.647708][T23176] ip6t_srh: unknown srh invflags 4000 [ 566.079561][ T50] hsr_slave_0: left promiscuous mode [ 566.097604][ T50] hsr_slave_1: left promiscuous mode [ 566.331325][T23206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4398'. [ 566.331364][T23206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4398'. [ 566.402805][T23211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4400'. [ 566.402850][T23211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4400'. [ 566.523694][T23221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.938082][T23215] netlink: 'syz.4.4396': attribute type 1 has an invalid length. [ 566.938105][T23215] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4396'. [ 566.968281][T23225] pimreg: left allmulticast mode [ 567.195099][T23237] netlink: 'syz.0.4403': attribute type 8 has an invalid length. [ 567.332686][T23243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4402'. [ 567.332713][T23243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4402'. [ 567.332728][T23243] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4402'. [ 567.397439][ T50] IPVS: stop unused estimator thread 0... [ 567.647892][T23262] netlink: 'syz.1.4407': attribute type 30 has an invalid length. [ 568.040695][T23282] ipvlan0: Caught tx_queue_len zero misconfig [ 568.813761][T23336] batman_adv: batadv0: Adding interface: gretap2 [ 568.813779][T23336] batman_adv: batadv0: The MTU of interface gretap2 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.813808][T23336] batman_adv: batadv0: Interface activated: gretap2 [ 569.024085][T23352] netlink: 'syz.1.4423': attribute type 26 has an invalid length. [ 569.024105][T23352] __nla_validate_parse: 4 callbacks suppressed [ 569.024114][T23352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4423'. [ 569.054888][T23352] netlink: 'syz.1.4423': attribute type 26 has an invalid length. [ 569.054906][T23352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4423'. [ 569.056977][T23353] netlink: 'syz.1.4423': attribute type 26 has an invalid length. [ 569.056993][T23353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4423'. [ 569.071068][T23353] netlink: 'syz.1.4423': attribute type 26 has an invalid length. [ 569.071085][T23353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4423'. [ 569.218402][T23356] netlink: 'syz.0.4424': attribute type 7 has an invalid length. [ 569.218423][T23356] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4424'. [ 569.249499][T23359] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 569.250578][T23365] netlink: 'syz.0.4424': attribute type 7 has an invalid length. [ 569.250594][T23365] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4424'. [ 569.266816][T23362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4426'. [ 569.420620][T23371] xt_hashlimit: size too large, truncated to 1048576 [ 569.686663][T20125] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 569.735992][T23399] netlink: 'syz.2.4432': attribute type 1 has an invalid length. [ 569.785309][T23397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4433'. [ 570.087217][T23426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4440'. [ 570.087946][T23426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4440'. [ 571.199082][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 571.199153][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 571.199184][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 571.199213][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 571.345450][T23493] ip_tables: iptables: counters copy to user failed while replacing table [ 572.187936][T23551] x_tables: duplicate underflow at hook 3 [ 572.421311][T23560] hsr_slave_0: left promiscuous mode [ 572.434029][T23560] hsr_slave_1: left promiscuous mode [ 572.835348][T23591] ip_tables: iptables: counters copy to user failed while replacing table [ 574.343119][T23553] NFSD: Failed to start, no listeners configured. [ 574.974060][T23607] __nla_validate_parse: 11 callbacks suppressed [ 574.974079][T23607] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4477'. [ 575.518936][T23663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4488'. [ 575.971128][T23683] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 576.024617][T23694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4496'. [ 576.065779][T23699] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 576.171009][T23705] batman_adv: batadv0: Adding interface: syzkaller0 [ 576.171053][T23705] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.171310][T23705] batman_adv: batadv0: Interface activated: syzkaller0 [ 576.237396][T23705] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4497'. [ 576.277874][T23698] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 576.328609][T23698] batman_adv: batadv0: Removing interface: syzkaller0 [ 576.737978][T23742] validate_nla: 4 callbacks suppressed [ 576.737996][T23742] netlink: 'syz.4.4507': attribute type 12 has an invalid length. [ 576.842554][T23746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4509'. [ 576.891433][T23749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4508'. [ 576.909920][T23753] xt_cgroup: path and classid specified [ 576.942363][T23748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4508'. [ 576.942390][T23748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4508'. [ 576.942420][T23748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4508'. [ 577.170644][T23771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4514'. [ 577.296148][T23771] macvtap1: entered promiscuous mode [ 577.296172][T23771] vlan0: entered promiscuous mode [ 577.297385][T23771] macvtap1: entered allmulticast mode [ 577.297403][T23771] vlan0: entered allmulticast mode [ 577.297415][T23771] veth0_vlan: entered allmulticast mode [ 577.500144][T23786] sctp: [Deprecated]: syz.1.4517 (pid 23786) Use of int in maxseg socket option. [ 577.500144][T23786] Use struct sctp_assoc_value instead [ 577.622357][T23798] netlink: 'syz.1.4522': attribute type 7 has an invalid length. [ 577.622376][T23798] netlink: 'syz.1.4522': attribute type 8 has an invalid length. [ 577.853412][T23809] xfrm1: entered allmulticast mode [ 577.855355][T23809] xt_l2tp: unknown flags: 43 [ 578.862165][T23875] netlink: 'syz.4.4544': attribute type 1 has an invalid length. [ 578.901039][T23875] bond5: entered promiscuous mode [ 578.908821][T23875] 8021q: adding VLAN 0 to HW filter on device bond5 [ 580.015433][T23926] veth1_macvtap: left promiscuous mode [ 580.301962][T23933] batman_adv: batadv0: Adding interface: gretap1 [ 580.301979][T23933] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.302005][T23933] batman_adv: batadv0: Interface activated: gretap1 [ 580.459143][T23950] xt_hashlimit: size too large, truncated to 1048576 [ 580.642915][T23960] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 580.771463][T23969] tipc: Failed to remove unknown binding: 66,1,1/1:289403343/289403345 [ 580.771495][T23969] tipc: Failed to remove unknown binding: 66,1,1/1:289403343/289403345 [ 580.905241][T23978] netlink: 'syz.0.4561': attribute type 3 has an invalid length. [ 580.910683][T23981] netlink: 'syz.0.4561': attribute type 3 has an invalid length. [ 580.975078][T23984] __nla_validate_parse: 10 callbacks suppressed [ 580.975097][T23984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4562'. [ 581.040329][T23987] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 581.126259][T23995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4565'. [ 581.160696][T23991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4565'. [ 581.190783][T23997] netlink: 'syz.0.4564': attribute type 21 has an invalid length. [ 581.190875][T23997] netlink: 'syz.0.4564': attribute type 6 has an invalid length. [ 581.190891][T23997] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4564'. [ 581.196188][T23997] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 581.337629][T24006] xt_TCPMSS: Only works on TCP SYN packets [ 581.367331][T24007] sock: sock_timestamping_bind_phc: sock not bind to device [ 581.370308][T24007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4567'. [ 581.371173][T24007] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4567'. [ 581.371193][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4567'. [ 581.387317][T24007] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4567'. [ 581.387337][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4567'. [ 581.430724][T24010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4570'. [ 581.930148][T24047] ip6t_hbh: Not strict - not implemented [ 582.295857][T24077] ip_tables: iptables: counters copy to user failed while replacing table [ 582.363209][T24083] sctp: [Deprecated]: syz.4.4592 (pid 24083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 582.363209][T24083] Use struct sctp_sack_info instead [ 582.732916][ T50] IPVS: starting estimator thread 0... [ 582.822049][T24110] IPVS: using max 30 ests per chain, 72000 per kthread [ 583.979203][ T50] bond8 (unregistering): (slave gretap0): Releasing backup interface [ 584.159319][T24200] xt_hashlimit: size too large, truncated to 1048576 [ 584.189596][ T50] .` (unregistering): Released all slaves [ 584.202945][ T50] bond1 (unregistering): Released all slaves [ 584.231261][ T50] bond2 (unregistering): (slave veth0_virt_wifi): Removing an active aggregator [ 584.242297][ T50] bond2 (unregistering): (slave veth0_virt_wifi): Releasing backup interface [ 584.246515][ T50] bond2 (unregistering): Released all slaves [ 584.265902][ T50] bond3 (unregistering): Released all slaves [ 584.285366][ T50] bond4 (unregistering): Released all slaves [ 584.301500][ T50] bond5 (unregistering): Released all slaves [ 584.341501][ T50] bond6 (unregistering): Released all slaves [ 584.369940][ T50] bond7 (unregistering): Released all slaves [ 584.395663][ T50] bond8 (unregistering): (slave bond9): Releasing backup interface [ 584.396464][ T50] bond8 (unregistering): Released all slaves [ 584.411138][ T50] bond9 (unregistering): Released all slaves [ 584.425157][ T50] bond10 (unregistering): Released all slaves [ 584.444147][ T50] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 584.445149][ T50] bond0 (unregistering): Released all slaves [ 584.471908][ T50] bond11 (unregistering): Released all slaves [ 584.481236][ T50] bond12 (unregistering): Released all slaves [ 584.575298][ T50] : left promiscuous mode [ 584.856845][T24217] ip6gre1: entered allmulticast mode [ 584.869875][ T9550] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 585.605726][T24256] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 585.605764][T24256] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.895115][T24256] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 585.895149][T24256] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.958286][T24265] bridge_slave_0: left allmulticast mode [ 585.958312][T24265] bridge_slave_0: left promiscuous mode [ 585.958536][T24265] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.987752][T24265] veth1_to_bridge: left promiscuous mode [ 585.987976][T24265] bridge0: port 3(veth1_to_bridge) entered disabled state [ 586.008552][T24265] bridge_slave_1: left allmulticast mode [ 586.008576][T24265] bridge_slave_1: left promiscuous mode [ 586.008819][T24265] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.034721][T24265] bond0: (slave bond_slave_0): Releasing backup interface [ 586.053470][T24265] bond0: (slave bond_slave_1): Releasing backup interface [ 586.107441][T24265] team0: Port device team_slave_0 removed [ 586.148951][T24265] team0: Port device team_slave_1 removed [ 586.154800][T24265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.154822][T24265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.175612][T24265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.175632][T24265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.178408][T24265] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 586.259364][ T50] vlan0: left allmulticast mode [ 586.259383][ T50] veth0_vlan: left allmulticast mode [ 586.259438][ T50] vlan0: left promiscuous mode [ 586.260001][ T50] veth1_macvtap: left promiscuous mode [ 586.260028][ T50] veth0_macvtap: left allmulticast mode [ 586.260043][ T50] veth0_macvtap: left promiscuous mode [ 586.260276][ T50] veth0_vlan: left promiscuous mode [ 586.349953][T24280] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20003 [ 587.190116][T24310] __nla_validate_parse: 20 callbacks suppressed [ 587.190136][T24310] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4648'. [ 587.275784][T24314] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4650'. [ 587.341431][T24319] ip_tables: iptables: counters copy to user failed while replacing table [ 587.690305][ T50] smc: removing net device team0 with user defined pnetid SYZ2 [ 587.857875][T24256] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 587.857907][T24256] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.970085][T24343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4654'. [ 588.003287][T24256] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 588.003322][T24256] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.088219][T24348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4655'. [ 588.281504][T24343] veth1_vlan: entered allmulticast mode [ 588.368531][T24358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4657'. [ 588.370046][T24352] 0: reclassify loop, rule prio 0, protocol 03 [ 588.370586][T24352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4656'. [ 588.425043][ T50] IPVS: stop unused estimator thread 0... [ 588.554957][ T1140] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 588.554985][ T1140] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.763309][ T50] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 588.763342][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.763374][ T50] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 588.763396][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.772820][ T50] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 588.772849][ T50] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.002392][T24377] ip_tables: iptables: counters copy to user failed while replacing table [ 589.192112][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 589.212990][T24404] netlink: 'syz.4.4665': attribute type 6 has an invalid length. [ 589.476415][T24418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4667'. [ 589.493338][T24416] netlink: 'syz.4.4666': attribute type 1 has an invalid length. [ 589.516638][T20125] Bluetooth: hci2: unexpected event 0x05 length: 0 < 4 [ 589.520071][T24424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4669'. [ 589.541271][T24416] netlink: 'syz.4.4666': attribute type 2 has an invalid length. [ 589.755265][T24431] netlink: 'syz.3.4672': attribute type 1 has an invalid length. [ 590.276456][T24468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4681'. [ 590.356003][T24479] netlink: 'syz.3.4685': attribute type 4 has an invalid length. [ 590.365507][T24473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 590.395389][T24475] tipc: Enabled bearer , priority 0 [ 590.494041][T24475] syzkaller0: entered promiscuous mode [ 590.494064][T24475] syzkaller0: entered allmulticast mode [ 590.494749][T24475] tipc: Resetting bearer [ 590.731766][T24472] tipc: Resetting bearer [ 593.148230][T24472] tipc: Disabling bearer [ 593.443209][T24552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4696'. [ 593.508276][T24560] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4696'. [ 593.564490][T24552] gretap0: Device is already in use. [ 593.687903][T24570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4698'. [ 593.720122][T24570] xfrm2: entered promiscuous mode [ 593.720143][T24570] xfrm2: entered allmulticast mode [ 593.907610][T24586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.035418][T24592] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 594.245639][T24606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4706'. [ 594.715583][T24629] bridge_slave_1: entered promiscuous mode [ 598.792184][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 617.351773][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.872436][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 653.191778][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 653.419411][T24674] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4715'. [ 653.556737][T24688] sctp: [Deprecated]: syz.4.4722 (pid 24688) Use of int in max_burst socket option. [ 653.556737][T24688] Use struct sctp_assoc_value instead [ 653.685125][T24696] netlink: 'syz.3.4721': attribute type 1 has an invalid length. [ 653.685148][T24696] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4721'. [ 653.690291][T24696] netlink: 'syz.3.4721': attribute type 2 has an invalid length. [ 653.862826][T24702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4723'. [ 654.134212][T24711] netlink: 'syz.4.4726': attribute type 19 has an invalid length. [ 654.134234][T24711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4726'. [ 654.134908][T24711] netlink: 'syz.4.4726': attribute type 19 has an invalid length. [ 654.134924][T24711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4726'. [ 654.253789][T24728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4727'. [ 654.282406][T24732] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4728'. [ 654.288164][T24733] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4728'. [ 654.361200][T24732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4728'. [ 654.365950][T24733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4728'. [ 654.516449][T24732] bond4: option resend_igmp: invalid value (18446744073709289478) [ 654.516496][T24732] bond4: option resend_igmp: allowed values 0 - 255 [ 654.547084][T24732] bond4 (unregistering): Released all slaves [ 654.909696][T24762] syzkaller1: entered promiscuous mode [ 654.909719][T24762] syzkaller1: entered allmulticast mode [ 655.329619][T24790] netlink: 'syz.0.4746': attribute type 1 has an invalid length. [ 655.683658][T20125] Bluetooth: hci2: connection err: -111 [ 655.759543][T24814] netlink: 'syz.4.4750': attribute type 39 has an invalid length. [ 656.058161][T24825] veth0_to_bond: default FDB implementation only supports local addresses [ 656.255816][T24829] ip_tables: iptables: counters copy to user failed while replacing table [ 656.351965][T24838] netlink: 'syz.0.4756': attribute type 1 has an invalid length. [ 656.490208][T24846] block nbd0: not configured, cannot reconfigure [ 656.505196][T20125] block nbd296: Receive control failed (result -32) [ 656.918965][T24884] team_slave_0: entered allmulticast mode [ 656.983137][T24884] team_slave_0: entered promiscuous mode [ 657.160929][T24895] netlink: 'syz.4.4777': attribute type 4 has an invalid length. [ 657.160951][T24895] netlink: 'syz.4.4777': attribute type 10 has an invalid length. [ 657.161026][T24895] bond_slave_0: mtu greater than device maximum [ 657.211325][T24897] macvtap1: entered promiscuous mode [ 657.211346][T24897] vlan0: entered promiscuous mode [ 657.211358][T24897] bridge0: entered promiscuous mode [ 657.231292][T24897] macvtap1: entered allmulticast mode [ 657.231311][T24897] vlan0: entered allmulticast mode [ 657.231321][T24897] bridge0: entered allmulticast mode [ 657.489193][T24935] tap0: tun_chr_ioctl cmd 2148553947 [ 658.006259][T24975] ip6gre1: entered allmulticast mode [ 719.706030][T25023] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 719.706075][T25023] bridge6: entered promiscuous mode [ 719.827103][T25033] tc_dump_action: action bad kind [ 719.844566][T25033] __nla_validate_parse: 74 callbacks suppressed [ 719.844585][T25033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4809'. [ 719.884311][T25036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4813'. [ 719.999754][T25048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4815'. [ 719.999777][T25048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4815'. [ 719.999800][T25048] netlink: 'syz.4.4815': attribute type 12 has an invalid length. [ 719.999827][T25048] netlink: 'syz.4.4815': attribute type 11 has an invalid length. [ 720.171317][T25059] geneve4: entered promiscuous mode [ 720.171338][T25059] geneve4: entered allmulticast mode [ 720.202568][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 720.203826][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 720.203935][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 720.203966][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 720.699299][T25093] ip_tables: iptables: counters copy to user failed while replacing table [ 720.765060][T25099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4831'. [ 720.765342][T25099] netlink: 'syz.1.4831': attribute type 58 has an invalid length. [ 720.765358][T25099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4831'. [ 721.487819][T25146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4844'. [ 721.514518][T25146] netlink: 'syz.4.4844': attribute type 1 has an invalid length. [ 721.604579][T25146] bond6: entered promiscuous mode [ 721.604993][T25146] 8021q: adding VLAN 0 to HW filter on device bond6 [ 721.669780][T25148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 721.677218][T25148] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 721.677239][T25148] bond6: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 721.719349][T25148] bond6: (slave wireguard1): making interface the new active one [ 721.719372][T25148] wireguard1: entered promiscuous mode [ 721.735033][T25148] bond6: (slave wireguard1): Enslaving as an active interface with an up link [ 721.882914][T25179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4852'. [ 721.885748][T25179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4852'. [ 721.890805][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4850'. [ 721.904898][T25174] 8021q: adding VLAN 0 to HW filter on device bond6 [ 722.237710][T25207] x_tables: duplicate underflow at hook 1 [ 722.237862][T25207] x_tables: duplicate underflow at hook 1 [ 723.660529][T25306] netlink: 'syz.1.4886': attribute type 9 has an invalid length. [ 723.769163][T25314] sctp: [Deprecated]: syz.3.4888 (pid 25314) Use of int in max_burst socket option deprecated. [ 723.769163][T25314] Use struct sctp_assoc_value instead [ 723.933664][T25328] netlink: 'syz.1.4893': attribute type 1 has an invalid length. [ 723.935692][T25328] mac80211_hwsim hwsim54 syzkaller1: entered promiscuous mode [ 723.935714][T25328] mac80211_hwsim hwsim54 syzkaller1: entered allmulticast mode [ 724.110104][T25341] rdma_rxe: rxe_newlink: failed to add wg0 [ 724.258724][T25354] netlink: 'syz.1.4902': attribute type 6 has an invalid length. [ 724.478982][T25231] NFSD: Failed to start, no listeners configured. [ 724.674120][T25370] : renamed from bond0 (while UP) [ 725.056455][T25392] __nla_validate_parse: 26 callbacks suppressed [ 725.056474][T25392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4912'. [ 725.808442][T25444] x_tables: duplicate underflow at hook 4 [ 725.842917][T25447] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4927'. [ 726.046751][T25462] syzkaller0: entered promiscuous mode [ 726.046773][T25462] syzkaller0: entered allmulticast mode [ 726.050609][T25467] netlink: 'syz.2.4934': attribute type 7 has an invalid length. [ 726.050627][T25467] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4934'. [ 726.125855][T25469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4935'. [ 726.210664][T25473] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4936'. [ 726.236339][T25475] tipc: Enabling of bearer rejected, failed to enable media [ 726.414300][T25487] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 726.546837][T25500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4944'. [ 726.626778][T25500] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4944'. [ 726.739663][T25509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4948'. [ 726.792047][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 726.834434][T25511] ip_tables: iptables: counters copy to user failed while replacing table [ 726.869121][T25516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4949'. [ 726.936469][T25526] netlink: 'syz.4.4952': attribute type 1 has an invalid length. [ 726.999874][ T5635] Bluetooth: hci5: hardware error 0x0d [ 727.118339][T25536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4957'. [ 727.414864][T25556] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 727.573768][T25571] netlink: 'syz.0.4964': attribute type 10 has an invalid length. [ 727.605551][T25571] team0: Port device dummy0 added [ 727.943804][T25585] netlink: 'syz.0.4970': attribute type 3 has an invalid length. [ 728.213950][T25591] netlink: 'syz.0.4973': attribute type 2 has an invalid length. [ 728.272536][T25593] sctp: [Deprecated]: syz.2.4974 (pid 25593) Use of int in max_burst socket option. [ 728.272536][T25593] Use struct sctp_assoc_value instead [ 728.686110][T25620] xt_ipcomp: unknown flags 1D [ 728.830088][T25629] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 729.114025][ T5635] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 729.859127][T25675] x_tables: duplicate underflow at hook 1 [ 730.121172][T25685] netlink: 'syz.2.4998': attribute type 1 has an invalid length. [ 730.476676][T25700] bridge10: entered promiscuous mode [ 730.476702][T25700] bridge10: entered allmulticast mode [ 730.505086][T25700] __nla_validate_parse: 8 callbacks suppressed [ 730.505102][T25700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5004'. [ 730.505115][T25700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5004'. [ 730.509553][T25701] bridge11: entered promiscuous mode [ 730.509573][T25701] bridge11: entered allmulticast mode [ 730.518439][T25707] tipc: Enabling of bearer rejected, no device for the media [ 730.720092][T25719] netlink: 'syz.0.5009': attribute type 1 has an invalid length. [ 730.788410][T25719] bond0: entered promiscuous mode [ 730.790439][T25719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.848961][T25721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.850497][T25721] bond0: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 730.850516][T25721] bond0: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 730.868663][T25721] bond0: (slave ip6gre3): making interface the new active one [ 730.868683][T25721] ip6gre3: entered promiscuous mode [ 730.878172][T25721] bond0: (slave ip6gre3): Enslaving as an active interface with an up link [ 730.883720][T25729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5010'. [ 730.926381][T25732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5011'. [ 731.004156][T25736] wireguard2: entered promiscuous mode [ 731.064909][T25739] xt_hashlimit: size too large, truncated to 1048576 [ 731.201430][T25750] veth0: entered promiscuous mode [ 731.258298][T25742] veth0: left promiscuous mode [ 731.359766][T25760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5020'. [ 731.390850][T25763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5021'. [ 731.520169][T25768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5023'. [ 732.100883][T25781] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 732.116001][T25781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5025'. [ 733.589382][T25794] bond0: Error: CAN devices cannot be enslaved [ 734.849296][T25771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.203762][T25830] netlink: zone id is out of range [ 735.203777][T25830] netlink: zone id is out of range [ 735.203784][T25830] netlink: zone id is out of range [ 735.203791][T25830] netlink: zone id is out of range [ 735.203798][T25830] netlink: zone id is out of range [ 735.203804][T25830] netlink: zone id is out of range [ 735.203810][T25830] netlink: zone id is out of range [ 735.203817][T25830] netlink: zone id is out of range [ 735.203823][T25830] netlink: zone id is out of range [ 735.203830][T25830] netlink: zone id is out of range [ 735.293603][T25833] tipc: Resetting bearer [ 735.525219][T25840] netlink: 23 bytes leftover after parsing attributes in process `syz.4.5037'. [ 735.697840][T25852] netlink: 'syz.0.5039': attribute type 1 has an invalid length. [ 735.697861][T25852] netlink: 'syz.0.5039': attribute type 2 has an invalid length. [ 736.060996][T25868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5044'. [ 736.409110][T25887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5050'. [ 736.667472][T25901] netlink: 'syz.0.5055': attribute type 10 has an invalid length. [ 736.667493][T25901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5055'. [ 736.715527][T25901] team0: Port device dummy0 removed [ 736.726205][T25901] bridge0: port 4(dummy0) entered blocking state [ 736.726304][T25901] bridge0: port 4(dummy0) entered disabled state [ 736.726443][T25901] dummy0: entered allmulticast mode [ 736.742440][T25901] dummy0: entered promiscuous mode [ 736.821341][T25903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5055'. [ 736.841134][T25910] netlink: 'syz.0.5055': attribute type 10 has an invalid length. [ 736.841152][T25910] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5055'. [ 736.847574][T25908] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5056'. [ 736.854127][T25908] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5056'. [ 736.876700][T25903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5055'. [ 737.176984][T25923] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5058'. [ 737.177012][T25923] netlink: 'syz.1.5058': attribute type 5 has an invalid length. [ 737.216672][T25923] mac80211_hwsim hwsim54 syzkaller1: left promiscuous mode [ 737.216696][T25923] mac80211_hwsim hwsim54 syzkaller1: left allmulticast mode [ 738.010617][T25964] netlink: 'syz.1.5070': attribute type 15 has an invalid length. [ 738.019527][T25967] netlink: 'syz.2.5071': attribute type 1 has an invalid length. [ 738.943171][T26011] netlink: 'syz.4.5081': attribute type 8 has an invalid length. [ 739.049655][T26012] ip6tnl0: Caught tx_queue_len zero misconfig [ 741.508610][T26018] pim6reg: entered allmulticast mode [ 741.517208][T26018] pim6reg: left allmulticast mode [ 741.548518][T26022] __nla_validate_parse: 11 callbacks suppressed [ 741.548536][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 741.625306][T26025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5085'. [ 741.744970][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 741.760715][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 741.760892][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 741.761060][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 741.761254][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 741.761435][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 741.770117][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 741.770870][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 743.040191][T26081] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 743.083331][T26081] team0: Port device batadv2 added [ 743.537663][T26094] net_ratelimit: 12 callbacks suppressed [ 743.537692][T26094] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 743.700574][T26104] netlink: 'syz.3.5111': attribute type 21 has an invalid length. [ 743.700648][T26104] netlink: 'syz.3.5111': attribute type 5 has an invalid length. [ 743.787459][T26111] netlink: 'syz.1.5114': attribute type 10 has an invalid length. [ 744.259640][T26132] netlink: 'syz.4.5119': attribute type 4 has an invalid length. [ 744.269553][T26132] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 744.288042][T26130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.709054][T26141] dvmrp1: entered allmulticast mode [ 744.939218][T26153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.986175][T26154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.421501][T26165] veth4: entered allmulticast mode [ 746.303643][T26183] netlink: 'syz.3.5132': attribute type 4 has an invalid length. [ 746.626724][T26221] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 746.822282][T26229] __nla_validate_parse: 71 callbacks suppressed [ 746.822302][T26229] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5144'. [ 747.145123][T26236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5147'. [ 747.351279][T26260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5151'. [ 747.571502][T26263] netlink: 'syz.4.5153': attribute type 5 has an invalid length. [ 747.601732][T20125] Bluetooth: hci4: command 0x0406 tx timeout [ 747.770788][T26265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5154'. [ 747.788232][T26265] netlink: 576 bytes leftover after parsing attributes in process `syz.4.5154'. [ 748.317531][T26280] netlink: 'syz.4.5160': attribute type 2 has an invalid length. [ 748.614905][T26298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5163'. [ 748.746489][T26295] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 748.898395][T26313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5169'. [ 748.940548][T26308] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5166'. [ 749.044279][T26321] netlink: 'syz.3.5171': attribute type 25 has an invalid length. [ 749.044300][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5171'. [ 749.075704][T26321] netlink: 'syz.3.5171': attribute type 25 has an invalid length. [ 749.075726][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5171'. [ 749.121946][T24925] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 749.127281][T24925] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 749.127320][T24925] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 749.127351][T24925] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 750.013197][T26271] NFSD: Failed to start, no listeners configured. [ 753.280491][T26383] __nla_validate_parse: 3 callbacks suppressed [ 753.280510][T26383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5187'. [ 753.527785][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5192'. [ 753.527807][T26397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5192'. [ 753.527831][T26397] netlink: 'syz.3.5192': attribute type 5 has an invalid length. [ 753.705666][T26399] netlink: 5108 bytes leftover after parsing attributes in process `syz.1.5193'. [ 753.748910][T26395] team0: Port device dummy0 removed [ 753.774691][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5192'. [ 753.774714][T26397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5192'. [ 753.774737][T26397] netlink: 'syz.3.5192': attribute type 5 has an invalid length. [ 754.169404][T26409] gre0: Caught tx_queue_len zero misconfig [ 754.169437][T26409] sch_tbf: burst 0 is lower than device gre0 mtu (153) ! [ 754.197316][T26409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5196'. [ 754.386675][T26421] ip_tables: iptables: counters copy to user failed while replacing table [ 754.389382][T26421] C: renamed from lo (while UP) [ 754.411308][T26421] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 754.920100][T26442] netlink: 'syz.1.5202': attribute type 1 has an invalid length. [ 754.920123][T26442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5202'. [ 755.375847][T26431] veth5: entered allmulticast mode [ 755.518420][T26456] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5206'. [ 755.819617][T26469] netlink: 'syz.4.5211': attribute type 1 has an invalid length. [ 755.895160][T26467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'. [ 755.930027][T26465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.193961][T26469] 8021q: adding VLAN 0 to HW filter on device bond7 [ 757.048588][T26507] syz_tun: entered allmulticast mode [ 757.442451][T26515] netlink: 'syz.0.5222': attribute type 4 has an invalid length. [ 757.445684][T26517] netlink: 'syz.0.5222': attribute type 4 has an invalid length. [ 758.124173][T26529] tunl0: entered promiscuous mode [ 758.211195][T26529] netlink: 'syz.3.5225': attribute type 4 has an invalid length. [ 758.629864][T26552] ip_tables: iptables: counters copy to user failed while replacing table [ 758.697043][T26556] __nla_validate_parse: 7 callbacks suppressed [ 758.697061][T26556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5234'. [ 758.998905][T26560] ip6gre4: entered allmulticast mode [ 759.145500][T26572] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5241'. [ 759.173857][T26573] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5241'. [ 759.266264][T26582] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 759.267796][T26582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5243'. [ 759.302925][T26579] netlink: 'syz.3.5239': attribute type 2 has an invalid length. [ 759.451782][T26588] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5246'. [ 759.454491][T26588] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5246'. [ 759.454717][T26588] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5246'. [ 759.454918][T26588] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5246'. [ 759.455092][T26588] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5246'. [ 759.455263][T26588] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5246'. [ 760.849626][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880382e1000: rx timeout, send abort [ 760.872761][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 761.349825][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880382e2800: rx timeout, send abort [ 761.350834][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880382e1000: abort rx timeout. Force session deactivation [ 761.849869][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880382e2800: abort rx timeout. Force session deactivation [ 762.050856][T26692] erspan0: entered promiscuous mode [ 762.059882][T26692] vlan3: entered promiscuous mode [ 762.222041][T26694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.592117][T26709] sit0: entered promiscuous mode [ 762.614865][T26709] netlink: 'syz.4.5279': attribute type 1 has an invalid length. [ 762.969554][T26723] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 763.424764][T26739] netlink: 'syz.1.5288': attribute type 9 has an invalid length. [ 763.758786][T26748] block nbd0: not configured, cannot reconfigure [ 763.768932][T26749] block nbd0: not configured, cannot reconfigure [ 764.281449][T26760] x_tables: duplicate underflow at hook 1 [ 764.650362][T26775] netlink: 'syz.4.5299': attribute type 1 has an invalid length. [ 764.770505][T26775] bond8: entered promiscuous mode [ 764.779569][T26775] 8021q: adding VLAN 0 to HW filter on device bond8 [ 764.857258][T26784] __nla_validate_parse: 36 callbacks suppressed [ 764.857277][T26784] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5302'. [ 765.062977][T26776] 8021q: adding VLAN 0 to HW filter on device bond8 [ 765.064380][T26776] bond8: (slave xfrm0): The slave device specified does not support setting the MAC address [ 765.064399][T26776] bond8: (slave xfrm0): Setting fail_over_mac to active for active-backup mode [ 765.105880][T26776] bond8: (slave xfrm0): making interface the new active one [ 765.105902][T26776] xfrm0: entered promiscuous mode [ 765.112391][T20125] Bluetooth: hci4: command 0x0406 tx timeout [ 765.154148][T26776] xfrm0: left promiscuous mode [ 765.210513][T26775] bond8: (slave xfrm0): The slave device specified does not support setting the MAC address [ 765.223516][T26775] bond8: (slave xfrm0): making interface the new active one [ 765.719778][T26828] block nbd1: NBD_DISCONNECT [ 765.719804][T26828] block nbd1: Send disconnect failed -32 [ 765.719848][T26828] block nbd1: shutting down sockets [ 765.786336][T26832] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5308'. [ 766.142668][T26844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5311'. [ 766.263917][T26855] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 766.283356][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5317'. [ 766.283390][T26855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5317'. [ 766.395073][T26860] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 766.774330][T26876] Unknown options in mask 4 [ 767.108542][T26889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5327'. [ 767.136339][T26893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5327'. [ 767.200790][T26897] veth0: Caught tx_queue_len zero misconfig [ 767.254435][T26897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5329'. [ 767.308891][T26897] netlink: 'syz.4.5329': attribute type 7 has an invalid length. [ 767.539597][T26902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5330'. [ 767.540285][T26902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5330'. [ 767.551360][T26903] syzkaller1: entered promiscuous mode [ 767.551379][T26903] syzkaller1: entered allmulticast mode [ 767.960916][T26928] geneve3: entered promiscuous mode [ 767.961136][T26928] geneve3: entered allmulticast mode [ 767.976210][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 767.976273][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 767.976305][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 769.249285][T26980] vlan3: entered promiscuous mode [ 769.249307][T26980] bridge0: entered promiscuous mode [ 769.250792][T26980] vlan3: entered allmulticast mode [ 769.250809][T26980] bridge0: entered allmulticast mode [ 769.570948][T26987] NFSD: Failed to start, no listeners configured. [ 769.855960][T27012] wireguard: wg2: Could not create IPv4 socket [ 770.020144][T27016] vlan4: entered allmulticast mode [ 770.020167][T27016] veth1_virt_wifi: entered allmulticast mode [ 770.084069][T27015] __nla_validate_parse: 1 callbacks suppressed [ 770.084089][T27015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5364'. [ 770.284888][T27027] netlink: 'syz.1.5369': attribute type 10 has an invalid length. [ 770.563057][T27041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5376'. [ 770.757062][T27050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5378'. [ 770.929093][T27060] xfrm0: entered allmulticast mode [ 771.049175][T27067] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5383'. [ 771.049200][T27067] openvswitch: netlink: Message has 6 unknown bytes. [ 771.062620][T27064] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 771.714909][ T5635] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 771.980808][T27100] syzkaller0: entered promiscuous mode [ 771.980829][T27100] syzkaller0: entered allmulticast mode [ 772.456071][T27119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5395'. [ 772.805016][T27132] netlink: 'syz.2.5398': attribute type 11 has an invalid length. [ 772.956151][T27140] syzkaller0: entered promiscuous mode [ 772.956206][T27140] syzkaller0: entered allmulticast mode [ 772.977411][T27140] simple: /dev/video#_1 [ 772.977429][T27140] simple: /dev/video#_2 [ 772.977438][T27140] simple: /dev/video#_3 [ 772.977447][T27140] simple: /dev/video#_4 [ 772.977455][T27140] simple: /dev/video#_5 [ 772.977464][T27140] simple: /dev/video#_6 [ 772.977473][T27140] simple: /dev/video#_7 [ 772.977481][T27140] simple: /dev/video#_8 [ 772.977490][T27140] simple: /dev/video#_9 [ 772.977499][T27140] simple: /dev/video#_10 [ 772.977507][T27140] simple: /dev/video#_11 [ 772.977516][T27140] simple: /dev/video#_12 [ 772.977525][T27140] simple: /dev/video#_13 [ 772.977533][T27140] simple: /dev/video#_14 [ 772.977542][T27140] simple: /dev/video#_15 [ 772.977551][T27140] simple: /dev/video#_16 [ 772.977560][T27140] simple: /dev/video#_17 [ 772.977569][T27140] simple: /dev/video#_18 [ 772.977577][T27140] simple: /dev/video#_19 [ 772.977586][T27140] simple: /dev/video#_20 [ 772.977594][T27140] simple: /dev/video#_21 [ 772.977603][T27140] simple: /dev/video#_22 [ 772.977611][T27140] simple: /dev/video#_23 [ 772.977620][T27140] simple: /dev/video#_24 [ 772.977629][T27140] simple: /dev/video#_25 [ 772.977637][T27140] simple: /dev/video#_26 [ 772.977646][T27140] simple: /dev/video#_27 [ 772.977654][T27140] simple: /dev/video#_28 [ 772.977662][T27140] simple: /dev/video#_29 [ 772.977707][T27140] simple: /dev/video#_30 [ 772.977716][T27140] simple: /dev/video#_31 [ 772.977725][T27140] simple: /dev/video#_32 [ 772.977734][T27140] TC_ACT_REPEAT abuse ? [ 773.644048][T27165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5406'. [ 773.748216][T27175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5410'. [ 773.948547][T27183] smc: net device lo erased user defined pnetid SYZ0 [ 773.948825][T27183] smc: smcd device lo erased user defined pnetid SYZ0 [ 774.118805][T27195] erspan0: entered promiscuous mode [ 774.118829][T27195] erspan0: entered allmulticast mode [ 774.700953][T27219] veth0: entered promiscuous mode [ 774.714962][ C0] ------------[ cut here ]------------ [ 774.714976][ C0] !rcu_read_lock_held() [ 774.714996][ C0] WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x41d9/0x64e0, CPU#0: ksoftirqd/0/15 [ 774.735164][ C0] Modules linked in: [ 774.739133][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 774.748462][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 774.758667][ C0] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 774.764761][ C0] Code: be b5 01 00 00 48 c7 c2 20 ff 53 8d e8 b0 d6 06 f7 e9 aa fc ff ff e8 06 85 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 f8 84 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 f7 e0 51 fa 84 c0 0f 84 e1 00 [ 774.784539][ C0] RSP: 0000:ffffc90000147660 EFLAGS: 00010246 [ 774.790659][ C0] RAX: ffffffff8a9d8c78 RBX: 0000000000000000 RCX: ffff88801eed1f40 [ 774.798730][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 774.806817][ C0] RBP: ffffc900001478f0 R08: 0000000000000100 R09: 1ffffffff237bff7 [ 774.814892][ C0] R10: dffffc0000000000 R11: fffffbfff237bff8 R12: dffffc0000000000 [ 774.822965][ C0] R13: ffff88802c5bd918 R14: ffff888055c40350 R15: ffff888058aea000 [ 774.831026][ C0] FS: 0000000000000000(0000) GS:ffff888123408000(0000) knlGS:0000000000000000 [ 774.840100][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.846772][ C0] CR2: 000000110c265958 CR3: 000000004e3a6000 CR4: 00000000003526f0 [ 774.854888][ C0] Call Trace: [ 774.858211][ C0] [ 774.861217][ C0] ? __pfx_xfrm_output_resume+0x10/0x10 [ 774.866859][ C0] ? iptfs_get_inner_mtu+0xa0/0x210 [ 774.872147][ C0] ? __asan_memset+0x22/0x50 [ 774.876801][ C0] ? xfrm_output+0xa03/0x1ca0 [ 774.881572][ C0] iptfs_delay_timer+0x3803/0x4310 [ 774.886779][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 774.892335][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 774.897431][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 774.902912][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 774.908792][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 774.914339][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 774.919620][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 774.924827][ C0] handle_softirqs+0x265/0x8d0 [ 774.929665][ C0] run_ksoftirqd+0x36/0x60 [ 774.934152][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 774.939153][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 774.944259][ C0] kthread+0x38b/0x480 [ 774.948374][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 774.953904][ C0] ? __pfx_kthread+0x10/0x10 [ 774.958548][ C0] ret_from_fork+0x514/0xb70 [ 774.963204][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 774.968372][ C0] ? __switch_to+0xc78/0x1410 [ 774.973146][ C0] ? __pfx_kthread+0x10/0x10 [ 774.977788][ C0] ret_from_fork_asm+0x1a/0x30 [ 774.982639][ C0] [ 774.985702][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 774.992985][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 775.002178][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 775.012230][ C0] Call Trace: [ 775.015508][ C0] [ 775.018439][ C0] vpanic+0x26f/0x710 [ 775.022428][ C0] panic+0xc5/0xd0 [ 775.026152][ C0] ? __pfx_panic+0x10/0x10 [ 775.030578][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 775.035524][ C0] __warn+0x315/0x4c0 [ 775.039503][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 775.044888][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 775.050277][ C0] __report_bug+0x276/0x570 [ 775.054787][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 775.060164][ C0] ? __pfx___report_bug+0x10/0x10 [ 775.065202][ C0] ? lock_acquire+0x115/0x350 [ 775.069886][ C0] ? netlink_has_listeners+0x77/0x3f0 [ 775.075275][ C0] ? xfrm_aevent_is_on+0x18/0x230 [ 775.080330][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 775.085717][ C0] report_bug+0x16b/0x220 [ 775.090060][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 775.095432][ C0] ? xfrm_output_resume+0x41db/0x64e0 [ 775.100824][ C0] handle_bug+0x9c/0x200 [ 775.105085][ C0] exc_invalid_op+0x1a/0x50 [ 775.109606][ C0] asm_exc_invalid_op+0x1a/0x20 [ 775.114457][ C0] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 775.120446][ C0] Code: be b5 01 00 00 48 c7 c2 20 ff 53 8d e8 b0 d6 06 f7 e9 aa fc ff ff e8 06 85 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 f8 84 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 f7 e0 51 fa 84 c0 0f 84 e1 00 [ 775.140045][ C0] RSP: 0000:ffffc90000147660 EFLAGS: 00010246 [ 775.146105][ C0] RAX: ffffffff8a9d8c78 RBX: 0000000000000000 RCX: ffff88801eed1f40 [ 775.154069][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 775.162045][ C0] RBP: ffffc900001478f0 R08: 0000000000000100 R09: 1ffffffff237bff7 [ 775.170028][ C0] R10: dffffc0000000000 R11: fffffbfff237bff8 R12: dffffc0000000000 [ 775.178004][ C0] R13: ffff88802c5bd918 R14: ffff888055c40350 R15: ffff888058aea000 [ 775.185978][ C0] ? xfrm_output_resume+0x41d8/0x64e0 [ 775.191402][ C0] ? __pfx_xfrm_output_resume+0x10/0x10 [ 775.196968][ C0] ? iptfs_get_inner_mtu+0xa0/0x210 [ 775.202189][ C0] ? __asan_memset+0x22/0x50 [ 775.206797][ C0] ? xfrm_output+0xa03/0x1ca0 [ 775.211497][ C0] iptfs_delay_timer+0x3803/0x4310 [ 775.216703][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 775.222185][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 775.227220][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 775.232620][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 775.238449][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 775.243921][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 775.249156][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 775.254286][ C0] handle_softirqs+0x265/0x8d0 [ 775.259123][ C0] run_ksoftirqd+0x36/0x60 [ 775.263556][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 775.268510][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 775.273596][ C0] kthread+0x38b/0x480 [ 775.277677][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 775.283143][ C0] ? __pfx_kthread+0x10/0x10 [ 775.287746][ C0] ret_from_fork+0x514/0xb70 [ 775.292357][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 775.297477][ C0] ? __switch_to+0xc78/0x1410 [ 775.302172][ C0] ? __pfx_kthread+0x10/0x10 [ 775.306781][ C0] ret_from_fork_asm+0x1a/0x30 [ 775.311570][ C0] [ 775.314744][ C0] Kernel Offset: disabled [ 775.319060][ C0] Rebooting in 86400 seconds..