last executing test programs: 9.180230578s ago: executing program 1 (id=2824): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) (async) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e23", 0x48}, {0x0}], 0x2}, 0x40) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r3}) 8.997622241s ago: executing program 1 (id=2829): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x1a0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'macvlan0\x00', {}, {}, 0x88, 0x40, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x2}, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0x0, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0xe7, 0x4, 0x44}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x80}}, @common=@unspec=@helper={{0x48}, {0x0, 'pptp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r1, 0xd7735000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000040)=""/4146, &(0x7f0000000000)=0x1032) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001080)={@empty, 0x0}, &(0x7f00000010c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000011c0)={'gretap0\x00', &(0x7f0000001100)={'tunl0\x00', r4, 0x1, 0x7, 0x7fffffff, 0xff, {{0x1a, 0x4, 0x3, 0x3, 0x68, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @loopback, {[@ssrr={0x89, 0x1f, 0xcd, [@loopback, @private=0xa010100, @empty, @broadcast, @rand_addr=0x64010102, @multicast2, @private=0xa010100]}, @timestamp_addr={0x44, 0x34, 0x6f, 0x1, 0x9, [{@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0xd8d0}, {@rand_addr=0x64010100, 0x5}, {@loopback, 0x8}, {@multicast1, 0x5}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000040000000000170000000000036e0f00060000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x34}, 0x94) 8.749928844s ago: executing program 1 (id=2834): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r3, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f00000003c0), &(0x7f0000000440)=0x4) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRESOCT=r4, @ANYBLOB="7ed8ea8dbc56842b1595d1a30c1b56bcad8d6c475a0c4303c829f5c591c1d4b4418e428d0e63febee40417a06a070a4d70c464f43b3d701d0bdee36fe666112c480f1db1f4705551f36378264c17658d8f88cedfed11c47ae2feb643d36b3335fd7e681db969afc21cc149d674bc63b0139bd57bcf3e8b440328adc0109fbcd2cabdf41b00d4a4c2cc8559500659f6c7d556f0736b0f6299cae892fb368d757b086c71c4e3689675d6b7c1f64565bdcdfb75eaec250da3d2f1889062887d1384926a399c11e2", @ANYRESHEX=r0, @ANYRES8], 0xfdef) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0x36) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0x2, 0xa, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast2, 0x40, 0x7, 0x1, 0xc70}}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff, 0x1000, 0x8, 0x400, 0x3, 0x42000140, r8}) 6.564113429s ago: executing program 1 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x7f, 0x0, 0xf, 0x63, @private2, @empty, 0x8, 0x8000, 0xa, 0x4}}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000200)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000001) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44000) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x3, 0x4e22, 0x1, 0x0, 0x20, 0xa0, 0x1, r2, r4}, {0x1, 0x5, 0x5, 0xe7, 0x5, 0x0, 0x10001, 0x8}, {0x0, 0x9, 0x6, 0x80000001}, 0x0, 0x6e6bbd, 0x2, 0x1, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x34ff, 0x2, 0x0, 0x81, 0x4, 0x2, 0x1}}, 0xe8) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'dvmrp1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl2\x00', r2, 0x1, 0x10, 0x1, 0x6, {{0x1f, 0x4, 0x0, 0x4, 0x7c, 0x66, 0x0, 0x2, 0x4, 0x0, @remote, @private=0xa010101, {[@timestamp={0x44, 0x8, 0x91, 0x0, 0x7, [0x8]}, @generic={0x94, 0x8, "c1eed4595676"}, @rr={0x7, 0x23, 0x7f, [@empty, @local, @multicast1, @broadcast, @broadcast, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @generic={0x83, 0x10, "52b95c2f65d01d6937e6c4a9f13c"}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x1, [0x26a, 0x2]}, @end, @noop, @timestamp_prespec={0x44, 0x14, 0x64, 0x3, 0x3, [{@multicast2, 0x57}, {@loopback, 0x2090}]}]}}}}}) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001100)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000880)={0x820, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x883}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x200, 0x5, 0xe}]}}}]}}, {{0x8, 0x1, r2}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa0}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbfcd}}}]}}, {{0x8, 0x1, r2}, {0x248, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x9, 0x8, 0x7}, {0x3, 0x8, 0x41, 0x1}, {0x1000, 0x6, 0x9, 0x10001}, {0xc, 0x8d, 0x3, 0x5}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1b5734bd}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x820}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004801) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x64, r5, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xbc2}, @NL80211_ATTR_PMK={0x14, 0xfe, "60585272fd8d6997a7623b5198e6f1e6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cd635cf95ff5a03454b509116bd1879d"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24c6eaa409e0"}]}, 0x64}, 0x1, 0x0, 0x0, 0xc018}, 0x890) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000012c0)={0x80000000, 0x30, '\x00', 0x0, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) r9 = syz_genetlink_get_family_id$team(&(0x7f0000001340), r0) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001840)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80c00422}, 0xc, &(0x7f0000001800)={&(0x7f0000001380)={0x470, r9, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r7}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8000, 0x0, 0x4, 0x73}, {0x9, 0x5, 0x4, 0xcf}, {0xfc, 0x9, 0x14, 0x7fff}]}}}]}}, {{0x8, 0x1, r7}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x40001}, 0x20040084) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x40, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40081}, 0x1) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r10, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2, 0x5f}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x8000) (async, rerun: 32) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c80)=@generic={&(0x7f0000001c40)='./file0\x00', 0x0, 0x8}, 0x18) (rerun: 32) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001cc0)={&(0x7f0000001ac0)="a2e92b96a0bb789ebd9c460f5033a1cf6e", &(0x7f0000001b00)=""/157, &(0x7f0000001bc0)="bdb9c96afcb901d6531c09c65ee3b90795ecd8e430d0a57207780bf59f41cd4515f80de1bbeb681e08e84f37ba9bdd66d3", &(0x7f0000001c00)="98c576eef80229779896a72ebe17929235496b70da9801adeda19849e714e0c102ce8d6e0f879dcfa6d09bf242b7dc237aed8159", 0x9300, r12}, 0x38) (async) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001d40), r10) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x80, r13, 0x400, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r14 = socket$inet6(0xa, 0x3, 0x101) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000001e80)={'syz_tun\x00'}) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000023c0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002380)={&(0x7f0000001f00)={0x45c, r5, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x45}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x7b, 0xfa, "8acd7dc1e8a4046d0d22fff4cad76897c2dd72ee20af3308908c6e4a14385345c63d16351b3c73ee7086e083ded3a3e50da20491a63c72c3eb77968b5dc3468efd40a6c421799a9ae55523584d50e16321e53cb70b46b9dccb9d19a46ba3a12eec21a4ab41e6e105f6311f4c09062b790cad2a6b1bfe35"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "d51972eda9"}, @NL80211_ATTR_FILS_ERP_RRK={0xfe, 0xfc, "e5d1453230af9ffebd9b516963d5260e39789c5c6a9d37cf12359b13eb1c9662affa6b3eb9cc2e5225e34572b22a6bb6d373c15405a5b8db3e7a0269c2a45a5ae3562f8d5e667d1a47ab916c72fb49e9aab0fe61ed2862c82a1ce97c243250a379db74614d9ea1691bf71809c7088e104c07d95a9a3c78a8453d2dc18a47c260da05385dc60ad7c2a55697ba40c56199eb550b85c8ddf11f221ea49480a82edec8ea03d7b3855b035047e2526b41b36dab71ab61412eb57bc79a1079df1d95f5b06747ba2221eb48e851b13000804604e2be6caf2ffeb0db9f6eb19283faf2fc1a7af3fe16cd504b29383d7eb82f7bc4e25879940a23d32cb26d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}, @NL80211_ATTR_FILS_ERP_REALM={0xcf, 0xfa, "8006cad23cd8e3d18b9fa3e73d66535b41eb1299c24a254b94e9042dca481f1862a9acda995c89ad9038cdaaa1453db4650ecd8a331317d3b9ee1d4cc7d32ece64d387d009460b0a8f36191c446a262d0972e78e6ff76d9dd63bec91865237b9b2937ac943ce47910116a8ec02ba4883a73d151f2fac036a2729705ee826a5a09c1c0b4140edf9c6a8253b23b63c45c195f134bb611efae8ff032ad73ea20ce5410091071844f4467e9be330c86eeb886a78d80482c5a7c43ea1c4f26611ed9dbc393356a763737250ebbe"}], @NL80211_ATTR_IE={0x48, 0x2a, [@perr={0x84, 0x42, {0x8, 0x4, [{{0x0, 0x1}, @device_b, 0x7e, @value=@broadcast, 0x3e}, {{}, @broadcast, 0xff, @void, 0x40}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x23}, {{}, @device_b, 0x0, @void, 0x32}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}], @NL80211_ATTR_IE={0x15, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x4}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x11, 0xfa, "9da96f0afa40d924619988d3cc"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "d0bbe3d63e28"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_REALM={0x2c, 0xfa, "3a27a1a80a5fc1659c24432854068cb93dfde7d72d07ec7ea40ccff84aec2c8ca069bff6626633e2"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "849ae46504923180"}], @NL80211_ATTR_IE={0x33, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xc6, 0x9, @broadcast, 0x8, @value, 0x8, 0x0, @broadcast, 0x3}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0xd5, 0x2a, [@ht={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x5, 0x10, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x5, 0x8}}, @ssid={0x0, 0x6, @default_ap_ssid}, @supported_rates={0x1, 0x6, [{0x48, 0x1}, {0x9}, {0x18, 0x1}, {0x22}, {0xc}, {0x6}]}, @dsss={0x3, 0x1, 0x80}, @random={0x1d, 0x81, "94eed6d8b4dc7997fc68f6057b912fcbaca72ed35e6e23d023642bf14914955b7512aaa534367db2dfd722728add2f76b1f223217f4fb83c3fe3680d41a751b0131839f4ab8f36c663414cea386a88c1e2af4811d10b3aacd39795fad0cc17b0192b177885807e387764979def0f0bab599bcf99b10a797e3af3168986d786d59a"}, @cf={0x4, 0x6, {0xfb, 0x6, 0x14a5, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x25}, 0x8, 0x56, @device_b, 0x8, 0x0, 0x6}}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0xc888}, 0x4000001) 6.35575662s ago: executing program 1 (id=2847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_ext_convert_to_initialized_fastpath\x00', r3, 0x0, 0x9}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r4, 0x0) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80600}, 0xc, &(0x7f0000000100)={&(0x7f0000001900)={0x10c8, 0x12, 0x800, 0x70bd2a, 0x25dfdbfb, {0x23, 0x3, 0x6, 0xff, {0x4e20, 0x4e24, [0xcd8, 0x7, 0xffb1, 0x7], [0x8, 0xb17, 0x4, 0x7], 0x0, [0x56b, 0xf]}, 0x1, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "abae02b5ece2d57114cb76d155b2d03b2e5592987b738295969d765355bdad22f56aa22906d0be411aa2e7c0eb6b27b3b0e7aa8adae40e48786313994ee4a364b8ab625fc8f571914ec418328c3b61709c20cfc54068ff13f35542147f50a78d013d5c7b663ff13fdc4dda445f8c2b0340d9"}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x81}, 0x4044080) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}}], 0x2, 0x3404c8d4) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x6}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f13608060001080006040002ffff77b0ffffac1414bbaaaaaaaaaaaaac1414bb6120cb7bfc925cfa53c400c3ab6ea6c5421000000000000000229a4496d2923929b6d6460bd255e32e9d88bc326a4b0900a2fb570f4e420bfd3e772164e426fabf26e7e7e8a36081cfc94cc9fcf478663e2da239ca03e936953cca58c9565eb1f54841c62250e3600805e4d7550d"], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000000206010000000006000000fffbffff000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) 2.225946302s ago: executing program 2 (id=2905): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfffffffffffffe65, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x1020703971be172d}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x1f, r1}]}, 0x44}}, 0x4) 2.094009341s ago: executing program 0 (id=2908): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) r3 = socket(0x1f, 0x5, 0x6) bind$inet6(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt(r4, 0x1, 0x7, &(0x7f0000000040)=""/177, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.693472534s ago: executing program 0 (id=2912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1) bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fe}, 0x1c, 0x0}}], 0x1, 0x20048000) 1.641101514s ago: executing program 2 (id=2913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x7ff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="52f79f18004d2db372632775f7247c15"], 0x2c}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x2a, 0x0, 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x1c, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4042005}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r12, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44881}, 0x4000000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x41eb}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x800) 1.409369935s ago: executing program 2 (id=2917): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x4, @empty, 0x6}}, 0x8, 0xb, 0xa, 0x9, 0x52, 0x3, 0x9}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r3, 0x5}, &(0x7f0000000180)=0x8) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000001c0)=@generic={0x0, 0x8, 0x5}) r4 = accept(r0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x5185}], 0x1, 0x10142, 0x0) 1.21880807s ago: executing program 2 (id=2919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @loopback, {[], {{0x800, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xc}}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x2d, 0x2, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) (async) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r4, 0x0, 0xd}, 0x18) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x5d) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x2268, 0x2c, 0x2, 0x0, 0x25dfdbfb, {0x9, 0x7c}, [@nested={0x224c, 0x1, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @fd=r3}, @nested={0x223d, 0x16, 0x0, 0x1, [@nested={0x10c6, 0x93, 0x0, 0x1, [@typed={0x14, 0x136, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x4, 0x44}, @generic="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", @typed={0xc, 0x43, 0x0, 0x0, @u64=0x3}, @generic="d0dc01e794daf6f3b9214b1a2d14a27b52ae9d4e7ffe41bbd66046bee16a258cd7d0b3c4d3f9296b5846a629013c1829fad47b95ef554fe0868bbbd9d68b89735d427677fb37e225c3b0575d4e1e1ddc6a0b90bc098f2ade9ca7e469224a2c6d88aead53dd813920be4cf8fc19a348cdc21f391d730e26e3afb22834124fa08b5911", @nested={0x4, 0x53}, @typed={0xc, 0xfd, 0x0, 0x0, @u64=0xbef}, @nested={0x4, 0x7b}, @nested={0x4, 0xcc}, @nested={0x4, 0x13a}]}, @typed={0x4, 0x10c}, @generic="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", @generic="18e447b1956f1271ab052d05b4c21fada62560d661f23280a888dbcb12f2e95ae4184e87783afacffc57e511bbbd281b9e8b1df66d480ab14f1cecc40479f4b855b5fc34618425835be49baf65f473fe2c133733ee6cbeb5ecd7eed70f54e03d70b72e673dfa968056b36fd7379b557a7aeafcce6d85d82a627f31ca26bb01cf16bd514b5f74c52832107d4d89bb45056635136e17ed9e29e47c2b293770557b85a020de799d8006f109640c07dfdd0b60f298ce25d907fef67141683345bcf28c7e5c6127a980d99d331da246", @generic="2435b2e1d423ad87a48dfac695845b178424b2bacd2ff93d10a059e30b61aefaca7671675571d80705746b0c2e9c7251f6d66e20c75b5b8c01fc61df3bb5ad0eb675563c02ddbdff0663f515eca56f79707151b90c0b429cb4017e3fc329849cf082085f56dc93478cd358fd1aed545281c17105b597240d48b97dcaf1266085fa4210cd43e8a8b836a9c833c93de97275323e44804613de", @typed={0x6, 0x105, 0x0, 0x0, @str='!\x00'}]}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x2268}, 0x1, 0x0, 0x0, 0xc000}, 0x20004010) (rerun: 32) 1.158137357s ago: executing program 3 (id=2920): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c43b38c4d557951dab95269ab90b920e96b236776d7b59f5e1c0e93280a0264ffe4767bcd"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x12, 0x10000000, 0x1, 0x7}}]}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)}, 0x1f00) sendmsg$tipc(r6, 0x0, 0x40000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x60, 0x1, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x94) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r12, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c0) socket$packet(0x11, 0x3, 0x300) 1.06534656s ago: executing program 4 (id=2921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000100)=@hci, &(0x7f0000000080)=0x80, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0x7, 0x8000}, &(0x7f0000000200)=0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) 999.352291ms ago: executing program 3 (id=2922): syz_emit_ethernet(0x117, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fb18ff", 0xe1, 0x6, 0x0, @local, @private1, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x4, {[@generic={0x3, 0x2}, @mptcp=@ack={0x1e, 0xa, 0x2, 0x4, "9a42ac5504e4"}]}}, {"cb3bb6c1f7355ea673f046c364204938f596dc70a9d5a4cc5c24e584e1e5fa5ac0e362c2a5a636fd9af241ad0aba5c829f9cb26f4a3b8081db8704c7fe7ee3ff795ab07af8b9152b14637a28f4266e0e903e15f409228d89c59a685a55c0c53d1ca4c8ef7969f7b0658414af1d232fae90a732a8e08d054d9785926ddf39b34176b0e61a02c201fe9945799685d57a5bad6a63f36e5ecfe130fe3ff43b9e7b80cff6157eb32c3935a386f2728d8b02c0781382800c23cf4494047d297258fd6095"}}}}}}}, 0x0) (async) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 985.312989ms ago: executing program 2 (id=2923): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x4, 0x29, 0xffffffffffffffa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4014011) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="a00000006800010025bd7000feffffff0a00010000000000780008807400010001000000000000008702040110480800fe80000000000000000000000000002dfc010000000000000000000000000000fe880000000000000000000000000001fe80000000000000000000000000000efc020000000000000000000000000000fe880000000000000000000000000101060007000300000008000500", @ANYRES32=r4, @ANYBLOB="e9fb482c9c06bddc252dde9ce03e5cd20e1d9d2603305ee61a697ce4a65419233039a309ee0e6d6eee06a0318b7e245c8c7bf1f2c38b8e89c85323d940896294ab272a59bd702a5dd901b1712edd03212453dabf15e5202eb6093f24d2d06d3aa2ded477204a4be9a368991bc306266c2841eb03ae7dd22ba04dde0ee57e05ec4d4da03d473c8827f237fd66094f62c96ad39a59d103452def5f3e62ce1e4b"], 0xa0}}, 0x400c094) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c8014000100a463ede3"], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x4, 0x29, 0xffffffffffffffa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket(0x10, 0x3, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4014011) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="a00000006800010025bd7000feffffff0a00010000000000780008807400010001000000000000008702040110480800fe80000000000000000000000000002dfc010000000000000000000000000000fe880000000000000000000000000001fe80000000000000000000000000000efc020000000000000000000000000000fe880000000000000000000000000101060007000300000008000500", @ANYRES32=r4, @ANYBLOB="e9fb482c9c06bddc252dde9ce03e5cd20e1d9d2603305ee61a697ce4a65419233039a309ee0e6d6eee06a0318b7e245c8c7bf1f2c38b8e89c85323d940896294ab272a59bd702a5dd901b1712edd03212453dabf15e5202eb6093f24d2d06d3aa2ded477204a4be9a368991bc306266c2841eb03ae7dd22ba04dde0ee57e05ec4d4da03d473c8827f237fd66094f62c96ad39a59d103452def5f3e62ce1e4b"], 0xa0}}, 0x400c094) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c8014000100a463ede3"], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) (async) 877.402289ms ago: executing program 4 (id=2924): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x130, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xe8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x9c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x6d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) (async) r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x5}}, 0x1c}}, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 846.956008ms ago: executing program 3 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)={0x0, 0x7, [@multicast, @multicast, @local, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @local]}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffdfdf8, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x97, '\x00', 0xe3f0, 0x3ff, 0x3, 0x10000}}}}, @TCA_RATE={0x6, 0x5, {0x8, 0xf7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x240000a0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000004211002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e00020800"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)={0x0, 0x7, [@multicast, @multicast, @local, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @local]}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffdfdf8, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x97, '\x00', 0xe3f0, 0x3ff, 0x3, 0x10000}}}}, @TCA_RATE={0x6, 0x5, {0x8, 0xf7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x240000a0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000004211002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e00020800"], 0x4c}}, 0x0) (async) 815.355271ms ago: executing program 2 (id=2926): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001841c64ef7b0000000000000000000200000a1402000011000100009ac100000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8084) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) read(r1, &(0x7f0000000000)=""/124, 0x47) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x14c, 0x24, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x9, 0xf}, {0x8, 0x8}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xdf32}, @TCA_STAB={0x4}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0xe1f, 0xb, 0x2, 0x4, 0x200, 0x8}}, {0x14, 0x2, [0x8, 0x799, 0x9, 0xa, 0x6, 0x1, 0x6, 0xc9]}}, {{0x1c, 0x1, {0xab, 0x4, 0x7, 0x1, 0x1, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x100]}}, {{0x1c, 0x1, {0x1, 0x1, 0x81, 0x0, 0x0, 0x3, 0x401, 0x7}}, {0x12, 0x2, [0x1, 0x3, 0x0, 0x9, 0x1, 0x80, 0xae1]}}, {{0x1c, 0x1, {0x8, 0x6, 0xfff9, 0xf23, 0x0, 0x8, 0x0, 0x8}}, {0x14, 0x2, [0x81, 0x0, 0xe, 0xe, 0x0, 0x3, 0xb, 0x3]}}, {{0x1c, 0x1, {0xf6, 0x3, 0xc, 0x9, 0x1, 0x9, 0x5, 0x2}}, {0x8, 0x2, [0xf9, 0x4]}}, {{0x1c, 0x1, {0x9, 0x6, 0x3, 0x9, 0x1, 0x6, 0x7, 0x7}}, {0x12, 0x2, [0x3, 0x7a2, 0x0, 0x10, 0x8001, 0x0, 0xf26]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x200}]}, 0x14c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="aa1348c95e1e2575cfdc3107aaaaaaaaaaaaaaaaaaaade7b8add0000103afffee000000000000000000000000000bbff02000000000000000000000000000189009078000000"], 0x0) 661.362677ms ago: executing program 0 (id=2927): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800ffa70000000300000000000000009133501862000000950000000000000039bbf72e8ea1bdb0c7b40a95599bada39c02085cab0f74cfcf64b8667db431e4e7ad0d219e7d38c2dade27b2c8d77ed2dcdec64ea48b67f835deda281eca4341e3897474db25c7d850088b2638f012da11a56c9aa3679308b52b6ad97748cf4fa08172235eb8ee2242f0e1bb277ce7e47fee60d6d0d2507209859fc4ca9395409c5d74799968e6ccf10636512e9899285ad08a00469952f0ccf8efcbde324550a8926095e9abb2"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="08001497", 0x4}, {&(0x7f0000000400)="c63d763f80", 0x5}], 0x2}}], 0x1, 0x8000) 661.159411ms ago: executing program 4 (id=2928): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000b3949deb941ed04a00000a20000000000a050000000000000000000500001c0900010073797a30000000002c000000030a010facfb6a0000000000050000400900010073797a30000000000900030073797a300000000048000000060a010400000000000000000500000008000b40000000002c0004802800018008000100667764001c000280080002400000000d0800014000000016080003"], 0xbc}, 0x1, 0x0, 0x0, 0x854}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000020b69c97553002677b00000c00"], 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) 629.856194ms ago: executing program 0 (id=2929): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002f80)={'filter\x00', 0x6002, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7f, 'system_u:object_r:xconsole_device_t:s0\x00'}}}, {{@arp={@dev, @multicast2, 0x0, 0xff000000, 0x10, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2f8}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x518) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000e00)={0x0, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 524.015066ms ago: executing program 3 (id=2930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f0000000140)=0x10, 0x800) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 304.761697ms ago: executing program 0 (id=2931): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009fdd8600000000000088a8600081"], 0x3a) (async, rerun: 32) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xfe0}, 0x1, 0x0, 0x0, 0x1}, 0x1) 303.651062ms ago: executing program 4 (id=2932): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe", 0xa5}], 0x1}}], 0x1, 0x240080e4) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r3, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @null]}, 0x48) (async) setsockopt$inet6_int(r2, 0x29, 0xb, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0xbc}}, 0x4000000) 202.293141ms ago: executing program 3 (id=2933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x8, [{0x3ff, 0x8}, {0x1, 0x7}, {0x1}, {0x8, 0xffffffff}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x81, 0x8}]}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000010800024000000000080001400000000f08000440000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) 188.583701ms ago: executing program 4 (id=2934): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4b5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x29, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd8f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x8c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0x7, 0x1, 0x2, 0xffffffffffffffc0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x0, 0x0, 0x6, 0xb, 0x2, 0xffffffffffffffff, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 62.340031ms ago: executing program 4 (id=2935): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = socket(0x18, 0x5, 0x1) getsockname$packet(r7, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="0400848040002d800a00000001010101010100000a00"], 0x6c}}, 0x8004) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0x168, 0x210, 0xffffffff, 0x210, 0x168, 0x2e0, 0x2e0, 0xffffffff, 0x2e0, 0x2e0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'geneve1\x00', {}, {0xff}, 0x16}, 0x0, 0x70, 0xb8, 0x48}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x6, @ipv4=@local, @ipv4=@remote, @gre_key=0xb, @port=0x4e23}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x7, "db64985cd5f8f89e2d39bd1e973011c78ee53c45d0234524d46e18d7c613"}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'syz_tun\x00', 'batadv_slave_1\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x11, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x800}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0xc3b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) 54.848981ms ago: executing program 3 (id=2936): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000100)=""/122}, 0x20) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a000000a63985234565360049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f252325047c867ab8a0fe4dd27a5f57207e8cdc2a3abc8c4aefa2132e27b288b099f69950714743923c74779d3859616d0a20d5abdf295cf8c2d6b2548c848ad560b1022f411c8b5e503ba7a2abeadaed8d9486774e1cd5f5b63c0da3ce4f09b93f5cf8364332409d23cf81d9cb9a3588ea6cab36d8039b0be677159971228531786237cc30a4d514979825d07a91f675e45f8a6e07a1f29fb7dbaaecbbf724385f6cfe7b1c17af9efdc387a", 0x110, 0x0, 0x0, 0x0) 53.505853ms ago: executing program 0 (id=2937): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x90, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ab}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2a}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x56d}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xcaab}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x184}, 0x1, 0x0, 0x0, 0x4049}, 0x4000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x90, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ab}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2a}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x56d}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xcaab}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x184}, 0x1, 0x0, 0x0, 0x4049}, 0x4000) r3 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket(0x1d, 0x3, 0x1) getpeername$packet(r4, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) 0s ago: executing program 1 (id=2850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x44894) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): [ T7534] ? clear_bhb_loop+0x60/0xb0 [ 460.242943][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.242963][ T7534] RIP: 0033:0x7fa7be38f6c9 [ 460.242981][ T7534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.242997][ T7534] RSP: 002b:00007fa7bf209038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.243019][ T7534] RAX: ffffffffffffffda RBX: 00007fa7be5e5fa0 RCX: 00007fa7be38f6c9 [ 460.243033][ T7534] RDX: 0000000000000040 RSI: 0000200000000780 RDI: 0000000000000006 [ 460.243056][ T7534] RBP: 00007fa7bf209090 R08: 0000000000000000 R09: 0000000000000000 [ 460.243068][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.243080][ T7534] R13: 00007fa7be5e6038 R14: 00007fa7be5e5fa0 R15: 00007fffc9e4e328 [ 460.243114][ T7534] [ 460.498589][ T7538] nbd: must specify at least one socket [ 460.970305][ T3489] wlan1: Trigger new scan to find an IBSS to join [ 460.978053][ T7552] netlink: 'syz.4.468': attribute type 24 has an invalid length. [ 461.015935][ T7552] lo speed is unknown, defaulting to 1000 [ 461.033375][ T7563] FAULT_INJECTION: forcing a failure. [ 461.033375][ T7563] name failslab, interval 1, probability 0, space 0, times 0 [ 461.046209][ T7563] CPU: 1 UID: 0 PID: 7563 Comm: syz.2.472 Not tainted syzkaller #0 PREEMPT(full) [ 461.046237][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.046250][ T7563] Call Trace: [ 461.046258][ T7563] [ 461.046267][ T7563] dump_stack_lvl+0x189/0x250 [ 461.046300][ T7563] ? __pfx____ratelimit+0x10/0x10 [ 461.046328][ T7563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.046355][ T7563] ? __pfx__printk+0x10/0x10 [ 461.046382][ T7563] ? __pfx___might_resched+0x10/0x10 [ 461.046403][ T7563] ? fs_reclaim_acquire+0x7d/0x100 [ 461.046428][ T7563] should_fail_ex+0x414/0x560 [ 461.046464][ T7563] should_failslab+0xa8/0x100 [ 461.046487][ T7563] kmem_cache_alloc_node_noprof+0x77/0x710 [ 461.046516][ T7563] ? __alloc_skb+0x112/0x2d0 [ 461.046533][ T7563] ? netlink_autobind+0xdb/0x300 [ 461.046560][ T7563] __alloc_skb+0x112/0x2d0 [ 461.046584][ T7563] netlink_sendmsg+0x5c6/0xb30 [ 461.046614][ T7563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.046638][ T7563] ? aa_sock_msg_perm+0xf1/0x1d0 [ 461.046677][ T7563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.046697][ T7563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.046718][ T7563] __sock_sendmsg+0x21c/0x270 [ 461.046749][ T7563] ____sys_sendmsg+0x505/0x830 [ 461.046777][ T7563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.046810][ T7563] ? import_iovec+0x74/0xa0 [ 461.046839][ T7563] ___sys_sendmsg+0x21f/0x2a0 [ 461.046864][ T7563] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.046928][ T7563] ? __fget_files+0x2a/0x420 [ 461.046946][ T7563] ? __fget_files+0x3a0/0x420 [ 461.046977][ T7563] __x64_sys_sendmsg+0x19b/0x260 [ 461.047002][ T7563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.047036][ T7563] ? __pfx_ksys_write+0x10/0x10 [ 461.047070][ T7563] ? do_syscall_64+0xbe/0xfa0 [ 461.047104][ T7563] do_syscall_64+0xfa/0xfa0 [ 461.047130][ T7563] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.047159][ T7563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.047179][ T7563] ? clear_bhb_loop+0x60/0xb0 [ 461.047204][ T7563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.047223][ T7563] RIP: 0033:0x7fb00c78f6c9 [ 461.047242][ T7563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.047258][ T7563] RSP: 002b:00007fb00d636038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.047280][ T7563] RAX: ffffffffffffffda RBX: 00007fb00c9e5fa0 RCX: 00007fb00c78f6c9 [ 461.047295][ T7563] RDX: 0000000000000040 RSI: 0000200000000780 RDI: 0000000000000006 [ 461.047307][ T7563] RBP: 00007fb00d636090 R08: 0000000000000000 R09: 0000000000000000 [ 461.047319][ T7563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.047330][ T7563] R13: 00007fb00c9e6038 R14: 00007fb00c9e5fa0 R15: 00007ffe36b1d898 [ 461.047363][ T7563] [ 461.345070][ T6524] hid-generic 0005:16C0:0200.0001: item fetching failed at offset 0/1 [ 461.354535][ T6524] hid-generic 0005:16C0:0200.0001: probe with driver hid-generic failed with error -22 [ 461.374322][ T7552] lo speed is unknown, defaulting to 1000 [ 461.387815][ T7552] lo speed is unknown, defaulting to 1000 [ 461.400622][ T7552] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 461.418789][ T7552] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 461.455540][ T7552] lo speed is unknown, defaulting to 1000 [ 461.464379][ T7552] lo speed is unknown, defaulting to 1000 [ 461.473039][ T7552] lo speed is unknown, defaulting to 1000 [ 461.481894][ T7552] lo speed is unknown, defaulting to 1000 [ 461.492292][ T7552] lo speed is unknown, defaulting to 1000 [ 462.138717][ T7620] ipt_ECN: cannot use operation on non-tcp rule [ 462.233367][ T7623] syzkaller1: entered promiscuous mode [ 462.270672][ T7623] syzkaller1: entered allmulticast mode [ 462.506424][ T7634] netlink: 'syz.4.497': attribute type 1 has an invalid length. [ 463.071022][ T7670] bridge_slave_0: invalid flags given to default FDB implementation [ 463.424867][ T7680] __nla_validate_parse: 8 callbacks suppressed [ 463.424886][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 463.480038][ T7685] netlink: 'syz.0.515': attribute type 2 has an invalid length. [ 463.917317][ T7707] netlink: 'syz.4.521': attribute type 18 has an invalid length. [ 463.932669][ T7708] netlink: 'syz.4.521': attribute type 21 has an invalid length. [ 463.957114][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 464.009720][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.026159][ T3489] wlan1: Creating new IBSS network, BSSID 82:e9:50:3a:a9:2b [ 464.030306][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.057300][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.075505][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.519257][ T7741] sctp: [Deprecated]: syz.0.531 (pid 7741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.519257][ T7741] Use struct sctp_sack_info instead [ 464.634994][ T7752] sctp: [Deprecated]: syz.2.537 (pid 7752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.634994][ T7752] Use struct sctp_sack_info instead [ 464.716429][ T7755] syzkaller0: entered promiscuous mode [ 464.722081][ T7755] syzkaller0: entered allmulticast mode [ 464.775106][ T7757] delete_channel: no stack [ 464.824926][ T7757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.539'. [ 464.840973][ T7758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.539'. [ 467.583384][ T7762] syzkaller0: entered promiscuous mode [ 467.590659][ T7762] syzkaller0: entered allmulticast mode [ 467.698040][ T7768] Cannot find add_set index 0 as target [ 467.863331][ T7778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.544'. [ 467.892208][ T7776] tipc: Started in network mode [ 467.900026][ T7776] tipc: Node identity 9a736c743737, cluster identity 4711 [ 467.914284][ T7776] tipc: Enabled bearer , priority 0 [ 467.922714][ T7776] syzkaller0: entered promiscuous mode [ 467.928379][ T7776] syzkaller0: entered allmulticast mode [ 467.954195][ T7776] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 468.018772][ T7786] tipc: Resetting bearer [ 468.041936][ T7787] netlink: 'syz.4.546': attribute type 13 has an invalid length. [ 468.051500][ T7775] tipc: Resetting bearer [ 468.071295][ T7775] tipc: Disabling bearer [ 468.088541][ T7787] veth0_macvtap: left promiscuous mode [ 468.096828][ T7787] macvtap0: entered allmulticast mode [ 468.110514][ T7787] macvtap0: refused to change device tx_queue_len [ 468.138649][ T7784] tipc: Enabled bearer , priority 0 [ 468.189050][ T7796] netlink: 60 bytes leftover after parsing attributes in process `syz.3.549'. [ 468.345198][ T7794] syzkaller0: entered promiscuous mode [ 468.370443][ T7794] syzkaller0: entered allmulticast mode [ 468.376731][ T7813] netlink: 'syz.4.553': attribute type 10 has an invalid length. [ 468.389790][ T7813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.553'. [ 468.426288][ T7807] tipc: Resetting bearer [ 468.795458][ T7835] sctp: [Deprecated]: syz.1.559 (pid 7835) Use of int in maxseg socket option. [ 468.795458][ T7835] Use struct sctp_assoc_value instead [ 468.857018][ T7783] tipc: Resetting bearer [ 470.053489][ T7783] tipc: Disabling bearer [ 470.084837][ T7849] veth5: entered allmulticast mode [ 470.094215][ T7850] tipc: Started in network mode [ 470.099687][ T7850] tipc: Node identity a620f62a57c5, cluster identity 4711 [ 470.110101][ T7850] tipc: Enabled bearer , priority 0 [ 470.117062][ T5960] tipc: Node number set to 2856793418 [ 470.177141][ T7868] netlink: 212 bytes leftover after parsing attributes in process `syz.4.569'. [ 470.188624][ T7868] netlink: 64 bytes leftover after parsing attributes in process `syz.4.569'. [ 470.219707][ T7850] tipc: Disabling bearer [ 470.443092][ T7879] ipt_REJECT: TCP_RESET invalid for non-tcp [ 470.488108][ T7879] netlink: 'syz.0.574': attribute type 33 has an invalid length. [ 470.522270][ T7884] netlink: 272 bytes leftover after parsing attributes in process `syz.3.576'. [ 470.562047][ T7884] netlink: 44 bytes leftover after parsing attributes in process `syz.3.576'. [ 470.587930][ T7879] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 470.613357][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'. [ 470.643115][ T7879] bond1 (unregistering): Released all slaves [ 470.670067][ T7884] IPv6: sit2: Disabled Multicast RS [ 470.670280][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.577'. [ 470.676939][ T7884] sit2: entered allmulticast mode [ 470.691277][ T7892] netlink: 'syz.4.577': attribute type 17 has an invalid length. [ 470.711507][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 470.720808][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.577'. [ 470.809212][ T7896] xt_hashlimit: size too large, truncated to 1048576 [ 470.867330][ T7898] x_tables: duplicate underflow at hook 3 [ 470.894757][ T7892] bridge0: entered promiscuous mode [ 470.913094][ T7892] bridge0: left promiscuous mode [ 471.137584][ T7908] tc_dump_action: action bad kind [ 471.262956][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 471.448481][ T7924] netlink: 'syz.0.588': attribute type 4 has an invalid length. [ 471.458223][ T7927] netlink: 'syz.1.590': attribute type 29 has an invalid length. [ 471.472150][ T7927] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 471.483190][ T7928] netlink: 'syz.4.591': attribute type 21 has an invalid length. [ 471.599402][ T7934] bond2: (slave geneve3): making interface the new active one [ 471.608735][ T7934] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 471.617755][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 471.632765][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 471.650143][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 471.659846][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 471.671808][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 471.992374][ T7958] ip6t_srh: unknown srh match flags 4000 [ 472.228576][ T7967] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 472.246868][ T7967] bond2 (unregistering): Released all slaves [ 472.418665][ T7983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.465892][ T7985] ip6t_srh: unknown srh invflags 4000 [ 472.472868][ T7983] syzkaller0: entered promiscuous mode [ 472.479137][ T7983] syzkaller0: entered allmulticast mode [ 472.539574][ T7985] 0: reclassify loop, rule prio 0, protocol 800 [ 472.785649][ T7995] sctp: [Deprecated]: syz.2.613 (pid 7995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.785649][ T7995] Use struct sctp_sack_info instead [ 472.955194][ T43] IPVS: starting estimator thread 0... [ 473.061621][ T8009] IPVS: using max 28 ests per chain, 67200 per kthread [ 473.128519][ T8018] syzkaller0: entered promiscuous mode [ 473.145651][ T8018] syzkaller0: entered allmulticast mode [ 473.250779][ T8028] netlink: 'syz.4.621': attribute type 10 has an invalid length. [ 474.515645][ T8050] tap0: tun_chr_ioctl cmd 1074025677 [ 474.525061][ T8050] tap0: linktype set to 65534 [ 474.608260][ T8054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.640166][ T6524] lo speed is unknown, defaulting to 1000 [ 474.658134][ T8061] netlink: 'syz.0.631': attribute type 11 has an invalid length. [ 474.662661][ T8057] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 474.668435][ T8061] netlink: 'syz.0.631': attribute type 11 has an invalid length. [ 474.728905][ T8057] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 474.759410][ T8057] gretap1: entered promiscuous mode [ 474.769023][ T8057] gretap1: entered allmulticast mode [ 474.794797][ T8065] netlink: 'syz.2.633': attribute type 3 has an invalid length. [ 474.893188][ T8072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.929717][ T8077] syzkaller0: entered promiscuous mode [ 474.945660][ T8077] syzkaller0: entered allmulticast mode [ 475.042557][ T8080] syzkaller0: entered promiscuous mode [ 475.048947][ T8080] syzkaller0: entered allmulticast mode [ 475.058273][ T8087] tipc: Enabled bearer , priority 0 [ 475.072224][ T8076] tipc: Resetting bearer [ 475.143511][ T8076] tipc: Disabling bearer [ 476.413442][ T8109] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 476.429018][ T8113] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 476.546790][ T8109] __nla_validate_parse: 6 callbacks suppressed [ 476.546811][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.646'. [ 476.548613][ T8120] bond2: (slave bridge1): making interface the new active one [ 476.553567][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 476.568569][ T8120] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 476.599316][ T8121] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 476.610192][ T8121] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 476.627413][ T8121] bond1: (slave xfrm1): making interface the new active one [ 476.638739][ T8121] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 476.667149][ T8109] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 476.678595][ T8109] bond1 (unregistering): Released all slaves [ 476.982813][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 477.222847][ T8144] bridge_slave_0: left allmulticast mode [ 477.239348][ T8144] bridge_slave_0: left promiscuous mode [ 477.261906][ T8165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 477.280475][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.289415][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 477.323368][ T8144] bridge_slave_1: left allmulticast mode [ 477.329086][ T8144] bridge_slave_1: left promiscuous mode [ 477.355499][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.415714][ T8144] bond0: (slave bond_slave_0): Releasing backup interface [ 477.477267][ T8144] bond0: (slave bond_slave_1): Releasing backup interface [ 477.507978][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.662'. [ 477.529384][ T8144] team0: Port device team_slave_0 removed [ 477.547893][ T8185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.662'. [ 477.558027][ T8144] team0: Port device team_slave_1 removed [ 477.585879][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.594370][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.605165][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.613319][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.637174][ T8144] bond2: (slave bridge1): Releasing active interface [ 477.670481][ T8192] netlink: 48 bytes leftover after parsing attributes in process `syz.1.661'. [ 477.900680][ T8197] netlink: 'syz.0.665': attribute type 19 has an invalid length. [ 477.995720][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 478.051520][ T8211] ieee802154 phy0 wpan0: encryption failed: -22 [ 478.073945][ T8211] syz_tun: entered allmulticast mode [ 478.101464][ T8216] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.671'. [ 478.102509][ T8210] syz_tun: left allmulticast mode [ 478.252493][ T8229] Bluetooth: MGMT ver 1.23 [ 478.632589][ T8250] bridge1: entered promiscuous mode [ 478.638184][ T8250] bridge1: entered allmulticast mode [ 478.729612][ T8257] tipc: Enabled bearer , priority 0 [ 478.738970][ T8257] syzkaller0: entered promiscuous mode [ 478.744734][ T8257] syzkaller0: entered allmulticast mode [ 478.778135][ T8255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.781607][ T8257] tipc: Resetting bearer [ 478.804091][ T8256] tipc: Resetting bearer [ 478.835502][ T8256] tipc: Disabling bearer [ 479.053923][ T8271] IPVS: length: 157 != 24 [ 479.161844][ T8278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.168951][ T8277] netlink: 'syz.0.691': attribute type 33 has an invalid length. [ 479.222382][ T8277] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 479.234573][ T8286] delete_channel: no stack [ 479.252917][ T8277] bond1 (unregistering): Released all slaves [ 479.358318][ T8280] bond2 (unregistering): Released all slaves [ 479.396731][ T8295] netlink: 'syz.1.697': attribute type 10 has an invalid length. [ 479.493036][ T8295] bridge_slave_1: left allmulticast mode [ 479.507407][ T8295] bridge_slave_1: left promiscuous mode [ 479.515731][ T8295] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.545187][ T8295] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 479.568540][ T8304] sctp: [Deprecated]: syz.3.700 (pid 8304) Use of int in max_burst socket option deprecated. [ 479.568540][ T8304] Use struct sctp_assoc_value instead [ 479.732727][ T8319] netlink: 'syz.1.704': attribute type 4 has an invalid length. [ 479.774602][ T8319] netlink: 'syz.1.704': attribute type 4 has an invalid length. [ 479.942344][ T8329] netlink: 'syz.4.708': attribute type 7 has an invalid length. [ 479.950315][ T8329] netlink: 'syz.4.708': attribute type 8 has an invalid length. [ 480.742977][ T8382] netlink: 'syz.4.724': attribute type 1 has an invalid length. [ 480.945629][ T8391] bond3: option lp_interval: invalid value (0) [ 480.962306][ T8391] bond3: option lp_interval: allowed values 1 - 2147483647 [ 481.634180][ T8391] bond3 (unregistering): Released all slaves [ 481.771051][ T8390] lo speed is unknown, defaulting to 1000 [ 481.891514][ T8409] __nla_validate_parse: 15 callbacks suppressed [ 481.891536][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 481.974890][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 481.988816][ T8401] workqueue: name exceeds WQ_NAME_LEN. Truncating to: “&˜%àï÷åQÍ0@æjÛÈÊ«–Óéôð} [ 482.148338][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 482.282858][ T8430] pimreg: entered allmulticast mode [ 482.323844][ T8429] pimreg: left allmulticast mode [ 482.615384][ T8463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'. [ 482.626183][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 482.872094][ T8477] mac80211_hwsim hwsim7 û: renamed from wlan1 (while UP) [ 483.016163][ T8484] validate_nla: 2 callbacks suppressed [ 483.016176][ T8484] netlink: 'syz.3.746': attribute type 3 has an invalid length. [ 483.262192][ T8490] batadv1: entered allmulticast mode [ 483.427287][ T8507] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 483.466152][ T8511] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 483.479124][ T8499] netlink: 'syz.1.752': attribute type 4 has an invalid length. [ 483.551717][ T8512] ieee802154 phy0 wpan0: encryption failed: -90 [ 483.559973][ T8499] netlink: 'syz.1.752': attribute type 4 has an invalid length. [ 483.748650][ T8529] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.760'. [ 483.788298][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 483.876858][ T8540] sock: sock_set_timeout: `syz.2.764' (pid 8540) tries to set negative timeout [ 483.897755][ T8542] netlink: 'syz.1.762': attribute type 1 has an invalid length. [ 483.968141][ T8542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.009268][ T8547] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 484.026789][ T8553] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.766'. [ 484.040387][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 484.049222][ T8553] netlink: 'syz.4.766': attribute type 5 has an invalid length. [ 484.057863][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.766'. [ 484.090764][ T8547] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 484.403544][ T8575] lo speed is unknown, defaulting to 1000 [ 484.922800][ T8598] IPv6: NLM_F_REPLACE set, but no existing node found! [ 484.931360][ T8598] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 484.991935][ T8598] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 485.006185][ T8598] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 485.036871][ T8605] IPv6: NLM_F_REPLACE set, but no existing node found! [ 485.046791][ T8575] netlink: 'syz.3.773': attribute type 4 has an invalid length. [ 485.913510][ T8652] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 486.239148][ T8669] netlink: 'syz.4.800': attribute type 10 has an invalid length. [ 486.302480][ T8669] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 486.387106][ T8669] syzkaller0: entered promiscuous mode [ 486.393572][ T8669] syzkaller0: entered allmulticast mode [ 487.833202][ T8716] __nla_validate_parse: 9 callbacks suppressed [ 487.833220][ T8716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.811'. [ 487.839721][ T8715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.811'. [ 487.951226][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 487.963240][ T8724] netlink: 'syz.1.814': attribute type 1 has an invalid length. [ 488.027464][ T8724] bond4: entered promiscuous mode [ 488.043379][ T8724] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.128624][ T8741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.817'. [ 488.138359][ T8724] bond4: (slave bridge1): making interface the new active one [ 488.146129][ T8724] bridge1: entered promiscuous mode [ 488.153232][ T8724] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 488.399670][ T8750] syzkaller0: entered promiscuous mode [ 488.405394][ T8750] syzkaller0: entered allmulticast mode [ 488.426601][ T8759] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 4, id = 0 [ 488.624835][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 488.634538][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 488.806092][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 488.815981][ T8794] x_tables: unsorted entry at hook 2 [ 488.823116][ T8785] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 489.731747][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.829'. [ 489.733367][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.829'. [ 489.742003][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.829'. [ 490.008234][ T8773] syzkaller1: entered promiscuous mode [ 490.020284][ T8773] syzkaller1: entered allmulticast mode [ 490.931044][ T8844] bond0: (slave bond_slave_1): Releasing backup interface [ 490.984666][ T8862] Cannot find del_set index 4 as target [ 491.126219][ T8870] netlink: 'syz.2.848': attribute type 13 has an invalid length. [ 491.366549][ T8366] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.419560][ T8366] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.434059][ T8366] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.466764][ T8366] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.578636][ T8886] syzkaller0: entered promiscuous mode [ 491.606913][ T8886] syzkaller0: entered allmulticast mode [ 491.683111][ T8898] x_tables: duplicate underflow at hook 2 [ 492.156782][ T8901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.207720][ T8366] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 492.252241][ T8901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.735712][ T8901] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 492.815626][ T8901] bond4: left promiscuous mode [ 492.830558][ T8901] bridge1: left promiscuous mode [ 492.891911][ T8934] __nla_validate_parse: 138 callbacks suppressed [ 492.891932][ T8934] netlink: 132 bytes leftover after parsing attributes in process `syz.4.865'. [ 492.942182][ T8366] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.976009][ T8366] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.999641][ T8366] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 493.030825][ T8366] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.069439][ T8366] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.098897][ T8366] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 493.129092][ T8366] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.169611][ T8366] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.188905][ T8366] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 493.206530][ T8366] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.250921][ T8366] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.294575][ T8366] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 493.398080][ T8954] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 493.440569][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 493.860513][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.879'. [ 493.880965][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.879'. [ 493.995861][ T8982] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 494.075272][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 494.317627][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 494.335201][ T9011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.349290][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 494.451972][ T9017] netlink: 'syz.4.891': attribute type 11 has an invalid length. [ 494.603722][ T9021] syzkaller0: entered promiscuous mode [ 494.622699][ T9021] syzkaller0: entered allmulticast mode [ 494.758605][ T9039] netlink: 148 bytes leftover after parsing attributes in process `syz.3.897'. [ 494.758890][ T9037] netlink: 148 bytes leftover after parsing attributes in process `syz.3.897'. [ 494.862056][ T9046] tipc: Started in network mode [ 494.870055][ T9046] tipc: Node identity 22ea451fab79, cluster identity 4711 [ 494.878209][ T9046] tipc: Enabled bearer , priority 0 [ 494.987670][ T9046] syzkaller0: entered promiscuous mode [ 495.000508][ T9046] syzkaller0: entered allmulticast mode [ 495.024405][ T9046] tipc: Resetting bearer [ 495.067102][ T9045] tipc: Resetting bearer [ 495.124242][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 495.138114][ T9045] tipc: Disabling bearer [ 495.696983][ T9085] netlink: 'syz.4.910': attribute type 28 has an invalid length. [ 495.733455][ T9085] netlink: 'syz.4.910': attribute type 3 has an invalid length. [ 496.077875][ T9104] bond0: option ad_select: unable to set because the bond device is up [ 496.252715][ T9120] netlink: 'syz.0.920': attribute type 1 has an invalid length. [ 496.296469][ T9120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.325438][ T9124] bridge0: entered promiscuous mode [ 496.331211][ T9124] macsec2: entered promiscuous mode [ 496.350105][ T9124] macsec2: entered allmulticast mode [ 496.355900][ T9124] bridge0: entered allmulticast mode [ 496.366674][ T9124] bridge0: port 3(macsec2) entered blocking state [ 496.384723][ T9124] bridge0: port 3(macsec2) entered disabled state [ 496.406816][ T9124] bridge0: left allmulticast mode [ 496.416919][ T9124] bridge0: left promiscuous mode [ 496.650132][ T9130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.727297][ T9134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.615126][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.621589][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.431170][ T9179] vlan3: entered promiscuous mode [ 518.446510][ T9179] hsr_slave_1: entered promiscuous mode [ 518.460281][ T9179] vlan3: entered allmulticast mode [ 518.470350][ T9179] hsr_slave_1: entered allmulticast mode [ 518.528285][ T9177] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 518.556702][ T9192] netlink: 'syz.2.937': attribute type 10 has an invalid length. [ 518.641674][ T9192] veth0_virt_wifi: entered allmulticast mode [ 518.671827][ T9192] team0: Port device veth0_virt_wifi added [ 518.710903][ T9185] lo speed is unknown, defaulting to 1000 [ 518.792577][ T9208] netlink: 'syz.2.942': attribute type 26 has an invalid length. [ 518.802566][ T9208] __nla_validate_parse: 10 callbacks suppressed [ 518.802581][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 518.835104][ T9208] netlink: 'syz.2.942': attribute type 26 has an invalid length. [ 518.851698][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 518.855691][ T9210] netlink: 'syz.2.942': attribute type 1 has an invalid length. [ 518.912157][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 518.976821][ T5884] block nbd0: Receive control failed (result -107) [ 519.216078][ T9233] netlink: 68 bytes leftover after parsing attributes in process `syz.1.951'. [ 519.300917][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.953'. [ 519.347756][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 519.384372][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 519.538358][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 519.566051][ T9251] syzkaller0: entered promiscuous mode [ 519.580122][ T9251] syzkaller0: entered allmulticast mode [ 519.605582][ T9255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.959'. [ 519.764996][ T9261] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 519.845993][ T9269] C: renamed from team_slave_0 (while UP) [ 519.861283][ T9269] netlink: 'syz.2.962': attribute type 1 has an invalid length. [ 519.869194][ T9269] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 519.925206][ T9261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.961'. [ 519.951553][ T9272] 8021q: adding VLAN 0 to HW filter on device bond6 [ 519.954611][ T9282] SET target dimension over the limit! [ 519.963213][ T9272] bond5: (slave bond6): making interface the new active one [ 519.972581][ T9272] bond5: (slave bond6): Enslaving as an active interface with an up link [ 520.207392][ T9298] gre0: entered promiscuous mode [ 520.213695][ T9298] gre0: entered allmulticast mode [ 520.257299][ T9298] netlink: 'syz.1.972': attribute type 1 has an invalid length. [ 520.283369][ T9302] siw: device registration error -23 [ 520.439552][ T9313] tipc: Started in network mode [ 520.445786][ T9313] tipc: Node identity dec03a4c8fa2, cluster identity 4711 [ 520.453409][ T9313] tipc: Enabled bearer , priority 0 [ 520.599004][ T9313] tipc: Disabling bearer [ 520.609169][ T9328] netlink: del zone limit has 4 unknown bytes [ 520.660965][ T9334] syzkaller1: entered promiscuous mode [ 520.666484][ T9334] syzkaller1: entered allmulticast mode [ 521.837661][ T9413] netlink: 'syz.4.998': attribute type 1 has an invalid length. [ 521.879268][ T9413] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.992922][ T9375] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 522.714022][ T9437] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 522.727518][ T9437] bond3 (unregistering): Released all slaves [ 522.869414][ T9453] erspan0: entered promiscuous mode [ 522.879491][ T9453] erspan0: entered allmulticast mode [ 523.057580][ T9465] Bluetooth: MGMT ver 1.23 [ 523.074499][ T9468] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20003 [ 523.110742][ T9457] team0 (unregistering): Port device C removed [ 523.121612][ T9457] team0 (unregistering): Port device team_slave_1 removed [ 523.139074][ T9457] team0 (unregistering): Port device veth0_virt_wifi removed [ 523.233775][ T5970] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 523.450366][ T5884] Bluetooth: hci0: command 0x0401 tx timeout [ 523.545255][ T9488] syzkaller1: entered promiscuous mode [ 523.560423][ T9488] syzkaller1: entered allmulticast mode [ 523.899717][ T9527] __nla_validate_parse: 8 callbacks suppressed [ 523.899735][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 523.942951][ T9527] veth0: entered promiscuous mode [ 523.955488][ T9527] macvtap1: entered promiscuous mode [ 523.964346][ T9527] macvtap1: entered allmulticast mode [ 523.970647][ T9527] veth0: entered allmulticast mode [ 524.002495][ T9528] veth0: left allmulticast mode [ 524.012979][ T9528] veth0: left promiscuous mode [ 524.122325][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.130103][ T9537] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.389379][ T6526] lo speed is unknown, defaulting to 1000 [ 524.395792][ T5970] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.404816][ T6526] syz2: Port: 1 Link DOWN [ 524.409649][ T5970] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.437154][ T5970] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.490055][ T5970] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.502269][ T9554] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1039'. [ 524.513951][ T5970] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.588725][ T5970] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.598616][ T5970] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.607738][ T5970] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.686367][ T9561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.736534][ T9561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.769361][ T9561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.782014][ T9563] IPVS: set_ctl: invalid protocol: 43 172.20.20.14:20000 [ 524.958601][ T9575] netlink: 'syz.4.1048': attribute type 11 has an invalid length. [ 524.966601][ T9575] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1048'. [ 525.078541][ T9581] openvswitch: netlink: Message has 12 unknown bytes. [ 525.101417][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 525.114063][ T9578] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1049'. [ 525.137870][ T9578] : entered promiscuous mode [ 525.252726][ T9586] netlink: 'syz.4.1050': attribute type 15 has an invalid length. [ 525.844321][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'. [ 526.003295][ T9618] tipc: Enabling of bearer rejected, failed to enable media [ 526.367388][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'. [ 526.565097][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1069'. [ 526.719295][ T9664] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1074'. [ 526.728655][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 526.972980][ T9683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.042739][ T9687] netlink: 'syz.3.1083': attribute type 1 has an invalid length. [ 527.299416][ T9689] lo speed is unknown, defaulting to 1000 [ 527.477477][ T9718] macvlan2: entered promiscuous mode [ 527.494506][ T9718] macvlan2: entered allmulticast mode [ 527.506590][ T9718] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 527.835516][ T9746] tipc: Enabling of bearer rejected, failed to enable media [ 528.211346][ T9767] ªªªªªª: renamed from macvlan0 (while UP) [ 528.317690][ T9774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 528.325169][ T9774] IPv6: NLM_F_CREATE should be set when creating new route [ 528.332746][ T9774] IPv6: NLM_F_CREATE should be set when creating new route [ 528.340379][ T9774] IPv6: NLM_F_CREATE should be set when creating new route [ 528.406075][ T9774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 528.634417][ T9790] gtp0: entered promiscuous mode [ 528.639536][ T9790] gtp0: entered allmulticast mode [ 528.893899][ T9811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.054114][ T9824] vlan1: entered allmulticast mode [ 529.071827][ T9824] veth0_vlan: entered allmulticast mode [ 529.127500][ T9825] lo speed is unknown, defaulting to 1000 [ 529.283198][ T9840] __nla_validate_parse: 1 callbacks suppressed [ 529.283220][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 529.851895][ T9834] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1125'. [ 529.979602][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1130'. [ 530.002662][ T9852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1130'. [ 530.151651][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 530.195452][ T9866] dvmrp6: entered allmulticast mode [ 530.525649][ T9885] Bluetooth: MGMT ver 1.23 [ 530.530651][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 530.594404][ T9890] syzkaller0: entered promiscuous mode [ 530.610791][ T9890] syzkaller0: entered allmulticast mode [ 530.768041][ T9900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1144'. [ 530.777832][ T9900] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1144'. [ 530.788139][ T9900] xt_policy: neither incoming nor outgoing policy selected [ 530.793114][ T9904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1141'. [ 530.816142][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1145'. [ 531.016209][ T9918] syzkaller0: entered promiscuous mode [ 531.022045][ T9918] syzkaller0: entered allmulticast mode [ 531.249330][ T9928] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 531.490842][ T9942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.601856][ T9954] lo speed is unknown, defaulting to 1000 [ 531.687185][ T9960] bond2: invalid ARP target 0.0.0.0 specified for addition [ 531.695109][ T9960] bond2: option arp_ip_target: invalid value (0) [ 531.703285][ T9960] bond2 (unregistering): Released all slaves [ 532.165293][ T9984] netlink: 'syz.1.1171': attribute type 1 has an invalid length. [ 532.460553][ T9991] tap0: tun_chr_ioctl cmd 1074025676 [ 532.501246][ T9996] netlink: 'syz.1.1171': attribute type 13 has an invalid length. [ 532.501496][ T9991] tap0: owner set to 0 [ 532.625780][T10009] netlink: 'syz.0.1178': attribute type 3 has an invalid length. [ 532.674644][T10009] netlink: 'syz.0.1178': attribute type 21 has an invalid length. [ 532.991309][T10031] netlink: 'syz.0.1183': attribute type 1 has an invalid length. [ 533.008575][T10032] netlink: 'syz.0.1183': attribute type 1 has an invalid length. [ 533.341170][T10052] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 533.379175][T10057] netlink: 'syz.2.1189': attribute type 3 has an invalid length. [ 533.425833][T10057] tipc: Enabled bearer , priority 0 [ 533.518820][T10057] syzkaller0: entered promiscuous mode [ 533.524524][T10057] syzkaller0: entered allmulticast mode [ 533.531205][T10057] tipc: Resetting bearer [ 533.537924][T10063] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 533.586476][T10056] tipc: Resetting bearer [ 535.069393][T10056] tipc: Disabling bearer [ 535.102562][T10094] geneve2: entered promiscuous mode [ 535.113081][ T8368] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.113350][T10102] smc: net device gre0 applied user defined pnetid SYZ1 [ 535.126046][ T8368] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.144608][ T8368] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.152186][T10103] smc: net device gre0 erased user defined pnetid SYZ1 [ 535.165067][ T8368] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.583558][T10130] tipc: Enabled bearer , priority 0 [ 535.592441][T10130] syzkaller0: entered promiscuous mode [ 535.597969][T10130] syzkaller0: entered allmulticast mode [ 535.637265][T10130] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 535.663701][T10141] __nla_validate_parse: 13 callbacks suppressed [ 535.663722][T10141] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1211'. [ 535.682895][T10130] tipc: Resetting bearer [ 535.714148][T10127] tipc: Resetting bearer [ 535.722625][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1210'. [ 535.748683][T10127] tipc: Disabling bearer [ 535.804269][T10147] netlink: 'syz.4.1213': attribute type 9 has an invalid length. [ 536.066709][T10172] caif0: mtu less than device minimum [ 536.129117][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 536.477065][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'. [ 536.525838][T10199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.037177][T10232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.038224][T10229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.383320][T10259] sctp: [Deprecated]: syz.0.1245 (pid 10259) Use of int in maxseg socket option. [ 537.383320][T10259] Use struct sctp_assoc_value instead [ 537.395560][T10253] tc_dump_action: action bad kind [ 537.459698][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 537.498315][T10268] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1247'. [ 537.711205][T10277] netlink: 'syz.0.1253': attribute type 27 has an invalid length. [ 538.037246][T10298] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 538.162907][T10301] Cannot find add_set index 65532 as target [ 538.590098][T10312] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 538.658613][T10314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1264'. [ 538.875241][T10326] netlink: 'syz.3.1268': attribute type 5 has an invalid length. [ 539.419002][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 539.477959][T10357] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 539.534005][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 539.563064][T10357] ipvlan2: entered promiscuous mode [ 539.571259][T10357] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 539.681142][T10367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1281'. [ 539.799245][T10371] syzkaller1: entered promiscuous mode [ 539.805282][T10371] syzkaller1: entered allmulticast mode [ 540.588203][T10419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.598262][T10432] netlink: 'syz.2.1296': attribute type 3 has an invalid length. [ 540.607796][T10427] netlink: 'syz.2.1296': attribute type 11 has an invalid length. [ 540.625139][T10436] netlink: 'syz.3.1299': attribute type 2 has an invalid length. [ 540.754314][T10443] __nla_validate_parse: 8 callbacks suppressed [ 540.754333][T10443] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1300'. [ 540.807488][T10450] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1300'. [ 540.840814][T10443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.864521][T10443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.883344][T10443] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 540.904264][T10443] bond0 (unregistering): Released all slaves [ 541.117673][T10459] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 541.557717][T10476] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 541.575015][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'. [ 541.585024][T10476] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 541.784948][T10492] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1313'. [ 541.796635][T10493] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1313'. [ 542.039297][T10504] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1318'. [ 542.119031][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'. [ 542.154878][T10509] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 542.171420][T10513] netlink: 'syz.1.1319': attribute type 42 has an invalid length. [ 542.205333][T10512] netlink: 'syz.4.1322': attribute type 10 has an invalid length. [ 542.230041][T10512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1322'. [ 542.256559][T10512] team0: Port device geneve0 added [ 542.276256][ T8368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.311299][ T8368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.338701][ T8368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.362721][ T8368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.851269][T10550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1330'. [ 543.097940][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 543.310430][T10575] Cannot find add_set index 65532 as target [ 543.420013][T10583] x_tables: duplicate underflow at hook 2 [ 543.481044][T10585] netlink: 'syz.4.1345': attribute type 1 has an invalid length. [ 543.622195][T10598] wg2: entered promiscuous mode [ 543.642573][T10598] wg2: entered allmulticast mode [ 543.748705][T10611] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 543.912524][T10622] syzkaller0: entered promiscuous mode [ 543.918942][T10622] syzkaller0: entered allmulticast mode [ 544.026497][T10625] lo speed is unknown, defaulting to 1000 [ 544.674760][T10644] vlan1: entered promiscuous mode [ 544.687164][T10644] vlan1: entered allmulticast mode [ 544.698871][T10644] hsr_slave_1: entered allmulticast mode [ 544.722273][ T5884] Bluetooth: hci4: link tx timeout [ 544.728557][ T5884] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 544.815630][ T5970] tipc: Subscription rejected, illegal request [ 544.838267][T10644] lo speed is unknown, defaulting to 1000 [ 545.103941][T10673] netlink: 'syz.4.1371': attribute type 39 has an invalid length. [ 545.291853][T10680] netlink: 'syz.1.1375': attribute type 10 has an invalid length. [ 545.586649][T10700] netlink: 'syz.1.1379': attribute type 11 has an invalid length. [ 545.610213][T10700] netlink: 'syz.1.1379': attribute type 11 has an invalid length. [ 545.754446][T10708] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 545.960444][T10718] netlink: 'syz.4.1385': attribute type 3 has an invalid length. [ 545.973693][T10715] bridge5: entered promiscuous mode [ 545.979060][T10715] bridge5: entered allmulticast mode [ 545.979447][T10718] __nla_validate_parse: 15 callbacks suppressed [ 545.979465][T10718] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1385'. [ 546.251568][T10736] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 546.639239][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'. [ 546.751979][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 546.811952][ T5884] Bluetooth: hci4: command 0x0406 tx timeout [ 546.971459][ T8368] syzkaller0: tun_net_xmit 76 [ 546.977027][ T8368] syzkaller0: tun_net_xmit 48 [ 546.987505][T10773] syzkaller0: create flow: hash 1198035415 index 2 [ 547.000138][ T6526] syzkaller0: tun_net_xmit 76 [ 547.032695][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 547.218896][T10788] syzkaller0: delete flow: hash 1198035415 index 2 [ 547.230224][ T5965] syzkaller0: tun_net_xmit 76 [ 547.283359][ T5965] syzkaller0: tun_net_xmit 76 [ 547.471771][T10804] netlink: 'syz.2.1416': attribute type 13 has an invalid length. [ 548.570937][T10796] sit0: entered promiscuous mode [ 548.576132][T10796] netlink: 'syz.4.1415': attribute type 1 has an invalid length. [ 548.584070][T10796] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1415'. [ 548.727029][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1419'. [ 548.736033][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 548.784467][T10804] veth0_virt_wifi: left allmulticast mode [ 548.812926][T10819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1422'. [ 548.820579][T10804] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 548.830675][T10819] openvswitch: netlink: Flow key attr not present in new flow. [ 548.851301][T10823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1418'. [ 548.882017][T10810] veth1_to_bond: entered allmulticast mode [ 548.961884][T10814] bond0: (slave bond_slave_1): Releasing backup interface [ 548.997974][T10814] veth1_to_bond (unregistering): left allmulticast mode [ 549.055765][T10817] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 549.074117][ T5970] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 549.101659][ T5970] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 549.130978][ T5970] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 549.143859][ T5970] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 549.196934][T10836] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1424'. [ 549.697296][T10869] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 549.727053][T10869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.774297][ T5891] Bluetooth: hci3: command 0x0406 tx timeout [ 549.783151][ T5891] Bluetooth: hci1: command 0x0406 tx timeout [ 549.789211][ T5891] Bluetooth: hci2: command 0x0406 tx timeout [ 549.856816][T10875] bond2: entered promiscuous mode [ 549.965611][T10888] netlink: 'syz.0.1441': attribute type 1 has an invalid length. [ 550.380448][T10914] netlink: 'syz.1.1447': attribute type 26 has an invalid length. [ 550.412381][T10914] netlink: 'syz.1.1447': attribute type 26 has an invalid length. [ 550.493631][T10920] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 551.067908][T10962] __nla_validate_parse: 5 callbacks suppressed [ 551.067927][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 551.124792][T10967] lo speed is unknown, defaulting to 1000 [ 551.218353][T10970] syzkaller0: entered promiscuous mode [ 551.224088][T10970] syzkaller0: entered allmulticast mode [ 551.422179][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1466'. [ 552.844056][T11013] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 552.862172][T11004] veth5: entered allmulticast mode [ 552.874799][T11011] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1473'. [ 552.937291][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1475'. [ 552.949325][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1475'. [ 553.805884][T11049] sctp: [Deprecated]: syz.3.1481 (pid 11049) Use of struct sctp_assoc_value in delayed_ack socket option. [ 553.805884][T11049] Use struct sctp_sack_info instead [ 554.097392][T11068] netlink: 'syz.3.1485': attribute type 6 has an invalid length. [ 554.166187][T11072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1486'. [ 554.261730][ T6037] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 554.371714][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 554.395871][T11077] netlink: 'syz.3.1488': attribute type 4 has an invalid length. [ 554.623408][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'. [ 554.660740][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'. [ 554.735715][T11095] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1493'. [ 555.057503][T11142] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 555.217145][T11150] syzkaller0: entered promiscuous mode [ 555.225865][T11150] syzkaller0: entered allmulticast mode [ 555.522952][T11157] Cannot find add_set index 2 as target [ 557.024570][T11185] __nla_validate_parse: 3 callbacks suppressed [ 557.024587][T11185] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1518'. [ 557.042893][T11185] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1518'. [ 557.053803][T11187] C: renamed from team_slave_0 [ 557.084866][T11187] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 557.093255][T11187] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 557.236538][T11196] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 557.269068][T11203] netlink: 'syz.4.1525': attribute type 1 has an invalid length. [ 557.295015][T11203] netlink: 'syz.4.1525': attribute type 2 has an invalid length. [ 557.336532][T11203] netlink: 'syz.4.1525': attribute type 1 has an invalid length. [ 557.344812][T11203] netlink: 'syz.4.1525': attribute type 2 has an invalid length. [ 557.355151][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 557.375793][ T8364] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.385246][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 557.404534][ T8364] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.420314][ T8364] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.446328][ T8364] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.600393][T11228] netlink: 'syz.4.1532': attribute type 1 has an invalid length. [ 557.683108][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 557.708975][T11228] bond6: entered promiscuous mode [ 557.715518][T11228] bond6: entered allmulticast mode [ 557.722626][T11228] 8021q: adding VLAN 0 to HW filter on device bond6 [ 557.736024][T11237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.755836][T11235] macvlan0: entered promiscuous mode [ 557.761574][T11235] macvlan0: entered allmulticast mode [ 557.949427][T11251] netlink: 'syz.4.1538': attribute type 21 has an invalid length. [ 558.004196][T11251] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 558.018006][T11251] bond7 (unregistering): Released all slaves [ 558.207941][T11261] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 558.641287][T11275] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1543'. [ 559.203992][ T8178] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.241894][ T8178] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.255266][ T8178] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.263998][ T8178] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.317389][T11288] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1548'. [ 559.330052][ T8178] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.338460][ T8178] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.411206][ T6037] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.420206][ T6037] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.474424][T11299] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1550'. [ 559.522699][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 559.540374][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'. [ 559.574298][T11303] netlink: 'syz.1.1552': attribute type 15 has an invalid length. [ 559.577907][T11308] netlink: 'syz.2.1553': attribute type 1 has an invalid length. [ 559.596023][T11307] netem: change failed [ 559.606204][T11306] netlink: 'syz.2.1553': attribute type 1 has an invalid length. [ 560.746868][T11391] netlink: 'syz.4.1578': attribute type 30 has an invalid length. [ 560.791938][T11394] netlink: 'syz.2.1580': attribute type 30 has an invalid length. [ 560.850253][T11398] netlink: 'syz.2.1580': attribute type 30 has an invalid length. [ 561.018793][T11406] syzkaller0: entered promiscuous mode [ 561.024490][T11406] syzkaller0: entered allmulticast mode [ 561.065433][T11408] netlink: 'syz.2.1585': attribute type 2 has an invalid length. [ 561.266580][T11423] openvswitch: netlink: IP tunnel dst address not specified [ 561.327648][T11427] netlink: zone id is out of range [ 561.333175][T11427] netlink: zone id is out of range [ 561.338994][T11427] netlink: zone id is out of range [ 561.345491][T11427] netlink: zone id is out of range [ 561.359617][T11427] netlink: zone id is out of range [ 561.373836][T11427] netlink: zone id is out of range [ 561.389387][T11427] netlink: zone id is out of range [ 561.406793][T11427] netlink: zone id is out of range [ 561.422390][T11427] netlink: zone id is out of range [ 561.537151][T11429] syzkaller1: entered promiscuous mode [ 561.545531][T11429] syzkaller1: entered allmulticast mode [ 561.728911][T11445] netlink: 'syz.4.1596': attribute type 4 has an invalid length. [ 561.744943][T11445] `: renamed from bond0 [ 562.121118][T11463] bond3 (unregistering): Released all slaves [ 562.159194][T11469] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 562.367091][T11480] syzkaller0: entered promiscuous mode [ 562.382271][T11480] syzkaller0: entered allmulticast mode [ 562.559040][T11487] netlink: 'syz.3.1608': attribute type 1 has an invalid length. [ 562.593914][T11487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.615055][T11487] bond3: (slave geneve2): making interface the new active one [ 562.624867][T11487] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 562.657252][ T8368] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.694302][ T8368] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.696924][T11495] __nla_validate_parse: 11 callbacks suppressed [ 562.696947][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'. [ 562.775675][ T8368] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.820182][ T8368] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.055955][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.063445][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.206613][T11508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.241150][T11514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1615'. [ 563.258312][T11522] netlink: 808 bytes leftover after parsing attributes in process `syz.1.1619'. [ 563.685880][T11548] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1623'. [ 563.894653][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'. [ 563.908894][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1627'. [ 563.933739][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1627'. [ 563.966396][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'. [ 564.186997][T11570] netlink: 'syz.2.1633': attribute type 1 has an invalid length. [ 564.596838][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 564.605868][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1638'. [ 565.009320][T11611] netlink: 'syz.1.1645': attribute type 4 has an invalid length. [ 565.115290][ T8368] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.140533][ T8368] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.161395][ T8368] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.171703][ T8368] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.280198][T11626] hsr_slave_0: left promiscuous mode [ 565.306875][T11626] hsr_slave_1: left promiscuous mode [ 566.303891][T11694] net_ratelimit: 18 callbacks suppressed [ 566.303910][T11694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.628342][T11715] netlink: 'syz.1.1679': attribute type 11 has an invalid length. [ 566.953647][T11740] netlink: 'syz.1.1687': attribute type 6 has an invalid length. [ 566.965531][T11740] netlink: 'syz.1.1687': attribute type 22 has an invalid length. [ 566.987248][T11740] netlink: 'syz.1.1687': attribute type 22 has an invalid length. [ 566.991445][ T8368] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.005193][ T8368] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.019479][ T8368] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.031068][ T8368] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.305740][T11759] netlink: 'syz.0.1693': attribute type 4 has an invalid length. [ 567.359451][T11760] netlink: 'syz.0.1693': attribute type 4 has an invalid length. [ 567.706238][T11785] ipvlan2: entered promiscuous mode [ 567.771301][T11791] netlink: 'syz.3.1704': attribute type 3 has an invalid length. [ 567.791757][T11791] af_packet: tpacket_rcv: packet too big, clamped from 2906 to 4294967272. macoff=96 [ 568.152437][T11811] syz_tun: entered allmulticast mode [ 568.158799][T11811] netlink: 'syz.1.1712': attribute type 1 has an invalid length. [ 568.236393][T11811] syz_tun: left allmulticast mode [ 568.245814][T11814] __nla_validate_parse: 14 callbacks suppressed [ 568.245831][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1713'. [ 568.270806][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1715'. [ 568.346148][T11821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.491261][T11814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1713'. [ 568.588843][T11836] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1717'. [ 568.736089][T11844] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1720'. [ 568.881868][T11856] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1723'. [ 569.110284][T11865] lo speed is unknown, defaulting to 1000 [ 569.164857][T11864] lo speed is unknown, defaulting to 1000 [ 569.216572][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1728'. [ 569.348180][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'. [ 570.322473][T11941] netlink: 'syz.0.1738': attribute type 1 has an invalid length. [ 570.345690][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1737'. [ 570.375926][T11941] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.388931][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1736'. [ 570.476571][T11947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.484195][T11947] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 570.506196][T11947] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 570.616296][T11941] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 570.648115][T11941] bond4: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 570.754735][T11963] pim6reg: entered allmulticast mode [ 570.764315][ T5887] block nbd1: Receive control failed (result -32) [ 571.194198][T11992] ip6erspan1: entered promiscuous mode [ 571.395676][T12004] xt_hashlimit: size too large, truncated to 1048576 [ 571.417181][T12008] netlink: 'syz.0.1756': attribute type 29 has an invalid length. [ 571.446646][T12012] sctp: [Deprecated]: syz.1.1755 (pid 12012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.446646][T12012] Use struct sctp_sack_info instead [ 571.507323][T12014] netlink: 'syz.3.1757': attribute type 9 has an invalid length. [ 571.925024][T12031] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 571.934150][T12031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.328268][T12051] team0: Device geneve5 is up. Set it down before adding it as a team port [ 572.392616][T12053] openvswitch: netlink: Key type 332 is out of range max 32 [ 572.419108][T12056] netlink: 'syz.1.1770': attribute type 1 has an invalid length. [ 572.536632][T12056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.576693][T12061] bond0: entered promiscuous mode [ 572.604268][T12061] bond0: entered allmulticast mode [ 572.617333][T12056] bond0: (slave dummy0): making interface the new active one [ 572.650159][T12056] dummy0: entered promiscuous mode [ 572.670555][T12056] dummy0: entered allmulticast mode [ 572.677468][T12056] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 572.941792][T12061] bond0 (unregistering): (slave dummy0): Releasing active interface [ 572.951949][T12061] dummy0: left promiscuous mode [ 572.957217][T12061] dummy0: left allmulticast mode [ 572.978067][T12061] bond0 (unregistering): Released all slaves [ 573.248852][T12091] netlink: 'syz.1.1780': attribute type 9 has an invalid length. [ 573.279667][T12091] __nla_validate_parse: 15 callbacks suppressed [ 573.279687][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 573.399428][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'. [ 573.411430][T12105] tipc: Enabled bearer , priority 0 [ 573.420595][T12109] netlink: 'syz.3.1785': attribute type 3 has an invalid length. [ 573.491780][T12104] tipc: Disabling bearer [ 573.499474][T12118] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1784'. [ 573.512789][T12114] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1786'. [ 573.603932][T12116] netem: change failed [ 573.756229][T12129] netlink: 'syz.4.1789': attribute type 12 has an invalid length. [ 573.758455][T12126] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1788'. [ 573.777883][T12129] netlink: 'syz.4.1789': attribute type 29 has an invalid length. [ 573.783947][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1788'. [ 573.794449][T12129] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1789'. [ 573.857409][T12129] netlink: 'syz.4.1789': attribute type 2 has an invalid length. [ 573.872751][T12129] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1789'. [ 573.946787][T12138] xt_ecn: cannot match TCP bits for non-tcp packets [ 573.999955][T12137] xt_ecn: cannot match TCP bits for non-tcp packets [ 574.001303][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1791'. [ 574.287373][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1798'. [ 574.322393][T12157] tipc: Enabling of bearer rejected, failed to enable media [ 574.951643][T12218] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 575.021529][T12218] bond4: option lp_interval: invalid value (0) [ 575.027964][T12218] bond4: option lp_interval: allowed values 1 - 2147483647 [ 575.040235][T12218] bond4 (unregistering): Released all slaves [ 575.227969][T12232] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 575.290999][ T5887] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 575.848120][T12265] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 575.889170][T12266] Cannot find set identified by id 2 to match [ 576.031671][T12268] syzkaller0: entered promiscuous mode [ 576.037204][T12268] syzkaller0: entered allmulticast mode [ 578.074399][T12339] tipc: Enabled bearer , priority 0 [ 578.104396][T12339] syzkaller0: entered promiscuous mode [ 578.120016][T12339] syzkaller0: entered allmulticast mode [ 578.187430][T12339] tipc: Resetting bearer [ 578.195179][T12346] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 578.233547][T12338] tipc: Resetting bearer [ 578.285963][T12338] tipc: Disabling bearer [ 578.302685][T12357] __nla_validate_parse: 10 callbacks suppressed [ 578.302706][T12357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1849'. [ 578.392258][T12360] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 578.728173][T12383] netlink: 'syz.0.1860': attribute type 2 has an invalid length. [ 578.738708][T12383] netlink: 'syz.0.1860': attribute type 8 has an invalid length. [ 578.758935][T12383] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1860'. [ 578.950411][T12395] netlink: 'syz.0.1865': attribute type 29 has an invalid length. [ 578.961792][T12393] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1864'. [ 579.108512][T12402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1867'. [ 579.151274][T12402] xt_socket: unknown flags 0x50 [ 579.298113][T12400] netem: change failed [ 579.473799][T12429] lo speed is unknown, defaulting to 1000 [ 579.544294][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1874'. [ 579.644583][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 579.663395][T12437] xt_socket: unknown flags 0x50 [ 579.781856][T12437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 579.950298][T12451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 580.147289][T12465] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1879'. [ 580.387529][T12480] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 580.429674][T12480] gretap1: entered promiscuous mode [ 580.440588][T12480] bond2: (slave gretap1): making interface the new active one [ 580.449173][T12480] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 580.470803][T12480] bond2: entered promiscuous mode [ 580.485349][T12480] macvlan2: entered promiscuous mode [ 580.512150][T12480] macvlan2: entered allmulticast mode [ 580.536422][T12480] bond2: entered allmulticast mode [ 580.541753][T12480] gretap1: entered allmulticast mode [ 580.548847][T12480] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 580.558141][T12480] bond2: left promiscuous mode [ 580.594285][T12488] netlink: 'syz.4.1889': attribute type 26 has an invalid length. [ 580.614587][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 580.637449][T12488] netlink: 'syz.4.1889': attribute type 26 has an invalid length. [ 580.666317][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 580.701979][T12499] vlan3: entered promiscuous mode [ 580.734766][T12499] bridge0: entered promiscuous mode [ 580.838167][T12513] ipt_ECN: cannot use operation on non-tcp rule [ 580.991836][T12521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1898'. [ 581.148639][T12521] netlink: 'syz.1.1898': attribute type 3 has an invalid length. [ 581.651310][T12546] netlink: 'syz.2.1904': attribute type 21 has an invalid length. [ 581.659366][T12546] netlink: 'syz.2.1904': attribute type 4 has an invalid length. [ 581.907964][T12572] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 0, id = 0 [ 582.206181][T12596] unsupported nla_type 52263 [ 582.218735][T12594] tipc: Enabled bearer , priority 0 [ 582.341191][T12594] syzkaller0: entered promiscuous mode [ 582.354608][T12594] syzkaller0: entered allmulticast mode [ 582.378534][T12594] tipc: Resetting bearer [ 582.408070][T12592] tipc: Resetting bearer [ 583.604656][T12592] tipc: Disabling bearer [ 583.614929][T12599] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 583.624199][T12614] gtp0: entered promiscuous mode [ 583.637782][T12614] gtp0: entered allmulticast mode [ 583.777527][T12625] __nla_validate_parse: 10 callbacks suppressed [ 583.777546][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'. [ 583.876578][T12628] validate_nla: 4 callbacks suppressed [ 583.876605][T12628] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 583.931837][T12633] netlink: 'syz.4.1929': attribute type 3 has an invalid length. [ 583.939720][T12633] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1929'. [ 583.991635][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1931'. [ 584.008585][T12636] bond4: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 584.031082][T12636] bond4: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 584.041707][T12636] bond4: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 584.090882][T12628] bond4: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 584.103877][T12628] bond4: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 584.130045][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1933'. [ 584.151709][T12643] netlink: 'syz.2.1931': attribute type 3 has an invalid length. [ 584.212767][T12640] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.423140][T12640] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.527431][T12640] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.562819][T12679] netlink: 'syz.3.1942': attribute type 3 has an invalid length. [ 584.573436][T12679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1942'. [ 584.592843][T12679] netlink: 'syz.3.1942': attribute type 10 has an invalid length. [ 584.604144][T12679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1942'. [ 584.613634][T12679] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 584.621074][T12679] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 584.632316][T12679] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 584.676711][T12640] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.695013][T12686] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1943'. [ 584.744879][T12686] bond3 (unregistering): Released all slaves [ 584.840682][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.854345][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'. [ 584.866671][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.890766][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.919766][ T5970] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.013405][T12705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1946'. [ 585.185505][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 585.287748][T12719] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1954'. [ 585.365748][T12723] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 585.375767][T12723] 0ªî{X¹¦: entered allmulticast mode [ 585.391081][T12723] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 585.489064][T12729] openvswitch: netlink: Flow key attr not present in new flow. [ 585.775592][T12749] netlink: 'syz.1.1966': attribute type 4 has an invalid length. [ 585.918603][T12758] tipc: Enabled bearer , priority 0 [ 585.932672][T12758] syzkaller0: entered promiscuous mode [ 585.938287][T12758] syzkaller0: entered allmulticast mode [ 586.007406][T12765] netlink: 'syz.2.1971': attribute type 1 has an invalid length. [ 586.142716][T12766] 8021q: adding VLAN 0 to HW filter on device bond4 [ 586.161417][T12766] bond3: (slave bond4): making interface the new active one [ 586.177377][T12766] bond3: (slave bond4): Enslaving as an active interface with an up link [ 586.195626][T12777] tipc: Resetting bearer [ 586.203225][T12780] netlink: 'syz.0.1973': attribute type 9 has an invalid length. [ 586.389815][T12757] tipc: Resetting bearer [ 586.421336][T12757] tipc: Disabling bearer [ 586.450812][T12795] netlink: 'syz.0.1976': attribute type 1 has an invalid length. [ 586.478559][T12795] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 586.853912][T12815] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 586.880254][T12821] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 586.902858][T12817] netlink: 'syz.4.1983': attribute type 58 has an invalid length. [ 587.115632][T12827] 8021q: adding VLAN 0 to HW filter on device bond5 [ 588.093294][T12888] bond5: entered promiscuous mode [ 588.305651][T12899] syzkaller0: entered promiscuous mode [ 588.331346][T12899] syzkaller0: entered allmulticast mode [ 588.408406][T12899] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 588.442200][T12906] tipc: Can't bind to reserved service type 2 [ 588.701039][T12913] bridge0: port 2(vlan2) entered blocking state [ 588.707716][T12913] bridge0: port 2(vlan2) entered disabled state [ 588.741659][T12913] vlan2: entered allmulticast mode [ 588.747374][T12913] bridge0: entered allmulticast mode [ 588.775361][T12913] vlan2: left allmulticast mode [ 588.783128][T12913] bridge0: left allmulticast mode [ 588.951756][T12926] lo speed is unknown, defaulting to 1000 [ 589.258152][T12941] __nla_validate_parse: 16 callbacks suppressed [ 589.258185][T12941] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2019'. [ 589.276773][T12939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2018'. [ 589.286973][T12939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2018'. [ 589.310106][T12939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2018'. [ 589.320875][T12939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2018'. [ 589.326540][T12947] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 589.352519][T12947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2021'. [ 589.416327][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2021'. [ 589.469913][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2021'. [ 589.928116][T12979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2029'. [ 590.154386][T12995] validate_nla: 3 callbacks suppressed [ 590.154410][T12995] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 590.389913][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2042'. [ 590.511161][T13025] veth1_to_bond: entered allmulticast mode [ 590.555659][T13027] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 590.592415][T13025] `: (slave bond_slave_1): Releasing backup interface [ 590.645759][T13025] veth1_to_bond (unregistering): left allmulticast mode [ 591.077673][T13046] netlink: 'syz.1.2050': attribute type 4 has an invalid length. [ 591.209120][T13054] openvswitch: netlink: Key 6 has unexpected len 98 expected 2 [ 591.227773][T13056] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 591.263482][T13059] netlink: 'syz.1.2053': attribute type 33 has an invalid length. [ 591.346048][T13059] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 591.366481][T13059] bond0 (unregistering): Released all slaves [ 591.426083][T13060] bond6: (slave gretap2): making interface the new active one [ 591.460713][T13060] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 592.283394][T13108] veth0: entered promiscuous mode [ 592.455415][T13124] ipt_REJECT: TCP_RESET invalid for non-tcp [ 593.282545][T13166] syzkaller0: entered promiscuous mode [ 593.291022][T13166] syzkaller0: entered allmulticast mode [ 594.026551][T13216] bond0: Removing last arp target with arp_interval on [ 594.556624][T13237] netlink: 'syz.4.2103': attribute type 1 has an invalid length. [ 594.568945][T13237] __nla_validate_parse: 13 callbacks suppressed [ 594.568967][T13237] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2103'. [ 594.685584][T13234] "syz.4.2103" (13234) uses obsolete ecb(arc4) skcipher [ 594.839290][T13243] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2105'. [ 594.860040][T13243] C: renamed from lo (while UP) [ 595.393723][T13281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2118'. [ 595.598728][T13241] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 595.612171][T13241] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 595.642553][T13241] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 595.650247][T13241] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 595.671965][T13241] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 595.688204][T13241] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 595.726696][T13241] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 595.736842][T13241] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 595.759103][T13301] tipc: Enabled bearer , priority 0 [ 595.767759][T13301] syzkaller0: entered promiscuous mode [ 595.774035][T13301] syzkaller0: entered allmulticast mode [ 595.821942][T13301] tipc: Resetting bearer [ 595.872949][T13306] openvswitch: netlink: IP tunnel dst address not specified [ 595.912214][T13300] tipc: Resetting bearer [ 595.931696][T13300] tipc: Disabling bearer [ 596.003041][T13312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.050969][T13317] ipt_rpfilter: unknown options [ 596.232593][T13328] syzkaller1: entered promiscuous mode [ 596.238236][T13328] syzkaller1: entered allmulticast mode [ 596.273605][T13330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2134'. [ 596.441608][T13343] netlink: 'syz.4.2138': attribute type 1 has an invalid length. [ 596.499056][T13343] gretap2: entered promiscuous mode [ 596.580882][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 596.591941][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 596.615241][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 596.960619][T13377] tipc: Enabling of bearer rejected, failed to enable media [ 597.271113][T13388] wg2: entered promiscuous mode [ 597.276044][T13388] wg2: entered allmulticast mode [ 597.391617][T13398] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20002 [ 597.398530][T13398] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20002 [ 597.737401][T13424] netlink: 'syz.3.2158': attribute type 6 has an invalid length. [ 597.927811][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'. [ 597.952998][T13435] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2164'. [ 597.965031][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'. [ 597.987959][T13436] netlink: 'syz.0.2163': attribute type 32 has an invalid length. [ 598.115289][T13436] bond5: option coupled_control: invalid value (64) [ 598.141321][T13436] bond5 (unregistering): Released all slaves [ 598.488616][T13456] xt_hashlimit: size too large, truncated to 1048576 [ 599.177230][T13502] netlink: 'syz.1.2184': attribute type 3 has an invalid length. [ 599.379144][T13520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.618596][T13530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.704795][T13543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.822408][T13547] __nla_validate_parse: 4 callbacks suppressed [ 599.822430][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2196'. [ 599.927789][T13550] dvmrp0: entered allmulticast mode [ 600.097832][T13556] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 600.113605][T13570] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2202'. [ 600.127267][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'. [ 600.159773][T13567] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2204'. [ 600.219560][T13573] netlink: 'syz.0.2205': attribute type 3 has an invalid length. [ 600.246029][T13573] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2205'. [ 600.353724][T13578] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2207'. [ 600.365182][T13583] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2207'. [ 600.368984][T13580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2208'. [ 601.076694][T13631] x_tables: duplicate underflow at hook 1 [ 601.152546][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'. [ 601.181357][T13645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2230'. [ 601.803375][T13689] tipc: New replicast peer: 255.255.255.255 [ 601.823780][T13689] tipc: Enabled bearer , priority 10 [ 601.844000][T13686] syzkaller0: entered promiscuous mode [ 601.853197][T13686] syzkaller0: entered allmulticast mode [ 601.927599][T13686] tipc: Enabled bearer , priority 0 [ 602.003134][T13683] tipc: Resetting bearer [ 602.063710][T13708] x_tables: duplicate entry at hook 2 [ 602.290389][T13683] tipc: Disabling bearer [ 602.783879][T13750] netlink: 'syz.0.2263': attribute type 7 has an invalid length. [ 602.795782][T13750] netlink: 'syz.0.2263': attribute type 8 has an invalid length. [ 602.875014][T13753] tipc: Enabled bearer , priority 0 [ 602.908473][T13753] tipc: Resetting bearer [ 602.910637][T13756] netlink: 'syz.0.2266': attribute type 1 has an invalid length. [ 602.934210][T13751] tipc: Disabling bearer [ 603.022168][T13757] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 603.033960][T13757] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 604.183803][T13822] erspan0: entered promiscuous mode [ 604.191596][T13822] erspan0: left promiscuous mode [ 604.290374][T13829] xt_hashlimit: size too large, truncated to 1048576 [ 604.551594][T13832] bond7 (unregistering): Released all slaves [ 604.585727][T13840] 8021q: VLANs not supported on ip6gre0 [ 604.669019][T13836] bond7 (unregistering): Released all slaves [ 604.724643][T13846] 8021q: VLANs not supported on ip6gre0 [ 604.769368][T13856] syzkaller0: entered promiscuous mode [ 604.797279][T13856] syzkaller0: entered allmulticast mode [ 604.872179][T13869] __nla_validate_parse: 18 callbacks suppressed [ 604.872215][T13869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2300'. [ 604.888687][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2300'. [ 605.773789][T13881] xt_l2tp: v2 sid > 0xffff: 1114112 [ 605.803024][T13881] netlink: 4736 bytes leftover after parsing attributes in process `syz.1.2303'. [ 605.828414][T13890] openvswitch: netlink: Actions may not be safe on all matching packets [ 605.980064][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2309'. [ 605.999805][T13899] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2310'. [ 606.024450][T13905] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2312'. [ 606.045336][T13905] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2312'. [ 606.049025][T13899] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2310'. [ 606.067356][T13900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2310'. [ 606.096022][T13899] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2310'. [ 606.423965][T13935] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 606.460632][T13935] lo: entered promiscuous mode [ 606.475299][T13935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.932388][T13959] bond7: invalid ARP target 0.0.0.0 specified for addition [ 606.953076][T13959] bond7: option arp_ip_target: invalid value (0) [ 606.972859][T13959] bond7 (unregistering): Released all slaves [ 607.335835][T14011] netlink: 'syz.1.2339': attribute type 1 has an invalid length. [ 608.318201][T14052] netlink: 'syz.4.2353': attribute type 2 has an invalid length. [ 608.697079][T14073] netlink: 'syz.2.2360': attribute type 1 has an invalid length. [ 608.813150][T14080] bond6: (slave bridge7): making interface the new active one [ 608.824173][T14080] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 608.842029][T14073] netlink: 'syz.2.2360': attribute type 1 has an invalid length. [ 609.037778][T14095] tipc: Enabling of bearer rejected, failed to enable media [ 609.175517][T14104] sch_fq: defrate 0 ignored. [ 609.617678][T14144] netlink: 'syz.3.2380': attribute type 3 has an invalid length. [ 609.626869][T14144] netlink: 'syz.3.2380': attribute type 1 has an invalid length. [ 609.649427][T14140] macvlan0: left promiscuous mode [ 609.665167][T14140] macvlan0: left allmulticast mode [ 609.677433][T14140] netlink: 'syz.4.2379': attribute type 2 has an invalid length. [ 609.956854][T14163] netlink: 'syz.4.2382': attribute type 18 has an invalid length. [ 609.974076][T14161] __nla_validate_parse: 78 callbacks suppressed [ 609.974098][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2383'. [ 610.423502][T14193] netlink: 'syz.1.2395': attribute type 39 has an invalid length. [ 610.501261][T14187] nbd2: detected capacity change from 0 to 127 [ 610.513232][ T5884] block nbd2: Receive control failed (result -32) [ 610.678436][T14206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2398'. [ 611.086118][T14239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2406'. [ 611.097852][T14239] tipc: Invalid UDP bearer configuration [ 611.097917][T14239] tipc: Enabling of bearer rejected, failed to enable media [ 611.126302][T14239] tipc: Trying to set illegal importance in message [ 611.308514][T14247] xt_hashlimit: size too large, truncated to 1048576 [ 611.319073][T14248] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2410'. [ 611.653913][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'. [ 611.857122][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 612.348212][T14322] netlink: 'syz.3.2435': attribute type 3 has an invalid length. [ 612.411110][T14327] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2437'. [ 612.464992][T14329] lo speed is unknown, defaulting to 1000 [ 612.512635][T14329] lo speed is unknown, defaulting to 1000 [ 612.532545][T14330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2436'. [ 612.584834][T14329] lo speed is unknown, defaulting to 1000 [ 613.161306][ T43] lo speed is unknown, defaulting to 1000 [ 613.167775][T14329] infiniband sz1: set down [ 613.177385][T14329] infiniband sz1: added lo [ 613.247851][T14329] RDS/IB: sz1: added [ 613.253823][T14329] smc: adding ib device sz1 with port count 1 [ 613.262200][T14329] smc: ib device sz1 port 1 has no pnetid [ 613.271242][ T43] lo speed is unknown, defaulting to 1000 [ 613.289345][T14329] lo speed is unknown, defaulting to 1000 [ 613.333835][T14374] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2450'. [ 613.376777][T14379] º: renamed from veth1_vlan (while UP) [ 613.578485][T14386] lo: entered allmulticast mode [ 613.625481][T14384] lo: left allmulticast mode [ 613.933396][T14329] lo speed is unknown, defaulting to 1000 [ 614.194506][T14405] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2460'. [ 614.261846][T14409] netlink: 'syz.3.2462': attribute type 1 has an invalid length. [ 614.294823][T14409] netlink: 'syz.3.2462': attribute type 2 has an invalid length. [ 614.537023][T14329] lo speed is unknown, defaulting to 1000 [ 614.622614][T14422] !: renamed from dummy0 [ 614.652506][T14424] netlink: 'syz.4.2467': attribute type 1 has an invalid length. [ 614.661385][T14424] netlink: 'syz.4.2467': attribute type 2 has an invalid length. [ 614.857359][T14437] tipc: Failed to remove unknown binding: 66,1,1/2856793418:2189249970/2189249972 [ 614.903632][T14437] tipc: Failed to remove unknown binding: 66,1,1/2856793418:2189249970/2189249972 [ 614.989432][T14442] __nla_validate_parse: 9 callbacks suppressed [ 614.989454][T14442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2474'. [ 615.142121][T14447] xt_bpf: check failed: parse error [ 615.143887][T14329] lo speed is unknown, defaulting to 1000 [ 615.208865][T14452] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2479'. [ 615.318519][T14453] lo speed is unknown, defaulting to 1000 [ 615.398508][T14459] syzkaller0: entered promiscuous mode [ 615.418509][T14459] syzkaller0: entered allmulticast mode [ 615.479650][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2483'. [ 615.618911][T14453] lo speed is unknown, defaulting to 1000 [ 615.727146][ T30] audit: type=1800 audit(1763395829.978:5): pid=14474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2487" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2555 res=0 errno=0 [ 616.028879][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 616.049969][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2493'. [ 616.059324][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 616.074729][T14329] lo speed is unknown, defaulting to 1000 [ 616.082140][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2493'. [ 616.187750][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 616.350731][T14509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2499'. [ 616.360995][T14507] tipc: Enabled bearer , priority 0 [ 616.370870][T14509] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2499'. [ 616.376743][T14507] syzkaller0: entered promiscuous mode [ 616.390572][T14509] netlink: 'syz.0.2499': attribute type 6 has an invalid length. [ 616.398285][T14510] netlink: 'syz.2.2498': attribute type 5 has an invalid length. [ 616.414172][T14507] syzkaller0: entered allmulticast mode [ 616.422772][T14509] netlink: 'syz.0.2499': attribute type 5 has an invalid length. [ 616.496411][T14505] tipc: Resetting bearer [ 616.515634][T14505] tipc: Disabling bearer [ 616.646038][T14522] xt_cgroup: xt_cgroup: no path or classid specified [ 616.703192][T14522] wg1: entered promiscuous mode [ 616.708235][T14522] wg1: entered allmulticast mode [ 617.802972][T14585] netlink: 'syz.0.2525': attribute type 5 has an invalid length. [ 617.823567][T14585] geneve4: entered promiscuous mode [ 617.828898][T14585] geneve4: entered allmulticast mode [ 617.861073][T11929] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 617.874854][T14589] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 617.885388][T14587] netlink: 'syz.4.2524': attribute type 12 has an invalid length. [ 617.894962][T14587] netlink: 'syz.4.2524': attribute type 29 has an invalid length. [ 617.924738][T11929] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 617.934586][T11929] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 617.944340][T11929] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 618.256246][T14610] pim6reg527: entered allmulticast mode [ 618.269241][T14611] wg1: entered promiscuous mode [ 618.275498][T14611] wg1: entered allmulticast mode [ 618.539001][T14627] bridge_slave_0: left allmulticast mode [ 618.548080][T14627] bridge_slave_0: left promiscuous mode [ 618.556716][T14627] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.573791][T14627] bridge_slave_1: left allmulticast mode [ 618.579776][T14627] bridge_slave_1: left promiscuous mode [ 618.589432][T14627] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.639016][T14627] bond0: (slave bond_slave_0): Releasing backup interface [ 618.657225][T14627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.695712][T14627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.727668][T14627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.738095][T14627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.749188][T14627] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 618.979071][T14656] xt_TCPMSS: Only works on TCP SYN packets [ 619.061696][T14660] tipc: New replicast peer: 255.255.255.255 [ 619.076667][T14660] tipc: Enabled bearer , priority 10 [ 619.287521][T14670] syzkaller0: entered promiscuous mode [ 619.294170][T14670] syzkaller0: entered allmulticast mode [ 619.332623][T14681] validate_nla: 2 callbacks suppressed [ 619.332644][T14681] netlink: 'syz.4.2550': attribute type 12 has an invalid length. [ 619.588214][T14697] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 620.863237][T14683] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 620.873248][ T6527] tipc: Node number set to 2906942580 [ 621.131129][T14719] __nla_validate_parse: 20 callbacks suppressed [ 621.131150][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2558'. [ 621.308472][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2563'. [ 621.625173][T14751] tipc: Enabled bearer , priority 0 [ 621.643685][T14751] syzkaller0: entered promiscuous mode [ 621.656018][T14751] syzkaller0: entered allmulticast mode [ 621.694772][T14755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2568'. [ 621.738940][T14751] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 621.757114][T14751] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 622.001939][T14750] tipc: Resetting bearer [ 622.040285][T14750] tipc: Disabling bearer [ 622.152013][T14779] netlink: 'syz.3.2574': attribute type 11 has an invalid length. [ 622.363782][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2576'. [ 622.648397][T14806] syzkaller0: entered allmulticast mode [ 622.734438][T14766] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 622.805943][T14818] mac80211_hwsim hwsim24 wlan1: Caught tx_queue_len zero misconfig [ 622.873571][T14818] ip6tnl0: Caught tx_queue_len zero misconfig [ 622.971251][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2582'. [ 623.005612][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2582'. [ 623.292961][T14842] xt_hashlimit: invalid interval [ 623.522080][T14858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2593'. [ 623.560793][T14858] lo: Caught tx_queue_len zero misconfig [ 623.607114][T14862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2594'. [ 623.820749][T14868] tap0: tun_chr_ioctl cmd 1074025672 [ 623.826117][T14868] tap0: ignored: set checksum disabled [ 623.876099][T14872] netlink: 'syz.1.2599': attribute type 4 has an invalid length. [ 623.895772][T14877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2600'. [ 623.936369][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 624.327087][T14900] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 624.452517][T14908] geneve1: Caught tx_queue_len zero misconfig [ 624.495182][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.501823][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.533422][T14915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 624.540768][T14915] IPv6: NLM_F_CREATE should be set when creating new route [ 624.548032][T14915] IPv6: NLM_F_CREATE should be set when creating new route [ 624.555321][T14915] IPv6: NLM_F_CREATE should be set when creating new route [ 624.568552][T14919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 624.803205][T14928] netlink: 'syz.0.2618': attribute type 8 has an invalid length. [ 624.814442][T14928] netlink: 'syz.0.2618': attribute type 1 has an invalid length. [ 624.860307][T14929] bond6 (unregistering): Released all slaves [ 624.880703][T14938] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 625.034212][T14946] netlink: 'syz.1.2622': attribute type 21 has an invalid length. [ 625.182269][T14951] sit0: Caught tx_queue_len zero misconfig [ 625.435641][T14966] lo speed is unknown, defaulting to 1000 [ 625.463028][T14966] lo speed is unknown, defaulting to 1000 [ 625.477115][T14974] netlink: 'syz.0.2629': attribute type 16 has an invalid length. [ 625.477452][T14979] netlink: 'syz.0.2629': attribute type 16 has an invalid length. [ 625.527508][T14979] netlink: 'syz.0.2629': attribute type 3 has an invalid length. [ 625.571356][T14974] netlink: 'syz.0.2629': attribute type 3 has an invalid length. [ 625.782148][T14994] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 625.983361][T14975] netlink: 'syz.3.2627': attribute type 4 has an invalid length. [ 625.993516][T15006] netlink: 'syz.4.2641': attribute type 4 has an invalid length. [ 626.021359][T15004] tipc: Enabled bearer , priority 0 [ 626.029426][T15004] syzkaller0: entered promiscuous mode [ 626.038350][T15004] syzkaller0: entered allmulticast mode [ 626.144491][T15004] tipc: Resetting bearer [ 626.178320][T15003] tipc: Resetting bearer [ 626.219061][T15003] tipc: Disabling bearer [ 626.314811][T15017] __nla_validate_parse: 15 callbacks suppressed [ 626.314831][T15017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2643'. [ 626.401207][T15017] lo: entered promiscuous mode [ 626.406254][T15017] lo: entered allmulticast mode [ 626.416091][ T8937] lo speed is unknown, defaulting to 1000 [ 626.426523][ T8937] syz2: Port: 1 Link ACTIVE [ 626.451067][T15021] tls_set_device_offload_rx: netdev not found [ 627.224349][T15057] vlan0: entered promiscuous mode [ 627.230832][T15057] vlan0: entered allmulticast mode [ 627.236009][T15057] veth0_vlan: entered allmulticast mode [ 627.244662][T15057] syzkaller1: entered promiscuous mode [ 627.251126][T15057] syzkaller1: entered allmulticast mode [ 627.337956][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2660'. [ 627.347337][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2660'. [ 627.471220][T15071] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2663'. [ 627.579391][T15078] netlink: 'syz.1.2665': attribute type 1 has an invalid length. [ 627.595519][T15078] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2665'. [ 627.609420][T15078] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.2665'. [ 627.859573][T15095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.111521][T15106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2676'. [ 628.192824][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2676'. [ 628.211854][T15106] veth0_to_hsr: entered promiscuous mode [ 628.217583][T15106] veth0_to_hsr: entered allmulticast mode [ 628.246461][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2681'. [ 628.267799][T15113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2680'. [ 628.342899][T15122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 628.940605][T15160] xt_recent: Unsupported userspace flags (000000b1) [ 629.161244][T15178] tipc: Enabled bearer , priority 0 [ 629.169125][T15178] syzkaller0: entered promiscuous mode [ 629.174708][T15178] syzkaller0: entered allmulticast mode [ 629.209405][T15178] tipc: Resetting bearer [ 629.218807][T15174] tipc: Resetting bearer [ 629.301972][T15174] tipc: Disabling bearer [ 629.531461][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.547358][T15199] Bluetooth: MGMT ver 1.23 [ 629.552673][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.570449][T15199] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 629.577790][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.602450][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.672304][T15194] 8021q: adding VLAN 0 to HW filter on device bond7 [ 629.775893][T15208] 8021q: adding VLAN 0 to HW filter on device bond7 [ 629.795267][T15208] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 629.835944][T15208] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 629.905095][T15219] pim6reg1: entered promiscuous mode [ 629.912001][T15219] pim6reg1: entered allmulticast mode [ 629.958326][T15225] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 629.979280][T15225] bond7: (slave wlan0): Opening slave failed [ 630.119535][T15232] syzkaller1: entered promiscuous mode [ 630.143190][T15232] syzkaller1: entered allmulticast mode [ 630.153015][T15227] syzkaller0: entered promiscuous mode [ 630.158737][T15227] syzkaller0: entered allmulticast mode [ 630.412188][T15252] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 630.816940][T15271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.187998][T15309] validate_nla: 4 callbacks suppressed [ 632.188019][T15309] netlink: 'syz.0.2736': attribute type 13 has an invalid length. [ 632.232813][T15309] __nla_validate_parse: 12 callbacks suppressed [ 632.232832][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'. [ 632.297564][T15310] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2736'. [ 632.371785][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2738'. [ 632.965625][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2747'. [ 632.977155][T15340] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2746'. [ 633.040208][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2747'. [ 633.093506][T15349] netlink: 'syz.2.2748': attribute type 1 has an invalid length. [ 633.232084][T15356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.261221][T15357] syzkaller0: entered promiscuous mode [ 633.266767][T15357] syzkaller0: entered allmulticast mode [ 633.323934][T15359] netlink: 81 bytes leftover after parsing attributes in process `syz.4.2753'. [ 633.362662][T15364] syzkaller0: entered promiscuous mode [ 633.368195][T15364] syzkaller0: entered allmulticast mode [ 633.386160][T15364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2755'. [ 633.398518][T15366] netlink: 'syz.1.2756': attribute type 13 has an invalid length. [ 633.518197][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'. [ 633.541022][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2754'. [ 634.151671][T15417] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 634.316609][T15419] bond8: Removing last arp target with arp_interval on [ 634.343774][T15424] tipc: Enabled bearer , priority 0 [ 634.366735][T15427] syzkaller0: entered promiscuous mode [ 634.397737][T15427] syzkaller0: entered allmulticast mode [ 634.426962][T15424] netlink: 'syz.4.2765': attribute type 6 has an invalid length. [ 634.501101][T15413] netlink: 'syz.4.2765': attribute type 6 has an invalid length. [ 634.522860][T15413] tipc: Resetting bearer [ 634.534027][T15412] tipc: Resetting bearer [ 634.566988][T15412] tipc: Disabling bearer [ 634.796119][T15459] geneve5: entered promiscuous mode [ 634.802199][T15459] geneve5: entered allmulticast mode [ 634.846012][ T8364] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 634.856526][ T8364] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 634.873810][ T8364] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 634.893465][T15465] syzkaller0: entered promiscuous mode [ 634.899177][T15465] syzkaller0: entered allmulticast mode [ 634.923415][ T8364] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 635.179523][T15483] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001 [ 635.806421][T15513] lo speed is unknown, defaulting to 1000 [ 635.810955][T15519] netlink: 'syz.1.2791': attribute type 9 has an invalid length. [ 635.831684][T15513] lo speed is unknown, defaulting to 1000 [ 635.939105][T15526] syzkaller0: entered promiscuous mode [ 635.946883][T15526] syzkaller0: entered allmulticast mode [ 636.065724][T15530] tipc: Enabled bearer , priority 2 [ 636.377328][T15541] x_tables: duplicate entry at hook 2 [ 636.745174][T15560] netlink: 'syz.4.2803': attribute type 6 has an invalid length. [ 636.896626][T15564] netlink: 'syz.4.2805': attribute type 15 has an invalid length. [ 637.411520][T15596] netlink: 'syz.3.2814': attribute type 9 has an invalid length. [ 637.419444][T15596] __nla_validate_parse: 75 callbacks suppressed [ 637.419461][T15596] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2814'. [ 637.487511][T15601] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 637.496046][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 637.531923][T15606] syzkaller0: entered promiscuous mode [ 637.537453][T15606] syzkaller0: entered allmulticast mode [ 637.560520][T15601] tipc: Enabled bearer , priority 0 [ 637.615154][T15606] tipc: Resetting bearer [ 637.669359][T15606] tipc: Disabling bearer [ 637.792695][T15616] can: request_module (can-proto-0) failed. [ 637.905227][T15630] netlink: 'syz.1.2824': attribute type 10 has an invalid length. [ 637.913529][T15632] netlink: 'syz.1.2824': attribute type 10 has an invalid length. [ 637.986329][T15637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2827'. [ 638.122506][T15643] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 638.141886][T15645] netlink: 'syz.4.2830': attribute type 12 has an invalid length. [ 638.150053][T15645] netlink: 'syz.4.2830': attribute type 29 has an invalid length. [ 638.158109][T15645] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2830'. [ 638.167769][T15645] netlink: 'syz.4.2830': attribute type 3 has an invalid length. [ 638.176996][T15645] netlink: 'syz.4.2830': attribute type 2 has an invalid length. [ 638.185031][T15645] netlink: 'syz.4.2830': attribute type 3 has an invalid length. [ 638.199217][T15645] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2830'. [ 638.346810][T15649] tipc: Enabling of bearer rejected, failed to enable media [ 638.379141][T15652] syzkaller1: entered promiscuous mode [ 638.400574][T15652] syzkaller1: entered allmulticast mode [ 640.732328][T15707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.917618][T15714] netlink: 'syz.3.2851': attribute type 1 has an invalid length. [ 640.997314][T15717] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 641.009535][T15717] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 641.103165][T15714] 8021q: adding VLAN 0 to HW filter on device bond8 [ 641.111287][T15724] tipc: Enabling of bearer rejected, failed to enable media [ 641.127907][T15728] vlan6: entered allmulticast mode [ 641.151849][T15728] bond8: entered allmulticast mode [ 641.203644][T15714] bond8: (slave gretap3): making interface the new active one [ 641.211932][T15714] gretap3: entered allmulticast mode [ 641.219075][T15714] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 641.368410][T15739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2856'. [ 641.424893][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2857'. [ 641.519742][T15740] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2858'. [ 641.533506][T15740] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2858'. [ 641.555841][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 641.568677][T15739] gretap4: entered promiscuous mode [ 641.569287][ T5887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 641.584422][ T5887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 641.624596][ T5887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 641.634167][ T5887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 641.642052][ T5887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 641.660910][ T5884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 641.677712][ T5884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 641.685370][ T5884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 641.695139][ T5884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 641.713415][ T5884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 641.767579][T15748] lo speed is unknown, defaulting to 1000 [ 641.775535][T15748] lo speed is unknown, defaulting to 1000 [ 641.875478][T15768] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 641.928032][T15764] 8021q: adding VLAN 0 to HW filter on device bond8 [ 642.084449][T15776] IPVS: Error connecting to the multicast addr [ 642.216561][T15780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.719011][T15748] chnl_net:caif_netlink_parms(): no params data found [ 642.968617][T15823] pim6reg: entered allmulticast mode [ 642.981998][T15823] pim6reg: left allmulticast mode [ 643.054761][T15836] tipc: Enabled bearer , priority 0 [ 643.062781][T15748] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.106691][T15748] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.117029][T15748] bridge_slave_0: entered allmulticast mode [ 643.152695][T15748] bridge_slave_0: entered promiscuous mode [ 643.161828][T15836] syzkaller0: entered promiscuous mode [ 643.167389][T15836] syzkaller0: entered allmulticast mode [ 643.182502][T15748] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.198575][T15748] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.206926][T15748] bridge_slave_1: entered allmulticast mode [ 643.214938][T15748] bridge_slave_1: entered promiscuous mode [ 643.347801][T15836] tipc: Resetting bearer [ 643.366977][T15836] tipc: Disabling bearer [ 643.425613][T15748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.468154][T15748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.506813][T15858] __nla_validate_parse: 9 callbacks suppressed [ 643.506832][T15858] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2884'. [ 643.541944][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2884'. [ 643.558846][T15860] Bluetooth: MGMT ver 1.23 [ 643.577037][T15748] team0: Port device team_slave_0 added [ 643.596452][T15748] team0: Port device team_slave_1 added [ 643.702003][T15748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.708995][T15748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.740524][T15748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.761125][T15748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.772535][ T5884] Bluetooth: hci0: command tx timeout [ 643.779920][T15748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.849004][T15748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.849436][T15870] sctp: [Deprecated]: syz.2.2887 (pid 15870) Use of int in max_burst socket option. [ 643.849436][T15870] Use struct sctp_assoc_value instead [ 643.967007][T15748] hsr_slave_0: entered promiscuous mode [ 643.975626][T15748] hsr_slave_1: entered promiscuous mode [ 644.075714][T15880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2892'. [ 644.085696][T15880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2892'. [ 644.599768][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2902'. [ 644.699310][T15918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2902'. [ 644.766490][T15918] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.774864][T15918] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.907570][T15922] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2905'. [ 644.947877][T15748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 644.973580][T15748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 644.988331][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2905'. [ 645.000703][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 645.021488][T15748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 645.035649][T15933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2908'. [ 645.055404][T15933] validate_nla: 4 callbacks suppressed [ 645.055435][T15933] netlink: 'syz.0.2908': attribute type 7 has an invalid length. [ 645.092996][T15933] netlink: 'syz.0.2908': attribute type 8 has an invalid length. [ 645.144145][T15922] macvtap1: entered promiscuous mode [ 645.149682][T15922] vlan0: entered promiscuous mode [ 645.159155][T15922] macvtap1: entered allmulticast mode [ 645.165018][T15922] vlan0: entered allmulticast mode [ 645.173531][T15748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 645.207725][T15933] ip6gretap0: entered promiscuous mode [ 645.215387][T15933] 0ªî{X¹¦: entered promiscuous mode [ 645.222815][T15933] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 645.271452][T15924] lo: entered allmulticast mode [ 645.484840][T15748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.517483][T15748] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.533578][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.540845][ T8370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.587231][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.594512][ T8370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.656652][T15748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 645.852618][ T5884] Bluetooth: hci0: command tx timeout [ 646.065971][T15748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.100663][T15994] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 646.157848][T15748] veth0_vlan: entered promiscuous mode [ 646.193882][T15748] veth1_vlan: entered promiscuous mode [ 646.258910][T15748] veth0_macvtap: entered promiscuous mode [ 646.282555][T16002] netlink: 'syz.3.2925': attribute type 1 has an invalid length. [ 646.306366][T15748] veth1_macvtap: entered promiscuous mode [ 646.374259][T15748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.394959][T15748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.443239][T16012] netlink: 'syz.4.2928': attribute type 1 has an invalid length. [ 646.459948][ T8364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.468817][ T8364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.482455][ T8364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.505781][ T8364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.598037][T16018] syzkaller0: entered promiscuous mode [ 646.610502][T16018] syzkaller0: entered allmulticast mode [ 646.626327][T16012] IPVS: persistence engine module ip_vs_pe_@ not found [ 646.817203][ T8364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.845093][ T8364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.945676][ T8369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.963777][ T8369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.068772][T16042] ------------[ cut here ]------------ [ 647.074697][T16042] WARNING: CPU: 0 PID: 16042 at net/ipv4/route.c:1275 ip_rt_bug+0x2c/0x110 [ 647.083422][T16042] Modules linked in: [ 647.087639][T16042] CPU: 0 UID: 0 PID: 16042 Comm: syz.0.2937 Not tainted syzkaller #0 PREEMPT(full) [ 647.097075][T16042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.107205][T16042] RIP: 0010:ip_rt_bug+0x2c/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 647.112228][T16042] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 42 0f f8 66 90 e8 b4 42 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 647.131919][T16042] RSP: 0018:ffffc9001a36f180 EFLAGS: 00010286 [ 647.138035][T16042] RAX: 9e9327ee581c8200 RBX: ffff888070a0a640 RCX: 9e9327ee581c8200 [ 647.138789][T16040] ------------[ cut here ]------------ [ 647.146128][T16042] RDX: 0000000000000002 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 647.151653][T16040] WARNING: CPU: 1 PID: 16040 at net/ipv4/route.c:1275 ip_rt_bug+0x2c/0x110 [ 647.159629][T16042] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 647.168218][T16040] Modules linked in: [ 647.176250][T16042] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 647.180179][T16040] CPU: 1 UID: 0 PID: 16040 Comm: syz.0.2937 Not tainted syzkaller #0 PREEMPT(full) [ 647.188141][T16042] R13: dffffc0000000000 R14: ffff888070a0a640 R15: ffff88801ab71e00 [ 647.197553][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.205586][T16042] FS: 00007fbffb6066c0(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 647.215660][T16040] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 647.224622][T16042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.229535][T16040] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 42 0f f8 66 90 e8 b4 42 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 647.236149][T16042] CR2: 00007fbffb605f98 CR3: 0000000082626000 CR4: 00000000003526f0 [ 647.255816][T16040] RSP: 0018:ffffc9000e88f180 EFLAGS: 00010286 [ 647.263829][T16042] Call Trace: [ 647.263843][T16042] [ 647.269925][T16040] RAX: e3049ce7fb812400 RBX: ffff8880780a0c80 RCX: e3049ce7fb812400 [ 647.273214][T16042] ip_push_pending_frames+0xbe/0x150 [ 647.276135][T16040] RDX: 0000000000000002 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 647.284132][T16042] __icmp_send+0xfc3/0x1320 [ 647.289501][T16040] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 647.289533][T16040] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 647.297563][T16042] ? __icmp_send+0x1b9/0x1320 [ 647.302063][T16040] R13: dffffc0000000000 R14: ffff8880780a0c80 R15: ffff88801ab72580 [ 647.310077][T16042] ? __pfx___icmp_send+0x10/0x10 [ 647.318018][T16040] FS: 00007fbffb6276c0(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 647.322745][T16042] ? ip_route_input_noref+0x98/0x250 [ 647.330692][T16040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.335639][T16042] ? __pfx_ip_route_input_noref+0x10/0x10 [ 647.344583][T16040] CR2: 000000110c34d23b CR3: 0000000082626000 CR4: 00000000003526f0 [ 647.349898][T16042] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 647.356471][T16040] Call Trace: [ 647.356482][T16040] [ 647.356497][T16040] ip_push_pending_frames+0xbe/0x150 [ 647.362266][T16042] ip_options_compile+0x80/0xb0 [ 647.370250][T16040] __icmp_send+0xfc3/0x1320 [ 647.375445][T16042] ip_rcv_finish_core+0xaa2/0x1c00 [ 647.378730][T16040] ? __icmp_send+0x1b9/0x1320 [ 647.381691][T16042] ip_rcv_finish+0x14c/0x2f0 [ 647.386949][T16040] ? __pfx___icmp_send+0x10/0x10 [ 647.391831][T16042] NF_HOOK+0x30c/0x3a0 [ 647.396344][T16040] ? ip_route_input_noref+0x98/0x250 [ 647.401449][T16042] ? __pfx_ip_rcv_finish+0x10/0x10 [ 647.406119][T16040] ? __pfx_ip_route_input_noref+0x10/0x10 [ 647.410719][T16042] ? NF_HOOK+0x9a/0x3a0 [ 647.415659][T16040] ip_options_compile+0x80/0xb0 [ 647.419706][T16042] ? __pfx_NF_HOOK+0x10/0x10 [ 647.425004][T16040] ip_rcv_finish_core+0xaa2/0x1c00 [ 647.430139][T16042] ? ip_rcv_core+0x7f7/0xd00 [ 647.435890][T16040] ip_rcv_finish+0x14c/0x2f0 [ 647.440059][T16042] ? __pfx_ip_rcv_finish+0x10/0x10 [ 647.444894][T16040] NF_HOOK+0x30c/0x3a0 [ 647.449485][T16042] ? __pfx_ip_rcv+0x10/0x10 [ 647.454609][T16040] ? __pfx_ip_rcv_finish+0x10/0x10 [ 647.459181][T16042] __netif_receive_skb+0x143/0x380 [ 647.463784][T16040] ? NF_HOOK+0x9a/0x3a0 [ 647.468897][T16042] ? netif_receive_skb+0x115/0x790 [ 647.472971][T16040] ? __pfx_NF_HOOK+0x10/0x10 [ 647.477462][T16042] netif_receive_skb+0x1cb/0x790 [ 647.482592][T16040] ? ip_rcv_core+0x7f7/0xd00 [ 647.487706][T16042] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 647.491877][T16040] ? __pfx_ip_rcv_finish+0x10/0x10 [ 647.496988][T16042] ? __pfx_netif_receive_skb+0x10/0x10 [ 647.501690][T16040] ? __pfx_ip_rcv+0x10/0x10 [ 647.506618][T16042] ? tun_rx_batched+0x160/0x730 [ 647.511216][T16040] __netif_receive_skb+0x143/0x380 [ 647.517020][T16042] tun_rx_batched+0x1b9/0x730 [ 647.522154][T16040] ? netif_receive_skb+0x115/0x790 [ 647.527596][T16042] ? __lock_acquire+0xab9/0xd20 [ 647.532106][T16040] netif_receive_skb+0x1cb/0x790 [ 647.536958][T16042] ? __pfx_tun_rx_batched+0x10/0x10 [ 647.542075][T16040] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 647.546760][T16042] ? tun_get_user+0x272f/0x3e90 [ 647.551889][T16040] ? __pfx_netif_receive_skb+0x10/0x10 [ 647.556763][T16042] tun_get_user+0x2b65/0x3e90 [ 647.561684][T16040] ? tun_rx_batched+0x160/0x730 [ 647.566877][T16042] ? tun_get_user+0x6f6/0x3e90 [ 647.572684][T16040] tun_rx_batched+0x1b9/0x730 [ 647.577532][T16042] ? tun_get_user+0x272f/0x3e90 [ 647.583018][T16040] ? __lock_acquire+0xab9/0xd20 [ 647.587697][T16042] ? aa_file_perm+0x44d/0x1550 [ 647.592562][T16040] ? __pfx_tun_rx_batched+0x10/0x10 [ 647.597326][T16042] ? __pfx_tun_get_user+0x10/0x10 [ 647.602021][T16040] ? tun_get_user+0x272f/0x3e90 [ 647.606858][T16042] ? __futex_wait+0x34a/0x3d0 [ 647.611743][T16040] tun_get_user+0x2b65/0x3e90 [ 647.616501][T16042] ? __pfx___futex_wait+0x10/0x10 [ 647.621721][T16040] ? tun_get_user+0x6f6/0x3e90 [ 647.626752][T16042] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 647.631596][T16040] ? tun_get_user+0x272f/0x3e90 [ 647.636307][T16042] ? ref_tracker_alloc+0x318/0x460 [ 647.641022][T16040] ? aa_file_perm+0x44d/0x1550 [ 647.646031][T16042] ? __lock_acquire+0xab9/0xd20 [ 647.650806][T16040] ? __pfx_tun_get_user+0x10/0x10 [ 647.656704][T16042] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 647.661559][T16040] ? __futex_wait+0x34a/0x3d0 [ 647.666673][T16042] ? tun_get+0x1c/0x2f0 [ 647.671454][T16040] ? __pfx___futex_wait+0x10/0x10 [ 647.676300][T16042] ? tun_get+0x1c/0x2f0 [ 647.681345][T16040] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 647.686792][T16042] ? tun_get+0x1c/0x2f0 [ 647.691508][T16040] ? ref_tracker_alloc+0x318/0x460 [ 647.696092][T16042] tun_chr_write_iter+0x113/0x200 [ 647.701118][T16040] ? __lock_acquire+0xab9/0xd20 [ 647.705276][T16042] vfs_write+0x5c9/0xb30 [ 647.711177][T16040] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 647.715335][T16042] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 647.720492][T16040] ? tun_get+0x1c/0x2f0 [ 647.725514][T16042] ? __pfx_vfs_write+0x10/0x10 [ 647.730396][T16040] ? tun_get+0x1c/0x2f0 [ 647.734655][T16042] ? __fget_files+0x2a/0x420 [ 647.740128][T16040] ? tun_get+0x1c/0x2f0 [ 647.745674][T16042] ksys_write+0x145/0x250 [ 647.749876][T16040] tun_chr_write_iter+0x113/0x200 [ 647.754638][T16042] ? __pfx_ksys_write+0x10/0x10 [ 647.758788][T16040] vfs_write+0x5c9/0xb30 [ 647.763427][T16042] ? do_syscall_64+0xbe/0xfa0 [ 647.767580][T16040] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 647.767610][T16040] ? __pfx_vfs_write+0x10/0x10 [ 647.767652][T16040] ? __fget_files+0x2a/0x420 [ 647.767692][T16040] ksys_write+0x145/0x250 [ 647.772060][T16042] do_syscall_64+0xfa/0xfa0 [ 647.777070][T16040] ? __pfx_ksys_write+0x10/0x10 [ 647.781945][T16042] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.786184][T16040] ? do_syscall_64+0xbe/0xfa0 [ 647.790902][T16042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.796446][T16040] do_syscall_64+0xfa/0xfa0 [ 647.801247][T16042] ? clear_bhb_loop+0x60/0xb0 [ 647.805829][T16040] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.810182][T16042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.814684][T16040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.819523][T16042] RIP: 0033:0x7fbffa78e17f [ 647.824748][T16040] ? clear_bhb_loop+0x60/0xb0 [ 647.824778][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.829448][T16042] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 647.835534][T16040] RIP: 0033:0x7fbffa78e17f [ 647.840056][T16042] RSP: 002b:00007fbffb606000 EFLAGS: 00000293 [ 647.844728][T16040] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 647.849942][T16042] ORIG_RAX: 0000000000000001 [ 647.855824][T16040] RSP: 002b:00007fbffb627000 EFLAGS: 00000293 [ 647.861905][T16042] RAX: ffffffffffffffda RBX: 00007fbffa9e6090 RCX: 00007fbffa78e17f [ 647.866335][T16040] ORIG_RAX: 0000000000000001 [ 647.871040][T16042] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 647.876921][T16040] RAX: ffffffffffffffda RBX: 00007fbffa9e5fa0 RCX: 00007fbffa78e17f [ 647.896592][T16042] RBP: 00007fbffa811f91 R08: 0000000000000000 R09: 0000000000000000 [ 647.901044][T16040] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 647.907095][T16042] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 647.926758][T16040] RBP: 00007fbffa811f91 R08: 0000000000000000 R09: 0000000000000000 [ 647.931465][T16042] R13: 00007fbffa9e6128 R14: 00007fbffa9e6090 R15: 00007fff8f6854e8 [ 647.937522][T16040] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 647.945558][T16042] [ 647.950240][T16040] R13: 00007fbffa9e6038 R14: 00007fbffa9e5fa0 R15: 00007fff8f6854e8 [ 647.958257][T16042] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 647.958280][T16042] CPU: 0 UID: 0 PID: 16042 Comm: syz.0.2937 Not tainted syzkaller #0 PREEMPT(full) [ 647.958308][T16042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.958325][T16042] Call Trace: [ 647.958339][T16042] [ 647.958351][T16042] dump_stack_lvl+0x99/0x250 [ 647.958390][T16042] ? __asan_memcpy+0x40/0x70 [ 647.958424][T16042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.958457][T16042] ? __pfx__printk+0x10/0x10 [ 647.958507][T16042] vpanic+0x237/0x6d0 [ 647.958541][T16042] ? __pfx_vpanic+0x10/0x10 [ 647.958588][T16042] panic+0xb9/0xc0 [ 647.958619][T16042] ? __pfx_panic+0x10/0x10 [ 647.958672][T16042] __warn+0x31b/0x4b0 [ 647.958703][T16042] ? ip_rt_bug+0x2c/0x110 [ 647.958741][T16042] ? ip_rt_bug+0x2c/0x110 [ 647.958771][T16042] report_bug+0x2be/0x4f0 [ 647.958804][T16042] ? ip_rt_bug+0x2c/0x110 [ 647.958835][T16042] ? ip_rt_bug+0x2c/0x110 [ 647.958867][T16042] ? ip_rt_bug+0x2e/0x110 [ 647.958899][T16042] handle_bug+0x84/0x160 [ 647.958922][T16042] exc_invalid_op+0x1a/0x50 [ 647.958946][T16042] asm_exc_invalid_op+0x1a/0x20 [ 647.958969][T16042] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 647.959001][T16042] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 42 0f f8 66 90 e8 b4 42 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 647.959022][T16042] RSP: 0018:ffffc9001a36f180 EFLAGS: 00010286 [ 647.959045][T16042] RAX: 9e9327ee581c8200 RBX: ffff888070a0a640 RCX: 9e9327ee581c8200 [ 647.959063][T16042] RDX: 0000000000000002 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 647.959080][T16042] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 647.959096][T16042] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 647.959114][T16042] R13: dffffc0000000000 R14: ffff888070a0a640 R15: ffff88801ab71e00 [ 647.959161][T16042] ip_push_pending_frames+0xbe/0x150 [ 647.959198][T16042] __icmp_send+0xfc3/0x1320 [ 647.959236][T16042] ? __icmp_send+0x1b9/0x1320 [ 647.959270][T16042] ? __pfx___icmp_send+0x10/0x10 [ 647.959324][T16042] ? ip_route_input_noref+0x98/0x250 [ 647.959366][T16042] ? __pfx_ip_route_input_noref+0x10/0x10 [ 647.959408][T16042] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 647.959441][T16042] ip_options_compile+0x80/0xb0 [ 647.959472][T16042] ip_rcv_finish_core+0xaa2/0x1c00 [ 647.959522][T16042] ip_rcv_finish+0x14c/0x2f0 [ 647.959552][T16042] NF_HOOK+0x30c/0x3a0 [ 647.959579][T16042] ? __pfx_ip_rcv_finish+0x10/0x10 [ 647.959603][T16042] ? NF_HOOK+0x9a/0x3a0 [ 647.959626][T16042] ? __pfx_NF_HOOK+0x10/0x10 [ 647.959646][T16042] ? ip_rcv_core+0x7f7/0xd00 [ 647.959672][T16042] ? __pfx_ip_rcv_finish+0x10/0x10 [ 647.959710][T16042] ? __pfx_ip_rcv+0x10/0x10 [ 647.959737][T16042] __netif_receive_skb+0x143/0x380 [ 647.959782][T16042] ? netif_receive_skb+0x115/0x790 [ 647.959837][T16042] netif_receive_skb+0x1cb/0x790 [ 647.959870][T16042] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 647.959899][T16042] ? __pfx_netif_receive_skb+0x10/0x10 [ 647.959939][T16042] ? tun_rx_batched+0x160/0x730 [ 647.959972][T16042] tun_rx_batched+0x1b9/0x730 [ 647.960001][T16042] ? __lock_acquire+0xab9/0xd20 [ 647.960034][T16042] ? __pfx_tun_rx_batched+0x10/0x10 [ 647.960068][T16042] ? tun_get_user+0x272f/0x3e90 [ 647.960116][T16042] tun_get_user+0x2b65/0x3e90 [ 647.960156][T16042] ? tun_get_user+0x6f6/0x3e90 [ 647.960188][T16042] ? tun_get_user+0x272f/0x3e90 [ 647.960223][T16042] ? aa_file_perm+0x44d/0x1550 [ 647.960245][T16042] ? __pfx_tun_get_user+0x10/0x10 [ 647.960271][T16042] ? __futex_wait+0x34a/0x3d0 [ 647.960312][T16042] ? __pfx___futex_wait+0x10/0x10 [ 647.960334][T16042] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 647.960378][T16042] ? ref_tracker_alloc+0x318/0x460 [ 647.960400][T16042] ? __lock_acquire+0xab9/0xd20 [ 647.960429][T16042] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 647.960460][T16042] ? tun_get+0x1c/0x2f0 [ 647.960541][T16042] ? tun_get+0x1c/0x2f0 [ 647.960569][T16042] ? tun_get+0x1c/0x2f0 [ 647.960604][T16042] tun_chr_write_iter+0x113/0x200 [ 647.960638][T16042] vfs_write+0x5c9/0xb30 [ 647.960680][T16042] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 647.960711][T16042] ? __pfx_vfs_write+0x10/0x10 [ 647.960758][T16042] ? __fget_files+0x2a/0x420 [ 647.960795][T16042] ksys_write+0x145/0x250 [ 647.960834][T16042] ? __pfx_ksys_write+0x10/0x10 [ 647.960876][T16042] ? do_syscall_64+0xbe/0xfa0 [ 647.960916][T16042] do_syscall_64+0xfa/0xfa0 [ 647.960949][T16042] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.960983][T16042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.961008][T16042] ? clear_bhb_loop+0x60/0xb0 [ 647.961037][T16042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.961062][T16042] RIP: 0033:0x7fbffa78e17f [ 647.961085][T16042] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 647.961105][T16042] RSP: 002b:00007fbffb606000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 647.961132][T16042] RAX: ffffffffffffffda RBX: 00007fbffa9e6090 RCX: 00007fbffa78e17f [ 647.961150][T16042] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 647.961167][T16042] RBP: 00007fbffa811f91 R08: 0000000000000000 R09: 0000000000000000 [ 647.961183][T16042] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 647.961199][T16042] R13: 00007fbffa9e6128 R14: 00007fbffa9e6090 R15: 00007fff8f6854e8 [ 647.961242][T16042] [ 647.966521][T16042] Kernel Offset: disabled