last executing test programs: 5m35.065427236s ago: executing program 2 (id=965): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000018b087d76c6ac462f543e59598dd0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r3}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000100940)={&(0x7f0000100840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x3, [@restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @datasec={0x5, 0x1, 0x0, 0xf, 0x2, [{0x5, 0xdd17, 0x9}], "ca28"}]}, {0x0, [0x5f]}}, &(0x7f00001008c0)=""/126, 0x43, 0x7e, 0x0, 0x9, 0x10000}, 0x28) (async) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) r7 = socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x1, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x0, 0x0, {@ip4=@multicast2, 0x800}}}]}, 0x38}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r7) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r7, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400600027c035c9cc652bdcea3ea5a7134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecb84ec95ee5de6ccd40dd6e4f1ef3d93452a92782f9ffcdb020e6f3baf432b25a55e08", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4c000) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 5m34.008937963s ago: executing program 2 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x4dd, &(0x7f0000000540)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "e6987b", 0x4a7, 0x2f, 0xff, @private2, @rand_addr=' \x01\x00', {[@srh={0x8, 0x2, 0x4, 0x1, 0x4, 0x50, 0xd5ee, [@remote]}, @dstopts={0x3a, 0x7, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x3, [0x4, 0x4, 0x5, 0x400, 0x3]}}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0xd2}]}, @routing={0x5e, 0x12, 0x1, 0xf, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local, @private1, @loopback, @loopback, @empty, @mcast1, @empty, @loopback]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xbc, 0x3, [], "35cda6d4c69dec05691be26e6a3c3aaa8322c7bbdb745596cfabc1486ee3dff70feac2dc47218f6687deb9ab63fc1e4f1a0a83955fa1c5a88761bbeea79ae987a0521bab82d392f1ed343f5637105b93e731321d538a9921b2f142fb1094ec1480ff93ab1cef9306e8ca03e5b4784533ab8ef8c7ce6b35144e2afa87b5ced026e31536ef8c4d357d62426a0613e516366d8f67c9736d6f45ec4aeebb86487f945da777d81977e92e45067abb1909dd617478ad59f68365fba7ac1f10"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x0], "12c05c971c1a68c376e0d52de9a7923248406271568a2156eaab1b36624c8df28dba1dd0e9d2a703943f14c2c09f787e2e8940628489060e5c87c68d6bda008df6c5e523e2c2591ad7464a5527e8fa2b98229bb92d062a55e5dc7d32095f62e2555764c2c238634140fda058e59e0b3436f3dbe78914b2eac06f8a61aac0930d1d798dc6977f9f34584d92718c0a29d7855457d4f45206e299c1d3ff5057c50f07f6e6a1c6c34e927f7ae72f557be6c3f466838b39588f667ba48d08d82a244f24d7655c36d020b6c0"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "ef4f6b94ac7bf62233422b9702d51ce2536d3be15e9de130f2ee6412451652255266813895767e8faa84e5b4c506ce9cd6ef6f033c99a4e63cade2ea2e0a78d2b9168b5b877cd5d12be9407f82342b664c97b4ee09ca4feede08091d64387560a5240ddfa52cabef5fb30f07db2a6c445f93b0cb38da1a89212dd8ca9cb0c4f225b175e37a0cc2545e5cef29aa3325cf2024489e85b5c10a60933a44ac77a2bbebc0daf94ae762427331abc53d27df148f58fd4696776767d4ba66922fb2610d9f95883cf5afd2e4b2f9aaeda4a0134f507ca1cb0f3a19a25728854d28a47cf9f67c9836495ffe7b"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x8f, 0x2, 0x1, 0x3, 0x1, 0x1}, 0x1, {0x7fff}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0xbe, 0x3, 0x0, 0x1, 0x0, 0xf}, 0x2, {0x1, 0xa955, 0x1, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "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"}}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000100)=""/13, &(0x7f0000000140)=0xd) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r2, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x36}, {0x5, 0x8e, 0x1}}]}, 0x4c}}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_IFNAME={0x8, 0x3, 'vlan0\x00'}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e64300000001400028008000100000000000800020000000000"], 0x38}, 0x1, 0x0, 0x0, 0x86}, 0x0) (rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002f010000100001800a000200766c616e300000001400028008000100000000000800020000000000"], 0x38}, 0x1, 0x0, 0x0, 0x86}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1600060000000066db5fde6af4d5405079df33d5a72e2a64753b018657ce9bc85b8cb4205c08e028c643b3c644dbba6f5bbc8795cf4b21e1883b20", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000054000000060a01040000000000000000010000002c0004802800018008000100666962001c00028008000240000000030800034000000030080001400000000908000b40000000000900010073797a3000"], 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 5m32.81701572s ago: executing program 2 (id=975): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x4c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x40000) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x401c5820, &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r4, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000280)=r7}, 0x20) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000006c0)={@empty, @rand_addr, 0x0}, &(0x7f0000000700)=0xc) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000040000000000009d5fe6"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r10, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r11, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000500000000000000fb000000184400000800000000000000000000e118110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000086000000338020000800000018270000", @ANYRES32=r4, @ANYBLOB="00000000010000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x1, 0x64, &(0x7f0000000640)=""/100, 0x41100, 0x0, '\x00', r9, @fallback=0x8, r3, 0x8, &(0x7f0000000740)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x9, 0x7}, 0x10, r11, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000007c0)=[{0x2, 0x2, 0x5, 0xb}, {0x3, 0x4, 0xb, 0xa}, {0x4, 0x2, 0xa, 0xa}, {0x1, 0x2, 0xb, 0x2}, {0x2, 0x1, 0xf, 0xc}, {0x2, 0x3, 0x8, 0xb}, {0x4, 0x3, 0x2, 0x5}], 0x10, 0x100}, 0x94) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400804c) r12 = socket$unix(0x1, 0x5, 0x0) connect$unix(r12, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 5m30.995467602s ago: executing program 2 (id=979): setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0x1, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x88) r0 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x7, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e24, @private=0xa010100}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x4e23, @empty}}, 0x1a8, 0x6, 0x4, 0xb, 0xb8, 0x8, 0x10}, 0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000c80)={&(0x7f0000000300), 0xc, &(0x7f0000000c40)={&(0x7f0000000340)={0x8f0, 0x0, 0x302, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x43}}}}, [@NL80211_ATTR_NAN_FUNC={0x98, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x7e, 0xb, "7357a2f78772268a8f851645ae97142346cd84d687a98ff5de3e70934b710cbf0d2a922bc40f0ec0decb77d8abd8b5d93932689af7cc74ba5f52df7411b0afee40d2d0f77cac95c51d5425d00d49e45e3f8e9cf833ac78d0ba15c26e433b86d1f359c8e0ad281e24e2a3d5af93fbafe545b79bac127799f54a82"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "19089c42e2f5"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x4b4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "76e5d3cf77ab"}, @NL80211_NAN_FUNC_SRF={0x290, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x18}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xa0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5d}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xc}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3}, @NL80211_NAN_FUNC_SRF={0x1e0, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}]}]}]}, @NL80211_ATTR_NAN_FUNC={0x384, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1}, @NL80211_NAN_FUNC_SRF={0x374, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "6654e768ded37e3de5b224b6c4d98d1a652e363b98004069c09aed8c1b198a9d4d8209bdb8f0c8edb0a5f79800de81e8ea31df53f1b6b408f7dc4047d88aba7b6c35ee22bdf4e5e695b4e5767e2597d4ee3194709050fad3c1599fae7b528957a8533227f2b16311a88f9a8837e22437c665ca643d506ef0a08910dfc3b431bb09845ea3e47f793c9f2bba487dab15500811ecabd4662e6b854b2c5a3c728cdd876e8d7261cbd868020a1c9aa6fffe48cc522e1c8bbb8f407084da0455139497347f617f41d3587b7b1a655f866873a1c25ab72d66398125dbfb06f62f296b94c1a075c4dc61d77de0fda9508e4c9e03212490a51507bda3d445f8b3e9db42"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}]}, 0x8f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4400) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r3) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6a}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17f}]}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x1) r5 = socket$rxrpc(0x21, 0x2, 0x0) connect$rxrpc(r5, &(0x7f0000000e40)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000e80)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), r6) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x40, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044005}, 0x40000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001140)={r1, @in6={{0xa, 0x4e21, 0x8000, @private1, 0x2}}, 0xf8000000, 0x49, 0x8, 0x9, 0x71, 0x5, 0x4}, &(0x7f0000001200)=0x9c) syz_genetlink_get_family_id$team(&(0x7f0000001240), r3) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000001280), &(0x7f00000012c0)=0x4) ioctl$XFS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000001300)) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r9, 0x11, 0x1, &(0x7f0000001340)=0xfffffffc, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x54, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8801}, 0x4008844) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000014c0)=0x41, 0x4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x94, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fa9c36a8c1eabd89d03ae04346d03daf193cca562e136946d2becace5389838f"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "68650f19f513c23e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="390812459d7a71b7f1154724fc14e0dd"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d40b9809fa94f0929348073da400aed76dafa0dc6f6078a9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "66e9956ae0b9ffed"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fb85c98094c670ce"}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r6) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001700)={0x1a4, r10, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7699}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5cc8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd49}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf9a}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7dab4cd7}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001980), r3) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x88060200}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0xac, r11, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x70}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x21}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xab91c68c4c17044b}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff0}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) 5m29.560280763s ago: executing program 2 (id=983): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000040)=0x1c, 0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) (async) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040), 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) (async) syz_emit_ethernet(0xae, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd6000000000783afffe8000000000000000000000000000bbfe8000000000000000000000000000aa86009078000000000000000000000000010aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad965723f7c61d31a78f1082af26a247d2f29269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af250200010000000500"], 0x0) 5m28.333332578s ago: executing program 2 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003040)="2e00000011008188040f80ec59acbc0413a181b204000000000100000010e61e0e00dd2c0fd206f30f2ce1710b28", 0x2e}], 0x1}, 0x24) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) 5m12.789064459s ago: executing program 32 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003040)="2e00000011008188040f80ec59acbc0413a181b204000000000100000010e61e0e00dd2c0fd206f30f2ce1710b28", 0x2e}], 0x1}, 0x24) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) 2m32.577620627s ago: executing program 3 (id=1494): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x12}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1000", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 2m31.357006532s ago: executing program 3 (id=1498): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) preadv(r3, 0x0, 0x0, 0x6, 0x433f) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000010409bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a3c001280110001006272696467655f736c617665000000002400058005001d000000000006001f00d5000000050008000000000005001c0001000000140003006272696467655f736c6176655f30"], 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x44800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5f, 0x1, '\x00'}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="1100018028705f0c0004800800020013449cc60828485f16a9d9ba50e1c5607e64f4fbb771e5de79be65f299a499bdde7c9520c5719172a355ed7a547aaef20fa23522d07a056baa3a8c018786b3a4868c4ce8800e2f8138d2604264ef5ac75cdd2daadb6b5569a8699a283188a0e50bf8d2e83874c53a"], 0x28}}, 0x300) 2m30.23978859s ago: executing program 3 (id=1504): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002cbd6800ffdbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x200008d0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000001f91da4fd7925a800b9622ba21e0000005f1d078100000000e3"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 2m29.292646433s ago: executing program 3 (id=1508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690036000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044054}, 0x4040) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x24, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, 0x24}}, 0x4008030) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) 2m28.671065478s ago: executing program 3 (id=1512): sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='s', 0x1, 0x40000, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) listen(r0, 0x80000000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "eccdeee2ce83c34a", "d737162c0c50c8044e8e6c68ad4e3ce6", "da7178c6", "e5c18512d0667a6d"}, 0x28) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60fd828000081101fc000000000000000000000000000000ff022a56da6a21f738b76f9164a1f71e000000000000", @ANYRESOCT], 0x0) 2m27.812633456s ago: executing program 3 (id=1515): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)="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", 0x188}], 0x1}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd5}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x268}}, 0x0) 2m11.987453756s ago: executing program 33 (id=1515): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)="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", 0x188}], 0x1}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd5}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000080)=ANY=[@ANYBLOB="684200000005010400000000000000000000000054020100000000000000000000000000000000007b39dd7af7aae0eb074a529575f68e2f748cf5d7b34cef736a4ea7a096d6c490c41c6c8e51f0844945225bcfed51723c6a0581cb8958518e367eeea60c1bad8ac0e195e7b07fd815eead4e993101619fa3ce666cb4ae43bef7125f7fff0ba1450581ed5097c7905c61cf9d339eabad20924234ae2785b098cb08a733c368a94b893e075596cd4502b1427ebf8ad3b184d2faeb1a0b77d5a3de3b14fc13eeb18484a7ed1dc4a2cfad68aaedd7a721eabaf9fedb43d9d88f83246202299ef6a20a7755eecee7bff9d051896345a97774879ad024fd114757ffeb9a97c4c35b8a0678158f404aa14eaf6f97bb34378920e69bd0a06b3a776a3e6f6c162c2189adc77d56767905e9c4b48c3dcf2208f1f1e2f6da11fd3b8ebf67d2e6719f61ecfab9b2b2a2d849fb7b4bae9cc230037b35c6a14c6948375734c84db387a8b50dc09fcadd02db6025efa95b72f908581e501e9b67566efd86395afa29687bdaa81c7a0136e98adf2aa2873e9f23246fa9defa18a42016e5e7cd83fde07dc31636e949ce293c44f2229c0421d68d22de1ce48ef2b60f8770497d056b93f5ba"], 0x268}}, 0x0) 15.428111768s ago: executing program 0 (id=1909): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aa2b77aaaa44aaaaaaaaaabb08004621002800680000e1de3c2121e486e3ac1414aa000000004e20"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x10, 0x803, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20004880) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 12.141123977s ago: executing program 0 (id=1916): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) sendmsg(r1, &(0x7f0000000b40)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x1, 0x1, {0xa, 0x4e22, 0x6, @private1, 0x5}}}, 0x80, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000001600)=ANY=[@ANYBLOB="850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010001d04000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="2100000000000000180012800000010077697265677561726400000000000280"], 0x38}, 0x1, 0x0, 0x0, 0x20040084}, 0x4000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0xa010100, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xd, 0x0, @void}}}}}}}}, 0x32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) 8.662314718s ago: executing program 1 (id=1921): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000700000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x0) 7.564359141s ago: executing program 1 (id=1922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x21, 0x0, 0x0, 0x2, 0x8, 0xb}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) (async) r3 = accept(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) (async) shutdown(r3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3}, 0x47) (async) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40802}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff38}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) 7.412587993s ago: executing program 6 (id=1923): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x6}}}}, 0x30}}, 0x0) 7.359754308s ago: executing program 4 (id=1924): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.738626404s ago: executing program 5 (id=1925): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x1800000, 0xffff, 0x5, 0x51, 0x9, 0x3, 0x3, {0x0, @in6={{0xa, 0x4e24, 0x7fffffff, @loopback, 0x80000000}}, 0x9, 0x1, 0x4, 0x1, 0xd}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={r1, 0xfffffc16}, 0x8) read(r0, &(0x7f0000000180)=""/115, 0x73) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) 6.616638672s ago: executing program 6 (id=1926): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="340000000000001072e122340000000063016e00000000009500000000000000b27db1c498c2c8b403dad92a130ceb7065a8ff8f3f72a3e7d45b0cb4d4767ec0bb7aa1d204cf5d299f955b1efa91461807936aa16e204d2c3fdaf878a6a5a27141c536c41db9a0cf07141cb900ffe1452da15063b8046e44efc66634db11ff22188f39bd103274ff931f1381a67e701d86"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6.446679658s ago: executing program 1 (id=1927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x2, 0xf0, 0x3}, 0xfe}, 0x18) sendmmsg(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002300)=@in6={0xa, 0x4e23, 0x7, @mcast1, 0x2}, 0x80, 0x0}}], 0x2, 0xf5) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r5 = getpid() accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x2, 0x5, 0x4) socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_generic(r0, &(0x7f0000001e40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="861acb3b56747cbf8f7d0403000000000000007bc9eef90714d31bfd527bfd62dea1964f2e3ba629bcf3fd980c7100675a5ffbea058fbba3c438db0cb370581f3a3174d3cf90b96db386837d3a6945496e431d22e27983d79c7e449734f60a123b4350006200426b2b45ba57bdaf77a149ace039c7aee82f07c79e45315817eda2b85849a1301f01adb673ceed03e1b2199c4ab75a8a01c13bf292d55d96504bebcbbb8aebdfbecc00"/178], 0x11c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r9, @ANYBLOB="0500330022"], 0x24}}, 0x18) 6.439830522s ago: executing program 0 (id=1928): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xb4, 0x15, 0x100, 0x70bd2d, 0x25dfdbdf, {0x9, 0xce}, [@INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "f438e72b8369c48d4d51b003001d67b0df5379e6660de700dd30bd70f9fa7000d356e093a5f8f15ed5c5303f75d1a0319853609412be24ec47752713a5a41b2a5882b315990bcedead5fed2db59d36f12c8ed782e6eaf0259ce94763d523bdb1e4121d6cbbc43a10a3c9052595db7d1185145082010066d02b6be4b24f1cf2afe9557221b637db86290800000000000000b56b367a95464d39bb"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0xfe62, &(0x7f0000000000), 0x1, 0x0, 0x0, 0xb305e06d8eb40273}, 0x20000840) 6.381066935s ago: executing program 4 (id=1929): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc500000000c0a010100000000000000000a00c8cebf56922000070900020073797a31000000000900010073797a310000000024000380200000800800034000000002140007800c000100636f756e7465720004000280040000001100010000000000000000000100000a9e4e2f2dd8079d93d226369833b2b555a0e0846060da"], 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x131000, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'team_slave_0\x00', {0x2, 0x4e24, @private=0xa010102}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x300000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002300)={r7, &(0x7f0000000780)="9593c737104914b57590b239984a5fa6156e4e6e3932daea618d6f0ebb58d02ee3f4c1e72f0ecab1874600e77a5335d129dfaa2db27cf60ce26c95fc57bb62806cb70b13757646438dd4776b894fa45c24c9e003640612a59a8d349c8dc31bf54c44baf126fb3f5c0175eddb490ba692a1246ffc4da1e82a3324dedd1dea6afbc89e649373aa7a17dfeba6f5933ba1dafad04e413e5e45d6d928d3117edc4df8e4f7ac09a591", &(0x7f0000001300)=""/4096}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r7, &(0x7f0000000000), 0x0}, 0x20) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x400000, 0x200}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x51}}]}, 0x38}}, 0x200088d0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) 5.879822003s ago: executing program 6 (id=1930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000600)={0x0, 0x8, 0x1, [0x58b, 0x7, 0x0, 0x9, 0xfffffffffffffffa], [0x1, 0x5, 0xfff, 0x2, 0x2, 0x9, 0x7fffffff, 0x8, 0x8, 0xab7, 0x5, 0x3, 0x3, 0x7, 0x3, 0x4, 0x5, 0x27, 0x4, 0x7fffffff, 0x7ff, 0x1467005a, 0x6, 0x5, 0x8, 0x40, 0x34f0, 0xc, 0x8000000000000000, 0x1ff, 0x8007, 0x400, 0x7, 0x8000, 0x80000001, 0xf92, 0x8000, 0x0, 0x5, 0x2, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7, 0x0, 0x8cb, 0x1, 0x0, 0x1, 0x3, 0x8, 0x1, 0x7, 0xa, 0x2, 0x6, 0x9, 0x0, 0x5, 0xbb8b, 0xb4, 0x4, 0x5, 0x1, 0x6ff, 0x4456, 0x6, 0x2, 0x5, 0x8, 0x5, 0x80000001, 0x8000000000000000, 0xfffffffffffffffc, 0x1, 0x5, 0x80000000, 0x1d, 0x7000, 0xc7, 0x1, 0x1000, 0xd9, 0xe, 0x7fffffffffffffff, 0x10da, 0xd, 0x0, 0x1, 0x4, 0x100, 0x2, 0x3, 0xb, 0xd2, 0xfffffffffffffffc, 0x8, 0x5, 0x1, 0xb, 0x9, 0x4, 0x5, 0x4, 0x6, 0x9, 0xfffffffffffffffc, 0x10001, 0x5, 0x8, 0x7ff, 0xffff, 0x1, 0x800, 0xe954, 0x4, 0x80, 0x6, 0x4, 0x2, 0x2, 0x10]}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x6, 0x0, 0x4, 0x1, 0x5646, 0x4, 0x10000101}, 0x20) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000a40)={r1, 0x8, 0xfffffffffffffff7, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) (async) ioctl$FITHAW(r0, 0xc0045878) 5.857218013s ago: executing program 5 (id=1931): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(r1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, 0x0, 0x0, 0x20040000, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080", @ANYBLOB], 0x158}}, 0x4000) (async) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101002, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000000c0)=0x41) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000080)={@broadcast, @multicast1, @rand_addr=0x64010102}, 0xc) (async) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7e7a, 0x0, 0xffffffffffffffff, 0xc000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%+9llu \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2100000000290200000000000000", @ANYRES32=0x1, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000300"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000100)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xc}, @jmp={0x5, 0x1, 0x9, 0xb, 0xb, 0x18, 0xfffffffffffffff0}], &(0x7f0000000200)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xb, 0x8, 0xa202}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000480)=[r5, r6, r7], &(0x7f00000004c0)=[{0x0, 0x5, 0x10, 0x9}, {0x1, 0x3, 0x5, 0xb}, {0x1, 0x5, 0x2, 0xa}, {0x2, 0x2, 0xf, 0x4}, {0x4, 0x2, 0x9, 0x9}], 0x10, 0xfc40}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) (async) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) 5.624301484s ago: executing program 0 (id=1932): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000001600)="2700000014000707030e0000120f0a000000008a151f7508003900000000000000000000000200", 0x27) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x800) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x2, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}, "fcffffffffffffff"}}}, 0x46) 4.871109944s ago: executing program 6 (id=1933): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x11) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000140)=0x4) 4.839991581s ago: executing program 5 (id=1934): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002b40)={r2, &(0x7f0000001a80), 0x0}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000340)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x2, '\x00', r3, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x21, 0x46, 0x1, 0x4010, r2, 0x1, '\x00', 0x0, r5, 0x0, 0x1, 0x4, 0xa}, 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001e00010000000000e0ffffff0100000003000007000000000800080000000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r6}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x5, [@enum={0x2e, 0xa, 0x0, 0x6, 0x4, [{0x1, 0x2}, {0xd, 0x4}, {0xd, 0x9}, {0x7, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0xa, 0x7}, {0xb, 0xfffffbfa}, {0x7, 0x4}, {0x2, 0x9}]}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61, 0x0]}}, 0x0, 0x91, 0x0, 0x0, 0x2}, 0x28) (async) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2401000041000100fcff07000400000002000000040048800c0101800801108004010f"], 0x124}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="9b0f2bbd7000ffdbdf2d010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 4.656837566s ago: executing program 4 (id=1935): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r2}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0xc0000) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r7, 0x106, 0x1, 0x0, &(0x7f0000000400)) poll(&(0x7f0000000180)=[{r3, 0x280}, {r4, 0x80}, {r5, 0x2208}, {r6, 0x8053}], 0x4, 0x401) 3.550815083s ago: executing program 5 (id=1936): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x24000884}, 0x48041) accept$alg(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xffffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 3.391255124s ago: executing program 1 (id=1937): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x800, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x291c9}}, 0x20}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.816762539s ago: executing program 4 (id=1938): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xba}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000500"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001d0001002abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="08ed07090ae5fffffeffffffffff0000ebb0f238a4566bf14ba359672b0424f49bcf700d85f207be3fa2fe4a061c472a126f870dca6322d0ad"], 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) 2.691506951s ago: executing program 0 (id=1939): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f0000000140)=0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@deltaction={0x23c, 0x31, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff53}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x30000000}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf4}}, {0xfffffffffffffe70, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x51}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1800}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x23c}}, 0x8044) (async, rerun: 32) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x1, 0x4) 2.440891044s ago: executing program 6 (id=1940): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c00001800458014000400070000000000000003000000000000aa080001"], 0x34}}, 0x2004c000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000000020601dfff000000000000000c0000000c0007800800124000060000050001000600000005000a000a00000005d9338f000400000000000900020073797a310000000012000300686173683a6e65742c706f727400", @ANYRESDEC=r0], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x20000004) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000640)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000680)={'some', 0x20, 0x10, 0x20, 0x8}, 0x2f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c810}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r8) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r8) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x14, r9, 0xf03, 0x800}, 0x14}}, 0x20000080) pipe(0x0) preadv(r4, &(0x7f0000001e00)=[{&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f0000000700)=""/182, 0xb6}, {&(0x7f00000007c0)=""/168, 0xa8}, {&(0x7f0000000880)=""/240, 0xf0}, {&(0x7f0000000980)=""/216, 0xd8}, {&(0x7f0000000a80)=""/220, 0xdc}, {&(0x7f0000000b80)=""/246, 0xf6}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/112, 0x70}, {&(0x7f0000001d00)=""/241, 0xf1}], 0xa, 0x1, 0xd7) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60d2004000583a00fe800000000000000000000000000000fe8000000000000000006031c90900002b0000000000000000000000000000000000fc0100000000000000000000000000016c04040000000000fe880000000000000000000000000001fe8000000000000000000000000000bb"], 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f00), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x20, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0x20}}, 0x40004) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@rand_addr, @local}, &(0x7f0000000400)=0xc) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r1) sendmsg$SMC_PNETID_GET(r11, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, r12, 0xc, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000800}, 0x48841) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000100011ff040001000000000000800000", @ANYRES32=0x0, @ANYBLOB="0000000010900200200012800b0001006272696467650000100002800a001400aaaaaaaaaaaa0000"], 0x40}}, 0x0) 2.116572919s ago: executing program 5 (id=1941): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40001) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 2.107560958s ago: executing program 1 (id=1942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0xfffe, 0x9, 0x65, 0x7, 0xc, @local}, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) 1.533989843s ago: executing program 4 (id=1943): ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@dev, 0x0}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x98, 0x10, 0x100, 0x70bd29, 0xffffffea, {0x0, 0x0, 0xe403, r1, 0x3, 0x50404}, [@IFLA_PROP_LIST={0x0, 0x34, 0x0, 0x1, [{0x0, 0x35, 'macvtap0\x00'}, {0x0, 0x35, 'nr0\x00'}, {0x0, 0x35, 'batadv_slave_1\x00'}, {0x0, 0x35, 'bond0\x00'}, {0x0, 0x35, 'netdevsim0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) 980.538337ms ago: executing program 1 (id=1944): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0xa8, 0x260, 0xfeffffff, 0x140, 0x0, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x89e0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') 979.728955ms ago: executing program 0 (id=1945): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt(r1, 0x1, 0x3, &(0x7f0000000340)=""/66, &(0x7f0000000080)=0x42) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)=""/231, 0x1a, 0xe7, 0x1, 0x8ef8}, 0x28) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket(0x2d, 0x2, 0x0) connect$can_j1939(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="620ac4ff00000000711019000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c40001000000"], 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x200008c4) 601.877935ms ago: executing program 5 (id=1946): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fffdffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000004400000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 522.966415ms ago: executing program 4 (id=1947): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "d908746a36045c2e", "023514748964ddf450a779cb02db7cc4", "978d146c", "49e7a8917ed3b8da"}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(r5) close(r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="10", 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x29f, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010410000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b7040000000000008500000008000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) 0s ago: executing program 6 (id=1948): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r2, 0x2b5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x1, 0xb, 0x0, 0x3, 0x8000000000000010, 0x8}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r2, 0x2b5}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x1, 0xb, 0x0, 0x3, 0x8000000000000010, 0x8}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) kernel console output (not intermixed with test programs): 7.034114][ T6749] bridge_slave_0 (unregistering): left allmulticast mode [ 127.034758][ T6749] bridge_slave_0 (unregistering): left promiscuous mode [ 127.035216][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.121431][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 128.612910][ T6772] 8021q: adding VLAN 0 to HW filter on device team1 [ 129.081395][ T6789] netlink: 'syz.4.256': attribute type 1 has an invalid length. [ 129.952775][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 129.963428][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 129.972796][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 129.990673][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.021530][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.022912][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.023968][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.025019][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.026079][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.027111][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.030335][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.031449][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.032517][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.033536][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.034582][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.035601][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.036663][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.091274][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.092698][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.114047][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.115240][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.116306][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.124995][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.135049][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.142673][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.144267][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.154193][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.156524][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.157611][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.159762][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.196128][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.197921][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.233637][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.234966][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.236064][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.250530][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.258945][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.260342][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.275999][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.279521][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.290203][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.308566][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.321660][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.350570][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.351642][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.352789][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.391372][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.392687][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.393780][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.394812][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.395855][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.396723][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.398484][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.489373][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.490487][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.506050][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.538262][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.538610][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.538936][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.567383][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.577766][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.587667][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.598173][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.635181][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.670157][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 130.769707][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.263'. [ 131.103072][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 131.130932][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 131.159709][ T6827] netlink: 44 bytes leftover after parsing attributes in process `syz.0.264'. [ 131.317843][ T6828] bond6: option downdelay: invalid value (18446744073709551615) [ 131.330747][ T6828] bond6: option downdelay: allowed values 0 - 2147483647 [ 131.356287][ T6828] bond6 (unregistering): Released all slaves [ 131.365929][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 131.411335][ T6835] xt_hashlimit: size too large, truncated to 1048576 [ 132.797684][ T6869] netlink: 'syz.2.272': attribute type 21 has an invalid length. [ 132.797731][ T6869] netlink: 128 bytes leftover after parsing attributes in process `syz.2.272'. [ 132.797863][ T6869] netlink: 'syz.2.272': attribute type 5 has an invalid length. [ 132.797883][ T6869] netlink: 'syz.2.272': attribute type 6 has an invalid length. [ 132.797899][ T6869] netlink: 3 bytes leftover after parsing attributes in process `syz.2.272'. [ 133.184003][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.184278][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.042224][ T6954] xt_hashlimit: size too large, truncated to 1048576 [ 135.200469][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.256954][ T6958] netlink: 'syz.1.285': attribute type 58 has an invalid length. [ 135.256998][ T6958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.285'. [ 135.268420][ T6956] bridge_slave_0 (unregistering): left allmulticast mode [ 135.268451][ T6956] bridge_slave_0 (unregistering): left promiscuous mode [ 135.269971][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.327819][ T6970] netlink: 14 bytes leftover after parsing attributes in process `syz.4.289'. [ 136.421830][ T6978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.599477][ T6985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.293'. [ 136.810325][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 137.506054][ T7004] syzkaller1: entered promiscuous mode [ 137.506779][ T7004] syzkaller1: entered allmulticast mode [ 137.574975][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 137.628346][ T7007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.186462][ T7019] bond2 (unregistering): Released all slaves [ 138.865450][ T7041] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 138.865495][ T7041] netlink: 'syz.3.309': attribute type 7 has an invalid length. [ 138.865536][ T7041] netlink: 'syz.3.309': attribute type 8 has an invalid length. [ 138.865553][ T7041] netlink: 208 bytes leftover after parsing attributes in process `syz.3.309'. [ 138.865573][ T7041] NCSI netlink: No device for ifindex 67174448 [ 139.527663][ T7060] Bluetooth: MGMT ver 1.23 [ 139.867226][ T7076] netlink: 'syz.0.318': attribute type 97 has an invalid length. [ 139.867271][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 139.867311][ T7076] netlink: 'syz.0.318': attribute type 97 has an invalid length. [ 139.868383][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 140.006951][ T7081] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.320'. [ 140.066301][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.318'. [ 140.131136][ T7088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.320'. [ 141.354767][ T7128] __nla_validate_parse: 2 callbacks suppressed [ 141.354822][ T7128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.329'. [ 141.550668][ T7130] netlink: 224 bytes leftover after parsing attributes in process `syz.4.332'. [ 141.766974][ T7140] netlink: 'syz.1.335': attribute type 2 has an invalid length. [ 141.845518][ T7138] netlink: 'syz.2.334': attribute type 11 has an invalid length. [ 141.886230][ T7142] netlink: 224 bytes leftover after parsing attributes in process `syz.4.332'. [ 142.197217][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 142.257648][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 142.577147][ T7158] veth1_to_bond: entered allmulticast mode [ 142.699769][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 142.884193][ T7158] veth1_to_bond (unregistering): left allmulticast mode [ 143.001022][ T7158] bond0: (slave bond_slave_1): Releasing backup interface [ 143.274244][ T7163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.084089][ T7160] ip_tables: iptables: counters copy to user failed while replacing table [ 144.128940][ T7192] openvswitch: netlink: IPv4 tun info is not correct [ 144.317479][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 144.420909][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 145.277200][ T7224] netlink: 80 bytes leftover after parsing attributes in process `syz.1.353'. [ 145.296491][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 146.158243][ T7263] netlink: 'syz.0.359': attribute type 32 has an invalid length. [ 146.643408][ T7274] __nla_validate_parse: 9 callbacks suppressed [ 146.654077][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 147.114891][ T7289] syz_tun: entered allmulticast mode [ 147.164647][ T7289] sctp: [Deprecated]: syz.2.369 (pid 7289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.164647][ T7289] Use struct sctp_sack_info instead [ 147.320050][ T7295] netlink: 'syz.0.371': attribute type 1 has an invalid length. [ 147.320291][ T7295] netlink: 192 bytes leftover after parsing attributes in process `syz.0.371'. [ 147.320310][ T7295] netlink: 33 bytes leftover after parsing attributes in process `syz.0.371'. [ 148.183736][ T7312] netlink: 40 bytes leftover after parsing attributes in process `syz.0.376'. [ 148.327149][ T7312] vlan2: entered allmulticast mode [ 148.327231][ T7312] bond0: entered allmulticast mode [ 148.327269][ T7312] bond_slave_0: entered allmulticast mode [ 148.327291][ T7312] bond_slave_1: entered allmulticast mode [ 148.392014][ T7318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.379'. [ 148.976750][ T7326] netlink: 116 bytes leftover after parsing attributes in process `syz.3.381'. [ 149.485705][ T7347] netlink: 240 bytes leftover after parsing attributes in process `syz.4.386'. [ 149.510225][ T7347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.386'. [ 149.523109][ T7347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.386'. [ 149.566236][ T7357] netlink: 240 bytes leftover after parsing attributes in process `syz.4.386'. [ 149.921900][ T7361] netlink: 'syz.1.387': attribute type 1 has an invalid length. [ 151.644403][ T7399] netlink: 'syz.1.398': attribute type 21 has an invalid length. [ 151.715500][ T7401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.823712][ T7401] bond0 (unregistering): Released all slaves [ 151.887799][ T7399] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 151.993579][ T12] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 152.071300][ T12] bond2: now running without any active interface! [ 152.727842][ T7439] __nla_validate_parse: 8 callbacks suppressed [ 152.732886][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 152.859495][ T7439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.133160][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'. [ 153.456205][ T7463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.413'. [ 153.617299][ T7470] netlink: 48 bytes leftover after parsing attributes in process `syz.4.414'. [ 153.808714][ T7463] ip6gre1: entered promiscuous mode [ 153.808789][ T7463] ip6gre1: entered allmulticast mode [ 153.865171][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 153.895011][ T7476] netlink: 65011 bytes leftover after parsing attributes in process `syz.0.415'. [ 154.456253][ T7486] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 155.157044][ T7500] x_tables: duplicate underflow at hook 3 [ 155.437353][ T7509] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 155.451381][ T7509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.607927][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.429'. [ 155.830103][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.430'. [ 156.057349][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.430'. [ 156.057548][ T7523] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 156.886302][ T7557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'. [ 156.991590][ T7551] netlink: 'syz.1.438': attribute type 6 has an invalid length. [ 157.154568][ T7551] netlink: 'syz.1.438': attribute type 6 has an invalid length. [ 157.451181][ T7563] bond3 (unregistering): Released all slaves [ 157.658052][ T5277] veth1_vlan: left promiscuous mode [ 157.750677][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.775334][ T735] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.776852][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.776898][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.945331][ T7616] __nla_validate_parse: 4 callbacks suppressed [ 158.945392][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 159.346277][ T7628] netlink: 'syz.1.454': attribute type 18 has an invalid length. [ 159.355974][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 159.482519][ T7628] netlink: 'syz.1.454': attribute type 18 has an invalid length. [ 159.502283][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 160.037776][ T7649] netlink: 'syz.3.457': attribute type 1 has an invalid length. [ 160.540149][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 160.732941][ T7649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.870095][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 161.030363][ T735] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.030446][ T735] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.030504][ T735] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.030545][ T735] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.225323][ T7659] tipc: Started in network mode [ 161.225378][ T7659] tipc: Node identity ac14140f, cluster identity 4711 [ 161.297447][ T7659] tipc: New replicast peer: 255.255.255.255 [ 161.336356][ T7659] tipc: Enabled bearer , priority 10 [ 161.361494][ T7688] netlink: 40 bytes leftover after parsing attributes in process `syz.1.463'. [ 161.368663][ T7689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.463'. [ 161.427250][ T7688] netlink: 'syz.1.463': attribute type 2 has an invalid length. [ 161.427509][ T7688] netlink: 156 bytes leftover after parsing attributes in process `syz.1.463'. [ 161.520631][ T7693] netlink: 'syz.3.464': attribute type 83 has an invalid length. [ 161.539029][ T7693] netlink: 'syz.3.464': attribute type 83 has an invalid length. [ 161.539657][ T7693] netlink: 'syz.3.464': attribute type 83 has an invalid length. [ 161.539921][ T7693] netlink: 'syz.3.464': attribute type 83 has an invalid length. [ 162.171499][ T7710] netlink: 56 bytes leftover after parsing attributes in process `syz.4.468'. [ 162.310122][ T7712] validate_nla: 61 callbacks suppressed [ 162.310404][ T7712] netlink: 'syz.0.469': attribute type 1 has an invalid length. [ 162.385365][ T7717] netlink: 'syz.0.469': attribute type 10 has an invalid length. [ 162.385408][ T7717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.469'. [ 162.576132][ T7723] netlink: 'syz.3.472': attribute type 7 has an invalid length. [ 162.636027][ T7712] bond1: option mode: invalid value (16) [ 162.648432][ T7712] bond1 (unregistering): Released all slaves [ 162.723297][ T7717] dummy0: entered promiscuous mode [ 162.752717][ T5739] tipc: Node number set to 2886997007 [ 163.300297][ T7733] netlink: zone id is out of range [ 163.300549][ T7733] netlink: zone id is out of range [ 163.300559][ T7733] netlink: zone id is out of range [ 163.300565][ T7733] netlink: zone id is out of range [ 163.300571][ T7733] netlink: zone id is out of range [ 163.300578][ T7733] netlink: zone id is out of range [ 163.300788][ T7733] netlink: zone id is out of range [ 163.300796][ T7733] netlink: zone id is out of range [ 163.300803][ T7733] netlink: zone id is out of range [ 163.300810][ T7733] netlink: zone id is out of range [ 164.007233][ T7757] syzkaller0: entered promiscuous mode [ 164.007279][ T7757] syzkaller0: entered allmulticast mode [ 164.039998][ T7754] netlink: 'syz.2.482': attribute type 39 has an invalid length. [ 164.390192][ T7768] syzkaller0: entered promiscuous mode [ 164.390240][ T7768] syzkaller0: entered allmulticast mode [ 164.481559][ T7763] tipc: Enabled bearer , priority 0 [ 164.518419][ T7762] tipc: Resetting bearer [ 164.889452][ T7762] tipc: Disabling bearer [ 165.405880][ T7802] __nla_validate_parse: 5 callbacks suppressed [ 165.415023][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 165.681891][ T7800] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.694830][ T7800] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.976953][ T7819] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 166.357206][ T7817] vlan2: entered promiscuous mode [ 166.367898][ T7817] bridge0: entered promiscuous mode [ 166.380010][ T7824] netlink: 'syz.4.502': attribute type 9 has an invalid length. [ 166.380248][ T7824] netlink: 'syz.4.502': attribute type 4 has an invalid length. [ 166.405425][ T7825] netlink: 'syz.4.502': attribute type 9 has an invalid length. [ 166.405663][ T7825] netlink: 'syz.4.502': attribute type 4 has an invalid length. [ 166.627609][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 167.254470][ T7804] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.267099][ T7804] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.483727][ T7804] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.506765][ T7804] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.710796][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 167.813771][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.508'. [ 167.830903][ T7804] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.844312][ T7804] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.951977][ T7855] netlink: 'syz.1.507': attribute type 4 has an invalid length. [ 167.961440][ T7855] netlink: 'syz.1.507': attribute type 7 has an invalid length. [ 168.060991][ T7843] netlink: 64 bytes leftover after parsing attributes in process `syz.1.507'. [ 168.319354][ T7860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.513'. [ 168.526615][ T7864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 168.740703][ T7868] netlink: 44 bytes leftover after parsing attributes in process `syz.1.514'. [ 168.761855][ T60] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.772399][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.777388][ T7878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.517'. [ 168.792866][ T7867] syzkaller0: entered promiscuous mode [ 168.793372][ T7867] syzkaller0: entered allmulticast mode [ 168.915970][ T7880] xt_l2tp: v2 doesn't support IP mode [ 169.197509][ T27] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.197595][ T27] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.208904][ T27] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.208943][ T27] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.349613][ T27] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.349665][ T27] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.383128][ T7884] net_ratelimit: 498 callbacks suppressed [ 169.383380][ T7884] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 169.448746][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.524'. [ 169.979831][ T53] Bluetooth: hci0: command 0x0c20 tx timeout [ 169.986262][ T4932] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 170.287348][ T7906] netlink: Only one type of NAT may be specified [ 170.287403][ T7906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.427003][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 171.030150][ T7922] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 171.146988][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.532'. [ 171.147032][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.532'. [ 171.422713][ T7931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'. [ 171.849696][ T7931] can: request_module (can-proto-3) failed. [ 171.874087][ T7942] netlink: 72 bytes leftover after parsing attributes in process `syz.0.534'. [ 172.845387][ T7971] netlink: 312 bytes leftover after parsing attributes in process `syz.2.542'. [ 172.865841][ T4932] Bluetooth: hci3: command tx timeout [ 173.005963][ T7975] netlink: 'syz.1.540': attribute type 4 has an invalid length. [ 173.262327][ T764] wlan1: Trigger new scan to find an IBSS to join [ 173.876499][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 173.876625][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.545'. [ 173.951450][ T8000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.100956][ T8007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.549'. [ 174.518343][ T60] IPVS: starting estimator thread 0... [ 174.640682][ T8014] IPVS: using max 24 ests per chain, 57600 per kthread [ 178.269097][ T764] wlan1: Creating new IBSS network, BSSID fa:ad:43:05:92:dc [ 178.383956][ T8040] netlink: 136 bytes leftover after parsing attributes in process `syz.2.556'. [ 178.626060][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.559'. [ 178.805334][ T8066] netlink: 'syz.3.560': attribute type 10 has an invalid length. [ 179.621189][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.565'. [ 179.759085][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 179.802510][ T8094] netlink: 'syz.0.567': attribute type 2 has an invalid length. [ 180.221429][ T8083] netlink: 288 bytes leftover after parsing attributes in process `syz.2.565'. [ 180.221727][ T8092] netlink: 288 bytes leftover after parsing attributes in process `syz.2.565'. [ 180.534461][ T8109] netlink: 68 bytes leftover after parsing attributes in process `syz.1.570'. [ 180.817782][ T8129] syzkaller0: entered promiscuous mode [ 180.825604][ T8129] syzkaller0: entered allmulticast mode [ 180.847365][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.572'. [ 180.871372][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.572'. [ 180.871778][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.572'. [ 180.877225][ T8121] sctp: [Deprecated]: syz.2.573 (pid 8121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.877225][ T8121] Use struct sctp_sack_info instead [ 180.878362][ T8126] sctp: [Deprecated]: syz.2.573 (pid 8126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.878362][ T8126] Use struct sctp_sack_info instead [ 182.865637][ T8099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.250042][ T8151] netlink: 'syz.0.578': attribute type 3 has an invalid length. [ 183.739556][ T8175] __nla_validate_parse: 32 callbacks suppressed [ 183.739803][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'. [ 184.066801][ T8154] syzkaller1: entered promiscuous mode [ 184.066849][ T8154] syzkaller1: entered allmulticast mode [ 184.274645][ T8182] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 184.620547][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 185.080141][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 185.119922][ T8205] gretap2: entered promiscuous mode [ 185.326599][ T8224] netlink: 120 bytes leftover after parsing attributes in process `syz.1.592'. [ 185.329213][ T8212] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 185.329468][ T8212] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 185.329690][ T8212] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 185.333710][ T8212] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 185.356056][ T8212] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 185.356332][ T8212] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 185.356581][ T8212] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 185.356825][ T8212] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 185.357097][ T8212] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 185.357352][ T8212] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 186.562565][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.562617][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.804721][ T8264] netlink: 10 bytes leftover after parsing attributes in process `syz.0.601'. [ 187.264905][ T8277] tipc: Started in network mode [ 187.265182][ T8277] tipc: Node identity ac141441, cluster identity 9 [ 187.286209][ T8277] tipc: Enabled bearer , priority 10 [ 187.771906][ T8301] xt_hashlimit: size too large, truncated to 1048576 [ 187.948607][ T8310] netlink: 104 bytes leftover after parsing attributes in process `syz.4.616'. [ 187.964194][ T8312] netlink: 104 bytes leftover after parsing attributes in process `syz.4.616'. [ 188.211274][ T8317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.325530][ T8317] netlink: 92 bytes leftover after parsing attributes in process `syz.1.618'. [ 188.379495][ T7100] tipc: Node number set to 2886997057 [ 188.687440][ T735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.687492][ T735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.702166][ T8323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.827995][ T8327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.946375][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.625'. [ 189.178605][ T8331] bond2: (slave gretap1): making interface the new active one [ 189.194263][ T8331] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 189.247814][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.626'. [ 189.576128][ T8346] x_tables: duplicate underflow at hook 2 [ 189.624391][ T8347] netlink: 164 bytes leftover after parsing attributes in process `syz.1.628'. [ 189.628814][ T8351] x_tables: duplicate underflow at hook 2 [ 189.642310][ T8347] netlink: 164 bytes leftover after parsing attributes in process `syz.1.628'. [ 189.642363][ T8347] netlink: 60 bytes leftover after parsing attributes in process `syz.1.628'. [ 190.595638][ T8388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.635'. [ 190.686741][ T8384] xt_bpf: check failed: parse error [ 190.897241][ T8395] netlink: 72 bytes leftover after parsing attributes in process `syz.2.636'. [ 190.897443][ T8395] netlink: 72 bytes leftover after parsing attributes in process `syz.2.636'. [ 190.974567][ T8397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.590664][ T32] audit: type=1804 audit(1788993757.304:2): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.640" name="/newroot/125/cgroup.controllers" dev="tmpfs" ino=658 res=1 errno=0 [ 191.590748][ T32] audit: type=1800 audit(1788993757.314:3): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.640" name="cgroup.controllers" dev="tmpfs" ino=658 res=0 errno=0 [ 191.935304][ T8424] ip_tables: iptables: counters copy to user failed while replacing table [ 192.184111][ T8430] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20000 [ 192.242317][ T8430] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 192.242376][ T8430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.505113][ T8443] syzkaller0: entered promiscuous mode [ 192.505157][ T8443] syzkaller0: entered allmulticast mode [ 192.637323][ T8442] validate_nla: 61 callbacks suppressed [ 192.644180][ T8442] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 193.110464][ T8458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.651'. [ 193.193551][ T8442] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.465210][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 193.506738][ T8467] netlink: zone id is out of range [ 193.506982][ T8467] netlink: zone id is out of range [ 193.507010][ T8467] netlink: zone id is out of range [ 193.507041][ T8467] netlink: zone id is out of range [ 193.507048][ T8467] netlink: zone id is out of range [ 193.507057][ T8467] netlink: zone id is out of range [ 193.507064][ T8467] netlink: zone id is out of range [ 193.507071][ T8467] netlink: zone id is out of range [ 193.507078][ T8467] netlink: zone id is out of range [ 193.507379][ T8467] netlink: zone id is out of range [ 194.626705][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.627001][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.245698][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 195.389466][ T8555] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 195.390225][ T8555] batman_adv: batadv0: Adding interface: gretap2 [ 195.390266][ T8555] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.390301][ T8555] batman_adv: batadv0: Interface activated: gretap2 [ 196.348584][ T8582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.674'. [ 196.378448][ T8584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.674'. [ 196.652398][ T8591] netlink: 40 bytes leftover after parsing attributes in process `syz.4.677'. [ 196.652445][ T8591] nbd: must specify at least one socket [ 196.916982][ T8600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.680'. [ 196.917251][ T8600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.680'. [ 196.917533][ T8600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.680'. [ 196.917754][ T8600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.680'. [ 196.917982][ T8600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.680'. [ 196.971926][ T8600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.680'. [ 197.078302][ T8609] netlink: 'syz.4.682': attribute type 10 has an invalid length. [ 197.140976][ T8601] erspan0: entered promiscuous mode [ 197.143146][ T8601] erspan0: entered allmulticast mode [ 197.215343][ T8609] team0: Device vxcan1 is of different type [ 197.645894][ T8629] netlink: 'syz.1.685': attribute type 10 has an invalid length. [ 198.615650][ T8655] blkio.reset_stats is deprecated [ 198.645395][ T8655] netlink: 'syz.4.691': attribute type 12 has an invalid length. [ 198.884669][ T8655] bond3: option primary_reselect: invalid value (255) [ 198.912166][ T8655] bond3 (unregistering): Released all slaves [ 200.490839][ T8720] __nla_validate_parse: 77 callbacks suppressed [ 200.498875][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'. [ 200.527318][ T8721] netlink: 132 bytes leftover after parsing attributes in process `syz.1.707'. [ 200.538443][ T8723] netlink: 132 bytes leftover after parsing attributes in process `syz.1.707'. [ 200.580393][ T8726] netlink: 'syz.4.709': attribute type 2 has an invalid length. [ 200.589374][ T8724] netlink: 'syz.4.709': attribute type 2 has an invalid length. [ 202.805280][ T8698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.093562][ T8742] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 203.107025][ T8741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 203.247573][ T8748] netlink: 596 bytes leftover after parsing attributes in process `syz.3.713'. [ 203.468981][ T8761] netlink: 44 bytes leftover after parsing attributes in process `syz.2.716'. [ 203.482816][ T8762] net_ratelimit: 3 callbacks suppressed [ 203.488692][ T8762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.847963][ T8764] IPVS: Scheduler module ip_vs_sip not found [ 204.084095][ T8776] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 204.308423][ T8776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.341416][ T8794] netlink: 36 bytes leftover after parsing attributes in process `syz.2.721'. [ 204.400089][ T8784] bond0: (slave geneve2): making interface the new active one [ 204.410669][ T8784] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 204.446609][ T8796] netlink: 'syz.0.724': attribute type 4 has an invalid length. [ 204.458689][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 204.878298][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 205.044635][ T8806] team0: entered promiscuous mode [ 205.044687][ T8806] team_slave_0: entered promiscuous mode [ 205.044920][ T8806] team_slave_1: entered promiscuous mode [ 205.166564][ T8816] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20001 [ 205.573937][ T8826] sctp: [Deprecated]: syz.2.734 (pid 8826) Use of int in max_burst socket option deprecated. [ 205.573937][ T8826] Use struct sctp_assoc_value instead [ 205.651158][ T8805] team0: left promiscuous mode [ 205.651410][ T8805] team_slave_0: left promiscuous mode [ 205.652384][ T8805] team_slave_1: left promiscuous mode [ 205.869979][ T8829] tipc: Started in network mode [ 205.870029][ T8829] tipc: Node identity ac14142f, cluster identity 4711 [ 205.870549][ T8829] tipc: Enabling of bearer rejected, failed to enable media [ 206.633464][ T8850] bridge2: entered promiscuous mode [ 206.633903][ T8850] bridge2: entered allmulticast mode [ 206.947362][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 206.947388][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 206.947427][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 206.953759][ T4932] Bluetooth: hci0: command 0x0c20 tx timeout [ 207.126309][ T8866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.743'. [ 207.172202][ T8866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.743'. [ 207.301823][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 207.700054][ T8887] 8021q: VLANs not supported on ip_vti0 [ 208.372512][ T8911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.756'. [ 208.415990][ T8912] netlink: 104 bytes leftover after parsing attributes in process `syz.3.755'. [ 208.610817][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 208.617245][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 208.638327][ T8914] netlink: 52 bytes leftover after parsing attributes in process `syz.1.758'. [ 208.679177][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.757'. [ 208.901834][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.761'. [ 209.093406][ T8929] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20000 [ 209.130614][ T8926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.268893][ T8931] vlan1: entered promiscuous mode [ 209.269220][ T8931] bond5: entered promiscuous mode [ 209.281679][ T8931] vlan1: entered allmulticast mode [ 209.281705][ T8931] bond5: entered allmulticast mode [ 209.366549][ T8928] bond5: (slave gtp1): refused to change device type [ 209.908286][ T8963] netlink: 'syz.4.769': attribute type 3 has an invalid length. [ 210.236064][ T5634] Bluetooth: hci3: link tx timeout [ 210.236428][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.265855][ T5620] Bluetooth: hci3: link tx timeout [ 210.265895][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.271434][ T5620] Bluetooth: hci3: link tx timeout [ 210.271457][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.280613][ T5620] Bluetooth: hci3: link tx timeout [ 210.280634][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.340174][ T5620] Bluetooth: hci3: link tx timeout [ 210.340212][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.345652][ T5620] Bluetooth: hci3: link tx timeout [ 210.345666][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.353768][ T5620] Bluetooth: hci3: link tx timeout [ 210.353787][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.367683][ T5620] Bluetooth: hci3: link tx timeout [ 210.367703][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.373803][ T5620] Bluetooth: hci3: link tx timeout [ 210.373821][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.388634][ T5620] Bluetooth: hci3: link tx timeout [ 210.388653][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.415577][ T5620] Bluetooth: hci3: link tx timeout [ 210.415599][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.423393][ T5620] Bluetooth: hci3: link tx timeout [ 210.423416][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.428684][ T5620] Bluetooth: hci3: link tx timeout [ 210.428704][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.439518][ T5620] Bluetooth: hci3: link tx timeout [ 210.439538][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.439878][ T5620] Bluetooth: hci3: link tx timeout [ 210.439889][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.442444][ T5620] Bluetooth: hci3: link tx timeout [ 210.442461][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.620916][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 211.145626][ T9000] bridge_slave_0: left allmulticast mode [ 211.146246][ T9000] bridge_slave_0: left promiscuous mode [ 211.147231][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.248416][ T8998] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 211.293781][ T9000] bridge_slave_1: left allmulticast mode [ 211.299792][ T9000] bridge_slave_1: left promiscuous mode [ 211.307191][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.335861][ T9000] bond2: (slave veth0_to_bond): Releasing active interface [ 211.364577][ T9000] team0: Port device team_slave_0 removed [ 211.467272][ T9000] team0: Port device team_slave_1 removed [ 211.486626][ T9000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.499269][ T9000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.526764][ T9000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.539542][ T9000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.573900][ T9000] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.268526][ T9039] __nla_validate_parse: 72 callbacks suppressed [ 212.279725][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 212.298755][ T9039] netlink: 64 bytes leftover after parsing attributes in process `syz.3.791'. [ 212.308158][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 212.352351][ T9045] netlink: 64 bytes leftover after parsing attributes in process `syz.0.793'. [ 213.858607][ T9072] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 2, id = 0 [ 214.557344][ T9080] netlink: 'syz.4.802': attribute type 8 has an invalid length. [ 214.751583][ T9082] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 214.753189][ T9082] syzkaller1: Refused to change device type [ 216.332761][ T9070] netlink: 176 bytes leftover after parsing attributes in process `syz.2.799'. [ 216.333288][ T9070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.799'. [ 216.935101][ T9103] veth3: entered allmulticast mode [ 216.946351][ T9119] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 216.946606][ T9119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.183639][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 217.928151][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 217.928444][ T9125] netlink: 224 bytes leftover after parsing attributes in process `syz.0.810'. [ 217.928690][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 218.096238][ T9119] bond0: (slave bond_slave_0): Releasing backup interface [ 218.402847][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 219.058865][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.813'. [ 219.690725][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 219.714617][ T9154] netlink: 32 bytes leftover after parsing attributes in process `syz.3.818'. [ 219.845145][ T9156] sctp: [Deprecated]: syz.0.819 (pid 9156) Use of int in maxseg socket option. [ 219.845145][ T9156] Use struct sctp_assoc_value instead [ 219.981549][ T9161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.820'. [ 220.140534][ T9166] netlink: 'syz.1.822': attribute type 4 has an invalid length. [ 220.211862][ T9168] netlink: 'syz.1.822': attribute type 4 has an invalid length. [ 220.513621][ T9172] netlink: 104 bytes leftover after parsing attributes in process `syz.3.823'. [ 221.469241][ T9180] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 222.494437][ T9206] xt_limit: Overflow, try lower: 536871034/0 [ 222.501316][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 222.670232][ T9206] bond3: option xmit_hash_policy: invalid value (64) [ 222.799304][ T9206] bond3 (unregistering): Released all slaves [ 223.704374][ T9218] netlink: 'syz.0.835': attribute type 83 has an invalid length. [ 224.667408][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 224.926203][ T9237] bond1: option xmit_hash_policy: invalid value (64) [ 225.064582][ T9237] bond1 (unregistering): Released all slaves [ 225.313324][ T9238] syzkaller0: entered promiscuous mode [ 225.313747][ T9238] syzkaller0: entered allmulticast mode [ 225.792071][ T9260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.843'. [ 226.038001][ T9262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'. [ 227.349087][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 227.722191][ T9285] syzkaller0: entered promiscuous mode [ 227.722626][ T9285] syzkaller0: entered allmulticast mode [ 227.750244][ T9291] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 227.750658][ T9291] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 228.278519][ T9295] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 229.317519][ T9303] x_tables: duplicate underflow at hook 1 [ 229.345996][ T9308] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 229.346234][ T9308] netlink: 'syz.1.854': attribute type 4 has an invalid length. [ 229.346248][ T9308] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.854'. [ 229.351884][ T9308] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 229.351904][ T9308] netlink: 'syz.1.854': attribute type 4 has an invalid length. [ 229.351916][ T9308] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.854'. [ 229.406798][ T9307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.855'. [ 230.617662][ T9327] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 231.725103][ T9342] tipc: Enabled bearer , priority 10 [ 232.263665][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.865'. [ 232.452461][ T9349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.134198][ T9360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.868'. [ 233.456068][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.870'. [ 233.456338][ T9372] nbd: must specify at least one socket [ 233.484587][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.870'. [ 233.564662][ T9373] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 234.480435][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 234.480781][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 235.054370][ T9388] netlink: 'syz.0.877': attribute type 27 has an invalid length. [ 235.549273][ T32] audit: type=1804 audit(1788993801.234:4): pid=9395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.880" name="/newroot/171/cgroup.controllers" dev="tmpfs" ino=898 res=1 errno=0 [ 235.549554][ T32] audit: type=1800 audit(1788993801.264:5): pid=9395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.880" name="cgroup.controllers" dev="tmpfs" ino=898 res=0 errno=0 [ 237.415758][ T9420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.710402][ T9420] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.509345][ T9466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.311623][ T9484] netlink: 244 bytes leftover after parsing attributes in process `syz.3.894'. [ 239.793782][ T9490] netlink: 'syz.4.896': attribute type 6 has an invalid length. [ 241.788871][ T9522] tipc: Enabling of bearer rejected, failed to enable media [ 241.807155][ T9525] netlink: 240 bytes leftover after parsing attributes in process `syz.3.904'. [ 242.544776][ T9532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.907'. [ 242.584088][ T9532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.630507][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 242.761791][ T9530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.140040][ T9538] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 243.440315][ T9541] netlink: 36 bytes leftover after parsing attributes in process `syz.4.909'. [ 245.430936][ T9579] openvswitch: netlink: Key 6 has unexpected len 207 expected 2 [ 245.486756][ T9579] netlink: 'syz.4.916': attribute type 9 has an invalid length. [ 245.668984][ T9582] openvswitch: netlink: Key 6 has unexpected len 207 expected 2 [ 246.307391][ T9597] netlink: 96 bytes leftover after parsing attributes in process `syz.3.919'. [ 246.387598][ T9592] xt_nat: multiple ranges no longer supported [ 246.477950][ T9598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.339156][ T9611] netlink: 32 bytes leftover after parsing attributes in process `syz.0.925'. [ 247.970251][ T9632] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.929'. [ 248.153109][ T9627] tipc: Enabled bearer , priority 0 [ 248.160927][ T9636] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.929'. [ 248.176492][ T9629] syzkaller0: entered promiscuous mode [ 248.177036][ T9629] syzkaller0: entered allmulticast mode [ 248.732741][ T9629] tipc: Resetting bearer [ 249.105943][ T9625] tipc: Resetting bearer [ 249.441861][ T9625] tipc: Disabling bearer [ 249.801586][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'. [ 249.801837][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'. [ 249.897828][ T9662] team0: entered promiscuous mode [ 249.898077][ T9662] team_slave_0: entered promiscuous mode [ 249.912390][ T9662] team_slave_1: entered promiscuous mode [ 249.996083][ T9662] bond0: entered promiscuous mode [ 250.003169][ T9662] bond_slave_0: entered promiscuous mode [ 250.012670][ T9662] bond_slave_1: entered promiscuous mode [ 250.031973][ T9662] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 251.304184][ T9689] netlink: 72 bytes leftover after parsing attributes in process `syz.1.941'. [ 251.354037][ T9689] netlink: 72 bytes leftover after parsing attributes in process `syz.1.941'. [ 251.900458][ T9701] netlink: 'syz.0.943': attribute type 9 has an invalid length. [ 252.439767][ T9704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.359659][ T9733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.087471][ T9743] erspan0: entered promiscuous mode [ 254.132188][ T9743] vlan3: entered promiscuous mode [ 256.065949][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.072721][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.017336][ T9787] netlink: 56 bytes leftover after parsing attributes in process `syz.0.963'. [ 257.838056][ T9803] syzkaller1: entered promiscuous mode [ 257.838519][ T9803] syzkaller1: entered allmulticast mode [ 258.279549][ T9804] sctp: [Deprecated]: syz.3.967 (pid 9804) Use of int in max_burst socket option deprecated. [ 258.279549][ T9804] Use struct sctp_assoc_value instead [ 258.393171][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 258.479580][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 258.480760][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 258.481629][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 258.482884][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 258.651744][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 258.804084][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 258.819792][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 258.826275][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 259.818802][ T9844] netlink: 'syz.1.973': attribute type 3 has an invalid length. [ 260.926365][ T9851] xt_CT: No such helper "netbios-ns" [ 261.313460][ T9871] netlink: 'syz.1.977': attribute type 10 has an invalid length. [ 261.458181][ T9871] team0: Port device dummy0 added [ 261.729205][ T9884] Bluetooth: MGMT ver 1.23 [ 262.844586][ T9893] __nla_validate_parse: 25 callbacks suppressed [ 262.844839][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 263.112527][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 264.063656][ T9918] tipc: Enabling of bearer rejected, failed to enable media [ 264.361255][ T9927] tc_dump_action: action bad kind [ 264.363066][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.990'. [ 264.571283][ T9941] tc_dump_action: action bad kind [ 264.577797][ T9943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.990'. [ 265.148445][ T9945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.483689][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 266.996275][ T9966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.888185][ T9981] xt_addrtype: ipv6 does not support BROADCAST matching [ 267.903420][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'. [ 267.949756][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'. [ 268.129905][ T9988] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 268.166778][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1000'. [ 268.230879][ T9984] sctp: [Deprecated]: syz.1.1000 (pid 9984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.230879][ T9984] Use struct sctp_sack_info instead [ 269.243476][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 269.985631][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 270.988284][T10035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1009'. [ 271.806232][T10051] xt_hashlimit: size too large, truncated to 1048576 [ 271.934607][T10059] C: renamed from lo (while UP) [ 272.005289][T10059] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 272.874657][T10076] smc: net device team0 applied user defined pnetid SYZ2 [ 274.127687][T10113] netlink: 'syz.4.1026': attribute type 1 has an invalid length. [ 274.135913][T10113] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1026'. [ 274.645862][ T8517] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 275.008005][T10121] Bluetooth: ISO socket layer initialized [ 275.148844][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 275.808676][T10141] netlink: 'syz.3.1032': attribute type 2 has an invalid length. [ 275.921045][T10138] netlink: Failed to add batadv0 helper -22 [ 275.927310][T10138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.130170][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 277.188817][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 277.262745][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 277.296218][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 277.340545][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 277.466617][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 277.480236][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 277.495240][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 278.882997][T10176] ip_tables: iptables: counters copy to user failed while replacing table [ 279.513858][T10191] x_tables: duplicate underflow at hook 3 [ 280.213817][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.236509][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.253907][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.268002][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.279232][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.631528][T10206] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.917765][T10214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 281.008188][T10211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.643261][T10230] __nla_validate_parse: 10 callbacks suppressed [ 281.643523][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 282.379924][ T5634] Bluetooth: hci5: command tx timeout [ 282.422938][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 282.452251][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1060'. [ 282.452495][T10244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1060'. [ 284.482947][ T5634] Bluetooth: hci5: command tx timeout [ 284.682906][T10276] syzkaller0: entered promiscuous mode [ 284.683328][T10276] syzkaller0: entered allmulticast mode [ 286.539619][ T5634] Bluetooth: hci5: command tx timeout [ 286.928367][T10306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1076'. [ 288.052108][T10199] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.052963][T10199] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.053391][T10199] bridge_slave_0: entered allmulticast mode [ 288.115444][T10199] bridge_slave_0: entered promiscuous mode [ 288.312313][T10199] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.320903][T10199] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.321523][T10199] bridge_slave_1: entered allmulticast mode [ 288.353281][T10199] bridge_slave_1: entered promiscuous mode [ 288.435115][T10328] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 288.438918][T10328] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1080'. [ 288.603958][T10332] netlink: 'syz.1.1080': attribute type 1 has an invalid length. [ 288.613499][T10332] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1080'. [ 288.613528][T10332] netlink: 'syz.1.1080': attribute type 1 has an invalid length. [ 288.621069][ T5634] Bluetooth: hci5: command tx timeout [ 288.697677][T10331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1081'. [ 288.804233][T10329] syzkaller1: entered promiscuous mode [ 288.804682][T10329] syzkaller1: entered allmulticast mode [ 289.120618][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 289.165572][T10331] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.166513][T10331] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.355543][T10339] batadv_slave_0: entered promiscuous mode [ 289.367094][T10340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.108179][T10340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.326968][T10199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.348874][T10199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.600783][T10354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1087'. [ 290.737481][T10354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1087'. [ 290.792309][T10199] team0: Port device team_slave_0 added [ 290.813281][T10199] team0: Port device team_slave_1 added [ 291.082128][T10199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.082378][T10199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.082621][T10199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.372397][T10199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.372637][T10199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.372901][T10199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.888886][T10199] hsr_slave_0: entered promiscuous mode [ 292.010786][T10199] hsr_slave_1: entered promiscuous mode [ 292.013162][T10199] debugfs: 'hsr0' already exists in 'hsr' [ 292.013403][T10199] Cannot create hsr debugfs directory [ 292.958719][T10199] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.990989][T10199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.005694][T10199] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.029708][T10199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.043252][T10199] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.068651][T10199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 293.081924][T10199] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 293.104261][T10199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 293.858798][T10199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.957938][T10199] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.063349][ T8518] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.063486][ T8518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.093415][ T8518] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.093554][ T8518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.337276][T10199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.059976][T10199] veth0_vlan: entered promiscuous mode [ 298.147748][T10199] veth1_vlan: entered promiscuous mode [ 298.426669][T10199] veth0_macvtap: entered promiscuous mode [ 298.487007][T10199] veth1_macvtap: entered promiscuous mode [ 298.808988][T10199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.901913][T10199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.139981][ T8521] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.140354][ T8521] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.141170][ T8521] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.150863][ T735] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.857328][ T8521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.857592][ T8521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.048556][ T8521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.057292][ T8521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.675201][T10389] netlink: 'syz.5.1044': attribute type 1 has an invalid length. [ 306.689756][ T1147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 310.452938][T10400] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1092'. [ 310.453226][T10400] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 310.503318][T10407] netlink: 'syz.3.1093': attribute type 3 has an invalid length. [ 310.503581][T10407] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1093'. [ 310.564671][T10408] ip_tables: iptables: counters copy to user failed while replacing table [ 310.718857][T10398] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1091'. [ 311.462558][T10423] netlink: 'syz.5.1097': attribute type 8 has an invalid length. [ 311.479147][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'. [ 311.536278][T10429] netlink: 'syz.3.1095': attribute type 16 has an invalid length. [ 311.585335][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1098'. [ 311.708676][T10433] netlink: 'syz.1.1096': attribute type 8 has an invalid length. [ 312.454023][T10443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1100'. [ 313.146312][T10460] xt_policy: too many policy elements [ 313.646666][T10469] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1108'. [ 314.725400][T10488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1112'. [ 315.003966][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 315.279851][T10495] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1114'. [ 315.935310][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1117'. [ 316.455336][T10501] bond0: invalid NS target ff00:: specified for addition [ 316.455591][T10501] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 316.587014][T10519] bond0: invalid NS target ff00:: specified for addition [ 316.587295][T10519] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 317.209633][T10506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.504269][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.511487][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.881002][T10539] ip_tables: iptables: counters copy to user failed while replacing table [ 317.955400][T10544] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1122'. [ 318.057658][T10542] netlink: 'syz.3.1123': attribute type 4 has an invalid length. [ 318.137268][T10542] netlink: 'syz.3.1123': attribute type 49 has an invalid length. [ 319.189209][T10564] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1127'. [ 320.133637][T10542] ip6gretap0: entered promiscuous mode [ 320.144491][T10542] ip6gretap0: entered allmulticast mode [ 320.180702][T10569] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 320.219920][ T8516] wlan1: Trigger new scan to find an IBSS to join [ 320.405449][T10573] netlink: 'syz.1.1129': attribute type 10 has an invalid length. [ 320.405693][T10573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1129'. [ 321.096378][T10579] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 321.231873][T10569] bond6: option mode: invalid value (7) [ 321.355120][T10569] bond6 (unregistering): Released all slaves [ 321.473961][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1133'. [ 322.046584][T10571] team0: Port device dummy0 removed [ 322.064299][T10573] dummy0: entered promiscuous mode [ 322.168014][T10579] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 322.194431][T10582] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 323.233505][T10602] dvmrp4: entered allmulticast mode [ 323.241761][T10613] syzkaller0: entered promiscuous mode [ 323.241971][T10613] syzkaller0: entered allmulticast mode [ 325.195141][ T50] wlan1: Trigger new scan to find an IBSS to join [ 325.443002][T10636] syzkaller0: entered promiscuous mode [ 325.443430][T10636] syzkaller0: entered allmulticast mode [ 326.307852][ T8523] wlan1: Creating new IBSS network, BSSID ae:94:5d:a4:e2:cd [ 335.996347][T10674] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 336.099221][T10680] netlink: 'syz.0.1149': attribute type 3 has an invalid length. [ 336.099488][T10680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1149'. [ 336.178813][T10678] veth1_macvtap: left promiscuous mode [ 337.192656][T10693] netlink: 'syz.5.1151': attribute type 12 has an invalid length. [ 337.812630][T10699] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1153'. [ 338.260005][T10697] xt_CT: No such helper "pptp" [ 338.869133][T10712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1156'. [ 338.979401][T10718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1156'. [ 339.774362][ T735] IPVS: starting estimator thread 0... [ 339.876817][T10729] IPVS: using max 32 ests per chain, 76800 per kthread [ 342.920385][T10775] Bluetooth: hci0: unsupported parameter 5135 [ 342.920629][T10775] Bluetooth: hci0: unsupported parameter 8192 [ 342.920646][T10775] Bluetooth: hci0: unsupported parameter 5135 [ 342.920657][T10775] Bluetooth: hci0: unsupported parameter 8192 [ 343.715076][T10789] sctp: [Deprecated]: syz.1.1178 (pid 10789) Use of int in max_burst socket option. [ 343.715076][T10789] Use struct sctp_assoc_value instead [ 343.906932][T10793] sctp: [Deprecated]: syz.1.1178 (pid 10793) Use of int in max_burst socket option. [ 343.906932][T10793] Use struct sctp_assoc_value instead [ 344.334524][T10798] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1180'. [ 344.335156][T10798] 0{X功: renamed from gretap0 (while UP) [ 344.339274][T10795] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1180'. [ 344.448014][T10798] 0{X功: entered allmulticast mode [ 344.452496][T10798] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 344.475622][T10798] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1180'. [ 344.557819][T10795] 0{X功: entered promiscuous mode [ 344.558253][T10795] 0{X功: left allmulticast mode [ 344.764656][T10810] openvswitch: netlink: Unknown key attributes 1 [ 345.055570][T10798] 1{X功: renamed from 30{X功 [ 345.101730][T10798] 1{X功: left promiscuous mode [ 345.107330][T10798] 1{X功: entered allmulticast mode [ 345.154038][T10798] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 345.226941][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1183'. [ 346.034769][T10833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1187'. [ 346.035046][T10833] netlink: 'syz.1.1187': attribute type 7 has an invalid length. [ 346.035060][T10833] netlink: 'syz.1.1187': attribute type 8 has an invalid length. [ 346.035072][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 346.140226][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1188'. [ 346.573588][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d781c00: rx timeout, send abort [ 346.575523][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802d781c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 347.129829][T10836] netlink: 'syz.1.1187': attribute type 4 has an invalid length. [ 347.271184][T10854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1191'. [ 348.340093][T10867] netlink: 'syz.0.1194': attribute type 2 has an invalid length. [ 348.458918][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 348.987571][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1196'. [ 349.634832][T10878] bond6: invalid ARP target 0.0.0.0 specified for addition [ 349.680093][T10878] bond6: option arp_ip_target: invalid value (0) [ 349.871244][T10878] bond6 (unregistering): Released all slaves [ 349.898427][T10898] ip_tables: iptables: counters copy to user failed while replacing table [ 351.283927][T10911] __nla_validate_parse: 1 callbacks suppressed [ 351.284189][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'. [ 351.295681][T10911] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1204'. [ 351.295711][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 351.295724][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1204'. [ 351.375471][T10914] syzkaller0: entered allmulticast mode [ 352.431386][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 352.661245][T10940] bond0: entered allmulticast mode [ 352.756947][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1210'. [ 352.757220][T10932] block nbd0: Unsupported socket: should be TCP or UNIX. [ 353.266661][T10945] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1213'. [ 353.560009][T10950] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1213'. [ 353.851288][T10957] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1214'. [ 355.008025][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 356.707763][T11012] __nla_validate_parse: 2 callbacks suppressed [ 356.708015][T11012] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1226'. [ 358.466915][ T8516] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 358.683479][T11035] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1232'. [ 358.901377][T11037] tipc: Resetting bearer [ 360.207725][T11055] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 361.225137][T11059] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 361.310920][T11059] bond6: (slave ip6gre2): Error -95 calling set_mac_address [ 362.471397][T11088] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1244'. [ 362.555525][T11088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1244'. [ 362.638204][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 365.060595][T11100] IPv6: sit1: Disabled Multicast RS [ 365.192515][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 365.661808][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 369.217453][T11144] 8021q: adding VLAN 0 to HW filter on device bond7 [ 371.228719][T11187] netlink: 2724 bytes leftover after parsing attributes in process `syz.1.1269'. [ 371.229788][T11187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1269'. [ 371.230034][T11187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1269'. [ 372.240923][T11206] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1273'. [ 375.157296][T11243] Bluetooth: hci0: unsupported parameter 5161 [ 375.157535][T11243] Bluetooth: hci0: unsupported parameter 8192 [ 375.157551][T11243] Bluetooth: hci0: unsupported parameter 5161 [ 375.157562][T11243] Bluetooth: hci0: unsupported parameter 8192 [ 375.290422][T11253] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 375.463111][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 375.477870][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 376.520265][ T8517] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 376.851458][T11273] netlink: 'syz.5.1287': attribute type 18 has an invalid length. [ 377.112939][T11266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.337503][T11282] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 377.649328][ T8521] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.649663][ T8521] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.649987][ T8521] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.650269][ T8521] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.341322][T11297] x_tables: duplicate underflow at hook 2 [ 378.977531][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.978814][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.727074][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'. [ 379.805179][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 379.806028][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 379.814276][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 379.814301][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 379.842333][T11331] xt_hashlimit: max too large, truncated to 1048576 [ 379.978526][T11331] No such timeout policy "syz1" [ 380.691694][T11340] IPVS: set_ctl: invalid protocol: 43 172.30.1.6:20001 [ 380.766445][T11340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.115666][T11340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.638005][T11347] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1310'. [ 382.169171][T11359] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 382.413598][T11355] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1313'. [ 382.855588][T11367] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1316'. [ 387.176496][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1329'. [ 390.484017][ T735] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 390.727241][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 391.085492][T11457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.720206][T11469] netlink: 'syz.1.1343': attribute type 33 has an invalid length. [ 393.319461][T11469] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 393.565642][T11469] bond6 (unregistering): Released all slaves [ 394.683009][T11491] 1{X功: left allmulticast mode [ 394.761072][T11491] erspan0: left promiscuous mode [ 394.761506][T11491] erspan0: left allmulticast mode [ 395.100393][T11506] ipt_rpfilter: unknown options [ 395.101191][T11506] ipt_rpfilter: unknown options [ 395.101927][T11506] ipt_rpfilter: unknown options [ 395.102645][T11506] ipt_rpfilter: unknown options [ 395.103364][T11506] ipt_rpfilter: unknown options [ 395.104098][T11506] ipt_rpfilter: unknown options [ 395.104821][T11506] ipt_rpfilter: unknown options [ 395.141842][T11506] ipt_rpfilter: unknown options [ 395.142590][T11506] ipt_rpfilter: unknown options [ 395.143317][T11506] ipt_rpfilter: unknown options [ 395.170462][T11504] IPVS: length: 80 != 8 [ 395.289880][T11491] syz_tun: left promiscuous mode [ 395.389323][T11491] bond0: (slave syz_tun): Releasing backup interface [ 395.400390][T11491] syz_tun: left allmulticast mode [ 395.416770][T11491] tipc: Resetting bearer [ 396.865690][T11491] bridge_slave_0: left allmulticast mode [ 396.866367][T11491] bridge_slave_0: left promiscuous mode [ 396.871865][T11491] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.235280][T11491] bridge_slave_1: left allmulticast mode [ 397.235951][T11491] bridge_slave_1: left promiscuous mode [ 397.237165][T11491] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.278005][T11491] veth0_to_bond: left allmulticast mode [ 397.400883][T11491] bond0: (slave bond_slave_0): Releasing backup interface [ 397.414571][T11491] bond_slave_0: left allmulticast mode [ 397.620428][T11491] bond0: (slave bond_slave_1): Releasing backup interface [ 397.652404][T11491] bond_slave_1: left allmulticast mode [ 397.823028][T11491] team0: Port device team_slave_0 removed [ 397.982906][T11491] team0: Port device team_slave_1 removed [ 398.048851][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.237672][T11491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.383825][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.493100][T11491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.786485][T11491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 399.499833][T11526] veth1_to_team: entered allmulticast mode [ 399.559348][T11524] veth1_to_team: left allmulticast mode [ 399.644134][T11529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1356'. [ 399.658711][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1356'. [ 400.342897][T11541] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1357'. [ 401.024377][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1359'. [ 401.483500][T11558] netlink: 'syz.0.1362': attribute type 10 has an invalid length. [ 401.485144][T11558] dummy0: left promiscuous mode [ 401.616475][T11558] team0: Port device dummy0 added [ 401.672253][T11562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1363'. [ 402.751860][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1369'. [ 402.891963][T11584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1370'. [ 403.036088][T11589] netlink: 'syz.0.1370': attribute type 3 has an invalid length. [ 403.388280][T11591] syzkaller0: entered promiscuous mode [ 403.388743][T11591] syzkaller0: entered allmulticast mode [ 403.698795][T11591] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 403.746294][T11591] openvswitch: netlink: Multiple metadata blocks provided [ 404.101027][T11601] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1375'. [ 404.299720][T11601] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1375'. [ 406.619394][ T5634] Bluetooth: hci5: command 0x0406 tx timeout [ 406.619609][T11627] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1382'. [ 407.484436][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 408.501808][T11638] xt_hashlimit: size too large, truncated to 1048576 [ 408.728959][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.906780][T11649] xt_TPROXY: Can be used only with -p tcp or -p udp [ 408.999856][T11646] bridge_slave_0 (unregistering): left allmulticast mode [ 409.000469][T11646] bridge_slave_0 (unregistering): left promiscuous mode [ 409.000951][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.393375][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1393'. [ 410.784885][T11662] bond1: entered promiscuous mode [ 410.814006][T11662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.827793][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 410.846867][T11670] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1395'. [ 411.036201][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 411.818256][T11677] ip_tables: iptables: counters copy to user failed while replacing table [ 411.942858][T11677] netlink: 'syz.5.1396': attribute type 1 has an invalid length. [ 411.963500][T11677] syzkaller0: entered promiscuous mode [ 411.969437][T11677] syzkaller0: entered allmulticast mode [ 412.398348][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 412.398884][T11689] xt_cgroup: path and classid specified [ 412.538600][T11690] Unknown options in mask 4 [ 414.454731][T11700] xt_hashlimit: size too large, truncated to 1048576 [ 415.208092][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 415.278367][T11705] unsupported nla_type 216 [ 415.352198][T11717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1407'. [ 415.411667][T11708] syzkaller1: entered allmulticast mode [ 416.696703][T11722] vlan2: entered promiscuous mode [ 416.696942][T11722] hsr0: entered promiscuous mode [ 416.698478][T11722] vlan2: entered allmulticast mode [ 416.698493][T11722] hsr0: entered allmulticast mode [ 416.698504][T11722] hsr_slave_0: entered allmulticast mode [ 416.698891][T11722] hsr_slave_1: entered allmulticast mode [ 416.811614][T11725] veth1_to_bond: entered allmulticast mode [ 416.843021][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1408'. [ 416.922833][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1408'. [ 417.192797][T11722] veth1_to_bond (unregistering): left allmulticast mode [ 417.360439][T11722] bond0: (slave bond_slave_1): Releasing backup interface [ 417.768430][T11725] hsr_slave_0: left promiscuous mode [ 417.829295][T11725] hsr_slave_1: left promiscuous mode [ 418.592121][T11731] dvmrp1: entered allmulticast mode [ 419.827499][T11763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.016192][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 421.458034][T11781] bridge_slave_1: left allmulticast mode [ 421.469054][T11781] bridge_slave_1: left promiscuous mode [ 421.477506][T11781] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.549944][T11781] bond0: (slave bond_slave_0): Releasing backup interface [ 422.153668][T11781] team0: Port device team_slave_0 removed [ 422.324268][T11781] team0: Port device team_slave_1 removed [ 422.336856][T11781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.348220][T11781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.375916][T11788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.416905][T11786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1424'. [ 422.474694][ T8519] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 422.770170][T11786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1424'. [ 424.044371][T11818] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1428'. [ 424.054355][T11818] tipc: Invalid UDP bearer configuration [ 424.054653][T11818] tipc: Enabling of bearer rejected, failed to enable media [ 424.298143][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 424.392819][T11818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.084918][T11837] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1433'. [ 425.174422][T11833] veth1_macvtap: entered promiscuous mode [ 425.194190][T11833] macsec1: entered promiscuous mode [ 425.215392][T11833] veth1_macvtap: left promiscuous mode [ 427.081343][T11842] vlan3: entered promiscuous mode [ 427.081589][T11842] bridge0: entered promiscuous mode [ 427.082705][T11842] vlan3: entered allmulticast mode [ 427.082718][T11842] bridge0: entered allmulticast mode [ 427.760227][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1440'. [ 427.894830][T11865] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1441'. [ 428.406677][T11874] SET target dimension over the limit! [ 428.724462][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 429.617749][T11887] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1445'. [ 429.627256][T11894] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1448'. [ 430.273039][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'. [ 430.318277][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'. [ 430.433337][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 430.433573][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 431.924963][T11938] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1456'. [ 431.954239][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1456'. [ 434.773302][T11986] netlink: 'syz.3.1472': attribute type 1 has an invalid length. [ 434.913780][T11986] netlink: 'syz.3.1472': attribute type 4 has an invalid length. [ 435.333592][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1475'. [ 435.417143][T11995] netlink: 'syz.4.1475': attribute type 5 has an invalid length. [ 435.417378][T11995] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1475'. [ 436.776423][T12022] netlink: 'syz.3.1483': attribute type 4 has an invalid length. [ 436.981504][T12023] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.423153][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 437.750359][T12033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1485'. [ 438.397922][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'. [ 438.457515][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'. [ 438.994264][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1489'. [ 438.994566][T12046] netlink: 'syz.5.1489': attribute type 10 has an invalid length. [ 438.994813][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1489'. [ 439.031297][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1489'. [ 439.031581][T12047] netlink: 'syz.5.1489': attribute type 10 has an invalid length. [ 439.031828][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1489'. [ 439.263849][T12046] geneve3: entered promiscuous mode [ 439.284650][T12046] geneve3: entered allmulticast mode [ 440.139387][T12047] geneve3: entered promiscuous mode [ 440.139857][T12047] geneve3: entered allmulticast mode [ 440.388286][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.388561][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.984860][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1496'. [ 441.085389][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1498'. [ 441.160714][T12081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1496'. [ 441.192985][T12090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1498'. [ 442.208744][T12112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1502'. [ 442.289261][T12104] xt_CT: No such helper "netbios-ns" [ 442.870536][T12116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1505'. [ 443.554394][T12126] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1509'. [ 444.720241][ T8509] IPVS: starting estimator thread 0... [ 444.741331][T12147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1516'. [ 444.841381][T12148] IPVS: using max 28 ests per chain, 67200 per kthread [ 445.094808][T12153] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 445.120044][T12154] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 445.274201][T12153] 8021q: adding VLAN 0 to HW filter on device bond6 [ 445.303769][T12152] openvswitch: netlink: IP tunnel dst address not specified [ 446.157929][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1522'. [ 448.045406][T12205] netlink: 'syz.5.1529': attribute type 1 has an invalid length. [ 448.224424][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1529'. [ 448.455006][T12205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.476883][T12206] netlink: 'syz.5.1529': attribute type 12 has an invalid length. [ 449.043793][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 449.063703][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 450.337687][T12224] bond3 (unregistering): Released all slaves [ 450.590138][T12239] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 450.675944][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'. [ 450.676207][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 450.740358][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'. [ 450.740636][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 450.741920][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'. [ 450.742144][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 451.538107][T12250] netlink: 'syz.5.1540': attribute type 28 has an invalid length. [ 451.538339][T12250] netlink: 'syz.5.1540': attribute type 3 has an invalid length. [ 451.538354][T12250] __nla_validate_parse: 60 callbacks suppressed [ 451.538364][T12250] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1540'. [ 451.539762][T12250] netlink: 'syz.5.1540': attribute type 28 has an invalid length. [ 451.539777][T12250] netlink: 'syz.5.1540': attribute type 3 has an invalid length. [ 451.539789][T12250] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1540'. [ 451.540943][T12250] netlink: 'syz.5.1540': attribute type 28 has an invalid length. [ 451.540957][T12250] netlink: 'syz.5.1540': attribute type 3 has an invalid length. [ 451.540968][T12250] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1540'. [ 451.542112][T12250] netlink: 'syz.5.1540': attribute type 28 has an invalid length. [ 451.542126][T12250] netlink: 'syz.5.1540': attribute type 3 has an invalid length. [ 451.542137][T12250] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1540'. [ 451.543278][T12250] netlink: 'syz.5.1540': attribute type 28 has an invalid length. [ 451.543290][T12250] netlink: 'syz.5.1540': attribute type 3 has an invalid length. [ 451.543301][T12250] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1540'. [ 451.544464][T12250] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1540'. [ 451.545619][T12250] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1540'. [ 451.546788][T12250] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1540'. [ 451.547946][T12250] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1540'. [ 451.603894][T12250] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1540'. [ 452.567333][T12258] 8021q: adding VLAN 0 to HW filter on device team1 [ 453.822709][ T8518] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 453.967141][T12275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.651170][T12321] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 458.226762][T12320] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 458.313207][T12320] bond3 (unregistering): Released all slaves [ 459.294151][T12329] vlan3: entered promiscuous mode [ 459.294404][T12329] bridge0: entered promiscuous mode [ 459.296301][T12329] vlan3: entered allmulticast mode [ 459.296526][T12329] bridge0: entered allmulticast mode [ 459.422839][T12332] team_slave_0: entered promiscuous mode [ 459.429032][T12332] team_slave_0: entered allmulticast mode [ 460.948298][T12338] __nla_validate_parse: 10 callbacks suppressed [ 460.948560][T12338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1564'. [ 461.264119][T12347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.291942][T12348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.295276][T12341] netlink: 14504 bytes leftover after parsing attributes in process `syz.0.1565'. [ 461.436984][T12352] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.1566'. [ 461.492096][T12356] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.1566'. [ 462.033047][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 462.038604][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 462.041432][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 462.043731][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 462.083908][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 462.308508][T12362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1568'. [ 462.683696][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'. [ 463.406727][T12381] validate_nla: 16 callbacks suppressed [ 463.478729][T12381] netlink: 'syz.0.1572': attribute type 1 has an invalid length. [ 464.220114][ T5634] Bluetooth: hci6: command tx timeout [ 465.149053][T12415] netlink: 'syz.5.1579': attribute type 2 has an invalid length. [ 465.247698][T12415] : entered promiscuous mode [ 466.309403][ T5634] Bluetooth: hci6: command tx timeout [ 466.433231][T12424] syzkaller0: entered promiscuous mode [ 466.433685][T12424] syzkaller0: entered allmulticast mode [ 467.383555][T12454] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 468.379264][ T5634] Bluetooth: hci6: command tx timeout [ 468.491435][T12469] netlink: 'syz.5.1590': attribute type 36 has an invalid length. [ 468.510100][T12470] xt_policy: too many policy elements [ 468.858333][T12481] netlink: 'syz.5.1590': attribute type 22 has an invalid length. [ 468.858583][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1590'. [ 470.431905][T12481] netlink: 'syz.5.1590': attribute type 22 has an invalid length. [ 470.442668][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1590'. [ 470.469614][ T5634] Bluetooth: hci6: command tx timeout [ 470.930156][T12493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1592'. [ 470.930407][T12493] netlink: 1212 bytes leftover after parsing attributes in process `syz.1.1592'. [ 472.041468][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.042239][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.043557][T12359] bridge_slave_0: entered allmulticast mode [ 472.144963][T12359] bridge_slave_0: entered promiscuous mode [ 472.174853][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.175621][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.176247][T12359] bridge_slave_1: entered allmulticast mode [ 472.224381][T12359] bridge_slave_1: entered promiscuous mode [ 472.870480][T12359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.900915][T12516] ipt_ECN: cannot use operation on non-tcp rule [ 473.182343][T12359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.743964][T12359] team0: Port device team_slave_0 added [ 473.775040][T12359] team0: Port device team_slave_1 added [ 474.130651][T12359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.141500][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.150465][T12359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.203298][T12359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.203553][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.203790][T12359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.165856][T12359] hsr_slave_0: entered promiscuous mode [ 475.175604][T12359] hsr_slave_1: entered promiscuous mode [ 475.221490][T12359] debugfs: 'hsr0' already exists in 'hsr' [ 475.227433][T12359] Cannot create hsr debugfs directory [ 475.407983][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1604'. [ 475.682514][T12554] hsr_slave_0: left promiscuous mode [ 475.703494][T12554] hsr_slave_1: left promiscuous mode [ 476.267724][T12559] netlink: 81 bytes leftover after parsing attributes in process `syz.5.1606'. [ 477.168038][T12572] netlink: 'syz.5.1608': attribute type 11 has an invalid length. [ 478.521966][T12599] tipc: Enabled bearer , priority 0 [ 478.770717][T12602] syzkaller0: entered promiscuous mode [ 478.771137][T12602] syzkaller0: entered allmulticast mode [ 479.258974][T12596] tipc: Resetting bearer [ 479.292046][T12594] tipc: Resetting bearer [ 479.484636][T12594] tipc: Disabling bearer [ 479.772632][T12359] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 479.892899][T12359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.928470][T12359] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 480.134249][T12359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.203538][T12359] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 480.342523][T12359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.376049][T12359] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 480.514653][T12359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.019582][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 481.029440][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 482.782136][T12359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.190688][T12359] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.447808][ T8518] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.448008][ T8518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.683146][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.683277][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.692478][T12652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1626'. [ 485.016723][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 485.192678][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 485.238469][T12660] xt_hashlimit: size too large, truncated to 1048576 [ 485.356005][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1630'. [ 485.593221][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 487.032323][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1640'. [ 487.086851][T12694] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 487.147805][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 487.442782][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 487.738964][T12697] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1641'. [ 488.320275][T12706] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1642'. [ 488.467562][T12708] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1642'. [ 488.820343][T12715] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1644'. [ 488.855279][T12359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.969351][T12726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1647'. [ 491.236473][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 491.564308][T12748] netlink: 'syz.0.1653': attribute type 3 has an invalid length. [ 491.564560][T12748] netlink: 306 bytes leftover after parsing attributes in process `syz.0.1653'. [ 492.780828][T12359] veth0_vlan: entered promiscuous mode [ 493.195510][T12359] veth1_vlan: entered promiscuous mode [ 494.127124][T12359] veth0_macvtap: entered promiscuous mode [ 494.393279][T12359] veth1_macvtap: entered promiscuous mode [ 494.649422][T12772] netlink: 'syz.5.1657': attribute type 6 has an invalid length. [ 495.120347][T12359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.246870][T12359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.255343][T12776] syzkaller0: entered promiscuous mode [ 495.799172][ T8518] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.809119][ T8518] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.081856][ T1147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.093848][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.321397][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.321649][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.410385][T12807] __nla_validate_parse: 1 callbacks suppressed [ 497.410632][T12807] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1664'. [ 497.663764][T12819] x_tables: unsorted underflow at hook 3 [ 497.834275][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.834534][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.198083][T12823] SET target dimension over the limit! [ 499.807807][T12844] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 500.018923][T12842] vlan2: entered promiscuous mode [ 500.019023][T12842] bridge0: entered promiscuous mode [ 500.037072][T12842] vlan2: entered allmulticast mode [ 500.037331][T12842] bridge0: entered allmulticast mode [ 500.124200][T12845] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1671'. [ 500.974620][T12868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.825529][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.825822][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.896010][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1680'. [ 502.260361][T12895] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.646415][T12883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 503.490502][T12909] netlink: 'syz.1.1683': attribute type 1 has an invalid length. [ 503.542870][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 503.554434][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 503.944511][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1684'. [ 504.226260][T12916] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.1684'. [ 504.296556][T12909] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 505.727489][T12925] pim6reg: entered allmulticast mode [ 505.779254][T12929] pim6reg: left allmulticast mode [ 506.656773][T12939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 507.662773][T12951] netlink: 'syz.5.1692': attribute type 34 has an invalid length. [ 507.663015][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1692'. [ 508.363290][T12951] bond4: option lacp_strict: invalid value (60) [ 508.525523][T12951] bond4 (unregistering): Released all slaves [ 509.414349][T12988] netlink: NAT attribute has 5 unknown bytes [ 509.421550][T12988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.065263][T13062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1717'. [ 516.470217][T13069] TCP: TCP_TX_DELAY enabled [ 516.578439][ T8513] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 518.260124][T13096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.294757][T13098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.754911][T13104] netlink: 'syz.1.1727': attribute type 1 has an invalid length. [ 518.755076][T13104] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1727'. [ 522.534527][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 522.534778][T13149] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1740'. [ 523.294315][T13159] tipc: New replicast peer: 172.20.20.187 [ 523.295476][T13159] tipc: Enabled bearer , priority 10 [ 524.124545][T13167] tipc: Failed to remove unknown binding: 66,1,1/0:2948059321/2948059323 [ 524.164572][T13166] tipc: Failed to remove unknown binding: 66,1,1/0:2948059321/2948059323 [ 524.217680][T13165] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1744'. [ 524.251990][T13166] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1744'. [ 524.519480][ T5761] tipc: Node number set to 2886997039 [ 525.051598][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 526.046979][T13175] bond0: entered promiscuous mode [ 526.055574][T13175] batadv0: entered promiscuous mode [ 526.222575][T13175] debugfs: 'hsr1' already exists in 'hsr' [ 526.232092][T13175] Cannot create hsr debugfs directory [ 526.247026][T13175] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 526.274235][T13175] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 526.397024][T13175] bond0: left promiscuous mode [ 526.481404][T13175] batadv0: left promiscuous mode [ 528.265565][T13205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1754'. [ 530.296759][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1759'. [ 530.359468][T13230] netlink: 'syz.6.1761': attribute type 10 has an invalid length. [ 530.370476][T13228] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 530.552745][T13230] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 530.765539][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 531.533553][T13240] netlink: zone id is out of range [ 531.533808][T13240] netlink: zone id is out of range [ 531.534050][T13240] netlink: zone id is out of range [ 531.534278][T13240] netlink: zone id is out of range [ 531.534504][T13240] netlink: zone id is out of range [ 531.534728][T13240] netlink: zone id is out of range [ 531.534791][T13240] netlink: zone id is out of range [ 531.535009][T13240] netlink: zone id is out of range [ 531.535238][T13240] netlink: zone id is out of range [ 533.176968][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'. [ 533.323959][T13263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1769'. [ 533.547813][T13257] bond7: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 533.560636][T13266] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1769'. [ 533.755612][T13257] bond7 (unregistering): Released all slaves [ 535.643916][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1778'. [ 536.469761][T13300] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1781'. [ 536.531225][T13307] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1781'. [ 536.612117][T13300] gretap0: entered promiscuous mode [ 536.922865][T13307] 0{X功: renamed from gretap0 [ 536.989588][T13307] 0{X功: left promiscuous mode [ 536.996187][T13307] 0{X功: entered allmulticast mode [ 537.107467][T13317] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1781'. [ 537.123654][T13315] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1781'. [ 537.205065][T13307] net_ratelimit: 11 callbacks suppressed [ 537.216108][T13307] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 537.427628][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1784'. [ 537.454092][T13317] 0{X功: entered promiscuous mode [ 537.454575][T13317] 0{X功: left allmulticast mode [ 537.639774][T13315] 1{X功: renamed from 30{X功 [ 537.714489][T13315] 1{X功: left promiscuous mode [ 537.714945][T13315] 1{X功: entered allmulticast mode [ 537.806456][T13315] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 537.815964][T13323] xt_connbytes: Forcing CT accounting to be enabled [ 537.816017][T13323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 539.130578][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1789'. [ 539.186979][T13332] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 539.187265][T13332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.065714][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1793'. [ 541.176792][T13357] macsec1: entered promiscuous mode [ 541.185482][T13357] bridge0: entered promiscuous mode [ 541.187281][T13357] macsec1: entered allmulticast mode [ 541.187510][T13357] bridge0: entered allmulticast mode [ 541.213794][T13357] bridge0: port 1(macsec1) entered blocking state [ 541.221977][T13357] bridge0: port 1(macsec1) entered disabled state [ 541.289912][T13357] bridge0: left allmulticast mode [ 542.111986][ T5824] bridge0: left promiscuous mode [ 542.761969][T13374] netlink: 'syz.6.1797': attribute type 10 has an invalid length. [ 543.223064][T13384] netlink: 'syz.6.1797': attribute type 10 has an invalid length. [ 543.358195][T13391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.469525][T13391] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 543.651359][T13393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.848091][T13403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.128098][T13408] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1804'. [ 544.631169][T13405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.037769][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 548.553348][ T1147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 548.588742][T13455] h: entered promiscuous mode [ 548.831277][T13458] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1812'. [ 550.430847][T13479] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 550.447123][T13479] bond4: option packets_per_slave: allowed values 0 - 65535 [ 550.576526][T13479] bond4 (unregistering): Released all slaves [ 550.595046][T13485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1821'. [ 550.716210][T13488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1822'. [ 550.745311][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1822'. [ 551.066015][T13490] dvmrp1: left allmulticast mode [ 551.640072][ T32] audit: type=1804 audit(1788994117.354:6): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1824" name="/newroot/387/cgroup.controllers" dev="tmpfs" ino=2010 res=1 errno=0 [ 551.640362][ T32] audit: type=1800 audit(1788994117.354:7): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1824" name="cgroup.controllers" dev="tmpfs" ino=2010 res=0 errno=0 [ 552.283204][T13505] xt_CT: No such helper "netbios-ns" [ 552.827365][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1827'. [ 552.827617][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1827'. [ 552.827684][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1827'. [ 552.871531][T13523] ieee802154 phy0 wpan0: encryption failed: -22 [ 554.769999][T13539] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1834'. [ 555.813807][T13559] openvswitch: netlink: IP tunnel dst address not specified [ 555.822687][T13559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.373565][T13552] team0: No ports can be present during mode change [ 557.690132][T13567] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1841'. [ 558.344447][T13583] SET target dimension over the limit! [ 558.345888][T13584] netlink: 'syz.4.1846': attribute type 21 has an invalid length. [ 558.345908][T13584] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1846'. [ 558.345956][T13584] netlink: 'syz.4.1846': attribute type 5 has an invalid length. [ 558.345968][T13584] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1846'. [ 558.360866][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 558.421660][T13583] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1847'. [ 558.567128][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1846'. [ 559.942778][T13598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.311854][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1853'. [ 560.949761][T13610] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1854'. [ 561.187495][T13609] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 562.254408][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1858'. [ 562.254659][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1858'. [ 562.257205][T13621] vlan0: entered promiscuous mode [ 563.252204][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1863'. [ 563.270154][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.270361][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.546875][T13642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1865'. [ 563.570266][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 563.574399][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1865'. [ 563.575346][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 563.575363][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1865'. [ 564.518696][T13662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'. [ 565.090503][T13662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'. [ 565.266336][T13669] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1870'. [ 565.266579][T13669] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1870'. [ 566.053504][T13681] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1874'. [ 569.027584][T13714] netlink: 'syz.4.1883': attribute type 21 has an invalid length. [ 569.027835][T13714] __nla_validate_parse: 1 callbacks suppressed [ 569.028079][T13714] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1883'. [ 569.028365][T13714] netlink: 'syz.4.1883': attribute type 5 has an invalid length. [ 569.028591][T13714] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1883'. [ 570.464680][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1887'. [ 570.464961][T13725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.614713][T13738] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1891'. [ 570.878314][T13741] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 571.402115][T13741] veth0: entered promiscuous mode [ 571.934283][T13736] veth0: left promiscuous mode [ 573.044001][T13771] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1895'. [ 573.094977][T13765] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 573.354246][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1896'. [ 574.639979][T13798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.869779][T13805] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1903'. [ 575.067067][T13808] netlink: 'syz.0.1904': attribute type 2 has an invalid length. [ 575.068774][T13808] netlink: 'syz.0.1904': attribute type 8 has an invalid length. [ 575.068795][T13808] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1904'. [ 577.227570][T13829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1908'. [ 579.420351][T13853] netlink: 'syz.6.1911': attribute type 3 has an invalid length. [ 580.181405][T13864] tc_dump_action: action bad kind [ 580.568251][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 581.107824][T13876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.550340][T13867] bond3: (slave bond4): Releasing backup interface [ 581.550597][T13867] bond3: (slave bond4): the permanent HWaddr of slave - 4e:d5:11:c6:63:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 581.550858][T13867] bond3: (slave bond5): making interface the new active one [ 581.759519][T13884] netlink: 'syz.5.1918': attribute type 30 has an invalid length. [ 581.849428][T13867] bond3: (slave bond5): Releasing backup interface [ 581.849632][T13867] bond3: (slave gretap1): making interface the new active one [ 582.418481][T13867] bond3: (slave gretap1): Releasing backup interface [ 582.888457][T13867] bond0: (slave geneve2): Releasing active interface [ 583.487052][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1920'. [ 583.487452][T13897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.346603][T13897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.829107][T13898] Bluetooth: hci6: command 0x0406 tx timeout [ 585.940638][T13917] netlink: 'syz.6.1926': attribute type 6 has an invalid length. [ 586.073789][T13922] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1929'. [ 586.809460][T13938] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 586.809750][T13938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.816243][T13935] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1931'. [ 586.862894][T13937] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1927'. [ 586.863138][T13937] netlink: 'syz.1.1927': attribute type 9 has an invalid length. [ 587.801863][T13953] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 587.961031][T13946] syzkaller1: entered promiscuous mode [ 587.961500][T13946] syzkaller1: entered allmulticast mode [ 588.040654][T13956] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1933'. [ 588.261070][T13964] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1933'. [ 588.632957][T13956] gretap0: entered promiscuous mode [ 588.978436][T13964] 0{X功: renamed from gretap0 [ 589.086507][T13964] 0{X功: left promiscuous mode [ 589.114682][T13964] 0{X功: entered allmulticast mode [ 589.147926][T13964] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 589.438263][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'. [ 589.438527][T13969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1937'. [ 590.158258][T13979] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1940'. [ 590.191892][T13979] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1940'. [ 591.530173][T13997] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 592.062687][ T33] INFO: task syz.3.1515:12140 blocked for more than 143 seconds. [ 592.062935][ T33] Not tainted syzkaller #0 [ 592.063176][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.063399][ T33] task:syz.3.1515 state:D stack:27528 pid:12140 tgid:12138 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 592.063888][ T33] Call Trace: [ 592.064114][ T33] [ 592.064335][ T33] __schedule+0x17db/0x58f0 [ 592.064733][ T33] ? __pfx___schedule+0x10/0x10 [ 592.064977][ T33] ? schedule+0x90/0x2b0 [ 592.065223][ T33] schedule+0x164/0x2b0 [ 592.065480][ T33] schedule_preempt_disabled+0x13/0x30 [ 592.065718][ T33] __mutex_lock+0x7c1/0x1550 [ 592.066024][ T33] ? __mutex_lock+0x5d4/0x1550 [ 592.066271][ T33] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 592.066600][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 592.066849][ T33] ? __nlmsg_put+0xef/0x1b0 [ 592.067160][ T33] ? genlmsg_put+0x137/0x2e0 [ 592.067410][ T33] nfsd_nl_version_get_doit+0x17c/0xd20 [ 592.067654][ T33] ? __nla_parse+0x40/0x60 [ 592.067973][ T33] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 592.068214][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 592.068456][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 592.068708][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 592.069000][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 592.069783][ T33] ? __lock_acquire+0x6df/0x2e50 [ 592.070142][ T33] ? __lock_acquire+0x6df/0x2e50 [ 592.070395][ T33] genl_rcv_msg+0x614/0x7a0 [ 592.070651][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 592.070910][ T33] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 592.071172][ T33] netlink_rcv_skb+0x226/0x4a0 [ 592.239746][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 592.239797][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 592.239840][ T33] ? down_read+0x2be/0x330 [ 592.239866][ T33] genl_rcv+0x28/0x40 [ 592.239893][ T33] netlink_unicast+0x7bd/0x940 [ 592.239928][ T33] netlink_sendmsg+0x813/0xb40 [ 592.239963][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.239996][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 592.240156][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.240180][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 592.240339][ T33] ____sys_sendmsg+0x54e/0x850 [ 592.240367][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.240400][ T33] ? import_iovec+0x73/0xa0 [ 592.240465][ T33] ___sys_sendmsg+0x2a5/0x360 [ 592.240487][ T33] ? __lock_acquire+0x6df/0x2e50 [ 592.240513][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.240540][ T33] ? futex_wait+0x2a2/0x390 [ 592.240619][ T33] ? __fget_files+0x2a/0x420 [ 592.240674][ T33] ? __fget_files+0x3a2/0x420 [ 592.240711][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 592.240737][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 592.240782][ T33] do_syscall_64+0x166/0x520 [ 592.240854][ T33] ? trace_irq_disable+0x3b/0x140 [ 592.240881][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.240926][ T33] ? clear_bhb_loop+0x70/0xc0 [ 592.240951][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.240972][ T33] RIP: 0033:0x7f724799e159 [ 592.240992][ T33] RSP: 002b:00007f7245bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.241017][ T33] RAX: ffffffffffffffda RBX: 00007f7247c25fa0 RCX: 00007f724799e159 [ 592.241032][ T33] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 592.241046][ T33] RBP: 00007f7247a3503b R08: 0000000000000000 R09: 0000000000000000 [ 592.241059][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.241072][ T33] R13: 00007f7247c26038 R14: 00007f7247c25fa0 R15: 00007ffcb2a7d198 [ 592.241106][ T33] [ 592.241138][ T33] [ 592.241138][ T33] Showing all locks held in the system: [ 592.241148][ T33] locks held by pr/ttyS0/16: 1, last CPU#1: [ 592.241164][ T33] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 592.241220][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 592.241234][ T33] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 592.241314][ T33] locks held by kworker/u8:6/735: 3, last CPU#0: [ 592.241329][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 592.241404][ T33] #1: ffffc9000426fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 592.241461][ T33] #2: ffff88802a041258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 592.241590][ T33] locks held by udevd/4982: 2, last CPU#0: [ 592.241604][ T33] #0: ffffffff8f4ef978 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 592.241699][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 592.241760][ T33] locks held by getty/5372: 2, on CPU#0: [ 592.241774][ T33] #0: ffff88803266c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 592.241892][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 592.241942][ T33] locks held by syz-executor/5604: 1, last CPU#0: [ 592.241957][ T33] #0: ffff888035aa5cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 592.242039][ T33] locks held by kworker/u8:10/8509: 5, last CPU#1: [ 592.242053][ T33] #0: ffff888034e69940 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 592.242112][ T33] #1: ffffc9000d51fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 592.242174][ T33] #2: ffff88802636ca68 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 592.242283][ T33] #3: ffff8880b8728298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x466/0xa10 [ 592.242358][ T33] #4: ffffffff9aa1f748 (&____s->seqcount#2){----}-{0:0}, at: ktime_get+0x45/0x220 [ 592.242415][ T33] locks held by kworker/u8:15/8518: 2, last CPU#0: [ 592.242430][ T33] #0: ffff88803271d940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 592.242487][ T33] #1: ffffc9000d88fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 592.242544][ T33] locks held by kworker/u8:16/8519: 3, last CPU#0: [ 592.242560][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 592.242617][ T33] #1: ffffc9000365fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 592.242674][ T33] #2: ffff88804b6fc258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 592.242737][ T33] locks held by syz.2.989/9923: 2, on CPU#1: [ 592.242752][ T33] #0: ffffffff902c1be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.242809][ T33] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 592.242866][ T33] locks held by syz.3.1515/12140: 2, on CPU#1: [ 592.242880][ T33] #0: ffffffff902c1be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.242937][ T33] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 592.242989][ T33] locks held by dhcpcd-run-hook/13912: 2, last CPU#0: [ 592.243004][ T33] #0: ffff88807af236b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 592.243059][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x24/0x550 [ 592.243140][ T33] locks held by syz.0.1945/14001: 2, last CPU#0: [ 592.243153][ T33] #0: ffff88807c68a9f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 592.243208][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 592.243265][ T33] locks held by syz.1.1944/14003: 2, last CPU#1: [ 592.243280][ T33] #0: ffff8880773d7678 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 592.243336][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 592.243391][ T33] locks held by syz.5.1946/14005: 2, last CPU#1: [ 592.243407][ T33] #0: ffff8880773d1d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 592.243462][ T33] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 592.243517][ T33] [ 592.243522][ T33] ============================================= [ 592.243522][ T33] [ 592.243531][ T33] NMI backtrace for cpu 0 [ 592.243545][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 592.243568][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 592.243580][ T33] Call Trace: [ 592.243588][ T33] [ 592.243597][ T33] dump_stack_lvl+0xe8/0x150 [ 592.243633][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 592.243690][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 592.243730][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 592.243756][ T33] sys_info+0x135/0x170 [ 592.243778][ T33] watchdog+0xfd7/0x1030 [ 592.243816][ T33] ? watchdog+0x1c7/0x1030 [ 592.243843][ T33] kthread+0x38b/0x480 [ 592.243864][ T33] ? __pfx_watchdog+0x10/0x10 [ 592.243882][ T33] ? __pfx_kthread+0x10/0x10 [ 592.243904][ T33] ret_from_fork+0x514/0xb70 [ 592.243940][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 592.243970][ T33] ? __switch_to+0xc89/0x1420 [ 592.244000][ T33] ? __pfx_kthread+0x10/0x10 [ 592.244022][ T33] ret_from_fork_asm+0x1a/0x30 [ 592.244067][ T33] [ 592.244075][ T33] Sending NMI from CPU 0 to CPUs 1: [ 592.244104][ C1] NMI backtrace for cpu 1 [ 592.244118][ C1] CPU: 1 UID: 0 PID: 8509 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 592.244139][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 592.244151][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 592.244234][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x3e/0x80 [ 592.244263][ C1] Code: d8 b4 cc 11 f7 c2 00 01 00 ff 74 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 <75> 35 83 b9 3c 17 00 00 00 74 2c 8b 91 10 17 00 00 83 fa 02 75 21 [ 592.244279][ C1] RSP: 0018:ffffc90000a18c98 EFLAGS: 00000002 [ 592.244295][ C1] RAX: ffffffff81b4f7f7 RBX: 000000000001c75a RCX: ffff88803153be80 [ 592.244309][ C1] RDX: 8000000001000101 RSI: 0000000001000101 RDI: 0000000000000000 [ 592.244321][ C1] RBP: ffff8880b87284a8 R08: 0000000001000101 R09: 0000000000080000 [ 592.244334][ C1] R10: 0000000000000000 R11: ffffffff9aa1f748 R12: dffffc0000000000 [ 592.244347][ C1] R13: ffffffff8eb805c0 R14: 1ffff110170e5059 R15: 00000089a7c429e3 [ 592.244361][ C1] FS: 0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 592.244377][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.244390][ C1] CR2: 00007ffe69fdfddc CR3: 000000001e742000 CR4: 00000000003526f0 [ 592.244408][ C1] Call Trace: [ 592.244415][ C1] [ 592.244421][ C1] ktime_get_update_offsets_now+0x97/0x3e0 [ 592.244449][ C1] hrtimer_interrupt+0x189/0xaa0 [ 592.244474][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 592.244498][ C1] ? sched_clock+0x41/0x60 [ 592.244524][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 592.244548][ C1] ? ktime_get+0x45/0x220 [ 592.244566][ C1] ? ktime_get+0x45/0x220 [ 592.244585][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 592.244607][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 592.244639][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 592.244659][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 592.244684][ C1] Code: f7 e8 5d f5 bc f5 f7 c3 00 02 00 00 74 05 e8 50 32 e9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 0e ae f5 65 48 8b 05 9c a1 ad 07 48 85 c0 74 18 5b 41 5e c3 [ 592.244699][ C1] RSP: 0018:ffffc90000a18f40 EFLAGS: 00000206 [ 592.244714][ C1] RAX: 0000000000000012 RBX: 0000000000000283 RCX: 8000000000000102 [ 592.244727][ C1] RDX: 0000000000000002 RSI: ffffffff8e47491f RDI: 0000000000000001 [ 592.244739][ C1] RBP: 0000000000000007 R08: ffffffff907a177f R09: 1ffffffff20f42ef [ 592.244752][ C1] R10: dffffc0000000000 R11: fffffbfff20f42f0 R12: 0000000000000009 [ 592.244765][ C1] R13: 0000000000000008 R14: ffff8880b8728280 R15: 0000000000000100 [ 592.244786][ C1] handle_softirqs+0x226/0x860 [ 592.244812][ C1] ? do_softirq+0x77/0xd0 [ 592.244835][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 592.244905][ C1] do_softirq+0x77/0xd0 [ 592.244926][ C1] [ 592.244932][ C1] [ 592.244939][ C1] __local_bh_enable_ip+0x100/0x140 [ 592.244962][ C1] ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 592.244996][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 592.245022][ C1] ? __lock_acquire+0x6df/0x2e50 [ 592.245040][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 592.245067][ C1] ? __mutex_trylock_common+0x15f/0x270 [ 592.245090][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 592.245114][ C1] ? __lock_acquire+0x6df/0x2e50 [ 592.245135][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 592.245159][ C1] ? kcov_remote_start+0x9c/0x7e0 [ 592.245188][ C1] ? kcov_remote_start+0x1a6/0x7e0 [ 592.245219][ C1] ieee80211_iface_work+0x78a/0x1010 [ 592.245241][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 592.245264][ C1] ? process_scheduled_works+0x97a/0x1630 [ 592.245287][ C1] process_scheduled_works+0xc3d/0x1630 [ 592.245322][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 592.245348][ C1] ? assign_work+0x3cf/0x5d0 [ 592.245372][ C1] worker_thread+0xa47/0xfb0 [ 592.245408][ C1] kthread+0x38b/0x480 [ 592.245425][ C1] ? __pfx_worker_thread+0x10/0x10 [ 592.245447][ C1] ? __pfx_kthread+0x10/0x10 [ 592.245464][ C1] ret_from_fork+0x514/0xb70 [ 592.245482][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 592.245508][ C1] ? __switch_to+0xc89/0x1420 [ 592.245532][ C1] ? __pfx_kthread+0x10/0x10 [ 592.245550][ C1] ret_from_fork_asm+0x1a/0x30 [ 592.245583][ C1] [ 592.246101][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 593.448935][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 593.458236][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 593.468294][ T33] Call Trace: [ 593.471581][ T33] [ 593.474516][ T33] vpanic+0x56d/0xa60 [ 593.478517][ T33] ? __pfx_vpanic+0x10/0x10 [ 593.483033][ T33] ? console_srcu_read_unlock+0x3a/0x60 [ 593.488590][ T33] panic+0xc5/0xd0 [ 593.492325][ T33] ? __pfx_panic+0x10/0x10 [ 593.496753][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 593.501795][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 593.508393][ T33] watchdog+0x1030/0x1030 [ 593.512734][ T33] ? watchdog+0x1c7/0x1030 [ 593.517253][ T33] kthread+0x38b/0x480 [ 593.521330][ T33] ? __pfx_watchdog+0x10/0x10 [ 593.526120][ T33] ? __pfx_kthread+0x10/0x10 [ 593.530718][ T33] ret_from_fork+0x514/0xb70 [ 593.535581][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 593.540720][ T33] ? __switch_to+0xc89/0x1420 [ 593.545421][ T33] ? __pfx_kthread+0x10/0x10 [ 593.550020][ T33] ret_from_fork_asm+0x1a/0x30 [ 593.554810][ T33] [ 593.558475][ T33] Kernel Offset: disabled [ 593.563059][ T33] Rebooting in 86400 seconds..