last executing test programs: 1.7810115s ago: executing program 1 (id=2808): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) (async) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.510262106s ago: executing program 2 (id=2814): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/143, 0x8f}], 0x1}, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0x0, 0x0, 0xf0}) 1.460170039s ago: executing program 3 (id=2816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x1a0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x170, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10}, @TCA_GRED_STAB={0xfffffffffffffdaa, 0x2, "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"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x1a0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000740)={0x7, 0x1, 0x5a, 0x6, 0x2}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xa32, 0xfffffff9, 0xd7bd, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0xeb5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x1, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x7ffffffe, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x8, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x281, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0xffffffff, 0xa, 0x1, 0x0, 0x9, 0x300, 0xfff, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa29, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x8001, 0x2, 0x1, 0x7, 0x1, 0x177, 0x2, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x400, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x1ff, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0xe39, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x5, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f00000006c0)=""/95, 0x5f}, {&(0x7f0000000800)=""/252, 0xfc}, {&(0x7f0000000900)=""/108, 0x6c}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x7, &(0x7f0000000340)=""/35, 0x23}, 0x2000) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0xa8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.380338336s ago: executing program 1 (id=2818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x195, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [@ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000180)=[{0x2, 0x1, 0x7, 0x2}, {0x3, 0x3, 0x3, 0x5}, {0x2, 0x5, 0x6, 0x6}, {0x4, 0x1, 0xb, 0xb}, {0x5, 0x1, 0xa, 0xb}], 0x10, 0x1165e0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x83, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xe2303, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000640)={'bond0\x00', @local}) (async) splice(r3, &(0x7f0000000680)=0x81, r0, &(0x7f00000006c0)=0x8, 0x23, 0x4) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000700), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x3d}, 0xc) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x17, &(0x7f0000000980)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @jmp={0x5, 0x1, 0x4, 0x5, 0x5, 0xffffffffffffffc0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xb}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}], &(0x7f0000000a40)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4b, '\x00', r1, 0x0, r9, 0x8, &(0x7f0000000ac0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad19}, 0x94) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000c40)={r6, &(0x7f0000000bc0)="f9852a9f2c95a94a978503cb45ea19347b20f39406d1b822d3e271377440d92cb6a742a6d02c", &(0x7f0000000c00)=@tcp6=r10}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x1f, 0x7, 0x9, 0x1, 0x400, r6, 0x5, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) (async) r12 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000d00), 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r11, 0x40046721, &(0x7f0000000d40)={r12}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, r9, 0x0, 0x3, 0x3}, 0x50) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r13, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x3c, r14, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x47}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28090}, 0x4005) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000f80)={0x0}, &(0x7f0000000fc0)=0xc) r16 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r17 = gettid() sendmsg$nl_generic(r13, &(0x7f00000016c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80082}, 0xc, &(0x7f0000001680)={&(0x7f0000001000)={0x654, 0x28, 0x800, 0x70bd2a, 0x25dfdbfd, {0x1f}, [@generic="f1a375ded0ce8a9d4e473be9fcf411fc18a9f357b07f6482ac928353eb45746f9ddb84e94a32e60d69c6cadbdde80b177816fdeab225cf1ae0bc366e1ccede9e7ee7bd5cd960462c25c14d3932a53c5fa423feb2868d8cfe11d0768b12fdcfe40d94425a470a522dadd612f6373d217e2a7067df373580776944937f1f6695023ad4cb935508f4f1febebe415c2a144007d989ea96cc560a27baa7db244ac4a9bc681c8ff76bf64902ac47f08e13fc8499f4e160b9cabd112bd581a5f63f8a", @nested={0xe2, 0xb5, 0x0, 0x1, [@nested={0x4, 0xe1}, @typed={0x8, 0x132, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x140, 0x0, 0x0, @pid=r15}, @typed={0x14, 0x97, 0x0, 0x0, @ipv6=@loopback}, @generic="a91376c12766cf202fbc1b18c8cd8ccd974d77700976290c11275fb269f073c30e195b77f8736e164c3a23c9b7a5a5604e8e188eae4121cfaff2aa16f47b1ef2722204964e839d1fb85040810ccf58a6366961577b9a80a8c8d96918a3dbecd99e618b8e6d196a9efa77e5b2803b7409df5bf580c95d5c5bbc298d9517bf724d8465a0a47de9c0486a24c634293d8c2eb51774e8cf1af196f5d30c762707", @typed={0x8, 0x106, 0x0, 0x0, @fd=r16}, @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x121}, @typed={0x4, 0x7a}]}, @generic="6cee366e2be11f48425ab3c6a5c17c5bd24178cf472f1437914dbd4beb652f65cf6cceab43d34a67b1e29a13f37a0732984a68b87461c1d816c6250fc1c2ae8ea1329971892f4a1e9fe3bb5b1a83301d19b6ddf57c0bcca404a62e9d6f76a2f1878743e106f00bfdc4b01fe85442f0694f6fc041645b86b1e48190b9d8d68bc331a56f2950d8bac855843167f9d1e33fa221a58baa968d6166ed3a3abe25d312f29eb64d604c5b67f3ab42be7fe776bf69a196a52ce8cd32f48aa1986f4ab88a38ce203b8268fda007de9ff7613456ec5a6b183f4e77b0603921c0378eab7abe4b55bd7eaabd882cdf50e71961a1e42e44", @typed={0x1c, 0x116, 0x0, 0x0, @binary="94e50c7d25330802c304e791d23d27866eba77e17255c309"}, @generic="677a987247cd2f4f467c338791bf8a5071f38786b39ee04067f636cbda7f01401b6d07e721c95debf7cbe1fa597501bf252f1c944d7b36dcfc55c63c5acc881c294c582ea9a72451730710a2e57d3fb42f8eb53c188918b2aeed120136ad27168c", @generic="eb8f68d958e6ea4e7683e6634d72047ce7efe63b2a19de409c13de920d29d7c7485ffcce5063c75b598938785a68592c3047d8a84122546d189c9ce9007a9a64b650d816e53b164df5c1374a98668d710dac4319a5e78ad97de0e353871a140140904b6c23c8759b0aa13ef650e0338512111a63c93f7ec714e14e61098d734717b8581713ac338a4111dc15741783153ac4d4db2af7eba13e596e3760bc276e9ddd5b8cd7533f7d368b02b8bf6d3b7b653c18c61348", @typed={0x8, 0x45, 0x0, 0x0, @pid=r17}, @generic="e01f19cb4296c034d97a0d7d8d0cbd667de8b2309b3fe724136b81a75ca30ee2d0eff11aaa057966c9424e3fb71c0f8d717b791b6b7e5985815a30e54c9e5f09b19f7026be1e28b342115a4b0f4e99ac885d34c62b759119d59ba30d8bbbb3c14e69435bf86578b2ab46e0d227fe8ddfa6f7d8cfce22ce5fec2229457916614c", @generic="dc551fa047d727a071d4a6a5b9db513f64fdd1dde988cf38639446366784ef14e5e480326d12af730c296c072b308a9f59582403b919169fca237cd5f9a3c80d5abed722faadb8d91b58740666b70d86cecdc5fca2fb667a549fde604cd7581e5cc48937c7a517a1b62d97c42379f6fbe6f524886e8492f21c20958cb69c1b18a758794579617cb98147f6771a997405254967cac8369c7ef50e5f4ae4eceba22a110e94ab2d3b6be7c95b05765d686239e8da55c0e2fdcae0ff416c8081f8022db94cbec07bb7250a654ddf7a76", @nested={0x11e, 0x134, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@empty}, @generic="d913d7dc0ea798ed021db6ecb9bbe8c55067b2bd6d5c34f159e6d57d4cfe2460f2a02dedc9b3a0ba6cbdf8f82ec17517f4ba0af32cdfce2654e40d08036610d47673d844905cb75c45e04f83d1d90acc9561e4619489b6cfa031cd44db6d84b867bf65d6743d2cc3ab96ee0836c406cedd8fbe9ecd457e947a11dea28a8640f8348231e767ec595eec10f65b901ab2ab586c8d1404ad7c0ef7108751ae025907fd6ff6964310633060b19059269407fa92230cec311d8940e91d42f5c0223ebd4e7c97aba1145a40076d9a6bfe6db9a272cb13c5e498e3c77501a168084195338c65f66e37876c4c2ea16c472dbf2f7c356fcebf9a9084c928af4fe39a8c", @typed={0xb, 0x13b, 0x0, 0x0, @str=')4\xf6^+&\x00'}, @typed={0x8, 0xcf, 0x0, 0x0, @uid}]}]}, 0x654}, 0x1, 0x0, 0x0, 0x40844}, 0x844) (async) ioctl$PPPIOCGL2TPSTATS(r13, 0x80487436, &(0x7f0000001700)="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") (async) r18 = accept$inet6(r10, &(0x7f0000002700)={0xa, 0x0, 0x0, @private1}, &(0x7f0000002740)=0x1c) setsockopt$inet6_IPV6_PKTINFO(r18, 0x29, 0x32, &(0x7f0000002780)={@loopback, r1}, 0x14) (async) sendmsg$inet(r16, &(0x7f0000004b40)={&(0x7f00000027c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000004ac0)=[{&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="53db7db34b36848b8dd185e23803addd2a4d68cab635bd2287f2fe8fd24c264a1121cea767264b4dbc67605a9bd9cb17647175a1e1", 0x35}, {&(0x7f0000003840)="bbf59b4271260896e677c63b8e5711d9bfffc21fe347a0fb0e7f837a6db6f5202299b68a8db1d85009563ea3126f7406e54afbda0fa46a8aaa50600efc5afeaa9c6ba914b7", 0x45}, {&(0x7f00000038c0)="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", 0x1000}, {&(0x7f00000048c0)="bd713e35b33ce6d9ec5b22bafa9f601deaa1c0527ada0d1c23ca355f450f04c06937ede99092ac6b56519143377dd7fef08cba8ea0abf34d9dfdfe488d073133567da6822fb9e256264d5a17c4a851ac9b29712a738506d1761fb59b9e4da55e6426b49340a32ea8cdddb6638f282130939206da0218951e3d521f435657ad9b0e2090c89e6ceb36f9c779e672265a87bce2e1d75464", 0x96}, {&(0x7f0000004980)="ff096933789f63c15fbea39aa2c70dc5634c773157fc9d86c4ef9dcf318e04bcacf6b2400fc76c6df9d91021a7cb91caa7fedcd26f2e166ae9e970a792b4d5579b", 0x41}, {&(0x7f0000004a00)="8b284464243e78a1ff31fb8e976bb4e88bf6895d5eaa5f0ba524b16ec5611e0525bddebfce4fcda3dddc932ef7820a2ff60e1a43f89f2a8f8c08cd15530478c88d4ac05024e5d6b346d3bfbfee46beb57726c72e26c97e6d6c9a1a98e23ce3a25e2a55fbcd796ab6d6dc6688e7d9a57736829dec62bfd135", 0x78}, {&(0x7f0000004a80)="1485cc585f0f7dcc9af328eb07b7726a556f21941ca645bb2097daf7d8440880f244a1ecd5a243c85f40f1cbb85339bc8cbe3b8e726a", 0x36}], 0x8}, 0x0) 1.379345049s ago: executing program 0 (id=2819): socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000012c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x18a}], 0x1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, &(0x7f0000001d80)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000320001000000000000000000010100800c000100000000000000000014000300200100000000000000abadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd00"/276], 0x114}], 0x1}, 0x0) (async) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"/276], 0x114}], 0x1}, 0x0) listen(r4, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000106ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1.349618124s ago: executing program 1 (id=2820): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f00000020c0)=""/194, 0xc2}], 0x3, 0x0, 0x40}, 0x0) 1.290900495s ago: executing program 3 (id=2821): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x20) 1.179108227s ago: executing program 0 (id=2823): r0 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x5c, @private=0xa010100, 0x4e24, 0x3, 'rr\x00', 0x1, 0x3, 0x44}, 0x2c) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003800600060065580000040502"], 0x528}}, 0xc000) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x42, &(0x7f0000000280)}, &(0x7f0000002100)=0x10) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x6}, 0x6}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000000000002900000005"], 0x10}, 0x20800) 1.150173598s ago: executing program 1 (id=2824): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000fcef536f0a9ee0000000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000006300000000000000000000000010000000f7542ece8cd3cff5c56abdf36576219049648e6144a108fe0a6bf89bd347556c68af14867cba0e288566ce91453e08ed7dfc45fdf106457421a670997c2e225356bf48b63cb167838a00ec172935128b7a0fe0bc48bd09c4649a2a646b560d121eb8b3cd2568f66359d4e17ddf883652de3d85c77320924d3dd5e08eb6801de93636171d084df13f3f83bd857c2047fd1cf538a265baebaf35f2210268d611e65523310d17cf41f1013279b010a3c9cd4c235654baf0be5a9b4d3468b880fe009b55"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000200)}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x3c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000001c0)={[{0x2d, 'net'}, {0x2d, 'cpuacct'}, {0x2d, 'rlimit'}, {0x2d, 'devices'}]}, 0x1f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x10c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0xf5, 0x6, "473ec863a9b4c25c7d67a44d459933dc980467ded549d2c5917034c5e55126c1d9079c0c1c8526463e85a45914d397365e0bd0ae623a49debce3f0dd85bb3fd3e757f262082761092f6159dd3237a93215bede49b0989686377fe7449fde9370144188b3cd9359047a93a726087e4b78fea2c9084cf3076545d522d152be767472e9b1e17a97f160b5c813e715ce6fa25054dbdf7b67275f898e9c08e1bac10748179083442ab003c3b86344e820496a1b2f82853a5a7b7443161d9fa908c1e5e3f5725d0315cca7bdd6acb497cdb546edfdf7321ad4243953c824f28c9b9721bab11009621ede816eea14b49f658c8e22"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x134}}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) 1.094369666s ago: executing program 3 (id=2825): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x4) (async) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x10000}, 0x18}}, 0x0) 1.031982838s ago: executing program 3 (id=2826): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800104}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd5da}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x42e2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xa0000000}, {0x6, 0x11, 0x6}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x840) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1a4, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc70}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9b}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "203770cfc2349e5f026cdec7a8e6f4a9d4ad34de1b1c392b3cbf349a1383da2446a709f0a05e293d19ac1b33725b258b38a48be671f8bfedfe6d9588f66cdf48d73bab7ace2a31f21f3ae143691f5901e12789fb342b585260b56d068afe11af8be8d582be61eb66b5d08e055c8915ccd0d4ea341843b9fe9a408f23c8960bc860d5b52c20df4240afff54924beeaf8ff86bac97931c0436740109b378483504c0be4b74e41a149ce55b5fce6e53df495bb7bc6e8a"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20004454}, 0x810) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r3, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000006c0)=@gcm_128={{0x304}, "bf16636e7d25111f", "0dc3a80bcb9b5c1b2d959a73d8e77d80", "406baa38", "afdd6d60a17ba5a0"}, 0x28) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000700)=@assoc_value={0x0}, &(0x7f0000000740)=0x8) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000780)={{r4}, 0x4, 0xfd3, 0x8}) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f00000007c0)={{0x2, 0x4e20, @broadcast}, {0x306}, 0x1e, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_to_batadv\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000840)={r6, 0x529}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000008c0)={r7, @in={{0x2, 0x4e21, @multicast2}}, 0x2, 0xa09d}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000a00), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000b00)={r7, 0xffffffaa}, 0x8) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xcc, r9, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xcc}}, 0x10) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r10, 0x800448d3, &(0x7f0000000d40)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x1, 0x6, 0x1, 0xd61, "2b55a0975eaf73ab49a8075259672b394d90e864f08b6d1de607e5921a604201e10c0dc47a2c160d28040ddca5b4be8968877176946a7f0015ab0f885d75c5dc19d71563b981ba8c507df317699ba4d2e950a045aa69261a4127793434a67611ab9fc8c7489e1d2e1946de6010baec38eaefd6f582cf9b6b28b1f1fa6cc82835"}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r11, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4f4}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000f40)={'vxcan1\x00'}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x9}]}, 0x2c}}, 0x4000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000001080), r12) 975.577994ms ago: executing program 0 (id=2828): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000440)={0x11, 0x10, r1}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r3, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r4, 0xdb9, 0x7}, &(0x7f0000000180)=0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%-5lx \x00'}, 0x20) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="040000000000000003000000000000000200000000000000", @ANYRES32=r6, @ANYBLOB="000000000200"/28, @ANYRES32, @ANYBLOB="00000000840000000000000000000000000000000000000000000000375945f55b7f750fb2d2b830a6d22aafe3d4a39b613fc21b4e01fe0be543106c5878d52bb644ebc4620159985d2dae3c0ef9e596651a69b6ea6999703e056e387d1d58da2d0248764592a58c2e4914543085d7e7021f3c14de772e13f5ed0b4f535a86b8406770fe7e0fdad6cf0aa3a5b44c6d4ca2f57f81a8636c72e06cb695e34dae4cf314a26024d17dd9e853babbdd75bcb0987b587df706177ed619a7d386da9747136eef4fd4fe71bb2922f4a6ba93b9c5d6a209b2133f3d9496f2db6b4c1a91fdbca2e6b9b050694a72eba14cd6cdadabff6afcce423c1a110d864dd9acaffc82142b09b9868bdbce5f35c813aa0e4fa6156dd7d1333db3d8cd3bfe8db0f1da98e47fb01db189b7f9ae77df230ef875323dc22462675fe141b5b3db483a9c7eaa12629b8c55d4977be9dd14f604"]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007000000090033395b907a2fe20000003c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000214c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100007800a00010071756f7461000000140000001000010000000000000000000084000a"], 0xd0}}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000300)) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='memory.swap.high\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000003c0)=0x2, 0x12) 917.975268ms ago: executing program 1 (id=2829): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x3e8, 0x0, 0xd0, 0xffffffff, 0x178, 0x178, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x7, 0x6, 0x7}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x14, @multicast1, @private=0xa010101, @icmp_id=0x65, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port=0x4e20, @gre_key=0x5}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x807, 0x400}}, @common=@inet=@ipcomp={{0x30}, {[0x4d2, 0x4d6]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x15, @private=0xa010101, @private=0xa010100, @port=0x4e23, @port=0x4e22}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000500)=0xfffffffe, 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x24}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200000d4}, 0x4000000) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x100, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = gettid() (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000b40)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)=0xc) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000c00)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000d00)=0xe8) r9 = getgid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001080)=0x0) r11 = getuid() (async) r12 = getgid() r13 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r14 = getpid() (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f00000011c0)=0xe8) (async) r16 = gettid() r17 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001200)={0x0}, &(0x7f0000001240)=0xc) (async) r19 = getgid() (async) r20 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001280), 0x4) sendmmsg$unix(r3, &(0x7f0000001400)=[{{&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000007c0)="cde11d92951e857e1c2db59a7377fa8e6f26a9c57704055aff32c548f4cdc16032fbdac31be9150a5fbaefef9ab8d46331898b3fb4d326ac2a7167c749850a1ed9400bd45911a0984993b5c92359f0b7bd9bb2e08f5cfb7e4210d3fae37f86dce60ba1242552ed2438407a5035dbe2d82a3f6552564892fa569ef8c344cd557821", 0x81}, {&(0x7f0000000880)="0fe9a9fcda057409e41de51fe04d676df0224ae3b110237cc5b7a8fb4c609142d6313d4600a7d24c95a467d763c76f31e891f1afbcc6bc6c0d664f1b39ce94e84c42738e9f16618a519bbc3569b3e86879d64e58dd8be98b373c744b62b90a235fab781154b43fd1d95fc7", 0x6b}, {&(0x7f0000000900)="9abf1916a6fb2be29f2b54a399321ff5a4691911bebebd586084dfacef77c30a0fbcbde0359d607cec4d9e03433d2cfb62dbb6563ff5263456bbc9cfa711c7446cfe76e091f532a83cf9c795cc12b60526a0e3b7938bd7df7498a04450c0ce8131303b07f8a82cb5ec1f760058b25eeeb36bc2ecc5fede52ed56a0e3d4abce104b611a0cc3d9c88f65b6bf3782309b9457f3032313700c9ef692300bbdf055af1569d4136986dedb173e8d3e503d3502151c1b83a2afe588b2723dd9c11bb612fded5dd4eeb7bedf7e51dc02226c3d26e7993f2046cba2", 0xd7}], 0x3, &(0x7f0000000d40)=[@rights={{0x30, 0x1, 0x1, [r1, r0, r4, r0, r1, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x1c, 0x1, 0x1, [r3, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff]}}], 0xb0, 0x48001}}, {{&(0x7f0000000e00)=@abs={0x2833fdd8390b334e, 0x0, 0x4e20}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000e80)="624407a7a8d3674a30162294b77fff6f949ab3b926d40cc72ad03ee1746540183a299630", 0x24}, {&(0x7f0000000ec0)="7a74acb31a93a53a977df60dd8e8e3a4791601e4c0b88396f1c4b6a8265837223f4af927f83930b32cbfda4daca2793de1d11b9d699a99254376cce551b4558d0733065a225461687f00c94c07755522573136b5a344d70588d9cfc83305301e70797f8d2557a2fd95a53069e4ffb5", 0x6f}, {&(0x7f0000000f40)="0a15b30ea3ca207724e7f01a075c59b395c9cddee244735e8f71910a905a243d96939349ecf849df92aa0182a53c4dbbbbbf375a84f91a700b1641b558cb20012997c3a641b2dff513c05587f2dea080c9c502ad98886e85ed8828b1a7d0a7855ee690c22fee63d9aebbc33ae36a81aebd6ef9875f64b1cb730b4c13a74a47dc2549cbd1b046953ca650b9dfc7b7c35ab6a71d560c068469fbf8176292be76731dd86807b31b3af03054fc8c53a5913e15e037ad0e237ac67084b872ba522e0224c1b65df0efeaaeef76e204967d61f441273c602dca3100662294671d2aa171b9e4363992", 0xe5}], 0x3, &(0x7f00000012c0)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x34, 0x1, 0x1, [r13, r3, r1, 0xffffffffffffffff, r0, r3, r0, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r16, 0xffffffffffffffff, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, 0x0, r19}}}, @rights={{0x2c, 0x1, 0x1, [r3, r1, r3, r0, r3, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r20, r0, r3, r3]}}, @rights={{0x20, 0x1, 0x1, [r1, r3, 0xffffffffffffffff, r0]}}], 0x130, 0x80}}], 0x2, 0x40004) write$cgroup_pid(r1, &(0x7f0000001480)=r5, 0x12) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f00000014c0)="1a4785bbc73aeaca1efa", 0xa) (async) getsockname(r4, &(0x7f0000001500)=@l2={0x1f, 0x0, @none}, &(0x7f0000001580)=0x80) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, 0x4, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c845}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001700), 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x6c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1f}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x57}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7e}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x32}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) 917.671816ms ago: executing program 3 (id=2830): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000600)="384bc3f46ccc764bb9f1cfe1e0f14df89676b62e1e67e47eabfa5ceadb1310139ed89fc36a72ca1a8ae2ed67500a3e6268f6867369ae3354e1724f0ff7c4000000242c0554dc08d0efd39230acdc05729cfd2aef4d1643d7c717bd17727cea27d9a843d8b11a2678ce5d61999927247a7e0c3359a9b06ac01d0b3edaf1682b18766fe1623813911898adf3bb87b418550e33b3c8d73523c506b945cad3b514d81339fd17077a025c7ae103d34d16703171cec02f0556e916387db43e026ca64f49bbf0120429240c2fb6ad4b4dccc01d131871a1ac38ce7d4ecd0b4196d0e8bca14fccf79fb4a95d2f8722f6979a2d7aeb7f509f216d807160c94b15d2472d09848392518c3dc5a3e48cc75f3d41bde115b5cbc6103e681539d7da87fbf93a0cf5177afb9dbcc887baf6d569ee4b378505bf42", 0x41}, {&(0x7f0000000140)="ce903baa49", 0xfffffe11}], 0x2, 0x80000001, 0x4dc7a87d) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0xd21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0a09000000bbbbbbbbbbaaaaaaaaaabb86dd6d002000001111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e2000119078c205000100000000e1196dd9d75064c60339ecf8a1f9bc572a500c33ece1030b3d2768103846afcd1f5bbaa852a291616b7aeb0c54aa563e4cdde782eb46999d3ef4c8082b79a600d42286a7aba593e2706939a956ede3d06991edc88d83c7acfea0f7aa96d894fdd0a18ac66fb1876f849f48c5ec4d675e31119ebecf908f69e9"], 0x4b) 762.153124ms ago: executing program 1 (id=2832): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = socket(0x40000000015, 0x805, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000480)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d5063300800000"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xa0, r7, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000086}, 0x20040001) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) pipe(0x0) 761.859081ms ago: executing program 4 (id=2833): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000140), 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={r2, 0x20, &(0x7f0000000c40)={&(0x7f0000000300)=""/207, 0xcf, 0x0, &(0x7f0000000b40)=""/212, 0xd4}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 722.578564ms ago: executing program 0 (id=2834): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50008000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x100}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0x2, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x909'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x4788}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f"], 0x254}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x300) (async) write$tun(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000007000000000000000500000000000000090000000000000002004a3701300066000006119078ac14142d0a010102890bc8ffffffffac1e01018632ffffffff0112fc18e75c8447cfe51c75103479fdb191040d208223e7464709528b671f060d0548b71401eb29af638029441c63c300000000000000000a01010000000000ac1414aa00000008863700000000060c8b6800000000279db22c0707f093af5fda020872a5e17df0db020a71dc0872f568a0cd0603da00093e3032c8b808674444ec13ac1414aa00000006ac1414230000b083221d000000007fffffff71d80008e000000100000000ac1414aa000000dcffffffff000000000a01010200000001ac14143800000003000000000000c98c4e244e210048907803000000020000008952df13603c105ec448fc9014201da0445424e58b13cb02607febb7ec891c7696301f4eb49a65a291f38f41a4255d5a5d32799b09c5834aa2b8e4686ddea2482b49abbaff4e3f0befe72d6ffbb9f0a2d99accb1e320926559b484696af01a2f6705774fc98b214e"], 0x150) 700.524447ms ago: executing program 4 (id=2835): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @igmp={{0xc, 0x4, 0x1, 0x8, 0x38, 0x67, 0x4, 0x3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}, @ra={0x94, 0x4}, @generic={0x7, 0xe, "e6e45f6a621c9842c5b5ed38"}]}}, {0x17, 0x5, 0x0, @broadcast}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4f) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 606.221632ms ago: executing program 3 (id=2836): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1}, 0x2000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbd, &(0x7f000000cf3d)=""/189, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x6}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r9, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x800}, 0x8) getsockname(r8, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 605.421247ms ago: executing program 0 (id=2837): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2eff0000", @ANYRES16=r5, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008000300fd0f0000080013000100000008001500b5080000"], 0x44}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012bbd7000fedbdf250500000008000300531dc0cbc5a75b137f4b8b3db6ff3a4d11aea233970a9bad167bd251e6936ad1dedf9e99f67a2325087b0bb1d3549a87bb9c677912674551d1dd835c8fe2cad638e730dede961c374aba68b9cd4105d4557d16ee3a4aeb3fdfd1e4b7a62e245b51d1c3e19b7010cb2dcbf06233cb60b4fb3bc99eb6f6ac0c05cafa5d570c4934135c9bfddc6c41bdbb59417007ec259c9b30de154c21030b740feb904cf332306e1b8ea959b2d86cbd949b203f562808750d723155a9e1cc09a1a69e729336a37ff48d", @ANYRES32=r6, @ANYBLOB="0c0099000000010019000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4040000) r7 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r8 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r11, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002c00)=@newtfilter={0x1804, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x17d0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x1538, 0x2, [@m_mpls={0xd8, 0x9, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5257}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x802}]}, {0x6a, 0x6, "d5bfe0489375a9540d4cffff157e9f292fcf26d357d50e5a021b5cd2e63bbb2cfa6cea10679ae53d3e2016ceba2be8e0e20cef01b31f3956ba9afec131dfb02c3880f72dbcd3e9250fb594846e7eb921862ce2b72ac07608eb673a5531f0769b8530b7ea755c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0xb4, 0x5, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x6}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0xc}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "a1e43ed5ae442568bb2c4117434d403d"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_LABELS={0x14, 0x7, "2a132fe66dad1c82c10522ef1b571ddc"}, @TCA_CT_MARK={0x8, 0x5, 0x4}, @TCA_CT_MARK={0x8, 0x5, 0xffffff43}, @TCA_CT_PARMS={0x18, 0x1, {0x7, 0x2, 0x2, 0xff, 0x6}}, @TCA_CT_MARK={0x8, 0x5, 0x556}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x80, 0x18, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x10000000, 0x600, 0x400}}}]}, {0x33, 0x6, "37cd048397db62e9d17ef5db5920a9601a1cf67d3649b9952ac5742b004540bb9cf160130f18d4c4448f0454639660"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0xbb1ab316733a7ade}}}}, @m_mpls={0x5c, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x2f, 0x6, "bbb33d41e0cb916c33aa75e7f2acdda69affa9352c233c2a4ffa261abd0133f24ab1a5a32b4a8c31ab9644"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x114, 0x9, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x231d4a8a, 0x10000000, 0x7, 0xf522}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff9, 0xffffffff, 0x1, 0x4, 0x5b5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2576}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x727}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8b3, 0x5, 0xfffffffa, 0x8c0}}]}, {0x87, 0x6, "0dca4d0ec3f2cf147160ff338315913fd96807024f70472116a23878545b42c4f4ae946f3dcaf889d6df89b9f07add4405db4755ecdc7a93c916934d73b1a43baccdae1dd8e24667b7b3c18ec7328c2ad6062940115fa30078da1b03758aa02a0d6d7772ddafdf4248e844b7ea290048ef55061d95ac0b1c560a8f63e9e35ddaf06ada"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xf48, 0x9, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x6db, 0x401, 0x7, 0x5, 0x6b9}, 0x1f, 0x8, [{0xe73, 0x9, 0xfffffff9, 0x1ff, 0x10, 0x9}]}, [{0x2, 0x2, 0x4, 0xfff, 0x7fffffff, 0x4}, {0x100, 0xe7, 0x2, 0x10000, 0x9, 0x8}, {0x0, 0x7, 0x7fffffff, 0x2, 0x8}, {0x2, 0x0, 0x6, 0x1000000, 0x4, 0x7}, {0xfbdb, 0x2, 0xee0, 0x5, 0xfffffff9, 0x8}, {0x2, 0x0, 0x72a, 0x6, 0x937e, 0x88}, {0x90e3, 0x1, 0x2, 0xffff, 0x4, 0x4}, {0x9, 0x4, 0x4, 0x80000001, 0x8000, 0x9}, {0x35715e, 0x2, 0xfffffff1, 0xffff, 0x9, 0xfffffffe}, {0xd67, 0x1, 0x6, 0x0, 0x0, 0x1}, {0x0, 0x3ff, 0x8, 0x7fffffff, 0x44, 0x3}, {0x0, 0xfffffffa, 0x9, 0x5, 0x4, 0x7}, {0xffffffff, 0x4, 0x0, 0x5, 0x6a000000, 0xffffff81}, {0x5, 0x10000, 0xfffffffa, 0x2, 0x4, 0x7eff}, {0xffffffff, 0x4, 0xa, 0x3, 0x5, 0x9}, {0x976, 0x7, 0xfff, 0x2, 0x1, 0x2}, {0x3, 0x7, 0xb, 0xf1, 0x6, 0x3}, {0xa86, 0x0, 0x8, 0xa2d, 0xfffffffc, 0xfffffff7}, {0x8c01, 0x0, 0x2, 0x401, 0xfffffffc, 0x3}, {0x8, 0x101, 0x8, 0x8000, 0x800, 0x7ff}, {0x5, 0x5, 0x2, 0xb, 0x7, 0x4e}, {0x0, 0x8, 0xfff, 0x8, 0xfffff000, 0x100}, {0x1, 0xa7, 0x7836, 0xb, 0x44b, 0x6}, {0x4ec4cc72, 0x3, 0x40, 0x10, 0x0, 0x8000}, {0x3, 0x7ff, 0x8, 0x9, 0x5, 0x2}, {0x74, 0x3, 0x7, 0x1, 0x2, 0x4}, {0x3, 0x4, 0x2, 0x3, 0x48f, 0x7}, {0x3ff, 0x1fffc00, 0x8, 0xb9, 0x8, 0x2}, {0x0, 0x2, 0x4e43, 0x61a7, 0xe218, 0x58}, {0xfffffffa, 0x1, 0x5, 0x5, 0x800, 0x10000}, {0x28, 0x3, 0xd, 0x5, 0x40000000, 0x5}, {0x7ff, 0x6, 0x4, 0x6, 0xffff7fff, 0x2}, {0x7ff, 0x1, 0xb9, 0x8, 0x0, 0x7}, {0xf6, 0x1000, 0x4, 0x1, 0x0, 0x6}, {0x0, 0xcacc, 0x1, 0xdf, 0x0, 0x159}, {0x401, 0x5, 0x5, 0x0, 0x10, 0xe34}, {0x5, 0x93d7, 0x3ff, 0x494, 0x4, 0x6}, {0x5, 0xf, 0x0, 0x9, 0x9, 0x3}, {0x2, 0x6, 0x66b4658b, 0x342, 0x10000}, {0x6, 0x8b0b, 0x3, 0xc, 0x2a, 0x100}, {0xb, 0x7, 0x3, 0x9, 0x80, 0x6da00000}, {0x1, 0x238, 0x2, 0x5, 0x0, 0x8000}, {0x80, 0x5, 0x26, 0xe0f4, 0x10001, 0x4}, {0x5, 0x10001, 0xeb85, 0x4, 0x10001, 0x9}, {0x0, 0x7f, 0x9, 0x140, 0x7, 0x2}, {0x3, 0x10009, 0x2, 0xfff, 0x9, 0x4}, {0x2, 0x41141a06, 0x7f, 0x80000000, 0x9, 0x401}, {0x5, 0x7, 0x7ba8, 0x7fff, 0xcdfe, 0x6}, {0x2, 0x9b7, 0x9, 0x5, 0x7fffffff}, {0x9, 0xfffffff5, 0xffffff01, 0x7, 0xfffffffa, 0x1a2c66f7}, {0x833a, 0xfffffffe, 0x0, 0x7, 0x2, 0x2c0}, {0x1, 0x7, 0x7, 0x8000, 0x731253a0, 0xffffffff}, {0xe, 0x3, 0x2, 0x662, 0xa95, 0xd8f}, {0x1, 0x3, 0x3ff, 0x10000000, 0xdd, 0x101}, {0x7, 0x40, 0x10001, 0x3, 0x7, 0x4}, {0x22, 0x2, 0x1, 0x5, 0x5, 0x7}, {0x2, 0x800, 0xf, 0x3456, 0x7, 0x2}, {0xc52, 0x8ef5, 0x6, 0x5, 0xe, 0x3}, {0x5, 0x8, 0xe2, 0x1000, 0x7, 0xdbad}, {0x5, 0x7, 0x0, 0x1, 0x8}, {0x7e, 0x4, 0x9, 0xfff, 0x23f44c9f, 0x2100}, {0x8, 0x6, 0x9, 0x18, 0x2, 0x7ff}, {0x42, 0xff, 0x0, 0x0, 0x200, 0x6}, {0x3, 0x76b, 0x3, 0x7fff, 0xffffff98, 0x3}, {0x3, 0xfffffffc, 0x400, 0x9, 0x1, 0xb471305b}, {0x8, 0xe7, 0x0, 0x5, 0x9, 0xb37f}, {0x7, 0x5, 0x6, 0x5, 0x100, 0x7}, {0x8, 0x4, 0x94d, 0x8, 0xba}, {0x9, 0x6, 0x401, 0xb25, 0xb, 0x81}, {0x10, 0x8, 0x0, 0x101, 0x9, 0x7fffffff}, {0x2, 0x20000002, 0x8, 0xffff99e7, 0x6, 0xe7d7}, {0xa4, 0x80000001, 0x4, 0x5, 0x4, 0xb}, {0x7, 0x7, 0xfffffffe, 0x5, 0xffffffff, 0x7}, {0xab, 0x4, 0x4, 0x8, 0x10, 0x6}, {0x9, 0x9, 0x8, 0x3, 0x0, 0x3}, {0xc3, 0x7fb1, 0x9, 0x2e80452b, 0x8001, 0x9}, {0x1, 0x9, 0x1e, 0x4, 0x81, 0xa}, {0x80000001, 0x8, 0x3, 0x2, 0x5, 0x2}, {0xed60, 0x9, 0x7, 0x0, 0x7, 0x4}, {0x7, 0x101, 0x0, 0x8, 0x8, 0x7}, {0x3, 0x80000000, 0x10000000, 0x78c, 0x1ff, 0x7fff}, {0x4, 0x7, 0x3, 0x2, 0x4, 0xfffffff7}, {0x7, 0x2, 0x8, 0x800000, 0xd, 0x7}, {0x15, 0x8, 0x100, 0x8000, 0x6d, 0x9}, {0x8000, 0xc00000, 0x5, 0x6, 0x6, 0x8}, {0x9, 0x2, 0x6, 0x117, 0x6, 0x8e2}, {0x7, 0x80000001, 0x2, 0x6, 0x2, 0x851a}, {0x325, 0x5, 0x6, 0x1ff, 0xc, 0x745}, {0x2, 0x4, 0xff, 0xe18, 0x0, 0x7}, {0x6, 0xe, 0x2, 0x0, 0x4, 0x7}, {0x5, 0x8001, 0x9, 0x5, 0x7, 0x1ff}, {0xfffffffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x0, 0x3, 0x4, 0xf, 0x10, 0x200}, {0x8, 0x6, 0x1, 0x0, 0x9, 0x3ff}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x9}, {0x7fff, 0x7, 0xd71, 0x9, 0xa, 0x3}, {0x81, 0xf3, 0x1ff, 0x3ff, 0x7, 0x2}, {0x7ed971ae, 0x9, 0x4, 0x2, 0x5, 0x280}, {0xa0f, 0x9, 0x6, 0x3, 0x105f2, 0x8}, {0x3, 0x7f, 0x4, 0xff, 0x2, 0x7be7}, {0xfffffffe, 0x8282, 0x8, 0xf6, 0x2, 0x78}, {0x9, 0x7, 0x0, 0x401000, 0xb4, 0x8}, {0xfffffffc, 0x9, 0x1000, 0x4, 0x9a, 0x4}, {0x0, 0xfff, 0x1, 0x800, 0x4, 0xffffff00}, {0x1, 0xfffffff4, 0x4, 0x349, 0x318, 0x7}, {0x831d, 0x4, 0xd, 0x1, 0x1, 0x5d1}, {0x3e10, 0x0, 0x80000000, 0x846, 0xfffffff8, 0x1000005}, {0x7, 0x401, 0xffffff2a, 0x8, 0x1, 0x8ce2}, {0x2, 0xffffff80, 0x2, 0x7f48, 0x6, 0x1}, {0x1ff, 0xd6f6, 0x7fff, 0x8, 0xc30a, 0x1000000}, {0x2, 0x37, 0x2fdbc737, 0xf150, 0x8000, 0x3}, {0x2, 0x2, 0x9, 0x7ff, 0x2, 0x3}, {0x1, 0x8, 0xe96, 0x0, 0x42d6, 0x10}, {0xb895, 0x7fff, 0x3, 0x80, 0x8, 0x5}, {0xee7, 0x5, 0xf, 0x2, 0x48, 0xfff}, {0x6, 0x5, 0x8001, 0x0, 0x0, 0x8}, {0xfff, 0x1, 0xa652, 0x2, 0x9, 0x101}, {0x1, 0x1, 0x5, 0x0, 0x2, 0xc2cd}, {0x9, 0x3, 0x63, 0xa, 0x20000008, 0xe}, {0xacfd, 0x8, 0x2, 0x6, 0xf, 0x3}, {0x890, 0x6, 0x0, 0x1, 0x94e7, 0x1}, {0x8, 0x2, 0x3, 0x9, 0x2, 0xd}, {0x4, 0xf, 0xffffffff, 0xf37, 0x3, 0x81}, {0x4, 0x5, 0x0, 0x4247, 0x1, 0xa4}, {0xfffffffe, 0x3, 0x8, 0x20, 0x4, 0x1}, {0x200, 0x9e5f, 0xe, 0x4, 0x80000000, 0x6}, {0x7, 0x5, 0x0, 0x7, 0x80000000, 0x1}, {0x0, 0x8, 0x2, 0x6, 0x2, 0x7}], [{0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x4}, {0x5}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x3, 0x2c4e9e159ec0f894}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0xc, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3}, {0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}], 0x1}}]}, {0xe1, 0x6, "0723d5807156cbba5612fa786653d0c694a27d770d3a4f1d2c4a454db90c184a355275e944be6a58fcbf9c463978683bd9e54c3a7cdba11712892db508affa4bbdcf0b98e64e5f422529c09df93ab50ae08ee844b1bdbcdf6f561178951ecc69f1500e3f84269706e2e6372f6c41ea718ae9cec1e063e8f8a975499635eea01e2e286cc30f3f966d6f5ce6a6d49df3860a35b6985e190e32aa2cc0d619f44a06c82bd16f42817afa5cc636687b880fe007136c01487b7b94d4fbbd609d4b2754133747e279f4a1d75998c26f89e17877252254ae9e7eae63b2aaf0c8bb"}, {0xc}, {0xc}}}, @m_gact={0xb0, 0x8, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x95f, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2359, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x873, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x19ee}}]}, {0x51, 0x6, "ed7074ce256531330d1da2d8b9720519ef987ae565251f590a174e4b32ab626c3389272be4cc3b250234cd1be27f518a4cf22a1f36f909b6dc046cc9a080d01d81f881cce8ae5ab38218ec0288"}, {0xc, 0x7, {0x7b79a295601d5572}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x1c0, 0x16, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xf20, 0x0, 0x400, 0x7}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x367, 0x8, 0x10000000, 0xe5, 0x2}, @multicast1, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa444, 0x9c57, 0x6, 0x5, 0x9}, @multicast2, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x3, 0xffffffffdffffff3, 0x7fffffff, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xcd49b36cca686761, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff8000, 0x2, 0x10000000, 0x4, 0x401}, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x25}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x92, 0x20000000, 0x0, 0x800}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}]}, {0xa5, 0x6, "0328d50f960c56392afd7d4db068ae897b14375370177bb114ffe1dd39e8a14778cc4c1a7d8505d473e602ec5e2f8b04255295b92fcd1ac52305df56210c6f460e7438bdf8da79905a8d05fee2e3c377642977efe0cc6de6ff49c2e1e6a13ae559e1ab6d90a7bb1b2e99b6fac5032b193c41064477c0153bc869640547642c720ba476f08c9bdbb608b4a2c7b49df788c83fd9546fe8db4604f6bf1e2f054b6b75"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x274, 0x2, [@m_connmark={0xe8, 0x80e, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x9, 0x4, 0x9, 0x8}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x43, 0x9, 0x0, 0x101, 0x3}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40c, 0x7, 0x8, 0x696, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x6, 0x1, 0x5}, 0x2}}]}, {0x48, 0x6, "0f078723b381cb09a3ee884c4f05f3ba08c0b77a4385d613d77a2967de074168233e808d90b36a3b6970286121298f808d4bb77a5e9fe762c796cbd0e488a97a6a4c4541"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x68, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3ff}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x19, 0x6, "e822dd33e160e4fb94a6332a50ba45f7ec5745528d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x120, 0xd, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}]}, {0xd9, 0x6, "cde3bc5a9aa6e3831d889d9f9b001be1b4980e938f964dffe1d551d811095cee734a003c4085889dadf0ac7c52195036857adef8c3f2d600d4b44ba2c8f5b4b125da2c6c6fe9d60b177029432e36af1aa1c36d07ca338e6cfea5cdd93d04ffbadd22f91ef8160f2df9aecb23ce4eb9f7dc9da9cac89392b0844d90de68b573d5d8509fb812c8f5316794f370715ae5d924264a09d2ab52a47ad53e5d144e564ecbc7393129b23528566a5c0a16dfb5bde63025836a5a21f1a90180d5cd1684e253eb4f0de872d23b0067dabe6ea83e0feb98b3b905"}, {0xc}, {0xc, 0x8, {0x2, 0xe252acbc1cac37a1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x1804}, 0x1, 0x0, 0x0, 0x220008f8}, 0x800) getsockopt$inet6_tcp_int(r7, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='devlink_health_report\x00'}, 0x52) (rerun: 64) sendmsg$nl_xfrm(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c000000260003002abd7000ffdbdf25fe8000000000000000000000000000aa000004d602003300fc020000001f0000000000000000000000040000ff3400001c000400ffff4e224e2400007f00000100000000000000000000000010000a0025bd7000c722a07bc13228bd700000020000022f49f2040000000500"], 0x7c}, 0x1, 0x0, 0x0, 0x600c814}, 0x4000000) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060008060000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (async) r13 = socket$inet_udp(0x2, 0x2, 0x0) (async) r14 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r14, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r13, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r14, 0x111, 0x1, 0x0, &(0x7f0000000080)) 604.852325ms ago: executing program 2 (id=2838): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32], 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 559.599341ms ago: executing program 4 (id=2839): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x2, 0x2, 0x73) (async) r3 = socket$kcm(0x2, 0x2, 0x73) close(r3) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x80}}, 0x0) 532.852729ms ago: executing program 2 (id=2840): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'veth1_to_team\x00', @multicast}) 406.135343ms ago: executing program 0 (id=2841): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711247000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a31000000000800"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1}], 0x1, 0x8040010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x178}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@arp={0x806, @generic={0x5, 0x6004, 0x6, 0x10, 0x2, @broadcast, "86ad837b1535f34400000000bf890586", @multicast, "448d4c5a50e30d8fae25be7fdb78a43c"}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x1, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024"], 0x108}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYRESOCT=r1], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x10122, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="eed4b4f01a711099ca95404342da4978633e79caf19e4197139f98ce708b1f25e6f2a48c78b1e0223370df19a5019c667b116c9138bb204e5771d4447324e25c7b"], 0x7c}, 0x1, 0x0, 0x0, 0x240080c5}, 0x200400a2) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c0}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 405.938812ms ago: executing program 2 (id=2842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'batadv_slave_0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x2, 0x5, 0x2, 0xac19, 0x3, 0x800000}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r1, 0x1c614000) 282.999151ms ago: executing program 4 (id=2843): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x800, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "024000dc00"}}}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x20040000) 240.818652ms ago: executing program 2 (id=2844): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r2, 0x0, 0x21, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 78.347081ms ago: executing program 4 (id=2845): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000022c0)="2c2b74fddbc858e42edcd12037e5751c680f2e3099edf8f9d5a3a3e83d9a78c4b9e8c4324c327477723fc69642803d0ed4f42e83d068a0cbe1038c574676809bcd3eb9c8abe84cf07e74bc76c679f56293ca909551c6bc396200608271a4cc09e0c90c686fe2d3b5ecbcffbcde51f51ef184793dccaa40c9a0edc00a09274506ec60853df9ca40b59166853c6019bd046e19", 0x92}, {&(0x7f0000003cc0)="d815e2824b383e261b12ce3a276e935d9986635f19c4b0948ee16149f775c7e07f69d10707f39808df56bb79714ecd16b02c599a348b6710a7ace4b076f60b38de91432fc21315ff8424db7d2154f90a5d3905406ec9917ed492ce25009fb11319a03b0ca1dbcde7b8b727d1923f8a6ebdac05c5e63f7555904e28f84a5af5a79036eb141e2cee5802fd9b6db3fd6f787832ce5d7f1763be7751c54ff6a16b25f62dfd73d961869a40ce5c4a7546917e1706ffbbca7627c5793c5a4671ff7703e3a5cd20719c366b6c940f47f8db42ee7e5330ce31bb58357fa076bc9471149ee9e293ed5336414c91d8be4c65badab4a4f7511c1f6d5155d6a40d71524441c99188b3364863f3b4279677e0bd70f6d23ab55f2383901d8fee5e7bee380c113c2a03267a953020764fe8e2cb76e2eca0e51bf8314e20f5e947e4bc47e5c1a549b55311c0bdbed1d4da4af4682373556df0e4f45e297f66e09a0e38e61b5882f225ce59d604c2dd68414eb4748d8d3cd768a0313583c65da303a15c64333a5405f629ca5b9bb6bdbfad550e5d9fde4c4bc710f1ee77eaf2273740c80ac59aa93b78c5550737186cf63ccc4f6a794e27e455829cf79ce9db4e3f0316ad3ac19c55c464a4d7a68ada9aaa0b6885ba6edb3f5bc8d3aaf191d31be189fc1e76297430e67828d3711af9f2ad445a5e80c6bd47126054d2b3ea79c289a0acb37ae88b425470d955a877b4c8d571714b2a1bf02a16810628f3be2a6caa892a427152c2bd8e74175f840501c25cf73e44fba17cf310dfefe279520f726b6dd96644b4ae97e1afbbe6f2592a1d2e4dd01dcc23bb708a6ae57746f91eea92dfb90d43d6a82e83d3663f9768a682f269486054aeb61c78892d739ab4566c49a297abe9556ebb4139a838281bce3cf9be1bceb3005004314fc3ffe703c7656c92058453aa162add0a40b3018cea774b12bee95fbfa507757d06c3d1c89741890bf250092a624185908f3ed369d0930667d5a9ecc52f5a01ca2a8b171ce06be9d204b3e0af166b7546dcf1d7e0e9d5197cf6b01ce5a2ed62b4d5a8ead5d8704373935100ececb3750fd42d343984ba90e6ea22f90c67a248532ba4cbd03c2d042fb7e34aa11ed3cfe3a177c429299600b9d1231db4414110be42481bdd3a8162d2b4d3b5104065d5a4cd4319bb9fa04a29b93f211f68538e33cbdb5443ae01c13bbe23620eec4cf83ea12ddb39ad468109c0777e39a8e2e3e2f7ead0b5f894e06d58816c66ebe01f9e03c3a4bb2aa5542b6e0e8ed6f653d73a6bf7591d041621b606018f594a0657421081bdb8d8a2b060fa28f7a817070fd1696933686c858584f8d942e2b1cad5ce530a85ae30d8903d7f7fdd4602cbe2b6c61304300dd43562cc08e341ca2583cc25c642d5db8dc0f72fa3912dfadd7c663554dcc9072015e187bc4ac6211ab2b8bc0cc157cc143d93dd0d9f27d04136120770161088c4bda79324e395622b07ed2bd22ea56be7396db5725125e0799ba28e920897440b1ffdd8474c92e527b93991b46214d0e8c5bd30359a735853c62977812e927d2841f7dc3427ad61bdc368887452080c84723387e83e523802cdff6694eb05a658cfab4b31ca41f73757fa417cefd277548c1fb25423e959fbc00f817c15b32d96132e92b2c33c6dd70293215e51843a3363f1d3d3244ac9d5713dba567adba36a81696e3dfe9fd69ada751101d2daeb5fefcee44d87f8fe29530341eebfdc1b797b28e968d54b0143058aeeee2fd36d069351307f093445fb7547cb0dc90a3a4820c67b824ea857d7e8bc1a37e0c6405333d3cbe77befcd9697b87b8dd45899551f2fe3e737026855d2c650dadae7a48f2b925080e913f064f5327942ee0e1154b93e209621689156c078946572f26c5e8715adf42def7f48dc8ee27c8a3a84145c580e30218626ce639b56abbbb24d0d0f2b1ad6408e50aa11ef0c53448f3610b42a16d28a5d2507e56e762abe159ca712a1cf69e50b8207f69a425c592a53da2641f26864634e2e9f8d529a37b45478bfcc6db4d22c90fc0ace6e75a20085fc6f221536e11097c113126a96902821247341e1ed77a782ba7dd160e1b6ca6fcbcc474f50b372d81ec856c6e6a9ea8170a5e937773fcc9ed97e7082480c34e98ebd9952c0d8543a9d3e85c889c5a1aceaa81aee732b66af67a952254ea04d4cc6d72cac0dc92cbaa365eac3013c053029939eafc02d3acd4a0c98d9540be7bbd9f1f79b34c2b43874301bf8bb18ca9cd14ce9e1b2c31c460dbdf6cc702f7a13823f0fd2f8ba4e093100989ba3d4564fc1a73965ae58f2c85de06a0c6dbb43760ab5a34ffe6ba2ba57983cc13af9af76707d6a9d67f86ad7c1aa73017fc10320bca4eae81bfbcb333b41884fa5702912189757768cdbbdb61558170f802db4dd95709c01956133e953649342c07eae84f82ff70b54881a1364c179a7569c3780f1d0bf73ab2e6eded9b4be4d4fb42d1efbea7e9c733a0c6e982d49d3dc9ad780949e379cfab4aca3a16c9fcfd3cc47674c80916d770ba12aacdaf8db4365690b2d541758ed1202018adcbb53f7288bac3b94bb793405c8550da7a7d983dd577eac527c07840b2f7ed2d5fa87082778ee4e2b2277a56807afadbbfc28c1c55312bc97c76c305a1bf42fc9d72ead3770cd47560af64de888e4a1ea7b2670fc6dac6ef08a219db1c1489b233045e6545fd2a29d052439115c07af8a117fb0490a0430ae9e00bed089c197393ed974722e61a8d152df160b7a130fca2304d9e0f53d6e71a6889813028b19b0afc2ca337ac2edc18a724224b1defa4270e6874fb4be392245c995b1ae22f9d337a4666b38de92929f2859b6b176d473f71aa7790707453ddde600d6893b0e267fe40b91ef5040610ceb6e2744a9ae6fda1471d35143d76e95c74f88a2633dbf448f6c6b878d7f6f3504d09495bd7e5b3c9c0ac298577983e40c2ca7dee61d646d8d826d5ec7249589f34650aa08fc435843933c1007ace87de34ff9a3a5ed338486ee62713ebbd7863a98960a829d81ef26cefb8336a5730317c079a22c4a8cae7d62762d963f0d9f4b4ed87e0b5434fc8451ce1039c49a393ae6ed4ad037ca83cd977be5dc50199050c3db16967e8e06af08ee86b1a0b7a44b996415ac13a866c7d8302fb6e4a8d754e08adc5f6b84bc1c7e0da98577901189dee5de09773704abe037c6243ca3bfadc100886fcc6dd5b766698cf4837d7bbb2424e9ecb75cc39d8bd18c209f9db36ac2bd8d9e9325360011bf6f85c1dd63a24da210970e41b29b9220584a72ce79e94f699b0724b7679a2ba3eb785d3ee2e1333f736f713ca98c5137e09442f71f57463915771367374a275aeef3665b3184a7f3f44b749c132c0fdaa45d873d55f5eff1244f7fe60fc7eb576e9f92d330734d9a97945e58d5e74f5aa8bfca61ec371d89cfafd3f165315ab9f5d9e9bc1524577d5651e14fbb05abc9bd5f64e711dea2ed9df88c34f34493ea8ea2731885c0abdecf456056bcb4e678bccd07abaef1332249b6968fced7c345dc9ea76fc97506a1d378839bcaa371dde04c237db44a9a3aec8d9389b6b5f4eb3cf6d3daa37e7d4ac11fa90b46492994cb34c6d65c92c69e37f9b7db619c7d800efa9246254b7dc449a64f42e800338c825c464c50a5c6fe800bda7f2839ea47de916cb7970f9afe8c94da5c5bcd0664827e0bfd673b97e4b547e369575106583f26d11fde202dcf75249e934b42db16ab2f557347a0abec9da3bb4fb08400611d7bcc1d04a47d9155610fc4767b3272e5ed0fc8d80108e35715ef9bf5dfa9e7b12143af6d19dffb6fed14417ee89fb981196f72af5c75018553953a924f42bcd16948e2cb61d846928b2b10bbe1a705284a79f9531d56b5606dc74f7c8baf6aaf61400ac36e6ad64e9342440c304df1dc1cac47ba174d84ad27ac80201b718216a5e65cb79a38e50b245816564e30dac78c10632b665a93e140aeb0ba4f37af456cec6a21f5f6db4a4ba21ea239ccad37f3a36a9b05d65a24b42b0c5f660edd12faec57d52e8aa407f843df2a0971b16c1b352c64580f226e5801b014c137935906fb87b88b5f81d16da4a607e3229379dfc3848aa1debb6e094ad4945c024a9b6c0cb9159442bc84abe56dea43a458ab904a4606540e19997a19765fa11e1eeb422cf2a90b407c52c952992846178a7bf4186206b453f57383544c8ba6438eade775a1f75750694dfaefa866a229e61958a69dd7ba52fc9612713ad7a63916a4bb1daa6da0b8ee49bfc69c37cce5572a79c22d42e0f73a862284a87667ea42cac5d8c16c1195a4d68f776885cbe42fe17b8cf83b5a88d5dd97594b5be938be7d3aa49523d64429d941966a64a1c7f47d4d179a5c55184092e1da71f5667fa94cde636cdfa1a7aad2a74ff5afd044ee2a3577a0a2706977329b81f9941ff4ada83ff6d8abe2a3d142176448f93e5602c820dc57197e2a977b894805428563318e0c25e8d008652762bd4c32d4c7e985a6e2b85c5edb93c3c85e2a0ea7d58b83ea1848e255a1529aad74d675436605a19cf640932d41f0f6c43533a9eb2f9f57b14c14f7833484c91911179f8e67bceebd035abc41a243ed0c0949a02d66044762e675ab42554ca75ea5d6e7b50a181e03b484f5ab76831004395bbb7ce1b496786d28304721dc67279a64039016206b5b3938881ee1131bf86cc90ab8c788b6982a5d575913a11a6009a7142d03ee6109f734f7b37a8ba596a09113f5140c7655bd58da09c62c67d3d426e7a242575cc5f8261d842d2654d27f27701021535a9310922f3bda55749b8ab2d747c4fabb39b8a3213f05758411f1c71e9730ee9c6eb48bfe4d105a75e21da7eb3f0f329b253176c0eea7628adb8dc9ab99e2a5fb7f93398d8be9809bbb0b3d55171886f89f1f45ad3b64c4c0f3af24eb367af95fa7987ef81f8dc2c16368db3a8d0dc2193674d19e9861eff2d264e5abfc91b1585acabc7051835fc898f17634e4d2bfb0d7ac2c7cff516ee521771b3689d42803612fa62e01ebf3d6da56d38302936b2f8a91d02fe49a1750eb7be6f0a9d3a4cd53d0da2fe06e4b6115e71430ace1aea20e3fc83412ab10372dd2437fba6619931d26a1a2986c68d5645d3dc8dfdb6b36f018eb9abb0101b289587d9d4e8c8522229eba922f19d2fce349e8ad3bf55035d52009cd8ac3af330bf4d60ec1808377f6de4ec6f8842f4fc6a75c2cc05f246be9854fe7546550ec57bd8e9d52bfb87f79889e5561955235322b83797cddd1cf31f733dbfef560b2373c05d2740cc52e3895f8f18fde3607d857f71d298d7dc17f83ef97774a253d4bac6e1ec0f03f50255c5da2a6fe8851b01e96ba73e616583b13271a4be5462726c3ff1d096f56a9c81f8e811e52ec1b59f8ec5f9c8f76c5faa1c3d46ff1e2b70b0d00beb3a2ea1c7c9e89536469633161021b755766c262d0ae8d1cd2245b576a5f884297b129108884ea0b895e536edd04baf989d3841c47a11c4d191c7c6c0ebf18b9aa9472e4a4194832bc9768284dee5b0eb36ff8e15c5a27d9734234ca68", 0xf6e}], 0x2, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000000000001701000004000000fcffffff00000000180000000000000017010000030000000100000000000000e0000000"], 0x110, 0x4000}], 0x1, 0x8081) recvmmsg(r4, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) close(0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140), 0x4) getsockopt$packet_int(r8, 0x107, 0x12, 0x0, &(0x7f0000000240)) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea30683bc4a506cf756740574b88d396af9b596387005002e0ccb26a568000005006f88d6e1db9b2bf7cbfa3c"]}, @nested={0x120, 0x6, 0x0, 0x1, [@typed={0x119, 0x0, 0x0, 0x0, @binary="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"}]}]}, 0x184}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) 44.300803ms ago: executing program 2 (id=2846): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}}, 0x18}}, 0x0) (async) socket(0x9, 0x80000, 0x0) (async) close(0x3) 0s ago: executing program 4 (id=2847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "ce5372decb429500", "35132a6cab22a75fb6d142af2e91c929", "2d991dce", "d2b4b7ec6294ee86"}, 0x28) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x1, 0x3, 0x4115, 0xe}, &(0x7f0000000140)=0x14) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close(r0) kernel console output (not intermixed with test programs): ly 0 port 19999 - 0 [ 96.813900][ T6878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.254'. [ 96.852930][ T6867] tipc: Disabling bearer [ 96.891693][ T6884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.906239][ T6884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.612283][ T6919] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.264'. [ 97.633484][ T6919] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 97.692958][ T6928] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 97.730759][ T6918] netlink: 56 bytes leftover after parsing attributes in process `syz.4.264'. [ 97.743392][ T6928] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 97.744786][ T6930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.996238][ T6945] sctp: [Deprecated]: syz.1.272 (pid 6945) Use of int in maxseg socket option. [ 97.996238][ T6945] Use struct sctp_assoc_value instead [ 98.323090][ T6959] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 98.332503][ T6959] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 101.156488][ T6965] netlink: 356 bytes leftover after parsing attributes in process `syz.0.277'. [ 101.174851][ T6967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.042782][ T7002] IPv4: Oversized IP packet from 127.202.26.0 [ 102.224963][ T10] IPVS: starting estimator thread 0... [ 102.234860][ T7021] IPVS: ip_vs_edit_dest(): server weight less than zero [ 102.249623][ T7022] IPVS: ip_vs_edit_dest(): server weight less than zero [ 102.338132][ T7023] IPVS: using max 34 ests per chain, 81600 per kthread [ 102.515951][ T7039] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 102.799981][ T7052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.273794][ T7063] netlink: 52 bytes leftover after parsing attributes in process `syz.1.304'. [ 103.470852][ T7093] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 103.737234][ T7123] IPVS: set_ctl: invalid protocol: 135 172.30.1.4:20001 [ 103.750529][ T10] IPVS: starting estimator thread 0... [ 103.837008][ T7125] IPVS: using max 34 ests per chain, 81600 per kthread [ 103.850709][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 103.877186][ T7127] bridge_slave_0: left allmulticast mode [ 103.884456][ T7127] bridge_slave_0: left promiscuous mode [ 103.892994][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.279021][ T7162] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 104.383963][ T7171] Bluetooth: MGMT ver 1.23 [ 104.414244][ T7165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.425854][ T7165] bond1: (slave bond2): making interface the new active one [ 104.435186][ T7165] bond1: (slave bond2): Enslaving as an active interface with an up link [ 104.489216][ T7162] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 104.502150][ T7162] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 104.699929][ T7192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'. [ 104.715869][ T7186] netlink: 'syz.4.336': attribute type 1 has an invalid length. [ 104.723898][ T7186] netlink: 180 bytes leftover after parsing attributes in process `syz.4.336'. [ 104.739315][ T7190] netlink: 156 bytes leftover after parsing attributes in process `syz.2.338'. [ 104.749173][ T7190] netlink: 156 bytes leftover after parsing attributes in process `syz.2.338'. [ 104.759968][ T7192] netlink: 248 bytes leftover after parsing attributes in process `syz.1.335'. [ 104.762365][ T7198] netlink: 156 bytes leftover after parsing attributes in process `syz.2.338'. [ 104.780043][ T7198] netlink: 156 bytes leftover after parsing attributes in process `syz.2.338'. [ 105.079738][ T10] hid (null): unknown global tag 0xd [ 105.085232][ T10] hid (null): unknown global tag 0xc [ 105.100097][ T10] hid (null): unknown global tag 0xe [ 105.105637][ T10] hid (null): report_id 364765932 is invalid [ 105.112610][ T10] hid (null): unknown global tag 0x26 [ 105.129974][ T10] hid-generic 0005:0004:000F.0001: unknown main item tag 0x6 [ 105.138256][ T10] hid-generic 0005:0004:000F.0001: unexpected long global item [ 105.146602][ T10] hid-generic 0005:0004:000F.0001: probe with driver hid-generic failed with error -22 [ 105.350147][ T7229] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 105.830634][ T7275] netlink: 'syz.4.361': attribute type 2 has an invalid length. [ 106.454421][ T30] audit: type=1107 audit(1757104379.627:4): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 106.457489][ T7314] __nla_validate_parse: 5 callbacks suppressed [ 106.457506][ T7314] netlink: 135056 bytes leftover after parsing attributes in process `syz.2.374'. [ 106.560878][ T7317] netlink: 'syz.0.376': attribute type 11 has an invalid length. [ 106.574591][ T7314] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 106.586716][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.374'. [ 106.674358][ T7322] : entered promiscuous mode [ 106.911273][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 107.121954][ T7350] netlink: 'syz.2.389': attribute type 3 has an invalid length. [ 107.134814][ T7350] netlink: 32 bytes leftover after parsing attributes in process `syz.2.389'. [ 107.145824][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 107.350990][ T7366] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 107.362217][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 107.378986][ T7365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.396'. [ 107.547729][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 107.641971][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 107.657028][ T7381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.400'. [ 107.755487][ T7389] sch_fq: defrate 0 ignored. [ 107.816667][ T7394] tipc: Enabling of bearer rejected, failed to enable media [ 107.885113][ T2991] wlan0: Trigger new scan to find an IBSS to join [ 108.241786][ T7424] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 108.607158][ T7445] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 109.112870][ T7500] netlink: 'syz.1.433': attribute type 12 has an invalid length. [ 109.129399][ T7500] netlink: 'syz.1.433': attribute type 11 has an invalid length. [ 109.692680][ T7536] syzkaller0: entered promiscuous mode [ 109.710394][ T7536] syzkaller0: entered allmulticast mode [ 109.892248][ T7546] veth0_to_team: entered promiscuous mode [ 109.899447][ T7546] veth0_to_team: entered allmulticast mode [ 110.545083][ T7603] syzkaller0: entered promiscuous mode [ 110.553023][ T7603] syzkaller0: entered allmulticast mode [ 110.580618][ T7603] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 110.820604][ T7624] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 110.838503][ T5187] Bluetooth: hci4: command 0x0405 tx timeout [ 110.839009][ T7624] netlink: 'syz.0.468': attribute type 3 has an invalid length. [ 110.854760][ T3031] wlan0: Trigger new scan to find an IBSS to join [ 110.867665][ T13] wlan1: Trigger new scan to find an IBSS to join [ 110.985279][ T7629] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 110.993363][ T7630] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 111.165017][ T7637] bond2 (unregistering): Released all slaves [ 111.174464][ T7644] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 111.217747][ T7644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.240001][ T7639] tipc: Started in network mode [ 111.245063][ T7639] tipc: Node identity 5e6e940ee686, cluster identity 4711 [ 111.254065][ T7639] tipc: Enabled bearer , priority 0 [ 111.260326][ T7646] netlink: 'syz.0.476': attribute type 33 has an invalid length. [ 111.305217][ T7639] syzkaller0: entered promiscuous mode [ 111.310835][ T7639] syzkaller0: entered allmulticast mode [ 111.318420][ T7639] tipc: Resetting bearer [ 111.350085][ T7644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.357817][ T7644] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 111.382885][ T7644] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 111.461993][ T7658] veth3: entered promiscuous mode [ 111.476468][ T7658] bond1: (slave veth3): Enslaving as an active interface with a down link [ 111.499788][ T7656] vlan2: entered allmulticast mode [ 111.509185][ T7656] bond1: entered allmulticast mode [ 111.564050][ T7638] tipc: Resetting bearer [ 112.280650][ T9] tipc: Node number set to 3102249998 [ 112.965075][ T7638] tipc: Disabling bearer [ 112.982805][ T7670] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 113.841683][ T7745] __nla_validate_parse: 34 callbacks suppressed [ 113.841701][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.500'. [ 113.875975][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.500'. [ 113.877761][ T69] wlan0: Trigger new scan to find an IBSS to join [ 113.886797][ T2949] wlan1: Trigger new scan to find an IBSS to join [ 113.972148][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.501'. [ 113.985794][ T7752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.501'. [ 114.001666][ T7755] team0: Device ip6gre1 is of different type [ 114.009184][ T7753] openvswitch: netlink: Message has -1 unknown bytes. [ 114.273321][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.510'. [ 114.319883][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.349119][ T7783] netlink: 'syz.4.512': attribute type 2 has an invalid length. [ 114.368799][ T7783] netlink: 119 bytes leftover after parsing attributes in process `syz.4.512'. [ 114.493673][ T7795] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 114.603201][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 114.615324][ T7803] netlink: 176 bytes leftover after parsing attributes in process `syz.1.519'. [ 114.632409][ T7803] netlink: 'syz.1.519': attribute type 5 has an invalid length. [ 114.644963][ T7803] syzkaller1: entered promiscuous mode [ 114.651094][ T7803] syzkaller1: entered allmulticast mode [ 114.784887][ T7815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.803559][ T7816] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 114.824779][ T7815] tipc: Enabled bearer , priority 0 [ 114.833086][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.835001][ T7815] syzkaller0: entered promiscuous mode [ 114.846791][ T7815] syzkaller0: entered allmulticast mode [ 114.867029][ T7815] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 114.886678][ T7815] tipc: Resetting bearer [ 114.925814][ T7814] tipc: Resetting bearer [ 114.972429][ T7814] tipc: Disabling bearer [ 116.838831][ T2949] wlan1: Creating new IBSS network, BSSID da:c4:6a:09:9b:04 [ 132.840446][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.912755][ T69] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 144.913310][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.078907][ T7837] netlink: 'syz.0.528': attribute type 83 has an invalid length. [ 169.129811][ T7841] dvmrp0: entered allmulticast mode [ 169.219328][ T7851] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 169.227308][ T7851] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 169.930139][ T7872] tipc: Enabled bearer , priority 0 [ 169.948591][ T7874] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.539'. [ 170.071868][ T7872] syzkaller0: entered promiscuous mode [ 170.086531][ T7872] syzkaller0: entered allmulticast mode [ 170.093145][ T7872] tipc: Resetting bearer [ 170.139357][ T7887] openvswitch: netlink: IP tunnel dst address not specified [ 170.150276][ T7871] tipc: Resetting bearer [ 170.997229][ T5931] tipc: Node number set to 4283031512 [ 171.506226][ T7871] tipc: Disabling bearer [ 172.155177][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 172.179653][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 172.485263][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 172.747158][ T7978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.562'. [ 172.813752][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 172.835369][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 172.844975][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.567'. [ 172.897387][ T13] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.906103][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.940847][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.952076][ T7990] netlink: 'syz.2.568': attribute type 10 has an invalid length. [ 172.961709][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.046303][ T7990] team0: Port device dummy0 added [ 173.096845][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.570'. [ 173.142387][ T8001] syzkaller0: entered promiscuous mode [ 173.148844][ T8001] syzkaller0: entered allmulticast mode [ 173.192106][ T7992] netlink: 'syz.4.570': attribute type 5 has an invalid length. [ 173.289031][ T8005] ip6gre2: entered allmulticast mode [ 173.598634][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 173.613218][ T8021] xfrm1: entered promiscuous mode [ 173.630997][ T8021] xfrm1: entered allmulticast mode [ 174.153630][ T8054] netlink: 'syz.3.585': attribute type 4 has an invalid length. [ 174.654691][ T8088] 8021q: VLANs not supported on tunl0 [ 174.774563][ T8093] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 174.807112][ T8093] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 175.191073][ T8125] veth0: entered promiscuous mode [ 175.293505][ T8129] __nla_validate_parse: 5 callbacks suppressed [ 175.293525][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.604'. [ 175.445601][ T8124] veth0: left promiscuous mode [ 175.574754][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 175.621479][ T8145] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 175.647041][ T8145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.686317][ T8148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.792090][ T8162] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 175.837555][ T1155] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 175.839707][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 175.918271][ T8169] netlink: 32 bytes leftover after parsing attributes in process `syz.1.616'. [ 175.985044][ T8172] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 176.016749][ T8173] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 176.027062][ T8172] netlink: 224 bytes leftover after parsing attributes in process `syz.0.618'. [ 176.036305][ T8173] netlink: 224 bytes leftover after parsing attributes in process `syz.0.618'. [ 176.166063][ T8177] netlink: 'syz.0.620': attribute type 12 has an invalid length. [ 176.481364][ T8197] sch_fq: defrate 0 ignored. [ 176.488726][ T8198] sch_fq: defrate 0 ignored. [ 176.508867][ T8196] netlink: 'syz.4.626': attribute type 4 has an invalid length. [ 176.620983][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 176.793943][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 176.894602][ T8232] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 176.930652][ T8218] block nbd0: server does not support multiple connections per device. [ 176.960132][ T8218] block nbd0: shutting down sockets [ 177.022095][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.640'. [ 177.112839][ T8247] tipc: Enabling of bearer rejected, failed to enable media [ 177.214773][ T8251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.644'. [ 177.216104][ T8257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.648'. [ 177.313663][ T8257] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 177.871232][ T8299] netlink: 'syz.1.660': attribute type 2 has an invalid length. [ 177.942098][ T8306] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 177.989912][ T8305] netlink: 'syz.3.661': attribute type 5 has an invalid length. [ 178.393097][ T8337] netlink: 'syz.3.671': attribute type 10 has an invalid length. [ 178.443044][ T8337] team0: Port device dummy0 added [ 178.738109][ T8364] bridge_slave_1: left allmulticast mode [ 178.759728][ T8364] bridge_slave_1: left promiscuous mode [ 178.765558][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.828180][ T8364] bridge_slave_0: left allmulticast mode [ 178.847615][ T8364] bridge_slave_0: left promiscuous mode [ 178.861273][ T8370] can: request_module (can-proto-5) failed. [ 178.870264][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.115890][ T8403] tipc: Started in network mode [ 179.130028][ T8403] tipc: Node identity 5ed749ba10de, cluster identity 4711 [ 179.138216][ T8403] tipc: Enabled bearer , priority 0 [ 179.178063][ T8397] geneve2: entered promiscuous mode [ 179.189827][ T8397] geneve2: entered allmulticast mode [ 179.198884][ T8403] syzkaller0: entered promiscuous mode [ 179.206245][ T8403] syzkaller0: entered allmulticast mode [ 179.214883][ T2949] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 179.253198][ T2949] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 179.289986][ T8403] tipc: Resetting bearer [ 179.299454][ T2949] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 179.324681][ T2949] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 179.354530][ T8401] tipc: Resetting bearer [ 179.386096][ T8401] tipc: Disabling bearer [ 179.403304][ T8409] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zë' [ 179.415847][ T8409] CPU: 1 UID: 0 PID: 8409 Comm: syz.0.691 Not tainted syzkaller #0 PREEMPT(full) [ 179.415869][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.415885][ T8409] Call Trace: [ 179.415893][ T8409] [ 179.415901][ T8409] dump_stack_lvl+0x189/0x250 [ 179.415935][ T8409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.415955][ T8409] ? __pfx__printk+0x10/0x10 [ 179.415979][ T8409] ? kernfs_path_from_node+0x2f/0x290 [ 179.415997][ T8409] ? kernfs_path_from_node+0x250/0x290 [ 179.416012][ T8409] ? kernfs_path_from_node+0x2f/0x290 [ 179.416032][ T8409] sysfs_warn_dup+0x8e/0xa0 [ 179.416050][ T8409] sysfs_do_create_link_sd+0xc0/0x110 [ 179.416069][ T8409] device_add_class_symlinks+0x1cf/0x240 [ 179.416091][ T8409] device_add+0x475/0xb50 [ 179.416111][ T8409] wiphy_register+0x1ba6/0x28d0 [ 179.416148][ T8409] ? __pfx_wiphy_register+0x10/0x10 [ 179.416167][ T8409] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 179.416194][ T8409] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 179.416217][ T8409] ieee80211_register_hw+0x3484/0x4100 [ 179.416251][ T8409] ? ieee80211_register_hw+0x1471/0x4100 [ 179.416280][ T8409] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 179.416302][ T8409] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 179.416329][ T8409] ? __hrtimer_setup+0x187/0x210 [ 179.416345][ T8409] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 179.416369][ T8409] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 179.416418][ T8409] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 179.416436][ T8409] ? trace_kmalloc+0x1f/0xd0 [ 179.416453][ T8409] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 179.416473][ T8409] ? kstrndup+0xbf/0x160 [ 179.416500][ T8409] hwsim_new_radio_nl+0xea4/0x1b10 [ 179.416522][ T8409] ? __pfx___nla_validate_parse+0x10/0x10 [ 179.416584][ T8409] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 179.416617][ T8409] ? __nla_parse+0x40/0x60 [ 179.416643][ T8409] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 179.416673][ T8409] genl_family_rcv_msg_doit+0x215/0x300 [ 179.416702][ T8418] nftables ruleset with unbound set [ 179.416699][ T8409] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 179.416730][ T8409] ? bpf_lsm_capable+0x9/0x20 [ 179.416746][ T8409] ? security_capable+0x7e/0x2e0 [ 179.416771][ T8409] genl_rcv_msg+0x60e/0x790 [ 179.416796][ T8409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.416813][ T8409] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 179.416853][ T8409] netlink_rcv_skb+0x208/0x470 [ 179.416873][ T8409] ? __lock_acquire+0xab9/0xd20 [ 179.416894][ T8409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.416914][ T8409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.416957][ T8409] ? down_read+0x1ad/0x2e0 [ 179.416977][ T8409] genl_rcv+0x28/0x40 [ 179.416993][ T8409] netlink_unicast+0x82f/0x9e0 [ 179.417024][ T8409] ? __pfx_netlink_unicast+0x10/0x10 [ 179.417046][ T8409] ? netlink_sendmsg+0x642/0xb30 [ 179.417060][ T8409] ? skb_put+0x11b/0x210 [ 179.417081][ T8409] netlink_sendmsg+0x805/0xb30 [ 179.417107][ T8409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.417126][ T8409] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.417144][ T8409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.417161][ T8409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.417178][ T8409] __sock_sendmsg+0x219/0x270 [ 179.417202][ T8409] ____sys_sendmsg+0x505/0x830 [ 179.417226][ T8409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.417253][ T8409] ? import_iovec+0x74/0xa0 [ 179.417277][ T8409] ___sys_sendmsg+0x21f/0x2a0 [ 179.417297][ T8409] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.417354][ T8409] ? __fget_files+0x2a/0x420 [ 179.417367][ T8409] ? __fget_files+0x3a0/0x420 [ 179.417394][ T8409] __x64_sys_sendmsg+0x19b/0x260 [ 179.417415][ T8409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.417445][ T8409] ? rcu_is_watching+0x15/0xb0 [ 179.417467][ T8409] ? do_syscall_64+0xbe/0x3b0 [ 179.417495][ T8409] do_syscall_64+0xfa/0x3b0 [ 179.417510][ T8409] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.417531][ T8409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.417547][ T8409] ? clear_bhb_loop+0x60/0xb0 [ 179.417574][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.417590][ T8409] RIP: 0033:0x7f6a6c58ebe9 [ 179.417619][ T8409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.417632][ T8409] RSP: 002b:00007f6a6d4db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.417652][ T8409] RAX: ffffffffffffffda RBX: 00007f6a6c7c5fa0 RCX: 00007f6a6c58ebe9 [ 179.417664][ T8409] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 179.417673][ T8409] RBP: 00007f6a6c611e19 R08: 0000000000000000 R09: 0000000000000000 [ 179.417683][ T8409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.417693][ T8409] R13: 00007f6a6c7c6038 R14: 00007f6a6c7c5fa0 R15: 00007fffe5ca78e8 [ 179.417722][ T8409] [ 180.059227][ T8448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.311035][ T8466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.465000][ T8475] tipc: Enabled bearer , priority 0 [ 180.491067][ T8479] veth0: entered promiscuous mode [ 180.590063][ T8475] syzkaller0: entered promiscuous mode [ 180.595592][ T8475] syzkaller0: entered allmulticast mode [ 180.620073][ T8493] __nla_validate_parse: 14 callbacks suppressed [ 180.620091][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'. [ 180.640203][ T8477] veth0: left promiscuous mode [ 180.753532][ T8473] tipc: Resetting bearer [ 180.816174][ T8508] netlink: 'syz.2.720': attribute type 24 has an invalid length. [ 182.009551][ T8473] tipc: Disabling bearer [ 182.020084][ T8506] macvtap0: mtu less than device minimum [ 182.228893][ T8531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.726'. [ 182.315650][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 182.406759][ T8535] macvlan0: entered promiscuous mode [ 182.431173][ T8535] macvlan0: entered allmulticast mode [ 182.436750][ T8545] netlink: 'syz.4.731': attribute type 32 has an invalid length. [ 182.438277][ T8535] bond1: entered promiscuous mode [ 182.450679][ T8535] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 182.461739][ T8535] bond1: left promiscuous mode [ 182.542620][ T8554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.731'. [ 182.585441][ T8554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.731'. [ 182.704125][ T8561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.733874][ T8564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.940367][ T8580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.739'. [ 182.955509][ T8582] netlink: 232 bytes leftover after parsing attributes in process `syz.0.736'. [ 182.960013][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.739'. [ 183.014901][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 183.042572][ T8583] team0: Port device dummy0 removed [ 183.171175][ T8591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.742'. [ 183.640856][ T8611] netlink: 'syz.2.750': attribute type 10 has an invalid length. [ 183.662475][ T8611] tipc: Cannot configure node identity twice [ 184.381297][ T8664] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 184.504226][ T8666] syzkaller0: entered promiscuous mode [ 184.514502][ T8666] syzkaller0: entered allmulticast mode [ 184.533313][ T8670] tipc: Enabling of bearer rejected, failed to enable media [ 186.131242][ T8692] __nla_validate_parse: 9 callbacks suppressed [ 186.131261][ T8692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.772'. [ 186.173127][ T8695] netlink: 'syz.2.773': attribute type 12 has an invalid length. [ 186.184815][ T8695] netlink: 132 bytes leftover after parsing attributes in process `syz.2.773'. [ 186.359925][ T8711] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 186.377340][ T8711] netlink: 232 bytes leftover after parsing attributes in process `syz.1.774'. [ 186.390487][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 186.409752][ T8711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.774'. [ 186.453136][ T8716] netlink: 'syz.2.776': attribute type 8 has an invalid length. [ 186.469248][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 186.480569][ T8716] netlink: 'syz.2.776': attribute type 3 has an invalid length. [ 186.506830][ T8715] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.775'. [ 186.521108][ T8716] netlink: 'syz.2.776': attribute type 21 has an invalid length. [ 186.531363][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 186.545644][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.777'. [ 186.568401][ T8718] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 186.734210][ T8733] netlink: 'syz.3.782': attribute type 10 has an invalid length. [ 186.772857][ T8733] batman_adv: batadv0: Adding interface: team0 [ 186.806968][ T8733] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.844730][ T8741] netlink: 64 bytes leftover after parsing attributes in process `syz.4.784'. [ 186.878990][ T8733] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 187.050225][ T8755] Bluetooth: MGMT ver 1.23 [ 187.393773][ T8784] netlink: 'syz.3.795': attribute type 11 has an invalid length. [ 187.481626][ T8790] netlink: zone id is out of range [ 187.487418][ T8790] netlink: get zone limit has 8 unknown bytes [ 187.495924][ T8790] NCSI netlink: No device for ifindex 0 [ 187.505458][ T8792] NCSI netlink: No device for ifindex 0 [ 187.712212][ T8806] tipc: Enabling of bearer rejected, failed to enable media [ 188.141871][ T8829] delete_channel: no stack [ 188.155084][ T8829] tipc: Enabled bearer , priority 0 [ 188.184801][ T8834] gtp0: entered promiscuous mode [ 188.192022][ T8834] gtp0: entered allmulticast mode [ 188.259820][ T8829] syzkaller0: entered promiscuous mode [ 188.267624][ T8829] syzkaller0: entered allmulticast mode [ 188.298004][ T8829] tipc: Resetting bearer [ 188.320725][ T8841] netlink: 'syz.4.809': attribute type 11 has an invalid length. [ 188.440013][ T8828] tipc: Resetting bearer [ 189.800304][ T8828] tipc: Disabling bearer [ 190.059134][ T8861] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 190.070784][ T8861] nbd: illegal input index 1048576 [ 190.273806][ T8883] netlink: 'syz.0.824': attribute type 83 has an invalid length. [ 190.699623][ T8923] syzkaller1: entered promiscuous mode [ 190.706213][ T8923] syzkaller1: entered allmulticast mode [ 190.752651][ T8929] sctp: [Deprecated]: syz.2.839 (pid 8929) Use of int in maxseg socket option. [ 190.752651][ T8929] Use struct sctp_assoc_value instead [ 190.942404][ T8946] Unsupported ieee802154 address type: 0 [ 190.983509][ T8952] netlink: 'syz.3.846': attribute type 1 has an invalid length. [ 191.038120][ T8952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.082556][ T8957] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 191.108327][ T8957] vlan2: entered allmulticast mode [ 191.113488][ T8957] veth1: entered allmulticast mode [ 191.185575][ T8962] sctp: [Deprecated]: syz.1.848 (pid 8962) Use of int in maxseg socket option. [ 191.185575][ T8962] Use struct sctp_assoc_value instead [ 191.223591][ T8964] __nla_validate_parse: 10 callbacks suppressed [ 191.223612][ T8964] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.849'. [ 191.366775][ T8975] validate_nla: 2 callbacks suppressed [ 191.366795][ T8975] netlink: 'syz.3.852': attribute type 1 has an invalid length. [ 191.421623][ T8975] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.433620][ T8975] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 191.478409][ T8982] gretap1: entered promiscuous mode [ 191.513686][ T8982] bond3: (slave gretap1): making interface the new active one [ 191.525145][ T8982] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 191.553365][ T8975] macvlan2: entered promiscuous mode [ 191.581006][ T8975] macvlan2: entered allmulticast mode [ 191.595535][ T8975] bond3: entered promiscuous mode [ 191.616436][ T8988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.856'. [ 191.619082][ T8975] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 191.645296][ T8975] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 191.659376][ T8975] bond3: left promiscuous mode [ 191.688281][ T8992] netlink: 'syz.2.857': attribute type 1 has an invalid length. [ 191.770032][ T8992] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.804837][ T9000] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 191.817288][ T9000] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 191.834139][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 192.080808][ T9005] syz.3.860 (9005) used greatest stack depth: 18008 bytes left [ 192.143544][ T9014] syz.3.860 (9014) used greatest stack depth: 15864 bytes left [ 192.254409][ T9032] netlink: 'syz.4.868': attribute type 1 has an invalid length. [ 192.310050][ T9032] netlink: 228 bytes leftover after parsing attributes in process `syz.4.868'. [ 192.526413][ T9051] netlink: 'syz.4.873': attribute type 8 has an invalid length. [ 192.657087][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 192.691081][ T9060] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 192.715932][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 192.795924][ T9068] netlink: 152 bytes leftover after parsing attributes in process `syz.0.878'. [ 192.984447][ T9078] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 193.041067][ T9078] bond3: entered promiscuous mode [ 193.046969][ T9078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.068015][ T9076] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.075340][ T9076] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 193.087324][ T9076] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 193.104777][ T9076] bond3: (slave wireguard0): making interface the new active one [ 193.115203][ T9076] wireguard0: entered promiscuous mode [ 193.124781][ T9076] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 193.254369][ T9057] delete_channel: no stack [ 193.271744][ T9085] openvswitch: netlink: Duplicate or invalid key (type 0). [ 193.285106][ T9085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.302874][ T9087] openvswitch: netlink: Duplicate or invalid key (type 0). [ 193.310424][ T9087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.486508][ T9091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.884'. [ 193.500099][ T9095] netlink: 'syz.0.886': attribute type 27 has an invalid length. [ 193.519544][ T9060] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 193.520348][ T9093] netlink: 'syz.0.886': attribute type 27 has an invalid length. [ 193.593929][ T9095] netlink: 'syz.0.886': attribute type 4 has an invalid length. [ 193.766530][ T9107] nbd: must specify an index to disconnect [ 193.785013][ T9116] syz.3.893: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 193.810072][ T9116] CPU: 1 UID: 0 PID: 9116 Comm: syz.3.893 Not tainted syzkaller #0 PREEMPT(full) [ 193.810114][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.810125][ T9116] Call Trace: [ 193.810132][ T9116] [ 193.810141][ T9116] dump_stack_lvl+0x189/0x250 [ 193.810169][ T9116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.810191][ T9116] ? __pfx__printk+0x10/0x10 [ 193.810215][ T9116] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 193.810238][ T9116] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 193.810260][ T9116] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 193.810284][ T9116] warn_alloc+0x214/0x310 [ 193.810310][ T9116] ? stack_depot_save_flags+0x40/0x860 [ 193.810335][ T9116] ? __pfx_warn_alloc+0x10/0x10 [ 193.810361][ T9116] ? kasan_save_track+0x4f/0x80 [ 193.810383][ T9116] ? xskq_create+0x56/0x170 [ 193.810403][ T9116] ? xsk_init_queue+0xb0/0x110 [ 193.810430][ T9116] ? xsk_setsockopt+0x4dc/0x8d0 [ 193.810450][ T9116] ? do_sock_setsockopt+0x179/0x1b0 [ 193.810467][ T9116] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 193.810483][ T9116] ? do_syscall_64+0xfa/0x3b0 [ 193.810499][ T9116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.810525][ T9116] __vmalloc_node_range_noprof+0x125/0x12f0 [ 193.810581][ T9116] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 193.810611][ T9116] ? __kasan_kmalloc+0x93/0xb0 [ 193.810636][ T9116] vmalloc_user_noprof+0xad/0xf0 [ 193.810659][ T9116] ? xskq_create+0xbf/0x170 [ 193.810683][ T9116] xskq_create+0xbf/0x170 [ 193.810709][ T9116] xsk_init_queue+0xb0/0x110 [ 193.810734][ T9116] xsk_setsockopt+0x4dc/0x8d0 [ 193.810759][ T9116] ? __pfx_xsk_setsockopt+0x10/0x10 [ 193.810781][ T9116] ? __pfx_aa_sk_perm+0x10/0x10 [ 193.810808][ T9116] ? aa_sock_opt_perm+0xff/0x1b0 [ 193.810830][ T9116] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 193.810848][ T9116] ? __pfx_xsk_setsockopt+0x10/0x10 [ 193.810871][ T9116] do_sock_setsockopt+0x179/0x1b0 [ 193.810895][ T9116] __x64_sys_setsockopt+0x13f/0x1b0 [ 193.810920][ T9116] do_syscall_64+0xfa/0x3b0 [ 193.810935][ T9116] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.810959][ T9116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.810975][ T9116] ? clear_bhb_loop+0x60/0xb0 [ 193.810997][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.811012][ T9116] RIP: 0033:0x7f835a38ebe9 [ 193.811028][ T9116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.811042][ T9116] RSP: 002b:00007f83585ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.811061][ T9116] RAX: ffffffffffffffda RBX: 00007f835a5c5fa0 RCX: 00007f835a38ebe9 [ 193.811074][ T9116] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 193.811085][ T9116] RBP: 00007f835a411e19 R08: 0000000000000004 R09: 0000000000000000 [ 193.811096][ T9116] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.811107][ T9116] R13: 00007f835a5c6038 R14: 00007f835a5c5fa0 R15: 00007fff70544498 [ 193.811138][ T9116] [ 193.811159][ T9116] Mem-Info: [ 193.971947][ T9125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.896'. [ 193.992091][ T9116] active_anon:4445 inactive_anon:0 isolated_anon:0 [ 193.992091][ T9116] active_file:2692 inactive_file:39870 isolated_file:0 [ 193.992091][ T9116] unevictable:768 dirty:136 writeback:0 [ 193.992091][ T9116] slab_reclaimable:11140 slab_unreclaimable:98276 [ 193.992091][ T9116] mapped:29019 shmem:1356 pagetables:1150 [ 193.992091][ T9116] sec_pagetables:0 bounce:0 [ 193.992091][ T9116] kernel_misc_reclaimable:0 [ 193.992091][ T9116] free:1328160 free_pcp:16199 free_cma:0 [ 194.078809][ T9129] netlink: 56 bytes leftover after parsing attributes in process `syz.0.896'. [ 194.101730][ T9116] Node 0 active_anon:17880kB inactive_anon:0kB active_file:10768kB inactive_file:159280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116076kB dirty:544kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12288kB pagetables:4144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.219973][ T9116] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.250708][ T9116] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.292155][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.294871][ T9132] ip6gretap0: entered promiscuous mode [ 194.300900][ T9116] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 194.316108][ T9116] Node 0 DMA32 free:1412748kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17932kB inactive_anon:0kB active_file:10768kB inactive_file:157704kB unevictable:1536kB writepending:544kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:44404kB local_pcp:25676kB free_cma:0kB [ 194.348977][ T9116] lowmem_reserve[]: 0 0 1 1 1 [ 194.353826][ T9116] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 194.384578][ T9116] lowmem_reserve[]: 0 0 0 0 0 [ 194.391028][ T9116] Node 1 Normal free:3883220kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21760kB local_pcp:10944kB free_cma:0kB [ 194.433921][ T9116] lowmem_reserve[]: 0 0 0 0 0 [ 194.457129][ T9116] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 194.490674][ T9116] Node 0 DMA32: 2584*4kB (UM) 1184*8kB (UME) 446*16kB (UM) 488*32kB (UM) 99*64kB (UE) 15*128kB (UME) 29*256kB (UME) 27*512kB (ME) 19*1024kB (UME) 7*2048kB (UM) 319*4096kB (UM) = 1412480kB [ 194.525945][ T9116] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 194.533680][ T9140] netlink: 'syz.0.899': attribute type 16 has an invalid length. [ 194.544503][ T9116] Node 1 Normal: 181*4kB (U) 52*8kB (UME) 40*16kB (UME) 71*32kB (UME) 30*64kB (UME) 3*128kB (UME) 2*256kB (M) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3883220kB [ 194.637006][ T9116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.647359][ T9116] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.657209][ T9116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.669033][ T9116] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.685442][ T9116] 43914 total pagecache pages [ 194.692082][ T9116] 0 pages in swap cache [ 194.696384][ T9116] Free swap = 124996kB [ 194.701884][ T9116] Total swap = 124996kB [ 194.706127][ T9116] 2097051 pages RAM [ 194.714806][ T9116] 0 pages HighMem/MovableOnly [ 194.719967][ T9116] 425667 pages reserved [ 194.724286][ T9116] 0 pages cma reserved [ 194.821692][ T9139] hsr_slave_1 (unregistering): left promiscuous mode [ 194.921530][ T9140] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.962396][ T9140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.342664][ T9191] bond0: entered promiscuous mode [ 195.362573][ T9191] bond_slave_0: entered promiscuous mode [ 195.376746][ T9191] bond_slave_1: entered promiscuous mode [ 195.443018][ T9191] bond0: left promiscuous mode [ 195.450014][ T9191] bond_slave_0: left promiscuous mode [ 195.470839][ T9191] bond_slave_1: left promiscuous mode [ 195.801591][ T9220] unsupported nla_type 52263 [ 196.178777][ T9244] macvtap1: entered promiscuous mode [ 196.184106][ T9244] vlan0: entered promiscuous mode [ 196.201222][ T9244] macvtap1: entered allmulticast mode [ 196.206645][ T9244] vlan0: entered allmulticast mode [ 196.247088][ T9244] veth0_vlan: entered allmulticast mode [ 196.289141][ T9254] macvtap2: entered promiscuous mode [ 196.294493][ T9254] macvtap2: entered allmulticast mode [ 196.360444][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 196.360462][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 196.360500][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 196.490461][ T9266] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 196.661356][ T9284] validate_nla: 6 callbacks suppressed [ 196.661375][ T9284] netlink: 'syz.2.944': attribute type 2 has an invalid length. [ 196.679417][ T9280] __nla_validate_parse: 19 callbacks suppressed [ 196.679435][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.942'. [ 196.761535][ T9291] netlink: 248 bytes leftover after parsing attributes in process `syz.1.945'. [ 196.875031][ T9291] netlink: 248 bytes leftover after parsing attributes in process `syz.1.945'. [ 196.934947][ T9291] netlink: 248 bytes leftover after parsing attributes in process `syz.1.945'. [ 196.945962][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 197.021133][ T9295] syzkaller0: entered promiscuous mode [ 197.027065][ T9295] syzkaller0: entered allmulticast mode [ 197.045005][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 197.053228][ T9291] netlink: 248 bytes leftover after parsing attributes in process `syz.1.945'. [ 197.054424][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 197.156475][ T9309] netlink: 'syz.4.948': attribute type 1 has an invalid length. [ 198.433983][ T9311] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 198.606415][ T9328] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 198.712240][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.952'. [ 198.741157][ T9328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.748435][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 199.091734][ T9367] NCSI netlink: No device for ifindex 0 [ 199.120782][ T9372] 8021q: VLANs not supported on ip6_vti0 [ 199.219748][ T9376] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 199.340357][ T9389] Driver unsupported XDP return value 0 on prog (id 183) dev N/A, expect packet loss! [ 199.472458][ T9398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.493673][ T9398] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 199.514547][ T9399] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 199.612471][ T9398] team0: Device dummy0 failed to register rx_handler [ 199.623353][ T9399] team0: Device dummy0 failed to register rx_handler [ 199.760864][ T9417] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 199.889655][ T9423] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 200.504591][ T9467] 8021q: VLANs not supported on ip_vti0 [ 200.765896][ T9486] netem: change failed [ 200.829665][ T9487] netlink: 'syz.0.996': attribute type 32 has an invalid length. [ 201.728522][ T9539] netlink: 'syz.4.1009': attribute type 15 has an invalid length. [ 201.871472][ T9544] __nla_validate_parse: 12 callbacks suppressed [ 201.871491][ T9544] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1011'. [ 201.903143][ T9544] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1011'. [ 201.953005][ T9552] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1013'. [ 201.974937][ T9555] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1013'. [ 202.014687][ T9558] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 202.174037][ T9562] syzkaller0: entered promiscuous mode [ 202.183533][ T9562] syzkaller0: entered allmulticast mode [ 202.208754][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 202.426767][ T9578] sctp: Trying to GSO but underlying device doesn't support it. [ 202.714776][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1025'. [ 203.593932][ T9584] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 203.979366][ T9617] tipc: Enabling of bearer rejected, failed to enable media [ 204.143707][ T9631] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 204.372346][ T9650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.471642][ T9650] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1043'. [ 204.486786][ T9655] netlink: 'syz.3.1045': attribute type 2 has an invalid length. [ 204.494795][ T9650] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1043'. [ 204.506515][ T9650] netlink: 'syz.2.1043': attribute type 6 has an invalid length. [ 204.516504][ T9650] netlink: 'syz.2.1043': attribute type 5 has an invalid length. [ 204.588039][ T9660] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 204.595012][ T9650] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1043'. [ 204.597698][ T9662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1047'. [ 204.860776][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1051'. [ 205.211315][ T9681] netlink: 'syz.0.1054': attribute type 23 has an invalid length. [ 205.360814][ T9692] Bluetooth: MGMT ver 1.23 [ 205.521685][ T9705] tipc: Enabling of bearer rejected, failed to enable media [ 205.742301][ T9720] netlink: 'syz.3.1063': attribute type 21 has an invalid length. [ 206.101092][ T9737] tipc: Enabling of bearer rejected, failed to enable media [ 206.396766][ T9754] netlink: 'syz.3.1074': attribute type 1 has an invalid length. [ 206.525577][ T9754] bond4: entered promiscuous mode [ 206.536225][ T9754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.574732][ T9762] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.583310][ T9762] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 206.594279][ T9762] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 206.613911][ T9762] bond4: (slave wireguard0): making interface the new active one [ 206.633299][ T9762] wireguard0: entered promiscuous mode [ 206.640937][ T9762] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 206.655341][ T9772] netlink: 'syz.4.1077': attribute type 15 has an invalid length. [ 206.686349][ T9772] netlink: 'syz.4.1077': attribute type 15 has an invalid length. [ 206.730372][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 206.742166][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 206.753308][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 206.806785][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 206.864421][ T69] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 206.879949][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 207.120552][ T12] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 207.157774][ T12] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 207.182729][ T12] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 207.219779][ T13] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 207.249673][ T9805] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 207.269401][ T9805] __nla_validate_parse: 8 callbacks suppressed [ 207.269419][ T9805] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1088'. [ 207.302270][ T9808] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 207.365047][ T9812] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1092'. [ 207.403333][ T9812] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1092'. [ 207.454852][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 207.601393][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 207.669487][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'. [ 207.694525][ T9830] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1096'. [ 207.770867][ T9835] wg1: entered promiscuous mode [ 208.100382][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 208.115400][ T9858] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 208.129898][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'. [ 208.148098][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1105'. [ 209.090019][ T9934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.160829][ T9936] xt_limit: Overflow, try lower: 271964/0 [ 209.754370][ T9975] netlink: 'syz.1.1148': attribute type 6 has an invalid length. [ 210.134508][ T9998] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 210.144276][ T9998] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 210.338497][T10016] team0: Port device dummy0 removed [ 210.365850][T10016] bond0: (slave bond_slave_0): Releasing backup interface [ 210.380463][T10016] bond0: (slave bond_slave_1): Releasing backup interface [ 210.401042][T10016] team0: Port device team_slave_0 removed [ 210.414231][T10016] team0: Port device team_slave_1 removed [ 210.440855][T10022] ip6gre1: entered allmulticast mode [ 210.475035][T10022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.483268][T10022] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 210.499388][T10022] bond0: (slave ip6gre1): Error -95 calling set_mac_address [ 211.324299][T10080] netlink: 'syz.0.1177': attribute type 64 has an invalid length. [ 211.357202][T10084] netlink: 'syz.0.1177': attribute type 64 has an invalid length. [ 211.419640][T10082] netlink: 'syz.4.1176': attribute type 1 has an invalid length. [ 211.724116][T10105] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 211.798751][T10109] tipc: Enabling of bearer rejected, failed to enable media [ 212.222174][T10141] tipc: Enabled bearer , priority 0 [ 212.462631][T10150] vlan2: entered allmulticast mode [ 212.470365][T10150] bond0: entered allmulticast mode [ 212.529649][T10160] __nla_validate_parse: 18 callbacks suppressed [ 212.529668][T10160] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1194'. [ 212.660712][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 212.673135][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 212.723889][T10165] netlink: 'syz.3.1195': attribute type 18 has an invalid length. [ 212.745904][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.757293][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.769036][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.788840][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.808601][T10173] C: entered allmulticast mode [ 212.897813][T10178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1200'. [ 212.948092][T10135] tipc: Disabling bearer [ 212.964192][T10182] tipc: Enabling of bearer rejected, failed to enable media [ 213.270490][T10200] netlink: 'syz.2.1204': attribute type 1 has an invalid length. [ 213.292210][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 213.748093][T10237] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 213.751595][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 213.856205][T10237] netlink: 'syz.4.1218': attribute type 15 has an invalid length. [ 213.856430][T10244] netlink: 'syz.4.1218': attribute type 15 has an invalid length. [ 213.883520][T10246] tipc: Enabling of bearer rejected, failed to enable media [ 213.899477][T10242] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1219'. [ 214.074279][T10254] tun0: tun_chr_ioctl cmd 1074025673 [ 214.099078][T10254] tun0: tun_chr_ioctl cmd 1074025675 [ 214.121174][T10254] tun0: persist disabled [ 214.148340][T10256] netlink: 'syz.0.1221': attribute type 21 has an invalid length. [ 214.166344][T10256] netlink: 'syz.0.1221': attribute type 6 has an invalid length. [ 214.185808][T10256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1221'. [ 215.147574][T10285] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1229'. [ 215.156777][T10285] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1229'. [ 215.220461][T10289] tipc: New replicast peer: 255.255.255.255 [ 215.229782][T10289] tipc: Enabled bearer , priority 10 [ 215.352306][T10293] xfrm2: entered allmulticast mode [ 215.545768][T10308] netlink: 'syz.1.1235': attribute type 2 has an invalid length. [ 215.767601][T10329] netlink: 'syz.4.1241': attribute type 1 has an invalid length. [ 216.031945][T10334] unknown channel width for channel at 909000KHz? [ 216.044349][T10334] unknown channel width for channel at 909000KHz? [ 216.203788][T10357] IPVS: Unknown mcast interface: nr0 [ 216.342541][ T9] tipc: Node number set to 3438553068 [ 216.400069][T10364] netlink: 'syz.3.1253': attribute type 10 has an invalid length. [ 216.471920][T10364] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 216.500825][T10364] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 216.739788][T10387] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 217.045412][T10412] netlink: 'syz.3.1265': attribute type 1 has an invalid length. [ 217.377226][T10438] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 217.657074][T10459] __nla_validate_parse: 12 callbacks suppressed [ 217.657094][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1281'. [ 217.713932][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'. [ 217.940464][T10482] validate_nla: 3 callbacks suppressed [ 217.940483][T10482] netlink: 'syz.4.1285': attribute type 1 has an invalid length. [ 217.981648][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1285'. [ 218.006190][T10480] netlink: 'syz.4.1285': attribute type 1 has an invalid length. [ 218.047639][T10480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1285'. [ 218.303407][T10498] netlink: 'syz.0.1290': attribute type 16 has an invalid length. [ 218.303407][T10500] netlink: 'syz.0.1290': attribute type 16 has an invalid length. [ 218.303431][T10500] netlink: 'syz.0.1290': attribute type 17 has an invalid length. [ 218.312435][T10498] netlink: 'syz.0.1290': attribute type 17 has an invalid length. [ 218.339888][T10505] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1291'. [ 218.342378][T10498] eql: remember to turn off Van-Jacobson compression on your slave devices [ 218.368856][T10498] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 218.412735][T10500] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 218.536688][T10512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1293'. [ 218.648429][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'. [ 218.672637][T10520] netlink: 'syz.3.1296': attribute type 11 has an invalid length. [ 218.687702][T10520] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1296'. [ 218.726142][T10518] hsr_slave_1 (unregistering): left promiscuous mode [ 218.810052][T10528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.931807][T10534] tipc: Enabling of bearer rejected, failed to enable media [ 218.965972][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 219.594554][T10575] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1313'. [ 219.619330][T10578] tipc: Enabled bearer , priority 0 [ 219.634595][T10578] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 219.642452][T10578] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 220.456153][T10610] xt_socket: unknown flags 0x50 [ 220.737410][ T9] tipc: Node number set to 1309231546 [ 220.772755][T10635] tipc: Enabled bearer , priority 0 [ 220.791809][T10635] syzkaller0: entered promiscuous mode [ 220.799849][T10635] syzkaller0: entered allmulticast mode [ 220.831000][T10635] tipc: Resetting bearer [ 220.869087][T10635] tipc: Disabling bearer [ 220.985560][T10644] syzkaller0: entered promiscuous mode [ 220.991395][T10644] syzkaller0: entered allmulticast mode [ 221.021153][T10654] sctp: [Deprecated]: syz.3.1338 (pid 10654) Use of int in max_burst socket option deprecated. [ 221.021153][T10654] Use struct sctp_assoc_value instead [ 222.426558][T10654] bridge0: port 1(macsec0) entered disabled state [ 222.555981][T10654] veth1_macvtap: left allmulticast mode [ 222.608749][T10659] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 222.635553][T10657] geneve2: entered promiscuous mode [ 222.656925][T10657] geneve2: entered allmulticast mode [ 222.686492][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.724664][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.751246][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 58500 - 0 [ 222.771351][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.792755][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.815549][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 58500 - 0 [ 222.842637][T10688] __nla_validate_parse: 7 callbacks suppressed [ 222.842654][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 222.859545][T10676] veth0_to_team: entered promiscuous mode [ 222.872496][T10676] veth0_to_team: entered allmulticast mode [ 222.872518][T10688] nbd: socks must be embedded in a SOCK_ITEM attr [ 222.923678][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.952675][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.993126][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 58500 - 0 [ 223.034031][T10697] netlink: 'syz.3.1349': attribute type 13 has an invalid length. [ 223.057547][ T2949] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.081035][ T2949] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.119360][ T2949] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 58500 - 0 [ 223.154377][T10697] lo: entered promiscuous mode [ 223.159716][T10697] lo: entered allmulticast mode [ 223.165173][T10697] tunl0: entered promiscuous mode [ 223.172615][T10697] tunl0: entered allmulticast mode [ 223.186545][T10697] gre0: entered promiscuous mode [ 223.196059][T10697] gre0: entered allmulticast mode [ 223.211249][T10697] gretap0: entered promiscuous mode [ 223.224137][T10697] gretap0: entered allmulticast mode [ 223.235707][T10697] gretap0: refused to change device tx_queue_len [ 223.242850][T10697] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 223.385251][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'. [ 223.685616][T10742] netlink: 'syz.4.1359': attribute type 6 has an invalid length. [ 223.735776][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'. [ 223.894138][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 223.934786][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 224.131443][T10766] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 224.186037][T10776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.552119][T10796] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1377'. [ 224.701390][T10808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1380'. [ 224.717251][T10803] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1379'. [ 224.783828][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1379'. [ 224.800750][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 225.313467][T10855] 8021q: VLANs not supported on ip6_vti0 [ 225.658973][T10869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.762137][T10870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.788059][T10868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.949049][T10890] netlink: 'syz.4.1398': attribute type 4 has an invalid length. [ 226.240787][T10907] netlink: 'syz.4.1401': attribute type 4 has an invalid length. [ 226.282983][T10907] netlink: 'syz.4.1401': attribute type 4 has an invalid length. [ 226.612221][ T9] IPVS: starting estimator thread 0... [ 226.695097][T10931] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 226.707178][T10927] IPVS: using max 38 ests per chain, 91200 per kthread [ 226.724621][ T43] IPVS: starting estimator thread 0... [ 226.734488][T10933] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 226.838467][T10934] IPVS: using max 29 ests per chain, 69600 per kthread [ 226.913249][T10944] netlink: 'syz.1.1416': attribute type 4 has an invalid length. [ 226.922164][T10944] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 226.934250][T10944] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 226.942654][T10944] netlink: 'syz.1.1416': attribute type 2 has an invalid length. [ 227.133853][T10953] netlink: 'syz.4.1419': attribute type 1 has an invalid length. [ 227.884054][T11005] x_tables: ip_tables: udp match: only valid for protocol 17 [ 228.156337][T11019] __nla_validate_parse: 24 callbacks suppressed [ 228.156356][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 228.165048][T11022] netlink: 'syz.0.1436': attribute type 21 has an invalid length. [ 228.196000][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1435'. [ 228.225539][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'. [ 228.227727][T11022] netlink: 'syz.0.1436': attribute type 22 has an invalid length. [ 228.255056][T11022] netlink: 'syz.0.1436': attribute type 23 has an invalid length. [ 228.263340][T11022] netlink: 'syz.0.1436': attribute type 25 has an invalid length. [ 228.274735][T11022] netlink: 'syz.0.1436': attribute type 26 has an invalid length. [ 228.287395][T11022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1436'. [ 228.302505][T11023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1437'. [ 228.326338][T11029] tipc: Enabling of bearer rejected, already enabled [ 228.371740][T11029] tipc: Resetting bearer [ 228.373528][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1439'. [ 228.399817][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1439'. [ 228.449864][T11035] bridge0: port 3(vlan2) entered blocking state [ 228.468838][T11035] bridge0: port 3(vlan2) entered disabled state [ 228.488470][T11035] vlan2: entered allmulticast mode [ 228.501801][T11035] bridge0: entered allmulticast mode [ 228.532147][T11035] vlan2: left allmulticast mode [ 228.554046][T11035] bridge0: left allmulticast mode [ 228.612576][T11044] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 228.630935][T11044] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 228.713511][T11035] hsr0 speed is unknown, defaulting to 1000 [ 228.721902][T11044] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 228.761486][T11035] hsr0 speed is unknown, defaulting to 1000 [ 228.805694][T11035] hsr0 speed is unknown, defaulting to 1000 [ 229.101378][T11035] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 229.373896][T11076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'. [ 229.375095][T11035] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 229.623245][T11035] hsr0 speed is unknown, defaulting to 1000 [ 229.677098][T11035] hsr0 speed is unknown, defaulting to 1000 [ 229.709498][T11035] hsr0 speed is unknown, defaulting to 1000 [ 229.727471][T11035] hsr0 speed is unknown, defaulting to 1000 [ 229.735324][T11035] hsr0 speed is unknown, defaulting to 1000 [ 229.816796][T11101] ip6gre1: entered allmulticast mode [ 229.888480][T11101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.911719][T11101] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 229.956468][T11101] bond0: (slave ip6gre1): Error -95 calling set_mac_address [ 230.073359][T11117] netlink: 'syz.1.1450': attribute type 11 has an invalid length. [ 230.081441][T11117] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1450'. [ 230.203917][T11125] netlink: 'syz.3.1454': attribute type 11 has an invalid length. [ 230.214007][T11122] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1453'. [ 230.687069][T11159] netlink: 'syz.1.1461': attribute type 2 has an invalid length. [ 230.721633][T11160] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 231.424772][T11201] veth7: entered allmulticast mode [ 231.892654][T11218] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 232.000098][T11226] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 232.591533][T11262] delete_channel: no stack [ 232.916309][T11282] netlink: 'syz.2.1494': attribute type 1 has an invalid length. [ 232.933614][T11282] netlink: 'syz.2.1494': attribute type 1 has an invalid length. [ 232.961971][T11283] netlink: 'syz.2.1494': attribute type 1 has an invalid length. [ 233.010747][T11287] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 233.102648][T11292] tipc: Enabled bearer , priority 0 [ 233.138887][T11292] syzkaller0: entered promiscuous mode [ 233.157547][T11292] syzkaller0: entered allmulticast mode [ 233.326400][T11318] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 233.360454][T11296] tipc: Resetting bearer [ 233.423450][T11296] tipc: Disabling bearer [ 233.456328][T11327] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 233.624127][T11341] validate_nla: 1 callbacks suppressed [ 233.624144][T11341] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 233.647088][T11341] netlink: 'syz.0.1510': attribute type 3 has an invalid length. [ 233.655428][T11341] __nla_validate_parse: 14 callbacks suppressed [ 233.655446][T11341] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1510'. [ 233.737528][T11349] nbd: must specify an index to disconnect [ 233.820345][T11356] netlink: 'syz.4.1513': attribute type 1 has an invalid length. [ 233.900026][T11361] : renamed from veth0_vlan (while UP) [ 234.409760][T11393] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 234.454322][T11393] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 234.462778][T11393] gretap2: entered promiscuous mode [ 234.474443][T11393] gretap2: entered allmulticast mode [ 234.669860][T11409] geneve3: entered promiscuous mode [ 234.675113][T11409] geneve3: entered allmulticast mode [ 234.683924][ T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 234.721477][T11411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1530'. [ 234.725168][ T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 234.731143][T11409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1530'. [ 234.752373][ T1155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 234.771203][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 234.930937][T11431] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1538'. [ 234.950104][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 234.953997][T11433] netlink: 'syz.0.1538': attribute type 1 has an invalid length. [ 235.278548][T11442] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.1540'. [ 235.298678][T11442] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.1540'. [ 235.423046][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'. [ 235.459936][T11456] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1544'. [ 235.494608][T11460] bridge0: port 1(macsec3) entered blocking state [ 235.511290][T11460] bridge0: port 1(macsec3) entered disabled state [ 235.512254][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1544'. [ 235.519146][T11460] macsec3: entered allmulticast mode [ 235.536064][T11460] bridge0: entered allmulticast mode [ 235.548430][T11460] macsec3: left allmulticast mode [ 235.553502][T11460] bridge0: left allmulticast mode [ 235.601115][T11458] bridge0: port 1(macsec3) entered blocking state [ 235.608301][T11458] bridge0: port 1(macsec3) entered disabled state [ 235.614896][T11458] macsec3: entered allmulticast mode [ 235.620417][T11458] bridge0: entered allmulticast mode [ 235.627524][T11458] macsec3: left allmulticast mode [ 235.632678][T11458] bridge0: left allmulticast mode [ 235.947030][T11487] netlink: 'syz.3.1552': attribute type 4 has an invalid length. [ 236.025528][T11487] IPVS: Error connecting to the multicast addr [ 236.033823][T11500] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 236.379189][T11518] delete_channel: no stack [ 236.638976][T11538] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.689063][T11538] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 236.736306][T11542] netlink: 'syz.1.1569': attribute type 11 has an invalid length. [ 237.543595][T11601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.877716][ T2930] wlan0: Trigger new scan to find an IBSS to join [ 238.051227][T11636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.420147][T11665] wireguard: wg2: Could not create IPv4 socket [ 238.545316][T11676] netlink: 'syz.1.1606': attribute type 13 has an invalid length. [ 238.677817][T11685] __nla_validate_parse: 15 callbacks suppressed [ 238.677845][T11685] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1607'. [ 238.756328][T11676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.781065][T11667] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 238.905823][T11693] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 239.136264][T11718] netlink: 'syz.3.1616': attribute type 39 has an invalid length. [ 239.226717][T11726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.275530][T11726] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 239.484084][T11736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1618'. [ 239.595733][T11743] tipc: Enabling of bearer rejected, failed to enable media [ 239.798843][T11756] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1628'. [ 239.899629][T11763] netem: change failed [ 240.097999][T11776] netlink: 'syz.1.1635': attribute type 4 has an invalid length. [ 240.150908][T11780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'. [ 240.161058][T11780] netlink: 'syz.1.1636': attribute type 7 has an invalid length. [ 240.161133][T11781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'. [ 240.161152][T11781] netlink: 'syz.1.1636': attribute type 7 has an invalid length. [ 240.172184][T11780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1636'. [ 240.182678][T11781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1636'. [ 240.295857][T11786] openvswitch: netlink: Actions may not be safe on all matching packets [ 240.303529][T11788] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 240.309639][T11789] openvswitch: netlink: Actions may not be safe on all matching packets [ 240.837274][ T1155] wlan0: Trigger new scan to find an IBSS to join [ 240.948575][T11823] IPVS: set_ctl: invalid protocol: 51 172.20.20.17:20002 [ 240.962373][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'. [ 241.078687][T11833] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 241.092793][T11839] netlink: 'syz.3.1656': attribute type 10 has an invalid length. [ 241.103311][T11833] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.1654'. [ 241.211397][T11845] netlink: 'syz.3.1657': attribute type 2 has an invalid length. [ 241.248427][T11845] netlink: 'syz.3.1657': attribute type 1 has an invalid length. [ 241.566793][T11863] netlink: 'syz.1.1665': attribute type 1 has an invalid length. [ 241.575801][T11863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1665'. [ 241.735403][T11870] netlink: 'syz.1.1667': attribute type 10 has an invalid length. [ 242.501472][T11913] wg1: left promiscuous mode [ 242.523792][T11913] veth0_to_team: left promiscuous mode [ 242.529497][T11913] veth0_to_team: left allmulticast mode [ 242.592729][T11913] bond3: left promiscuous mode [ 242.598096][T11913] wireguard0: left promiscuous mode [ 242.605695][T11913] xfrm2: left allmulticast mode [ 242.651498][T11930] C: entered promiscuous mode [ 242.670709][T11930] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 243.230835][T11975] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 243.693231][T12011] __nla_validate_parse: 7 callbacks suppressed [ 243.693249][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1706'. [ 243.712833][T12009] bridge_slave_0: entered promiscuous mode [ 243.802784][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 243.881209][ T2930] wlan0: Trigger new scan to find an IBSS to join [ 244.189970][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 244.204014][T12051] openvswitch: netlink: IPv4 tun info is not correct [ 244.217587][T12052] openvswitch: netlink: IPv4 tun info is not correct [ 244.281816][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1718'. [ 244.294337][T12057] bridge_slave_1: left allmulticast mode [ 244.307327][T12057] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.322531][T12057] bridge_slave_0: left allmulticast mode [ 244.330164][T12057] bridge_slave_0: left promiscuous mode [ 244.338959][T12057] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.529282][T12077] validate_nla: 4 callbacks suppressed [ 244.529302][T12077] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 244.560748][T12077] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1722'. [ 244.670181][T12084] syzkaller0: entered promiscuous mode [ 244.686354][T12084] syzkaller0: entered allmulticast mode [ 244.820710][T12093] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 244.849824][ T1328] wlan0: Creating new IBSS network, BSSID 1e:aa:38:fa:e1:6f [ 244.946059][T12101] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1732'. [ 245.029438][T12101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.040742][T12101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.061853][T12101] bond0 (unregistering): Released all slaves [ 245.233548][T12110] bridge4: entered promiscuous mode [ 245.252040][T12110] bridge4: entered allmulticast mode [ 245.275844][T12110] bridge0: port 1(batadv0) entered blocking state [ 245.283054][T12110] bridge0: port 1(batadv0) entered disabled state [ 245.293709][T12110] batadv0: entered allmulticast mode [ 245.305333][T12110] batadv0: entered promiscuous mode [ 245.338010][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1738'. [ 245.352397][T12118] pim6reg1: entered promiscuous mode [ 245.364602][T12118] pim6reg1: entered allmulticast mode [ 245.401820][T12121] netlink: 'syz.1.1738': attribute type 10 has an invalid length. [ 245.507269][T12133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1740'. [ 245.718791][T12146] syzkaller0: entered promiscuous mode [ 245.735547][T12146] syzkaller0: entered allmulticast mode [ 245.772491][T12146] netlink: 'syz.0.1743': attribute type 58 has an invalid length. [ 245.790307][ T1147] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 245.797129][T12146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1743'. [ 245.799856][ T1147] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 245.829221][T12161] C: left allmulticast mode [ 248.023504][T12183] netlink: 'syz.4.1758': attribute type 1 has an invalid length. [ 248.041240][T12189] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1756'. [ 248.095819][T12183] bond0: entered promiscuous mode [ 248.101425][T12183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.206054][T12194] netlink: 'syz.0.1756': attribute type 9 has an invalid length. [ 248.529290][T12216] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 248.673925][T12227] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 248.699050][T12230] tap0: tun_chr_ioctl cmd 1074025677 [ 248.704632][T12230] tap0: linktype set to 65534 [ 248.723427][T12230] lo: entered allmulticast mode [ 249.409913][T12268] __nla_validate_parse: 3 callbacks suppressed [ 249.409932][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'. [ 249.601415][T12275] bond4: (slave veth0_to_bond): Releasing backup interface [ 249.643163][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1786'. [ 249.671863][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1786'. [ 249.861740][T12294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1788'. [ 249.909380][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'. [ 250.098083][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 250.131245][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 250.407473][T12327] netlink: 'syz.1.1799': attribute type 1 has an invalid length. [ 250.415354][T12327] netlink: 'syz.1.1799': attribute type 1 has an invalid length. [ 250.764378][T12349] hsr0 speed is unknown, defaulting to 1000 [ 250.841938][T12351] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1805'. [ 250.851475][T12351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.031094][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1807'. [ 251.193822][T12372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1810'. [ 251.237156][T12352] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 251.245017][T12352] netlink: 'syz.4.1804': attribute type 2 has an invalid length. [ 251.442245][T12393] netlink: 'syz.2.1814': attribute type 11 has an invalid length. [ 251.491064][T12393] netlink: 'syz.2.1814': attribute type 11 has an invalid length. [ 253.161140][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 253.806341][T12458] netlink: 'syz.3.1834': attribute type 4 has an invalid length. [ 254.093092][T12485] netlink: zone id is out of range [ 254.106992][T12485] netlink: zone id is out of range [ 254.120405][T12485] netlink: zone id is out of range [ 254.135738][T12485] netlink: zone id is out of range [ 254.143008][T12485] netlink: zone id is out of range [ 254.148720][T12485] netlink: get zone limit has 8 unknown bytes [ 254.641088][T12524] __nla_validate_parse: 8 callbacks suppressed [ 254.641106][T12524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1854'. [ 254.720654][T12530] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1854'. [ 254.929790][ T44] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 255.097615][T12562] netlink: 'syz.1.1865': attribute type 2 has an invalid length. [ 255.105560][T12562] netlink: 'syz.1.1865': attribute type 8 has an invalid length. [ 255.113937][T12562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1865'. [ 255.227408][T12572] netlink: 'syz.1.1869': attribute type 24 has an invalid length. [ 255.723611][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.817898][T12586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1874'. [ 256.357161][ T24] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 60 sec [ 256.452194][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 256.475795][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1886'. [ 256.800843][T12646] netlink: 'syz.1.1895': attribute type 24 has an invalid length. [ 256.824421][T12651] netlink: 'syz.4.1892': attribute type 4 has an invalid length. [ 256.886037][ T1147] tipc: Subscription rejected, illegal request [ 256.990688][T12655] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.020573][T12655] team0: Failed to send port change of device bond5 via netlink (err -105) [ 257.030497][T12655] team0: Failed to send options change via netlink (err -105) [ 257.041301][T12655] team0: Port device bond5 added [ 257.049326][T12662] tipc: Enabling of bearer rejected, already enabled [ 257.140660][T12675] veth9: entered allmulticast mode [ 257.183377][T12669] syzkaller1: entered promiscuous mode [ 257.195857][T12669] syzkaller1: entered allmulticast mode [ 257.367222][T12685] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 257.635250][T12711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1909'. [ 257.645549][T12711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1909'. [ 257.713601][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1910'. [ 257.744884][T12713] netlink: 'syz.3.1910': attribute type 12 has an invalid length. [ 257.754485][T12713] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1910'. [ 257.946283][T12722] hsr0 speed is unknown, defaulting to 1000 [ 258.460584][T12753] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 258.472160][T12753] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 258.561197][T12722] netlink: 'syz.3.1913': attribute type 13 has an invalid length. [ 258.622254][T12722] netlink: 'syz.3.1913': attribute type 17 has an invalid length. [ 258.641964][T12767] netlink: 'syz.4.1925': attribute type 12 has an invalid length. [ 258.675625][T12767] netlink: 'syz.4.1925': attribute type 11 has an invalid length. [ 258.676131][T12768] netlink: 'syz.4.1925': attribute type 12 has an invalid length. [ 258.704833][T12768] netlink: 'syz.4.1925': attribute type 11 has an invalid length. [ 258.716438][T12722] lo: left promiscuous mode [ 258.723475][T12722] lo: left allmulticast mode [ 258.759845][T12722] tunl0: left promiscuous mode [ 258.766098][T12722] tunl0: left allmulticast mode [ 258.796062][T12722] gre0: left promiscuous mode [ 258.810531][T12722] gre0: left allmulticast mode [ 258.828133][T12722] gretap0: left promiscuous mode [ 258.840234][T12722] gretap0: left allmulticast mode [ 258.915397][T12722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.929824][T12722] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.938311][T12722] batman_adv: batadv0: Interface activated: team0 [ 258.946542][T12722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.346794][T12789] vlan0 (unregistering): left allmulticast mode [ 259.355794][T12789]  (unregistering): left allmulticast mode [ 259.362090][T12789] vlan0 (unregistering): left promiscuous mode [ 259.597979][T12820] sctp: [Deprecated]: syz.4.1934 (pid 12820) Use of int in max_burst socket option. [ 259.597979][T12820] Use struct sctp_assoc_value instead [ 259.628165][T12820] bridge0: port 2(vlan0) entered blocking state [ 259.634891][T12820] bridge0: port 2(vlan0) entered disabled state [ 259.642288][T12820] vlan0: entered allmulticast mode [ 259.648186][T12820] bridge0: entered allmulticast mode [ 259.656427][T12820] vlan0: left allmulticast mode [ 259.665534][T12820] bridge0: left allmulticast mode [ 259.853809][T12830] __nla_validate_parse: 11 callbacks suppressed [ 259.853824][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 259.874008][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 260.307574][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 260.873763][T12898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1949'. [ 260.993379][T12913] tipc: Enabling of bearer rejected, failed to enable media [ 261.005864][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1954'. [ 261.238966][T12905] infiniband syz!: set down [ 261.243815][T12905] infiniband syz!: added team_slave_0 [ 261.259498][T12905] syz!: rxe_create_cq: returned err = -12 [ 261.270280][T12905] infiniband syz!: Couldn't create ib_mad CQ [ 261.286697][T12905] infiniband syz!: Couldn't open port 1 [ 261.338905][T12905] RDS/IB: syz!: added [ 261.348174][T12905] smc: adding ib device syz! with port count 1 [ 261.354233][T12929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.356423][T12905] smc: ib device syz! port 1 has pnetid [ 261.430781][T12933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.684871][T12949] bond0: Error: Cannot enslave bond to itself. [ 262.198371][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1974'. [ 262.334898][T12987] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.437676][T12999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.532407][T13001] validate_nla: 4 callbacks suppressed [ 262.532424][T13001] netlink: 'syz.0.1979': attribute type 10 has an invalid length. [ 263.231845][T13043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.847946][T13063] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1993'. [ 263.927605][T13068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1994'. [ 263.944941][T13067] openvswitch: netlink: Key type 10512 is out of range max 32 [ 263.962003][T13072] openvswitch: netlink: Key type 10512 is out of range max 32 [ 263.987241][T13068] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1994'. [ 264.256347][T13090] netlink: 'syz.3.2002': attribute type 1 has an invalid length. [ 264.418084][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2006'. [ 264.439845][T13098] netlink: 'syz.3.2004': attribute type 1 has an invalid length. [ 264.460119][T13100] vlan4: entered allmulticast mode [ 264.468190][T13100] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 264.901506][T13137] __nla_validate_parse: 2 callbacks suppressed [ 264.901526][T13137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2014'. [ 265.252141][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2018'. [ 265.352074][T13166] sctp: [Deprecated]: syz.0.2021 (pid 13166) Use of int in max_burst socket option. [ 265.352074][T13166] Use struct sctp_assoc_value instead [ 265.353465][T13153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2019'. [ 265.399780][T13164] netlink: 'syz.1.2022': attribute type 4 has an invalid length. [ 265.407930][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2022'. [ 265.615709][T13176] ip6gre0: Master is either lo or non-ether device [ 265.762016][T13181] netlink: 'syz.3.2026': attribute type 1 has an invalid length. [ 265.781756][T13181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.949835][T13196] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2034'. [ 266.136590][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2038'. [ 266.186200][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2038'. [ 266.259403][T13216] team0: Port device bond5 removed [ 266.407176][T13230] netlink: 'syz.3.2043': attribute type 11 has an invalid length. [ 266.424531][T13230] netlink: 'syz.3.2043': attribute type 11 has an invalid length. [ 266.447343][T13230] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2043'. [ 266.697199][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'. [ 266.733597][T13251] netlink: 'syz.3.2049': attribute type 8 has an invalid length. [ 266.755899][T13251] netlink: 'syz.3.2049': attribute type 1 has an invalid length. [ 266.841863][T13259] netlink: 'syz.0.2051': attribute type 1 has an invalid length. [ 266.873379][T13251] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 267.020962][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2054'. [ 267.495364][T13295] netlink: 'syz.2.2057': attribute type 11 has an invalid length. [ 268.140186][T13353] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 268.246432][T13358] batman_adv: batadv0: Adding interface: dummy0 [ 268.269941][T13358] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.329265][T13358] batman_adv: batadv0: Interface activated: dummy0 [ 268.365367][T13368] batadv0: mtu less than device minimum [ 268.394548][T13368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 268.406380][T13368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 268.417874][T13368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 268.429067][T13368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 268.440456][T13368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 268.451706][T13368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 268.463538][T13368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 268.474810][T13368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 268.692463][T13387] tipc: Enabled bearer , priority 0 [ 268.713279][T13387] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 268.736562][T13387] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 268.771047][T13387] netdevsim netdevsim1: Direct firmware load for /€ failed with error -2 [ 268.792140][T13387] netdevsim netdevsim1: Falling back to sysfs fallback for: /€ [ 268.904676][T13403] netlink: 'syz.3.2092': attribute type 12 has an invalid length. [ 268.977608][T13407] netlink: 'syz.4.2093': attribute type 1 has an invalid length. [ 269.247500][T13425] netlink: 'syz.3.2098': attribute type 64 has an invalid length. [ 269.376673][T13436] macsec2: entered promiscuous mode [ 269.383821][T13436] macsec2: entered allmulticast mode [ 269.570822][T13451] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 269.578960][T13451] netlink: 'syz.2.2107': attribute type 3 has an invalid length. [ 269.671198][T13455] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 269.914477][T13466] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 269.916936][T13472] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 269.934412][T13466] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 269.955671][T13472] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 269.968203][T13467] __nla_validate_parse: 53 callbacks suppressed [ 269.968219][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2112'. [ 269.988496][T13467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2112'. [ 269.998319][T13467] netlink: 'syz.2.2112': attribute type 11 has an invalid length. [ 270.028508][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2112'. [ 270.042766][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.056361][ T3031] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.067118][T13467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2112'. [ 270.088366][ T3031] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.104218][T13467] netlink: 'syz.2.2112': attribute type 11 has an invalid length. [ 270.115564][ T3031] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.149371][T13487] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2115'. [ 270.194634][T13489] netlink: 'syz.0.2118': attribute type 83 has an invalid length. [ 270.221749][T13493] netlink: 'syz.2.2119': attribute type 11 has an invalid length. [ 270.247669][T13493] sch_tbf: burst 7 is lower than device ip6tnl0 mtu (1452) ! [ 270.275640][T13481] hsr0 speed is unknown, defaulting to 1000 [ 270.302501][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'. [ 270.333138][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 270.347671][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 270.369802][T13495] netlink: 'syz.0.2120': attribute type 3 has an invalid length. [ 270.478430][T13501] team0: Mode "b_oadcast" not found [ 270.754474][T13514] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 271.017093][T13521] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2131'. [ 271.030272][T13533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2132'. [ 271.306678][T13542] IPv6: sit2: Disabled Multicast RS [ 271.344134][T13542] sit2: entered allmulticast mode [ 271.593850][T13554] tipc: Can't bind to reserved service type 0 [ 271.724993][T13559] NCSI netlink: No device for ifindex 813332851 [ 271.725473][T13556] batman_adv: batadv0: Interface deactivated: dummy0 [ 271.764765][T13556] batman_adv: batadv0: Removing interface: dummy0 [ 271.793634][T13556] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 272.041409][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 272.237704][T13606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.488862][T13628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.496562][T13628] IPv6: NLM_F_CREATE should be set when creating new route [ 272.503858][T13628] IPv6: NLM_F_CREATE should be set when creating new route [ 272.529915][T13628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.394846][T13709] hsr0 speed is unknown, defaulting to 1000 [ 273.521217][T13716] syzkaller0: entered promiscuous mode [ 273.537119][T13716] syzkaller0: entered allmulticast mode [ 273.552428][T13716] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 274.181129][T13730] tipc: Enabled bearer , priority 0 [ 274.351123][T13725] tipc: Disabling bearer [ 274.850282][T13779] batman_adv: batadv0: Interface deactivated: team0 [ 274.859857][T13779] batman_adv: batadv0: Removing interface: team0 [ 274.868565][T13779] team0: Device wireguard1 is up. Set it down before adding it as a team port [ 274.902762][T13790] validate_nla: 7 callbacks suppressed [ 274.902780][T13790] netlink: 'syz.4.2210': attribute type 1 has an invalid length. [ 274.964399][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.000435][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.051456][T13790] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.059393][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.089209][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.144633][T13802] __nla_validate_parse: 25 callbacks suppressed [ 275.144650][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 275.188826][T13802] syzkaller1: entered promiscuous mode [ 275.194350][T13802] syzkaller1: entered allmulticast mode [ 275.511481][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2221'. [ 275.572053][T13827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2222'. [ 275.622962][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2223'. [ 275.633737][T13827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2222'. [ 275.644101][T13827] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2222'. [ 275.677509][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 275.731259][T13827] net_ratelimit: 18 callbacks suppressed [ 275.731277][T13827] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 275.762997][T13837] netlink: 'syz.3.2227': attribute type 1 has an invalid length. [ 275.835159][T13846] netlink: 'syz.0.2230': attribute type 10 has an invalid length. [ 275.860452][T13849] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.868865][T13849] bond5: (slave bond6): making interface the new active one [ 275.876617][T13849] bond5: (slave bond6): Enslaving as an active interface with an up link [ 275.891423][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 275.900554][T13837] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2227'. [ 275.914962][T13846] veth1_macvtap: left promiscuous mode [ 275.942224][T13849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2227'. [ 276.071218][T13856] netlink: 'syz.3.2231': attribute type 10 has an invalid length. [ 276.079855][T13856] netlink: 'syz.3.2231': attribute type 10 has an invalid length. [ 276.365749][T13876] netlink: 'syz.0.2239': attribute type 21 has an invalid length. [ 276.375507][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2239'. [ 276.896489][T13902] netlink: 'syz.2.2247': attribute type 7 has an invalid length. [ 277.404543][T13949] bond2: (slave wlan0): Releasing active interface [ 277.486704][T13957] 8021q: VLANs not supported on vcan0 [ 277.896168][T13985] unsupported nlmsg_type 40 [ 278.094393][T14001] bond0: Error: Cannot enslave bond to itself. [ 278.854759][T14053] netlink: 'syz.1.2292': attribute type 1 has an invalid length. [ 278.988531][T14063] netem: invalid attributes len -24 [ 278.995765][T14063] netem: change failed [ 279.065297][T14066] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 279.168264][T14070] tipc: Resetting bearer [ 279.966736][T14114] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.004325][T14114] team0: Port device bond4 added [ 280.213859][T14140] __nla_validate_parse: 57 callbacks suppressed [ 280.213877][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'. [ 280.260754][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2324'. [ 280.356097][T14143] syzkaller0: entered promiscuous mode [ 280.367526][T14143] syzkaller0: entered allmulticast mode [ 280.402924][T14145] tipc: Enabled bearer , priority 0 [ 280.428391][T14153] tipc: Enabling of bearer rejected, already enabled [ 280.445996][T14145] tipc: Resetting bearer [ 280.481762][T14142] tipc: Resetting bearer [ 280.591441][T14170] netlink: 'syz.1.2333': attribute type 1 has an invalid length. [ 280.638644][T14170] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2333'. [ 280.852869][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2337'. [ 280.903515][T14186] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2337'. [ 281.981999][T14142] tipc: Disabling bearer [ 281.991844][T14173] hsr0 speed is unknown, defaulting to 1000 [ 282.108282][T14189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2339'. [ 282.125943][T14191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2340'. [ 282.130671][T14189] netlink: 'syz.0.2339': attribute type 1 has an invalid length. [ 282.164848][T14189] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2339'. [ 282.175986][T14189] netlink: 'syz.0.2339': attribute type 2 has an invalid length. [ 282.189506][T14189] netlink: 'syz.0.2339': attribute type 1 has an invalid length. [ 282.210303][T14197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2342'. [ 282.454611][T14214] veth0_to_bond: entered allmulticast mode [ 282.476618][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2346'. [ 282.800462][T14236] vlan1: entered allmulticast mode [ 282.805667][T14236] hsr0: entered allmulticast mode [ 282.812827][T14231] netlink: 'syz.3.2354': attribute type 11 has an invalid length. [ 282.821236][T14236] hsr_slave_0: entered allmulticast mode [ 283.483544][T14276] tipc: Invalid UDP bearer configuration [ 283.483599][T14276] tipc: Enabling of bearer rejected, failed to enable media [ 284.452800][T14348] team0: Device gtp1 is up. Set it down before adding it as a team port [ 284.583473][T14368] netlink: zone id is out of range [ 284.591463][T14366] tipc: Enabling of bearer rejected, already enabled [ 284.608088][T14368] netlink: zone id is out of range [ 284.616780][T14368] netlink: zone id is out of range [ 284.622566][T14368] netlink: zone id is out of range [ 284.652108][T14368] netlink: zone id is out of range [ 284.720803][T14368] netlink: zone id is out of range [ 284.725956][T14368] netlink: zone id is out of range [ 284.755743][T14368] netlink: zone id is out of range [ 284.772426][T14368] netlink: zone id is out of range [ 284.777559][T14376] raw_sendmsg: syz.0.2398 forgot to set AF_INET. Fix it! [ 284.795592][T14368] netlink: zone id is out of range [ 285.159710][ T69] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.260208][T14406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.310026][T14404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.377053][T14414] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 285.852574][T14436] __nla_validate_parse: 13 callbacks suppressed [ 285.852593][T14436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2413'. [ 286.033354][T14445] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2418'. [ 286.218266][T14448] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 286.255435][T14448] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 286.270318][T14448] bond0: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 286.286267][T14448] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 286.445457][T14471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2427'. [ 286.467108][T14471] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2427'. [ 286.516197][T14477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.656732][T14486] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2432'. [ 287.466689][T14501] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2440'. [ 287.589856][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 287.599395][T14510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 287.609222][T14510] netlink: 'syz.2.2441': attribute type 15 has an invalid length. [ 287.610738][T14500] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 287.618055][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 287.636178][T14511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 287.654224][T14511] netlink: 'syz.2.2441': attribute type 15 has an invalid length. [ 289.965316][T14639] netlink: 'syz.1.2481': attribute type 16 has an invalid length. [ 290.116709][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.138190][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.870187][T14676] bond5: entered promiscuous mode [ 290.876186][T14676] bond5: entered allmulticast mode [ 290.883928][T14676] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.966226][T14682] __nla_validate_parse: 8 callbacks suppressed [ 290.966244][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 291.089349][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2498'. [ 291.161327][T14709] netlink: 'syz.1.2497': attribute type 1 has an invalid length. [ 291.611308][T14737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2507'. [ 291.639886][T14731] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2506'. [ 291.748357][T14746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2509'. [ 291.856207][T14754] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2514'. [ 291.949436][T14769] netlink: 'syz.0.2513': attribute type 21 has an invalid length. [ 291.957630][T14769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2513'. [ 292.161750][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d359800: rx timeout, send abort [ 292.225842][T14781] netlink: 'syz.0.2519': attribute type 24 has an invalid length. [ 292.671054][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d359800: abort rx timeout. Force session deactivation [ 292.756381][T14790] netlink: 'syz.1.2521': attribute type 11 has an invalid length. [ 292.878302][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2527'. [ 293.106167][T14827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.214773][T14835] netlink: 'syz.4.2536': attribute type 18 has an invalid length. [ 293.261802][T14838] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 293.332276][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2538'. [ 293.355332][T14842] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2538'. [ 293.730890][T14860] net_ratelimit: 218 callbacks suppressed [ 293.730911][T14860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.892038][T14868] bond0: entered promiscuous mode [ 293.899037][T14868] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 294.034525][T14866] hsr0 speed is unknown, defaulting to 1000 [ 294.150427][T14882] tipc: Enabling of bearer rejected, already enabled [ 294.319083][T14892] bond0: (slave rose0): Enslaving as an active interface with an up link [ 294.564932][T14875] netlink: 'syz.0.2545': attribute type 13 has an invalid length. [ 294.580682][T14875] netlink: 'syz.0.2545': attribute type 17 has an invalid length. [ 294.975535][T14875] veth0_vlan: left promiscuous mode [ 294.982079][T14875] veth0_vlan: entered promiscuous mode [ 295.034850][T14875] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 295.119021][T14913] hsr0 speed is unknown, defaulting to 1000 [ 295.287757][T14938] macvtap1: entered promiscuous mode [ 295.293281][T14938] vlan0: entered promiscuous mode [ 295.305523][T14938] bridge0: entered promiscuous mode [ 295.327497][T14938] macvtap1: entered allmulticast mode [ 295.345545][T14938] vlan0: entered allmulticast mode [ 295.351150][T14938] bridge0: entered allmulticast mode [ 295.991407][T14976] ip6gre2: entered allmulticast mode [ 296.246712][T14987] __nla_validate_parse: 6 callbacks suppressed [ 296.246731][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'. [ 296.264980][T14985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2578'. [ 296.292951][T14987] netlink: 'syz.1.2579': attribute type 1 has an invalid length. [ 296.418476][T14992] bond6: (slave gretap2): making interface the new active one [ 296.426641][T14992] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 296.771685][T15011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2585'. [ 296.828252][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2585'. [ 296.956775][T15032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2589'. [ 297.257978][T15053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2595'. [ 297.376132][T15063] netlink: 'syz.1.2600': attribute type 32 has an invalid length. [ 297.392505][T15061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2599'. [ 297.407136][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2600'. [ 297.433291][T15063] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 297.480937][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2599'. [ 297.725069][T15089] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 297.733446][T15090] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2608'. [ 298.321905][T15126] netlink: 'syz.3.2621': attribute type 1 has an invalid length. [ 298.341022][T15126] nbd: illegal input index 1048576 [ 298.474703][T15138] netlink: 'syz.1.2625': attribute type 5 has an invalid length. [ 298.525087][T15138] geneve3: entered promiscuous mode [ 298.553655][T15138] geneve3: entered allmulticast mode [ 298.589070][ T36] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 298.626116][ T36] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 298.652970][ T36] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 298.684139][T11082] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 299.615501][T15178] hsr_slave_0 (unregistering): left promiscuous mode [ 299.627148][T15184] smc: net device erspan0 applied user defined pnetid SYZ0 [ 299.901232][T15207] 8021q: adding VLAN 0 to HW filter on device bond7 [ 299.986603][T15207] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 300.161471][T15228] netlink: 'syz.1.2651': attribute type 22 has an invalid length. [ 300.178140][T15228] netlink: 'syz.1.2651': attribute type 22 has an invalid length. [ 300.182172][T15233] netlink: 'syz.3.2654': attribute type 1 has an invalid length. [ 300.302956][T15233] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.314442][T15242] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 300.585226][T15252] netlink: 'syz.1.2660': attribute type 33 has an invalid length. [ 300.593930][T15259] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 300.604351][T15252] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 300.675081][ T5951] tipc: Resetting bearer [ 300.771883][T15259] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 300.904745][T15282] netlink: 'syz.4.2670': attribute type 1 has an invalid length. [ 300.959127][T15282] bond7: entered promiscuous mode [ 300.966236][T15282] 8021q: adding VLAN 0 to HW filter on device bond7 [ 301.009695][T15287] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.025776][T15287] bond7: (slave bond8): making interface the new active one [ 301.033351][T15287] bond8: entered promiscuous mode [ 301.039611][T15287] bond7: (slave bond8): Enslaving as an active interface with an up link [ 301.164658][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.170566][T15295] tap0: tun_chr_ioctl cmd 1074025672 [ 301.176402][T15295] tap0: ignored: set checksum disabled [ 301.182030][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.337090][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.378141][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.411248][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.630765][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.636467][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.655936][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.693633][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.727202][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.732617][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.787735][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.794130][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.883767][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.902008][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.925390][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.948855][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.954723][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 301.973365][T15294] tap0: tun_chr_ioctl cmd 1074025673 [ 302.052214][T15326] IPv6: sit1: Disabled Multicast RS [ 302.068370][T15326] sit1: entered allmulticast mode [ 302.295980][T15349] __nla_validate_parse: 20 callbacks suppressed [ 302.295998][T15349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2690'. [ 302.328328][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'. [ 302.582507][T15359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.713985][T15377] sctp: [Deprecated]: syz.3.2698 (pid 15377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.713985][T15377] Use struct sctp_sack_info instead [ 302.734600][T15377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2698'. [ 302.794270][T15380] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2700'. [ 302.812938][T15383] x_tables: ip_tables: udp match: only valid for protocol 17 [ 302.828405][T15381] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2700'. [ 302.856190][T15384] x_tables: ip_tables: udp match: only valid for protocol 17 [ 302.884503][T15391] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2702'. [ 302.909107][T15392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2704'. [ 303.008681][T15395] openvswitch: netlink: Message has -1 unknown bytes. [ 303.055521][T15400] vlan1: entered promiscuous mode [ 303.066888][T15400] bridge0: entered promiscuous mode [ 303.172194][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2711'. [ 303.411824][T15425] netlink: 'syz.1.2715': attribute type 10 has an invalid length. [ 303.813074][T15451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2724'. [ 303.955055][T15464] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2728'. [ 304.390676][T15493] veth0: entered promiscuous mode [ 304.404316][T15472] veth0: left promiscuous mode [ 304.574025][T15511] vlan0 (unregistering): left allmulticast mode [ 304.580893][T15511] bridge0: left allmulticast mode [ 304.585979][T15511] vlan0 (unregistering): left promiscuous mode [ 304.586553][T15518] netlink: 'syz.0.2744': attribute type 8 has an invalid length. [ 304.609755][T15511] bridge0: left promiscuous mode [ 304.622373][T15523] netlink: 'syz.1.2740': attribute type 10 has an invalid length. [ 305.132079][T15556] tipc: Enabling of bearer rejected, failed to enable media [ 305.160531][T15562] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 305.313567][T15573] netlink: 'syz.3.2761': attribute type 11 has an invalid length. [ 305.636070][T15591] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.754444][T15599] netlink: 'syz.1.2767': attribute type 58 has an invalid length. [ 305.991722][T15615] gretap0: entered promiscuous mode [ 306.495158][T15643] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003 [ 306.504890][T15643] IPVS: set_ctl: invalid protocol: 442 255.255.255.255:20003 [ 307.274318][T15695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.354458][T15699] __nla_validate_parse: 45 callbacks suppressed [ 307.354478][T15699] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2795'. [ 307.503082][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2798'. [ 308.104757][T15717] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20003 [ 308.964647][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'. [ 309.072368][T15739] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 309.095450][T15741] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2806'. [ 309.109729][T15738] tipc: Enabled bearer , priority 0 [ 309.117742][T15738] syzkaller0: entered promiscuous mode [ 309.123440][T15738] syzkaller0: entered allmulticast mode [ 309.146756][T15738] tipc: Resetting bearer [ 309.164535][T15748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2808'. [ 309.207064][T15735] tipc: Resetting bearer [ 309.274936][T15735] tipc: Disabling bearer [ 309.328878][T15760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.331912][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2808'. [ 309.534665][T15772] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2816'. [ 309.581162][T15780] netlink: 'syz.0.2819': attribute type 3 has an invalid length. [ 309.591285][T15779] netlink: 'syz.0.2819': attribute type 3 has an invalid length. [ 309.603163][T15779] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2819'. [ 309.621808][T15780] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2819'. [ 309.635233][T15783] netlink: 'syz.1.2820': attribute type 3 has an invalid length. [ 309.657626][T15783] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2820'. [ 310.079809][T15817] netlink: 'syz.4.2831': attribute type 29 has an invalid length. [ 310.089255][T15817] netlink: 'syz.4.2831': attribute type 29 has an invalid length. [ 310.143558][T15823] netlink: 'syz.1.2832': attribute type 21 has an invalid length. [ 310.204648][T15827] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 310.689287][T15870] netlink: 'syz.2.2844': attribute type 39 has an invalid length. [ 310.702745][T15871] netlink: 'syz.4.2843': attribute type 10 has an invalid length. [ 310.745915][T15871] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 310.925527][T15879] [ 310.927896][T15879] ====================================================== [ 310.934909][T15879] WARNING: possible circular locking dependency detected [ 310.941931][T15879] syzkaller #0 Not tainted [ 310.946325][T15879] ------------------------------------------------------ [ 310.953323][T15879] syz.4.2847/15879 is trying to acquire lock: [ 310.959366][T15879] ffffffff8f68e898 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 310.968668][T15879] [ 310.968668][T15879] but task is already holding lock: [ 310.976015][T15879] ffff88814d5b8e70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 310.985308][T15879] [ 310.985308][T15879] which lock already depends on the new lock. [ 310.985308][T15879] [ 310.995694][T15879] [ 310.995694][T15879] the existing dependency chain (in reverse order) is: [ 311.004698][T15879] [ 311.004698][T15879] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 311.012678][T15879] lock_acquire+0x120/0x360 [ 311.017698][T15879] _raw_spin_lock_bh+0x36/0x50 [ 311.022996][T15879] nr_rt_device_down+0x12a/0x720 [ 311.028450][T15879] nr_device_event+0x137/0x150 [ 311.033730][T15879] notifier_call_chain+0x1b3/0x3e0 [ 311.039348][T15879] netif_close_many+0x29c/0x410 [ 311.044707][T15879] netif_close+0x158/0x210 [ 311.049632][T15879] dev_close+0x10a/0x220 [ 311.054376][T15879] bpq_device_event+0x377/0x6a0 [ 311.059735][T15879] notifier_call_chain+0x1b3/0x3e0 [ 311.065350][T15879] __dev_notify_flags+0x18d/0x2e0 [ 311.070889][T15879] netif_change_flags+0xe8/0x1a0 [ 311.076332][T15879] dev_change_flags+0x130/0x260 [ 311.081760][T15879] dev_ioctl+0x7b4/0x1150 [ 311.086603][T15879] sock_do_ioctl+0x22c/0x300 [ 311.091704][T15879] sock_ioctl+0x576/0x790 [ 311.096540][T15879] __se_sys_ioctl+0xfc/0x170 [ 311.101644][T15879] do_syscall_64+0xfa/0x3b0 [ 311.106683][T15879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.113101][T15879] [ 311.113101][T15879] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 311.120913][T15879] lock_acquire+0x120/0x360 [ 311.125934][T15879] _raw_spin_lock_bh+0x36/0x50 [ 311.131209][T15879] nr_rt_device_down+0xa9/0x720 [ 311.136566][T15879] nr_device_event+0x137/0x150 [ 311.141837][T15879] notifier_call_chain+0x1b3/0x3e0 [ 311.147455][T15879] netif_close_many+0x29c/0x410 [ 311.152815][T15879] netif_close+0x158/0x210 [ 311.157742][T15879] dev_close+0x10a/0x220 [ 311.162486][T15879] bpq_device_event+0x377/0x6a0 [ 311.167848][T15879] notifier_call_chain+0x1b3/0x3e0 [ 311.173464][T15879] __dev_notify_flags+0x18d/0x2e0 [ 311.178995][T15879] netif_change_flags+0xe8/0x1a0 [ 311.184443][T15879] dev_change_flags+0x130/0x260 [ 311.189797][T15879] dev_ioctl+0x7b4/0x1150 [ 311.194636][T15879] sock_do_ioctl+0x22c/0x300 [ 311.199734][T15879] sock_ioctl+0x576/0x790 [ 311.204578][T15879] __se_sys_ioctl+0xfc/0x170 [ 311.209678][T15879] do_syscall_64+0xfa/0x3b0 [ 311.214686][T15879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.221084][T15879] [ 311.221084][T15879] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 311.229325][T15879] validate_chain+0xb9b/0x2140 [ 311.234600][T15879] __lock_acquire+0xab9/0xd20 [ 311.239784][T15879] lock_acquire+0x120/0x360 [ 311.244793][T15879] _raw_spin_lock_bh+0x36/0x50 [ 311.250066][T15879] nr_remove_neigh+0x25/0xe0 [ 311.255684][T15879] nr_add_node+0x1d9f/0x2570 [ 311.260784][T15879] nr_rt_ioctl+0xc12/0xd50 [ 311.265706][T15879] sock_do_ioctl+0xdc/0x300 [ 311.270719][T15879] sock_ioctl+0x576/0x790 [ 311.275641][T15879] __se_sys_ioctl+0xfc/0x170 [ 311.280737][T15879] do_syscall_64+0xfa/0x3b0 [ 311.285748][T15879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.292235][T15879] [ 311.292235][T15879] other info that might help us debug this: [ 311.292235][T15879] [ 311.302613][T15879] Chain exists of: [ 311.302613][T15879] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 311.302613][T15879] [ 311.316426][T15879] Possible unsafe locking scenario: [ 311.316426][T15879] [ 311.323867][T15879] CPU0 CPU1 [ 311.329224][T15879] ---- ---- [ 311.334573][T15879] lock(&nr_node->node_lock); [ 311.339322][T15879] lock(nr_node_list_lock); [ 311.346416][T15879] lock(&nr_node->node_lock); [ 311.353684][T15879] lock(nr_neigh_list_lock); [ 311.358346][T15879] [ 311.358346][T15879] *** DEADLOCK *** [ 311.358346][T15879] [ 311.366484][T15879] 1 lock held by syz.4.2847/15879: [ 311.371591][T15879] #0: ffff88814d5b8e70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 311.381335][T15879] [ 311.381335][T15879] stack backtrace: [ 311.387214][T15879] CPU: 0 UID: 0 PID: 15879 Comm: syz.4.2847 Not tainted syzkaller #0 PREEMPT(full) [ 311.387243][T15879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.387267][T15879] Call Trace: [ 311.387275][T15879] [ 311.387284][T15879] dump_stack_lvl+0x189/0x250 [ 311.387302][T15879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.387316][T15879] ? __pfx__printk+0x10/0x10 [ 311.387332][T15879] ? stack_trace_save+0x9c/0xe0 [ 311.387350][T15879] print_circular_bug+0x2ee/0x310 [ 311.387366][T15879] check_noncircular+0x134/0x160 [ 311.387381][T15879] validate_chain+0xb9b/0x2140 [ 311.387394][T15879] ? do_syscall_64+0xfa/0x3b0 [ 311.387414][T15879] __lock_acquire+0xab9/0xd20 [ 311.387433][T15879] ? nr_remove_neigh+0x25/0xe0 [ 311.387449][T15879] lock_acquire+0x120/0x360 [ 311.387465][T15879] ? nr_remove_neigh+0x25/0xe0 [ 311.387483][T15879] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 311.387498][T15879] ? nr_remove_neigh+0x25/0xe0 [ 311.387514][T15879] _raw_spin_lock_bh+0x36/0x50 [ 311.387530][T15879] ? nr_remove_neigh+0x25/0xe0 [ 311.387545][T15879] nr_remove_neigh+0x25/0xe0 [ 311.387562][T15879] nr_add_node+0x1d9f/0x2570 [ 311.387579][T15879] ? dev_get_by_name+0x21/0x200 [ 311.387595][T15879] ? dev_get_by_name+0x21/0x200 [ 311.387608][T15879] ? dev_get_by_name+0x21/0x200 [ 311.387621][T15879] ? nr_call_to_digi+0x136/0x1b0 [ 311.387637][T15879] nr_rt_ioctl+0xc12/0xd50 [ 311.387655][T15879] ? kasan_quarantine_put+0xdd/0x220 [ 311.387670][T15879] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 311.387688][T15879] ? apparmor_capable+0x137/0x1b0 [ 311.387706][T15879] ? capable+0x89/0xe0 [ 311.387718][T15879] ? nr_ioctl+0x1b1/0x3b0 [ 311.387731][T15879] sock_do_ioctl+0xdc/0x300 [ 311.387749][T15879] ? __pfx_sock_do_ioctl+0x10/0x10 [ 311.387763][T15879] ? __lock_acquire+0xab9/0xd20 [ 311.387784][T15879] sock_ioctl+0x576/0x790 [ 311.387800][T15879] ? __pfx_sock_ioctl+0x10/0x10 [ 311.387821][T15879] ? __fget_files+0x2a/0x420 [ 311.387832][T15879] ? __fget_files+0x3a0/0x420 [ 311.387842][T15879] ? __fget_files+0x2a/0x420 [ 311.387853][T15879] ? bpf_lsm_file_ioctl+0x9/0x20 [ 311.387869][T15879] ? __pfx_sock_ioctl+0x10/0x10 [ 311.387883][T15879] __se_sys_ioctl+0xfc/0x170 [ 311.387899][T15879] do_syscall_64+0xfa/0x3b0 [ 311.387911][T15879] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.387928][T15879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.387940][T15879] ? clear_bhb_loop+0x60/0xb0 [ 311.387954][T15879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.387966][T15879] RIP: 0033:0x7f4072f8ebe9 [ 311.387979][T15879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.387990][T15879] RSP: 002b:00007f4073daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.388004][T15879] RAX: ffffffffffffffda RBX: 00007f40731c5fa0 RCX: 00007f4072f8ebe9 [ 311.388014][T15879] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000007 [ 311.388022][T15879] RBP: 00007f4073011e19 R08: 0000000000000000 R09: 0000000000000000 [ 311.388031][T15879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.388039][T15879] R13: 00007f40731c6038 R14: 00007f40731c5fa0 R15: 00007ffd83ad4f28 [ 311.388054][T15879] [ 317.161321][T11082] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 318.436954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog